eb60c0625a8a50eb1195645209b977e49ccefc35b", 0xa2, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000b80)={0x0, r4}, &(0x7f0000000bc0)=""/145, 0x91, &(0x7f0000000d40)={&(0x7f0000000c80)={'sha224-ce\x00'}, &(0x7f0000000cc0)="634731016f67cc48d0a54a1b2274df4be34d4d4038dae6bae9632f4be39864d8acddc2c90cfc205c53caede183d9ff249bcbcf43f42744f3f4829b1126dcb2688e8fe8516714aaf0df89ed6d6566f855ca040b34c3588a2c5058b653274dff2c46994354376cecbf9a", 0x69}) r6 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000003c0)='%\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r3, r6}, &(0x7f0000000440)=""/163, 0xa3, 0x0) r7 = request_key(&(0x7f0000000880)='ceph\x00', &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)='\x00', r6) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000b00)="2df96df628bbe16050f64f733b44d0ec540000", 0x13, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r9, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)={'crct10dif-arm64-neon\x00'}}) r10 = add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @desc3}, &(0x7f0000000a40)={0x0, "3d75a188b14149ae3e69a1793c897c0128d9df4660b27557c207f65cd8d58ba23edf3b6e784600d4b77f570eb24f336c67f276d2a06466fbfd00ba41b31b5fac", 0x2c}, 0x48, r6) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x1}, 0x0, 0x0, r10) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f0000000640)={0x0, "901ef9dae3435dd92325c9f15aa3fca0add6101c06364c8d9d824b5eb0912c7207a0b6fe01d515708d71550fd54709383fd5721b5a0a149c0d4ebd9650fc8dd5", 0x19}, 0x48, r5) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r3}, 0x0, 0x0, 0x0) [ 859.225552] RBP: 00007ff7720d8000 R08: 0000000000000000 R09: ffffffffffffffff [ 859.230283] could not allocate digest TFM handle sha1-asm [ 859.232825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 859.232834] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:02 executing program 4 (fault-call:0 fault-nth:8): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:02 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, 0x0, 0x0, 0x0) [ 859.327533] could not allocate digest TFM handle sha1-asm 23:09:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[@ANYBLOB='\x00']) 23:09:03 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x15, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 859.367869] FAULT_INJECTION: forcing a failure. [ 859.367869] name failslab, interval 1, probability 0, space 0, times 0 [ 859.439392] CPU: 0 PID: 17856 Comm: syz-executor.4 Not tainted 4.19.196-syzkaller #0 [ 859.447398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.456762] Call Trace: [ 859.459388] dump_stack+0x1fc/0x2ef [ 859.463117] should_fail.cold+0xa/0xf [ 859.467020] ? setup_fault_attr+0x200/0x200 [ 859.471357] ? lock_acquire+0x170/0x3c0 [ 859.475357] __should_failslab+0x115/0x180 [ 859.479618] should_failslab+0x5/0x10 [ 859.483427] kmem_cache_alloc+0x277/0x370 [ 859.487586] __alloc_file+0x21/0x330 [ 859.491392] alloc_empty_file+0x6d/0x170 [ 859.495458] path_openat+0xe9/0x2df0 [ 859.499174] ? __lock_acquire+0x6de/0x3ff0 [ 859.503423] ? path_lookupat+0x8d0/0x8d0 [ 859.507491] ? mark_held_locks+0xf0/0xf0 [ 859.511568] do_filp_open+0x18c/0x3f0 [ 859.515373] ? may_open_dev+0xf0/0xf0 [ 859.519187] ? __alloc_fd+0x28d/0x570 [ 859.523006] ? lock_downgrade+0x720/0x720 [ 859.527163] ? lock_acquire+0x170/0x3c0 [ 859.531138] ? __alloc_fd+0x34/0x570 [ 859.534855] ? do_raw_spin_unlock+0x171/0x230 23:09:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440), &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000800)="da881442e793fe8498fdd79a3f6d7f88c69adedd0f25733a62954716c3f224dbb8b314bf79e0f3f3fc1829e696717d331331d43f26087313f9f5128492919fc5a7457d24d3a05dd65aa5041ec3dece4edc556dd9fbac2df128be752ae1a2a8731a89c6e5918ef77e00eb1b77224b5bb71e1bf89eed886bd3d4a05e341e248e0e7d20", 0x82, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r8 = add_key(&(0x7f00000004c0)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r3) add_key$user(&(0x7f0000000400), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000006c0)="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", 0x101, r8) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r3, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'sha224-arm64\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r2}, &(0x7f0000000280)=""/202, 0xca, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) [ 859.539349] ? _raw_spin_unlock+0x29/0x40 [ 859.543526] ? __alloc_fd+0x28d/0x570 [ 859.547342] do_sys_open+0x3b3/0x520 [ 859.551087] ? filp_open+0x70/0x70 [ 859.554716] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 859.560081] ? trace_hardirqs_off_caller+0x6e/0x210 [ 859.565136] ? do_syscall_64+0x21/0x620 [ 859.569112] do_syscall_64+0xf9/0x620 [ 859.572921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 859.578115] RIP: 0033:0x4196c4 [ 859.581314] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 859.600410] RSP: 002b:00007ff7720d7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 859.608131] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 859.615411] RDX: 0000000000000002 RSI: 00007ff7720d8000 RDI: 00000000ffffff9c [ 859.622777] RBP: 00007ff7720d8000 R08: 0000000000000000 R09: ffffffffffffffff [ 859.630154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 23:09:03 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x16, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:03 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = getuid() keyctl$get_persistent(0x16, r0, 0xfffffffffffffffd) [ 859.637462] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 859.642684] could not allocate digest TFM handle sha224-arm64 [ 859.663304] could not allocate digest TFM handle sha224-arm64 [ 859.676644] erofs: read_super, device -> /dev/loop0 [ 859.697884] erofs: options -> [ 859.717200] could not allocate digest TFM handle crct10dif-arm64-neon [ 859.727952] erofs: cannot find valid erofs superblock 23:09:03 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x1c, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 859.743629] could not allocate digest TFM handle crct10dif-arm64-neon 23:09:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)="3eec14ea3bd5c7975f186a116f28caba40f6f3f0f74d854f91366d92c3e55a85ba40d0e1154d93c858823968ea115e0d087469dc18d1f5e74f2584ca165a2dcacb8f07bf81f0f8e4abd292734a0b91fd2957d0cbe83359ed530c11f19d632db52c5a32337142f7219cc423e5d77f2fac107e36d125e06a3945277937c7638e6a93b1cfca0f3ef510b4578cceedae56340e549ace27ddae8a7a2aa0d6eeb7b5916c31b563907aafd2e43643578c8ceed422e91d083ed1ce64960be2bc", 0xbc, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="03ea8615efd2694a68655e66d5c8bfc69c25809610d8a909b616e8901a06fbde56dd766e367a9bd153a70b006a6bfcd3c59a35134e8d05cb0f952006df80bf80e7bb1ca3069798c614b1742b40ea2e9d69516e581a60b6f3d0d5a513dcf22cf70a5799e2f8622a3880ec09e00b2f79a162a3da8dccd68e6c22f7f144a0769c82ed2ddc4d0238b4085f91b267173daf47624c00ad51e91e2556dbc17d28ce77de6c0bcc3161577eec5182aa0193ddba6919a049c16de3da695432cd140c", 0xbd, r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000600)="6a89f8894fca5b1cb3d3623d8dd5bb3c2cf892b2475706bf185e47ee2317b2b5af254ed40ba6824b30d90c5fb675365053d45fb9c1b07cc93de3092ef3964884583a43583aba04f9", 0x48, 0x0) add_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f00000016c0)="282c10020e2f1f8bdcfda89003cadba79145bc80d559315d04004837d7a817c4e459e13e8887ebfefd45105b02840a3cf57ecbc3919fb757c4b05ccd5410cc60679aacc84481e98ddf75bf70b751f045f06741e96dda1d3b339cce3351481fb8b53bf0901fa8dc5985e6404aaf3bd160b2bc842fb3e7ac2a06c05c6c0b95fa8c3c2f46dce203f4af919c71406e25dd73d2ef42188431a1c88d12694349c4bd04281f0fec801e7bea8156b0a8824459c29c173ba9c62859fb084f36082720b038ae9fd097f57ccf72", 0xc8, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000006c0)="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", 0x1000, r0) 23:09:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x12, 0x100, 0x70bd2a, 0x25dfdbfe, {0x8}, [@typed={0x4, 0x7a}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008}, 0x40011) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) 23:09:03 executing program 4 (fault-call:0 fault-nth:9): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:03 executing program 2 (fault-call:3 fault-nth:0): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:03 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[@ANYBLOB='\x00']) 23:09:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, 0x0, r1}, &(0x7f0000000280)=""/227, 0xe3, &(0x7f0000000180)={&(0x7f0000000040)={'ghash-clmulni\x00'}, &(0x7f0000000140)="06226b317d49e9db76d882075bf4933f0d2c05d2375e517f66a3cab511c637bbddf4d84e6e8c02297f90", 0x2a}) [ 859.897144] FAULT_INJECTION: forcing a failure. [ 859.897144] name failslab, interval 1, probability 0, space 0, times 0 23:09:03 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="86a6b87642235c8580023d91684282a0c79daef7a774163206283ed7f25e5cb0fbc87ba14f6a52c89aa6a67e1f6d575580548fc338c597cdecf46f04062dd4882302d4a3c2b4aa5bd734963150acb242dcf68e4e300b1fbd3aaa53a060ad20497679b2a27d867d9f550d381d143d787d9ee1da1d0ff5a1f65f02c28241b746242babebc5f1fba97d43e46731506ea218488ab446277f28afdc3097180f76b5a8127e82eb080b49bae9ef324c726f5a67415a", 0xb2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f00000003c0)="c31911211056fcf3831fe32fcd0888df384d9f9735e187afe5eb6a54e59d53ed5920a91644eebf62b719816db3f7460101ae8efb015dc2bafba2", 0x3a, 0xfffffffffffffff9) request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0}, 0x0, 0x0, 0x0) 23:09:03 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x1d, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 859.940457] FAULT_INJECTION: forcing a failure. [ 859.940457] name failslab, interval 1, probability 0, space 0, times 0 [ 859.958497] erofs: read_super, device -> /dev/loop0 [ 859.965472] CPU: 1 PID: 17897 Comm: syz-executor.4 Not tainted 4.19.196-syzkaller #0 [ 859.973378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.974751] erofs: options -> [ 859.982825] Call Trace: [ 859.982853] dump_stack+0x1fc/0x2ef [ 859.982874] should_fail.cold+0xa/0xf [ 859.982894] ? setup_fault_attr+0x200/0x200 [ 859.982909] ? lock_acquire+0x170/0x3c0 [ 859.982930] __should_failslab+0x115/0x180 [ 859.982947] should_failslab+0x5/0x10 [ 859.982966] kmem_cache_alloc_trace+0x284/0x380 [ 860.004956] erofs: cannot find valid erofs superblock [ 860.008797] apparmor_file_alloc_security+0x394/0xad0 [ 860.008820] ? apparmor_file_receive+0x160/0x160 [ 860.008835] ? __alloc_file+0x21/0x330 [ 860.008855] security_file_alloc+0x40/0x90 23:09:03 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x39, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:03 executing program 3: ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='dummy0\x00') r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "e6b25413ad30e0740c73324d81e256d76605924a4c8a40350d8cd6b7a859f1458931aab81f247e18d60765a48e92163a4c171cca6ba6bebcd5070526b5338a63", 0x1c}, 0x48, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r0}, &(0x7f0000000240)=""/60, 0x3c, &(0x7f0000000340)={&(0x7f00000002c0)={'sha512-ce\x00'}, &(0x7f0000000300)="57f5a66757bf67ef00f4126f3b9a0de999cf48097bf0383568a7dc178aaac4057c889ab39178ce6eec562dd5", 0x2c}) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, 0x0, r2}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) [ 860.040679] __alloc_file+0xc9/0x330 [ 860.044502] alloc_empty_file+0x6d/0x170 [ 860.048587] path_openat+0xe9/0x2df0 [ 860.052356] ? __lock_acquire+0x6de/0x3ff0 [ 860.056706] ? path_lookupat+0x8d0/0x8d0 [ 860.060798] ? mark_held_locks+0xf0/0xf0 [ 860.064875] do_filp_open+0x18c/0x3f0 [ 860.068673] ? may_open_dev+0xf0/0xf0 [ 860.072486] ? __alloc_fd+0x28d/0x570 [ 860.076296] ? lock_downgrade+0x720/0x720 [ 860.080482] ? lock_acquire+0x170/0x3c0 [ 860.084461] ? __alloc_fd+0x34/0x570 [ 860.088194] ? do_raw_spin_unlock+0x171/0x230 [ 860.092734] ? _raw_spin_unlock+0x29/0x40 [ 860.096874] ? __alloc_fd+0x28d/0x570 [ 860.100671] do_sys_open+0x3b3/0x520 [ 860.104381] ? filp_open+0x70/0x70 [ 860.107918] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 860.113285] ? trace_hardirqs_off_caller+0x6e/0x210 [ 860.118290] ? do_syscall_64+0x21/0x620 [ 860.122261] do_syscall_64+0xf9/0x620 [ 860.126096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.131286] RIP: 0033:0x4196c4 [ 860.134473] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 860.153984] RSP: 002b:00007ff7720d7ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 860.161772] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 860.169048] RDX: 0000000000000002 RSI: 00007ff7720d8000 RDI: 00000000ffffff9c [ 860.176313] RBP: 00007ff7720d8000 R08: 0000000000000000 R09: ffffffffffffffff [ 860.183581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 860.191015] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 860.198306] CPU: 0 PID: 17904 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 860.206216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.216355] Call Trace: [ 860.219003] dump_stack+0x1fc/0x2ef [ 860.222738] should_fail.cold+0xa/0xf [ 860.226635] ? setup_fault_attr+0x200/0x200 [ 860.230965] ? lock_acquire+0x170/0x3c0 [ 860.235412] __should_failslab+0x115/0x180 [ 860.239755] should_failslab+0x5/0x10 [ 860.243573] __kmalloc_track_caller+0x2a6/0x3c0 [ 860.248269] ? dh_data_from_key+0x17e/0x2a0 [ 860.252610] kmemdup+0x23/0x50 [ 860.255926] dh_data_from_key+0x17e/0x2a0 [ 860.258864] could not allocate digest TFM handle ghash-clmulni [ 860.260086] __keyctl_dh_compute+0x468/0x13d0 [ 860.260110] ? check_preemption_disabled+0x41/0x280 [ 860.275598] ? dh_data_from_key+0x2a0/0x2a0 [ 860.279963] ? proc_fail_nth_write+0x95/0x1d0 [ 860.284485] ? ksys_write+0x241/0x2a0 [ 860.288303] ? lock_downgrade+0x720/0x720 [ 860.292470] ? vfs_write+0x3d7/0x540 [ 860.292980] could not allocate digest TFM handle ghash-clmulni [ 860.296320] ? __mutex_unlock_slowpath+0xea/0x610 [ 860.296340] ? check_preemption_disabled+0x41/0x280 [ 860.296361] keyctl_dh_compute+0xbf/0x120 [ 860.316333] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 860.321098] ? fput+0x2b/0x190 [ 860.324297] ? ksys_write+0x1c8/0x2a0 [ 860.328377] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 860.333738] __se_sys_keyctl+0x10f/0x3f0 [ 860.337894] do_syscall_64+0xf9/0x620 [ 860.341704] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.347268] RIP: 0033:0x4665d9 [ 860.350593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.369790] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 860.377589] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 860.384955] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 23:09:04 executing program 4 (fault-call:0 fault-nth:10): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x64, 0x36, 0x62, 0x38, 0x62, 0x32, 0x31, 0x34, 0x39, 0x36, 0x65, 0x63, 0x38, 0x33, 0x66]}, &(0x7f0000000280)={0x0, "0697c79cd075472fb6617b1341446f9ec73eac0eb25f7e21efb4bad35defe59851d79a82e5bd0966ee53fe134602762608be70a386905aead4b1a9772aa03efe", 0x3c}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:04 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[@ANYBLOB='\x00']) [ 860.392237] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 860.399491] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 860.406831] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 23:09:04 executing program 2 (fault-call:3 fault-nth:1): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="5d6abd912cee9086ff7b9ccef194f2e355ccd3b006", 0x15, 0xfffffffffffffff9) [ 860.498916] FAULT_INJECTION: forcing a failure. [ 860.498916] name failslab, interval 1, probability 0, space 0, times 0 [ 860.514876] CPU: 1 PID: 17933 Comm: syz-executor.4 Not tainted 4.19.196-syzkaller #0 [ 860.522782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.532138] Call Trace: [ 860.534739] dump_stack+0x1fc/0x2ef [ 860.538380] should_fail.cold+0xa/0xf [ 860.542197] ? setup_fault_attr+0x200/0x200 [ 860.546528] ? lock_acquire+0x170/0x3c0 [ 860.550524] __should_failslab+0x115/0x180 [ 860.553031] could not allocate digest TFM handle sha512-ce [ 860.554769] should_failslab+0x5/0x10 [ 860.564208] kmem_cache_alloc+0x277/0x370 [ 860.568359] __kernfs_new_node+0xd2/0x680 [ 860.572496] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 860.577306] ? _raw_spin_unlock_irq+0x5a/0x80 [ 860.581800] ? __cpu_to_node+0x7b/0xa0 [ 860.585685] ? mark_held_locks+0xf0/0xf0 [ 860.589726] ? io_schedule_timeout+0x140/0x140 [ 860.594289] ? enqueue_entity+0xf86/0x3850 [ 860.598507] ? set_user_nice.part.0+0x3b9/0xab0 [ 860.603161] kernfs_create_dir_ns+0x9e/0x230 [ 860.607551] internal_create_group+0x1c1/0xb20 [ 860.612132] ? sysfs_remove_link_from_group+0x70/0x70 [ 860.617334] ? lock_downgrade+0x720/0x720 [ 860.619351] could not allocate digest TFM handle sha512-ce [ 860.621947] lo_ioctl+0xf7c/0x20e0 [ 860.621968] ? loop_set_status64+0x110/0x110 [ 860.621984] blkdev_ioctl+0x5cb/0x1a80 [ 860.621999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.622015] ? blkpg_ioctl+0x9d0/0x9d0 [ 860.648732] ? mark_held_locks+0xf0/0xf0 [ 860.652791] ? mark_held_locks+0xf0/0xf0 [ 860.656849] ? debug_check_no_obj_freed+0x201/0x490 [ 860.662140] ? lock_downgrade+0x720/0x720 [ 860.666299] block_ioctl+0xe9/0x130 [ 860.669949] ? blkdev_fallocate+0x3f0/0x3f0 [ 860.674283] do_vfs_ioctl+0xcdb/0x12e0 [ 860.678162] ? lock_downgrade+0x720/0x720 [ 860.682333] ? check_preemption_disabled+0x41/0x280 [ 860.687345] ? ioctl_preallocate+0x200/0x200 [ 860.691746] ? __fget+0x356/0x510 [ 860.695189] ? do_dup2+0x450/0x450 [ 860.698734] ? do_sys_open+0x2bf/0x520 [ 860.702622] ksys_ioctl+0x9b/0xc0 [ 860.706066] __x64_sys_ioctl+0x6f/0xb0 [ 860.709971] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 860.714584] do_syscall_64+0xf9/0x620 [ 860.718421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 860.723622] RIP: 0033:0x466397 [ 860.726837] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:04 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x72, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 860.746353] RSP: 002b:00007ff7720d7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.754173] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 860.761449] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 860.768720] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 860.775991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 860.783269] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 860.804618] erofs: read_super, device -> /dev/loop0 [ 860.809776] erofs: options -> [ 860.817233] erofs: cannot find valid erofs superblock [ 860.826837] erofs: read_super, device -> /dev/loop4 [ 860.833849] FAULT_INJECTION: forcing a failure. [ 860.833849] name failslab, interval 1, probability 0, space 0, times 0 [ 860.853035] erofs: options -> [ 860.870668] erofs: root inode @ nid 36 [ 860.872325] CPU: 1 PID: 17951 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 860.882485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.891859] Call Trace: [ 860.894483] dump_stack+0x1fc/0x2ef [ 860.898175] should_fail.cold+0xa/0xf 23:09:04 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @auto=[0x35, 0x0, 0x38, 0x56, 0x33, 0x36, 0x34, 0x31, 0x37, 0x64, 0x30, 0x34, 0x62, 0x38, 0x65, 0x66]}, &(0x7f00000002c0)={0x0, "24553d83e738a702d4d02e249d57ffc4571482d3e7a5da2b435ad2b9f55680a65b1528c2dc6b228e9ee7ad357d818ee8ad337b6f2093d80e12afdaf8068e5d1b", 0x15}, 0x48, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, 0x0, 0x0, 0x0) 23:09:04 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)="1e2e130156ea2e7d0e34ce7fec6dc8019a74aea79fea0629c7c8b5e568a72f0baf55b19b36180522de3e67b6d336cecd9128f4887b1d45c0b0db697369d6030f7c231b10eb15329a9843e26b6d13f81b341fd5a7ee618e19c320677778c570e4e66568cbebdd70811c4fb7efda60a8c0c8c4cb1fac1a3088d373a25c975db2767693437f08f1d50c0f08add1ec25326d630838ec75257cf70194205f40e9e52975dbd31d8e3183cdd7b141b4fd482c72257e78d2d125a88d34aad321a260a7b5b9aafbc8344fd4169afe6dd96bf7eff65d7a751f7fe66247e1f64aad39d2deda5bc6502f104e5f85f85e45e55da681c58574685b16d254", 0xf7, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180), 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)="6d9618b2325b6a1a26707a0575c227fe3df039c3a63e7257931d43b8375e07a9e430144e5a7a626b7bd6644d54a9a229f1ecf3828e62a917e11ef700714ac22a94870efab082d4c8ab53e6", 0x4b, 0xfffffffffffffffb) [ 860.901998] ? setup_fault_attr+0x200/0x200 [ 860.906338] ? lock_acquire+0x170/0x3c0 [ 860.910335] __should_failslab+0x115/0x180 [ 860.914775] should_failslab+0x5/0x10 [ 860.918588] __kmalloc_track_caller+0x2a6/0x3c0 [ 860.923270] ? dh_data_from_key+0x17e/0x2a0 [ 860.927621] kmemdup+0x23/0x50 [ 860.930850] dh_data_from_key+0x17e/0x2a0 [ 860.935049] __keyctl_dh_compute+0x4a1/0x13d0 [ 860.939558] ? check_preemption_disabled+0x41/0x280 [ 860.942098] erofs: bogus i_mode (0) @ nid 36 [ 860.944674] ? dh_data_from_key+0x2a0/0x2a0 23:09:04 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 860.953570] ? proc_fail_nth_write+0x95/0x1d0 [ 860.958095] ? ksys_write+0x241/0x2a0 [ 860.961902] ? lock_downgrade+0x720/0x720 [ 860.966037] ? vfs_write+0x3d7/0x540 [ 860.969736] ? __mutex_unlock_slowpath+0xea/0x610 [ 860.974588] ? check_preemption_disabled+0x41/0x280 [ 860.979609] keyctl_dh_compute+0xbf/0x120 [ 860.983746] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 860.988488] ? fput+0x2b/0x190 [ 860.991677] ? ksys_write+0x1c8/0x2a0 [ 860.995498] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 861.000969] __se_sys_keyctl+0x10f/0x3f0 [ 861.005045] do_syscall_64+0xf9/0x620 [ 861.008861] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.014057] RIP: 0033:0x4665d9 [ 861.017351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 861.036746] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 861.044441] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 861.051724] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 861.058992] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 861.066255] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 861.073515] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 23:09:04 executing program 2 (fault-call:3 fault-nth:2): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:04 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="42a3ca322939f6b36c0450a2f8e832b3c7f9757452", 0x15, 0xfffffffffffffffe) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="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", 0xff, 0xfffffffffffffffb) 23:09:04 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, 0x0) 23:09:04 executing program 4 (fault-call:0 fault-nth:11): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 861.186503] FAULT_INJECTION: forcing a failure. [ 861.186503] name failslab, interval 1, probability 0, space 0, times 0 23:09:04 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x39, 0x35, 0x37, 0x64, 0x39, 0x32, 0x37, 0x35, 0x62, 0x61, 0x64, 0x35, 0x36, 0x37, 0x64, 0x34]}, &(0x7f0000000140)={0x0, "e918dfaa184ed20f657eb31e7b79306b4338cd2d5ad99731867568446801cc75b79156772feb92fc54d0f63b0d7a01ba15e73e13aedac46a601240b2ead7f5b5", 0x33}, 0x48, 0xfffffffffffffff8) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="ca4dbf1ade60251d08c7f0d39be1d4aa3ca00c131d419f7be8e09402231bc314025f2750b16490e88a0a33cd41166b2a8c61a12a2e4db041a9e7ade5d9f1f13544ddbf95e79adaea8a914e04ece796f6b937183a04aee57d1f1906a979effc1ba931681681e205c662eb1a94f38fd1bb4b87abd8c8c0d50add8975a766f489cdc720da64d63577aa2ad68c7b93a254c25586557d29832d207022c858de00496006f05bb4c62fe3b0fda40118f9", 0xad, r2) r4 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "aea9017768c8b4534c19851cff15a12ab6d4ef01bcb8a4e205a00f2f1c6161cba1e80e770f133f76ad3f1fc343eca5351df15a564abb655f0450c0f5890b21b6", 0x3b}, 0x48, r2) keyctl$dh_compute(0x17, &(0x7f0000000480)={r3, r4, r2}, &(0x7f00000004c0)=""/62, 0x3e, 0x0) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, r1, r2}, 0x0, 0x2d, 0x0) 23:09:04 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 861.227796] CPU: 1 PID: 17968 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 861.235735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.245121] Call Trace: [ 861.247740] dump_stack+0x1fc/0x2ef [ 861.251440] should_fail.cold+0xa/0xf [ 861.255296] ? setup_fault_attr+0x200/0x200 [ 861.259637] ? lock_acquire+0x170/0x3c0 [ 861.263635] __should_failslab+0x115/0x180 [ 861.267892] should_failslab+0x5/0x10 [ 861.271710] __kmalloc_track_caller+0x2a6/0x3c0 [ 861.274357] FAULT_INJECTION: forcing a failure. [ 861.274357] name failslab, interval 1, probability 0, space 0, times 0 [ 861.276387] ? dh_data_from_key+0x17e/0x2a0 [ 861.276416] kmemdup+0x23/0x50 [ 861.295206] dh_data_from_key+0x17e/0x2a0 [ 861.299368] __keyctl_dh_compute+0x4d3/0x13d0 [ 861.303870] ? check_preemption_disabled+0x41/0x280 [ 861.309061] ? dh_data_from_key+0x2a0/0x2a0 [ 861.313492] ? proc_fail_nth_write+0x95/0x1d0 [ 861.317988] ? ksys_write+0x241/0x2a0 [ 861.321798] ? lock_downgrade+0x720/0x720 [ 861.325954] ? vfs_write+0x3d7/0x540 [ 861.329710] ? __mutex_unlock_slowpath+0xea/0x610 [ 861.334577] ? check_preemption_disabled+0x41/0x280 [ 861.339591] keyctl_dh_compute+0xbf/0x120 [ 861.343749] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 861.348533] ? fput+0x2b/0x190 [ 861.351730] ? ksys_write+0x1c8/0x2a0 [ 861.355526] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 861.360894] __se_sys_keyctl+0x10f/0x3f0 [ 861.364950] do_syscall_64+0xf9/0x620 [ 861.368744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.374007] RIP: 0033:0x4665d9 [ 861.377284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 861.396189] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 861.403889] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 861.411151] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 861.418432] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 861.425691] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 861.432949] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 861.440230] CPU: 0 PID: 17979 Comm: syz-executor.4 Not tainted 4.19.196-syzkaller #0 [ 861.448259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.457629] Call Trace: [ 861.460252] dump_stack+0x1fc/0x2ef [ 861.463902] should_fail.cold+0xa/0xf [ 861.467725] ? setup_fault_attr+0x200/0x200 [ 861.472065] ? lock_acquire+0x170/0x3c0 23:09:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x200) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000010c0)='{}\x00', 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, 0x0, r1}, 0x0, 0x0, 0x0) [ 861.476078] __should_failslab+0x115/0x180 [ 861.480343] should_failslab+0x5/0x10 [ 861.484160] kmem_cache_alloc+0x277/0x370 [ 861.488328] __kernfs_new_node+0xd2/0x680 [ 861.492493] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 861.497256] ? _raw_spin_unlock_irq+0x5a/0x80 [ 861.501773] ? __cpu_to_node+0x7b/0xa0 [ 861.505679] ? mark_held_locks+0xf0/0xf0 [ 861.509749] ? io_schedule_timeout+0x140/0x140 [ 861.514366] ? enqueue_entity+0xf86/0x3850 [ 861.518623] ? set_user_nice.part.0+0x3b9/0xab0 [ 861.523320] kernfs_create_dir_ns+0x9e/0x230 [ 861.527735] internal_create_group+0x1c1/0xb20 [ 861.532337] ? sysfs_remove_link_from_group+0x70/0x70 [ 861.537526] ? lock_downgrade+0x720/0x720 [ 861.541875] lo_ioctl+0xf7c/0x20e0 [ 861.545515] ? loop_set_status64+0x110/0x110 [ 861.549907] blkdev_ioctl+0x5cb/0x1a80 [ 861.553792] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.559143] ? blkpg_ioctl+0x9d0/0x9d0 [ 861.563113] ? mark_held_locks+0xf0/0xf0 [ 861.567166] ? mark_held_locks+0xf0/0xf0 [ 861.571228] ? debug_check_no_obj_freed+0x201/0x490 [ 861.576268] ? lock_downgrade+0x720/0x720 [ 861.580409] block_ioctl+0xe9/0x130 [ 861.584050] ? blkdev_fallocate+0x3f0/0x3f0 [ 861.588359] do_vfs_ioctl+0xcdb/0x12e0 [ 861.592244] ? lock_downgrade+0x720/0x720 [ 861.596385] ? check_preemption_disabled+0x41/0x280 [ 861.601397] ? ioctl_preallocate+0x200/0x200 [ 861.605827] ? __fget+0x356/0x510 [ 861.609278] ? do_dup2+0x450/0x450 [ 861.612801] ? do_sys_open+0x2bf/0x520 [ 861.616696] ksys_ioctl+0x9b/0xc0 [ 861.620132] __x64_sys_ioctl+0x6f/0xb0 [ 861.624005] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 861.628574] do_syscall_64+0xf9/0x620 [ 861.632385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.637578] RIP: 0033:0x466397 [ 861.640772] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 861.661164] RSP: 002b:00007ff7720d7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.668887] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 23:09:05 executing program 2 (fault-call:3 fault-nth:3): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 861.676137] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 861.683397] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 861.690653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 861.697902] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 861.775453] erofs: read_super, device -> /dev/loop4 23:09:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, 0x0) 23:09:05 executing program 3: fchown(0xffffffffffffffff, 0xee01, 0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)=@delqdisc={0x3a0, 0x25, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0xe, 0xe}, {0x8003, 0x5}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x7, 0x4, 0x0, 0x8, 0x3ff, 0x4}}, {0xc, 0x2, [0x8, 0x8000, 0x8001, 0x3]}}, {{0x1c, 0x1, {0x1, 0x5, 0x7f, 0x2, 0x1, 0x4800000, 0x0, 0x9}}, {0x16, 0x2, [0x3f, 0x400, 0x1, 0x5, 0x8001, 0x8, 0x200, 0x4, 0x1279]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0xfffffffa, 0x1, 0xbad, 0x2, 0x3}}, {0xa, 0x2, [0x9, 0x0, 0x20]}}, {{0x1c, 0x1, {0x40, 0x92, 0x400, 0x2, 0x0, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x7, 0x2, 0x9, 0x2, 0x80, 0x7fffffff, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0xff, 0x40, 0x3f, 0x40, 0x2, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x4, 0xff]}}, {{0x1c, 0x1, {0x90, 0x17, 0x2, 0x5, 0x1, 0x2, 0x9, 0x6}}, {0x10, 0x2, [0x400, 0x2, 0xfff, 0xfffa, 0x3f, 0x9]}}, {{0x1c, 0x1, {0x3, 0x9, 0x6, 0x8, 0x0, 0x8, 0x1a2, 0x2}}, {0x8, 0x2, [0x1ff, 0x1]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7f}, @qdisc_kind_options=@q_choke={{0xa}, {0x144, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xffffff81, 0x1a, 0x9, 0x14, 0x14, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x100, 0x3, 0x1a, 0xf, 0xd, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffff000, 0x8, 0x7, 0x7, 0x8, 0x14, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xe5, 0x9645, 0x40000000, 0x0, 0xfffffffd, 0x1, 0x3}}, {0xa, 0x2, [0xfffa, 0x71, 0x4]}}, {{0x1c, 0x1, {0x2, 0x36, 0x0, 0x0, 0x2, 0x200, 0x10000, 0x5}}, {0xe, 0x2, [0x0, 0xfff7, 0xfff9, 0x0, 0x5]}}, {{0x1c, 0x1, {0x6, 0x7f, 0x1, 0xffff, 0x2, 0x0, 0x6, 0x4}}, {0xc, 0x2, [0xd47, 0x37ac, 0x5, 0xab5]}}, {{0x1c, 0x1, {0x4, 0x4, 0x3ff, 0x7f, 0x0, 0x9, 0xe, 0x5}}, {0xe, 0x2, [0x8, 0x3c, 0x4, 0x0, 0x58]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xffffff81}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="6a25c6bf5f7d917d57b205fadf63309d992d1ba93ff747a139aba7bec8481fa45d457f9a99d0ad62f7321efb75e1f75ed2cd4b7239261719b6dbd9031ee8e112e5f743b2291734d853251746a01144e4c3af03e5c6243e465cf32d4a80edb4ae5180b6b6cbe01d873194e355ce06b4e42390c2365d2e62166c07ba86cb2024fa2561fa81dbc5b47f65ea72e2c2f82acf3e986e262d628cd7b9c51f9df4d53fdda3dff469167c8c844e753317ae53d52cb17be2d8a155ef7e10ff659512f7c95f3679eeb6a90191928130b7788d", 0xcd, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1}, 0x0, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000080)={[0x1000]}, 0x8, 0x800) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000006c0)={0xc00, 0x3, 0x4, 0x100, 0x9, {0x0, 0xea60}, {0x5, 0x8, 0x38, 0x9, 0x8c, 0x2, "de05312c"}, 0xffffffe0, 0x4, @offset=0x7fffffff, 0x1, 0x0, r0}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000740)={0x5, 0x1, 0x6, 0xb758, 0x8}) 23:09:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000006c0)="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", 0x1000, 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r3}, &(0x7f0000000280)=""/195, 0xc3, &(0x7f00000001c0)={&(0x7f0000000180)={'digest_null\x00'}}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) [ 861.800254] erofs: options -> [ 861.813639] erofs: root inode @ nid 36 [ 861.825217] erofs: bogus i_mode (0) @ nid 36 23:09:05 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 861.865226] FAULT_INJECTION: forcing a failure. [ 861.865226] name failslab, interval 1, probability 0, space 0, times 0 [ 861.907142] CPU: 1 PID: 18000 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 861.915060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.924432] Call Trace: [ 861.927043] dump_stack+0x1fc/0x2ef [ 861.930785] should_fail.cold+0xa/0xf [ 861.934605] ? setup_fault_attr+0x200/0x200 [ 861.938945] ? lock_acquire+0x170/0x3c0 [ 861.942932] __should_failslab+0x115/0x180 [ 861.947176] should_failslab+0x5/0x10 [ 861.951023] __kmalloc+0x2ab/0x3c0 [ 861.954575] ? __keyctl_dh_compute+0x512/0x13d0 [ 861.959257] __keyctl_dh_compute+0x512/0x13d0 [ 861.963762] ? dh_data_from_key+0x2a0/0x2a0 [ 861.968084] ? proc_fail_nth_write+0x95/0x1d0 [ 861.972682] ? ksys_write+0x241/0x2a0 [ 861.976597] ? lock_downgrade+0x720/0x720 [ 861.980757] ? vfs_write+0x3d7/0x540 [ 861.984490] ? __mutex_unlock_slowpath+0xea/0x610 [ 861.989341] ? check_preemption_disabled+0x41/0x280 [ 861.994372] keyctl_dh_compute+0xbf/0x120 [ 861.998547] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 862.003318] ? fput+0x2b/0x190 [ 862.006517] ? ksys_write+0x1c8/0x2a0 [ 862.010330] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 862.015708] __se_sys_keyctl+0x10f/0x3f0 [ 862.019780] do_syscall_64+0xf9/0x620 [ 862.023592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.028781] RIP: 0033:0x4665d9 [ 862.031982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:05 executing program 4 (fault-call:0 fault-nth:12): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:05 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "78046b0f31e1d50daaca2259ce61aadafeb09a0800f058d03a51c423e2421b8e4669a3c9d287571338dd7054075a09911d6fa9fd560b7ab6b95532c11470bbd9", 0x1a}, 0x48, 0xfffffffffffffffb) 23:09:05 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="8bddc3976bcfc45d0d9e883fee432a0916537f6929cb3eb83d850d087f8b261a1dc1e9572def6b4b6bd243445e9cb244cbe7d99e0cb63782c74a680b52", 0x3d, 0xfffffffffffffffe) 23:09:05 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xf, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:05 executing program 2 (fault-call:3 fault-nth:4): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 862.051249] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 862.058971] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 862.066247] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 862.073525] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 862.080803] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 862.088083] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 23:09:05 executing program 1: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x202800, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000600), 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082cbd7000ffdbdf25020000000c00030002000000000000000c00040009000000000000000c00020001000000000000000c00060002000000000000002c00078008000100", @ANYRES32=r1, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="f1bac53b", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r6 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "92228ccaab2edded906d941995b68c70a0467a56c5664a9d454947c0e05229dc7c0dcc3f002a5a6a0309006bd352e9074d120389fdbcd3e72d5629a2184fe3ad", 0x24}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='e355a76a11a1be18', 0xfffffffffffffffc) request_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='user\x00', r7) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="eb6c8da9fdccfeb6e1", 0x9, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, r6, r8}, 0x0, 0x0, 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="53b3867451c599109b65c73370b56cb7b8f429240ecdcb73ac1abc0866c488ead340612ed6943fd014b15a553cee2a2b4bd0f3073c8b967d7158d43f1bf54ae4966f126279b241d6284a7bf63355df3530e51582bb7692cfb6cd9bcfedb2162103d28138", 0x64, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r6, r9}, &(0x7f0000000280)=""/24, 0x18, &(0x7f0000000300)={&(0x7f00000002c0)={'cbcmac(aes)\x00'}}) 23:09:05 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, 0x0) [ 862.172557] FAULT_INJECTION: forcing a failure. [ 862.172557] name failslab, interval 1, probability 0, space 0, times 0 [ 862.205207] CPU: 0 PID: 18024 Comm: syz-executor.4 Not tainted 4.19.196-syzkaller #0 [ 862.213229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:09:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'team_slave_0\x00', {'batadv_slave_1\x00'}, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r4}, 0x0, 0xfffffffffffffdb1, 0x0) [ 862.222594] Call Trace: [ 862.225200] dump_stack+0x1fc/0x2ef [ 862.228845] should_fail.cold+0xa/0xf [ 862.232663] ? setup_fault_attr+0x200/0x200 [ 862.236991] ? lock_acquire+0x170/0x3c0 [ 862.240975] __should_failslab+0x115/0x180 [ 862.245256] should_failslab+0x5/0x10 [ 862.249238] kmem_cache_alloc+0x277/0x370 [ 862.253401] __kernfs_new_node+0xd2/0x680 [ 862.257543] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 862.262463] ? kernfs_activate+0x2c/0x1d0 [ 862.266606] ? lock_downgrade+0x720/0x720 [ 862.270738] ? kernfs_add_one+0x51/0x4c0 [ 862.274792] ? mutex_trylock+0x1a0/0x1a0 [ 862.278890] ? __mutex_unlock_slowpath+0xea/0x610 [ 862.283720] kernfs_new_node+0x92/0x120 [ 862.287680] __kernfs_create_file+0x51/0x340 [ 862.292091] sysfs_add_file_mode_ns+0x226/0x540 [ 862.296793] internal_create_group+0x355/0xb20 [ 862.301381] ? sysfs_remove_link_from_group+0x70/0x70 [ 862.306604] ? lock_downgrade+0x720/0x720 [ 862.310737] lo_ioctl+0xf7c/0x20e0 [ 862.314286] ? loop_set_status64+0x110/0x110 [ 862.318686] blkdev_ioctl+0x5cb/0x1a80 [ 862.322598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.327941] ? blkpg_ioctl+0x9d0/0x9d0 [ 862.331931] ? mark_held_locks+0xf0/0xf0 [ 862.335980] ? mark_held_locks+0xf0/0xf0 [ 862.340047] ? debug_check_no_obj_freed+0x201/0x490 [ 862.345150] ? lock_downgrade+0x720/0x720 [ 862.349284] block_ioctl+0xe9/0x130 [ 862.352904] ? blkdev_fallocate+0x3f0/0x3f0 [ 862.357274] do_vfs_ioctl+0xcdb/0x12e0 [ 862.361160] ? lock_downgrade+0x720/0x720 [ 862.365345] ? check_preemption_disabled+0x41/0x280 [ 862.370342] ? ioctl_preallocate+0x200/0x200 [ 862.374740] ? __fget+0x356/0x510 [ 862.378180] ? do_dup2+0x450/0x450 [ 862.381710] ? do_sys_open+0x2bf/0x520 [ 862.385581] ksys_ioctl+0x9b/0xc0 [ 862.389027] __x64_sys_ioctl+0x6f/0xb0 [ 862.392994] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 862.397566] do_syscall_64+0xf9/0x620 [ 862.401360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.407221] RIP: 0033:0x466397 23:09:06 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 862.410395] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.429282] RSP: 002b:00007ff7720d7f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.437123] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 862.444381] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 862.451643] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 862.458906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 862.466159] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:06 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="c912fc61797b1cb77a6e1160dfbb7e92def8", 0x12, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r4 = add_key$user(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)='\x00', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r6 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000600)="43afb1d56a72a1b3808d689e085f1dc70fb521d4456e00d3095aaa829b0291b845e74ca26c746314ae96bdeed57f415465369a9699b4e7520f11bcf9dee43108e1f6d91f60ef99acc1ec3ef80b60df15cbbb19c7a0ea0a8770ebb67b02a8f2f65fe1f1a6e2d5d6fe4c42b9e20ef016f5b0546eb9aaa7deb3f20042dbd742b1b9152bfd5865130113b54cc9af7fd4dfb9ab88a7896319337333db1cc41414ca20f3862070da860fe5b2f07e5997c7a92fc08b95cea125673c7170c3fac9bd4d44598568132f97f9b734be9ad76a507abac4d7510fd521ea4c3b6791c2429f3b9d52ebd7e2180183a2292b961c12707bf75e48", 0xf2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r3, r4}, &(0x7f00000000c0)=""/175, 0xaf, 0x0) add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="ad9d5f45c7cefdb1830abe6dd5a48683877b298b9d2c33059d1602931b92570db07fc6bce2c1edb678297705e9a2ae40e7da8fc6c0ade091da1636cc8e2a0562f5daeeeba64c70c7eaf455c157b950a079b429b4374dccd769ff7faf74f2f00d58cda75776b9ae1e0646104ebc07442b891da1b581168f", 0x77, 0xfffffffffffffffd) [ 862.517693] FAULT_INJECTION: forcing a failure. [ 862.517693] name failslab, interval 1, probability 0, space 0, times 0 [ 862.530536] CPU: 0 PID: 18035 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 862.538570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.548022] Call Trace: [ 862.550619] dump_stack+0x1fc/0x2ef [ 862.554320] should_fail.cold+0xa/0xf [ 862.558110] ? setup_fault_attr+0x200/0x200 [ 862.562421] ? lock_acquire+0x170/0x3c0 [ 862.566397] __should_failslab+0x115/0x180 [ 862.570633] should_failslab+0x5/0x10 [ 862.574437] __kmalloc+0x2ab/0x3c0 [ 862.577974] ? crypto_create_tfm+0x79/0x2e0 [ 862.582293] ? up_read+0x17/0x110 [ 862.585743] crypto_create_tfm+0x79/0x2e0 [ 862.589889] crypto_alloc_tfm+0xff/0x230 [ 862.593949] __keyctl_dh_compute+0x55c/0x13d0 [ 862.598561] ? dh_data_from_key+0x2a0/0x2a0 [ 862.602875] ? proc_fail_nth_write+0x95/0x1d0 [ 862.607367] ? ksys_write+0x241/0x2a0 [ 862.611172] ? lock_downgrade+0x720/0x720 [ 862.615314] ? vfs_write+0x3d7/0x540 [ 862.619039] ? __mutex_unlock_slowpath+0xea/0x610 [ 862.623894] ? check_preemption_disabled+0x41/0x280 [ 862.628906] keyctl_dh_compute+0xbf/0x120 [ 862.633061] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 862.637831] ? fput+0x2b/0x190 [ 862.641205] ? ksys_write+0x1c8/0x2a0 [ 862.645027] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 862.650397] __se_sys_keyctl+0x10f/0x3f0 [ 862.654548] do_syscall_64+0xf9/0x620 [ 862.658341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 862.663530] RIP: 0033:0x4665d9 [ 862.666722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.685622] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 862.693327] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 862.700594] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 862.707877] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 23:09:06 executing program 2 (fault-call:3 fault-nth:5): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 862.715226] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 862.722499] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 862.781158] erofs: read_super, device -> /dev/loop4 [ 862.786231] erofs: options -> [ 862.789507] erofs: root inode @ nid 36 [ 862.832837] erofs: bogus i_mode (0) @ nid 36 [ 862.844438] FAULT_INJECTION: forcing a failure. [ 862.844438] name failslab, interval 1, probability 0, space 0, times 0 [ 862.868759] CPU: 1 PID: 18044 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 862.876700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.886071] Call Trace: [ 862.888695] dump_stack+0x1fc/0x2ef [ 862.892527] should_fail.cold+0xa/0xf [ 862.896357] ? setup_fault_attr+0x200/0x200 [ 862.900945] ? lock_acquire+0x170/0x3c0 [ 862.905046] __should_failslab+0x115/0x180 [ 862.909398] should_failslab+0x5/0x10 [ 862.913220] kmem_cache_alloc_trace+0x284/0x380 [ 862.917911] ? crypto_dh_decode_key+0x36c/0x4a0 [ 862.922609] mpi_alloc+0x43/0x240 [ 862.926090] mpi_read_raw_data+0xd9/0x3f0 [ 862.930245] ? mpi_free+0x10/0x150 [ 862.933789] dh_set_secret+0xe8/0x2a0 [ 862.937774] ? dh_compute_value+0x5c0/0x5c0 [ 862.942154] ? crypto_alloc_tfm+0x123/0x230 [ 862.946484] __keyctl_dh_compute+0x5e3/0x13d0 [ 862.950993] ? dh_data_from_key+0x2a0/0x2a0 [ 862.955323] ? proc_fail_nth_write+0x95/0x1d0 [ 862.959831] ? ksys_write+0x241/0x2a0 [ 862.963638] ? lock_downgrade+0x720/0x720 [ 862.967787] ? vfs_write+0x3d7/0x540 [ 862.971521] ? __mutex_unlock_slowpath+0xea/0x610 [ 862.976383] ? check_preemption_disabled+0x41/0x280 [ 862.981419] keyctl_dh_compute+0xbf/0x120 [ 862.985662] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 862.990418] ? fput+0x2b/0x190 [ 862.993626] ? ksys_write+0x1c8/0x2a0 [ 862.997432] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 863.002800] __se_sys_keyctl+0x10f/0x3f0 [ 863.006866] do_syscall_64+0xf9/0x620 [ 863.010670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.015857] RIP: 0033:0x4665d9 23:09:06 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x11, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 863.019052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.038398] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 863.046121] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 863.053455] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 863.060745] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.068264] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 863.075694] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 23:09:06 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:06 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 23:09:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="31fc0827116a1c08cb4d87db59b2268e752b0a12d1cee5403b7443088cda3ed07dd1ffd5297f169e4db059e473a41679f038f7f39d68443056f8b80bf9ce55707b6cac92461a290cec4436f504c3aa0c39fe6171db710d109d53250a4a8afeb2", 0x60, 0xfffffffffffffffc) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ea8753a54b71c857d2059fcba295b2b6fe52cebd696c3f646ac912084ebc565eaf4ca4f24b2d93f3daa02ccc21d6b902f114deb074f1", 0x36, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6824f92f3285bc25374aec86615507c79604ada963710c31d0799eb075e079d59ca9f892da9e33b66d1553e25c462678705cb36550e05f1672c1abe34786b2741489aa70c41d60f1aaf5125135bcba45096d7e9e3ac6fada8a7ba9d4c2f86d960baca0fbea10f4c4fb2e7ba431ded7ca2585e175051ee0182d1858a2ff8bffd87d25e63a99fc576463d81b01c498e3698e643987db5372f56098295d3e97e4a67909f0819149b34823f2d07d34e7cd245f8a504be0116ed964e7dd1f0da2d9f89fd23b630907a2ec08e876bfac0452e2aaf408b5e36bf22be7dce6ee19f601fd58c11754bea0bac6055fa1115ec09acfe65e34137d", 0xf5, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000001c0)="638eb28ad07ba12e4fb447a8a155893fbf487d4c3b4558b361dd6aaac68218bebddb47122146799bdfc281646970ef319fee8d8b1dbd097833e4", 0x3a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:06 executing program 2 (fault-call:3 fault-nth:6): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:06 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:06 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 863.185611] FAULT_INJECTION: forcing a failure. [ 863.185611] name failslab, interval 1, probability 0, space 0, times 0 [ 863.218962] CPU: 0 PID: 18062 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 863.226895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.236273] Call Trace: [ 863.238906] dump_stack+0x1fc/0x2ef [ 863.242568] should_fail.cold+0xa/0xf [ 863.246454] ? setup_fault_attr+0x200/0x200 [ 863.250796] ? lock_acquire+0x170/0x3c0 [ 863.254809] __should_failslab+0x115/0x180 [ 863.259064] should_failslab+0x5/0x10 [ 863.262878] __kmalloc+0x2ab/0x3c0 [ 863.266513] ? mpi_alloc_limb_space+0x2f/0x50 [ 863.271024] mpi_alloc_limb_space+0x2f/0x50 [ 863.275365] mpi_alloc+0x1a3/0x240 [ 863.278933] mpi_read_raw_data+0xd9/0x3f0 [ 863.283101] ? mpi_free+0x10/0x150 [ 863.286661] dh_set_secret+0xe8/0x2a0 [ 863.290482] ? dh_compute_value+0x5c0/0x5c0 [ 863.294826] ? crypto_alloc_tfm+0x123/0x230 [ 863.299173] __keyctl_dh_compute+0x5e3/0x13d0 [ 863.303709] ? dh_data_from_key+0x2a0/0x2a0 [ 863.308240] ? proc_fail_nth_write+0x95/0x1d0 [ 863.309473] erofs: read_super, device -> /dev/loop4 [ 863.312771] ? ksys_write+0x241/0x2a0 [ 863.312792] ? lock_downgrade+0x720/0x720 [ 863.312805] ? vfs_write+0x3d7/0x540 [ 863.312825] ? __mutex_unlock_slowpath+0xea/0x610 [ 863.312843] ? check_preemption_disabled+0x41/0x280 [ 863.312870] keyctl_dh_compute+0xbf/0x120 [ 863.336499] erofs: options -> [ 863.339552] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 863.339570] ? fput+0x2b/0x190 [ 863.339587] ? ksys_write+0x1c8/0x2a0 [ 863.358738] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 863.364131] __se_sys_keyctl+0x10f/0x3f0 [ 863.368479] do_syscall_64+0xf9/0x620 [ 863.369560] erofs: root inode @ nid 36 [ 863.372302] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.372314] RIP: 0033:0x4665d9 23:09:07 executing program 2 (fault-call:3 fault-nth:7): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffff9) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x36, 0x34, 0x1a, 0x57, 0x64, 0x32, 0x30, 0x32, 0x62, 0x66, 0x37, 0x64, 0x38, 0x39, 0x31, 0x38]}, &(0x7f0000000140)={0x0, "32bf90354dc678c5461f473efc6f399b245aa11af6851bdde13b21269133e104922c405ed19deaead0997af65de1b1b12733562445e63581049c27321f38fb6d", 0x2a}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f00000001c0), &(0x7f00000001c0), 0x0, r2) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:07 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, r0, r2}, &(0x7f0000000100)=""/122, 0x7a, 0x0) 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x13, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 863.372328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.372334] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 863.372347] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 863.372358] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 863.372366] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.372372] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 863.372380] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 863.424871] erofs: read_super, device -> /dev/loop0 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x14, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "28ade77bdcb8934661348635b10404b8b3c0159fcf38fb29b0072fef08349392e0c0da2681c4add259b592ebbfcf6739ceb4fe8999304e4e66b54f5163061639", 0x1f}, 0xffffffffffffff92, 0xfffffffffffffff9) keyctl$clear(0x7, r2) [ 863.522725] FAULT_INJECTION: forcing a failure. [ 863.522725] name failslab, interval 1, probability 0, space 0, times 0 [ 863.529005] erofs: options -> [ 863.557311] erofs: root inode @ nid 36 [ 863.573938] erofs: mounted on /dev/loop0 with opts: . [ 863.580472] CPU: 1 PID: 18092 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 863.588392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.597765] Call Trace: [ 863.600488] dump_stack+0x1fc/0x2ef [ 863.604146] should_fail.cold+0xa/0xf [ 863.607976] ? setup_fault_attr+0x200/0x200 [ 863.612323] ? lock_acquire+0x170/0x3c0 [ 863.616328] __should_failslab+0x115/0x180 [ 863.620586] should_failslab+0x5/0x10 [ 863.624404] kmem_cache_alloc_trace+0x284/0x380 [ 863.629095] mpi_alloc+0x43/0x240 [ 863.632573] mpi_read_raw_data+0xd9/0x3f0 [ 863.636745] dh_set_secret+0x146/0x2a0 [ 863.640657] ? dh_compute_value+0x5c0/0x5c0 [ 863.645007] ? crypto_alloc_tfm+0x123/0x230 [ 863.649349] __keyctl_dh_compute+0x5e3/0x13d0 [ 863.653871] ? dh_data_from_key+0x2a0/0x2a0 [ 863.658213] ? proc_fail_nth_write+0x95/0x1d0 [ 863.662742] ? ksys_write+0x241/0x2a0 [ 863.666664] ? lock_downgrade+0x720/0x720 [ 863.670838] ? vfs_write+0x3d7/0x540 [ 863.674574] ? __mutex_unlock_slowpath+0xea/0x610 [ 863.679430] ? check_preemption_disabled+0x41/0x280 [ 863.684482] keyctl_dh_compute+0xbf/0x120 [ 863.688668] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 863.693453] ? fput+0x2b/0x190 [ 863.696670] ? ksys_write+0x1c8/0x2a0 [ 863.700501] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 863.705993] __se_sys_keyctl+0x10f/0x3f0 [ 863.710215] do_syscall_64+0xf9/0x620 [ 863.714039] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 863.719249] RIP: 0033:0x4665d9 [ 863.722465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.741818] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 863.749550] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 863.756842] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 863.764134] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.771427] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 863.778732] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 863.789123] erofs: bogus i_mode (0) @ nid 36 23:09:07 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:07 executing program 1: sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3f8, 0x8, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008040}, 0x20044010) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x15, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:07 executing program 0: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:07 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000010c0)={0x0, r1, r2}, &(0x7f0000001100)=""/4096, 0x1000, 0x0) [ 863.857626] erofs: unmounted for /dev/loop0 23:09:07 executing program 2 (fault-call:3 fault-nth:8): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x16, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="5e635c81ca9c7c06b5c796af35d8b8628888ae7688d260a4df4fe707eabfb9703a9a874e4e932115d910f7a9395087fa4ae86e4617f99c7a22aaf18a48308c2e9f183a0ceab05bb7cb78f6f64b85101fa69c8c9958054a6aab9e27b34d936f5f06df0ed9da6b5672def00c5932765b6ec19bf8efd99a6ce044fd7d1b633bd50fb65376c03e0ddc2aa68c7d8759bbbec7ad3d0ffc8fd83f3414fd05fe1170f1870db0bf45e6", 0xa5, 0xfffffffffffffff9) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="409cf8d2347ef7d0087169a15303301b6884e1affa65d8e7cb632f3c92bd37cbed16981775df98bea055dbea3342a046b349b3b2556a3b2ca5d1d0a66634c56dccaca85e3589963a564ff4d96e9a8a3ee7369b3b2be6c03c4497a2f02db0e8b959c3ef94a9554c725948f17e2f425691771b5e0f049fa5bb9e237580b25a104644cd192308dce4ec1662d32ed6657c92507d172c9582f31536368d06552f897e7f530a7d2fc004f79f7c84f8c6b93885708fcabe420a0dd708bbc056480f062452", 0xc1, 0xfffffffffffffff9) keyctl$clear(0x7, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:07 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "c581aeb5287d8e2ccaa14298b914a6873c7967c23a6f11c71530704fd6e7e38b11511209faa2c58427db3464b7ba883cf8a3e6c21010f0071d6abdd4f19bbc03", 0x2e}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, 0x0, 0x18000004) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "d26648b72ea2ddc5c7e7ea6ea2aac0796316e8c06b7ef9057f2096a01ca93465483659751751c21c658194438f4cfd4a716c348310c64b67a54c87a62d0dff84", 0x21}, 0x48, 0xffffffffffffffff) [ 864.058589] erofs: read_super, device -> /dev/loop0 [ 864.078060] FAULT_INJECTION: forcing a failure. [ 864.078060] name failslab, interval 1, probability 0, space 0, times 0 [ 864.081834] erofs: read_super, device -> /dev/loop4 [ 864.093069] erofs: options -> [ 864.112512] erofs: root inode @ nid 36 [ 864.133204] erofs: mounted on /dev/loop0 with opts: . [ 864.134568] erofs: options -> [ 864.145463] CPU: 1 PID: 18128 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 864.153481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.163034] Call Trace: [ 864.165661] dump_stack+0x1fc/0x2ef [ 864.169328] should_fail.cold+0xa/0xf [ 864.173150] ? setup_fault_attr+0x200/0x200 [ 864.177501] ? lock_acquire+0x170/0x3c0 [ 864.181511] __should_failslab+0x115/0x180 [ 864.185772] should_failslab+0x5/0x10 [ 864.189590] __kmalloc+0x2ab/0x3c0 [ 864.193145] ? mpi_alloc_limb_space+0x2f/0x50 [ 864.197662] mpi_alloc_limb_space+0x2f/0x50 [ 864.202013] mpi_alloc+0x1a3/0x240 [ 864.205585] mpi_read_raw_data+0xd9/0x3f0 [ 864.209763] dh_set_secret+0x146/0x2a0 [ 864.213679] ? dh_compute_value+0x5c0/0x5c0 [ 864.218033] ? crypto_alloc_tfm+0x123/0x230 [ 864.222561] __keyctl_dh_compute+0x5e3/0x13d0 [ 864.227094] ? dh_data_from_key+0x2a0/0x2a0 [ 864.231449] ? proc_fail_nth_write+0x95/0x1d0 [ 864.235979] ? ksys_write+0x241/0x2a0 [ 864.239805] ? lock_downgrade+0x720/0x720 [ 864.243980] ? vfs_write+0x3d7/0x540 [ 864.247848] ? __mutex_unlock_slowpath+0xea/0x610 [ 864.252738] ? check_preemption_disabled+0x41/0x280 [ 864.257793] keyctl_dh_compute+0xbf/0x120 [ 864.261972] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 864.266881] ? fput+0x2b/0x190 [ 864.270131] ? ksys_write+0x1c8/0x2a0 [ 864.274044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 864.279458] __se_sys_keyctl+0x10f/0x3f0 [ 864.283637] do_syscall_64+0xf9/0x620 [ 864.287553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.292761] RIP: 0033:0x4665d9 [ 864.295972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.315011] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 864.322915] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x17, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f0000000400)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key(0x0, 0x0, 0x0, 0x0, r2) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000280)={0x2, 0x0, @b}, 0x48, r2) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="a24934369a648fa1d879", 0xa, 0xfffffffffffffff9) add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="cc078baaf500bdf13ddbca1a9b52be3aeb1753e8db34e7a7d39cbddc9499c4f100286fe6de736a5ba8245fc08b9f40b530ab2465f1915df3be4dd2a7850328bef9e73efa59c45f35596c8351145b9119720ab25bb3f7b1d260e90cd6a3ab335f4c", 0x61, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:07 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 864.330205] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 864.337493] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.344785] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 864.352073] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 864.363293] erofs: unmounted for /dev/loop0 [ 864.380917] erofs: root inode @ nid 36 [ 864.394860] erofs: bogus i_mode (0) @ nid 36 [ 864.469179] erofs: read_super, device -> /dev/loop4 [ 864.475404] erofs: options -> [ 864.479021] erofs: root inode @ nid 36 [ 864.485193] erofs: bogus i_mode (0) @ nid 36 23:09:08 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='syz', 0xfffffffffffffffd) keyctl$clear(0x7, r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000003c0)="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", 0x11f, 0xfffffffffffffffb) 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x19, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:08 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="31fc0827116a1c08cb4d87db59b2268e752b0a12d1cee5403b7443088cda3ed07dd1ffd5297f169e4db059e473a41679f038f7f39d68443056f8b80bf9ce55707b6cac92461a290cec4436f504c3aa0c39fe6171db710d109d53250a4a8afeb2", 0x60, 0xfffffffffffffffc) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ea8753a54b71c857d2059fcba295b2b6fe52cebd696c3f646ac912084ebc565eaf4ca4f24b2d93f3daa02ccc21d6b902f114deb074f1", 0x36, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6824f92f3285bc25374aec86615507c79604ada963710c31d0799eb075e079d59ca9f892da9e33b66d1553e25c462678705cb36550e05f1672c1abe34786b2741489aa70c41d60f1aaf5125135bcba45096d7e9e3ac6fada8a7ba9d4c2f86d960baca0fbea10f4c4fb2e7ba431ded7ca2585e175051ee0182d1858a2ff8bffd87d25e63a99fc576463d81b01c498e3698e643987db5372f56098295d3e97e4a67909f0819149b34823f2d07d34e7cd245f8a504be0116ed964e7dd1f0da2d9f89fd23b630907a2ec08e876bfac0452e2aaf408b5e36bf22be7dce6ee19f601fd58c11754bea0bac6055fa1115ec09acfe65e34137d", 0xf5, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000001c0)="638eb28ad07ba12e4fb447a8a155893fbf487d4c3b4558b361dd6aaac68218bebddb47122146799bdfc281646970ef319fee8d8b1dbd097833e4", 0x3a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:08 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @auto=[0x65, 0x38, 0x36, 0x37, 0x31, 0x63, 0x32, 0x35, 0x31, 0x33, 0x65, 0x0, 0x63, 0x61, 0x35, 0x61]}, &(0x7f0000000240)={0x0, "cf8e581231a9ff81b275189e2996fef74984b936f81fc4ff9b0733a5359611fe16e5efc0a79ab78bc969fdfe6a77779ee9dedad5c548810248eff3d044d0037d", 0x2a}, 0x48, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="3b3b50b7ea938fdd3dca87b0c889ba596875b2c95fd905837b37573e1c3a094e621c40818a832a6bbfc53cc35e0ae5554819a57ebbe884285518c2adc43818f560712495b09ec4c351608246203d51ac07edcf28c11673eb6b2f409dd0c93fa0ad33d9e248d4604f6c5c9eaaccea49bf2aedea092eb9030039d11e2a570693b6f19f579ddc612170f772caf755b3d2ab88255f45755351086378ed99faf29eb86107b773b604d42e647a1d8209d8a08cf4c1ecd2c60da51a2ca9fe40c097d772d2fe4d1e900f1ac316198a7ca2a20c44863c975c0ea985b9493c2bc11a558ebb4ff7fd5cdadf69fd5e60ccd9b9", 0xed, r0) 23:09:08 executing program 2 (fault-call:3 fault-nth:9): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:08 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="31fc0827116a1c08cb4d87db59b2268e752b0a12d1cee5403b7443088cda3ed07dd1ffd5297f169e4db059e473a41679f038f7f39d68443056f8b80bf9ce55707b6cac92461a290cec4436f504c3aa0c39fe6171db710d109d53250a4a8afeb2", 0x60, 0xfffffffffffffffc) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ea8753a54b71c857d2059fcba295b2b6fe52cebd696c3f646ac912084ebc565eaf4ca4f24b2d93f3daa02ccc21d6b902f114deb074f1", 0x36, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6824f92f3285bc25374aec86615507c79604ada963710c31d0799eb075e079d59ca9f892da9e33b66d1553e25c462678705cb36550e05f1672c1abe34786b2741489aa70c41d60f1aaf5125135bcba45096d7e9e3ac6fada8a7ba9d4c2f86d960baca0fbea10f4c4fb2e7ba431ded7ca2585e175051ee0182d1858a2ff8bffd87d25e63a99fc576463d81b01c498e3698e643987db5372f56098295d3e97e4a67909f0819149b34823f2d07d34e7cd245f8a504be0116ed964e7dd1f0da2d9f89fd23b630907a2ec08e876bfac0452e2aaf408b5e36bf22be7dce6ee19f601fd58c11754bea0bac6055fa1115ec09acfe65e34137d", 0xf5, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000001c0)="638eb28ad07ba12e4fb447a8a155893fbf487d4c3b4558b361dd6aaac68218bebddb47122146799bdfc281646970ef319fee8d8b1dbd097833e4", 0x3a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 864.643711] FAULT_INJECTION: forcing a failure. [ 864.643711] name failslab, interval 1, probability 0, space 0, times 0 [ 864.671780] erofs: read_super, device -> /dev/loop4 [ 864.677372] erofs: options -> [ 864.686533] erofs: root inode @ nid 36 23:09:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='syz', 0xfffffffffffffffd) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000006c0)="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", 0x1000, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) keyctl$read(0xb, r3, &(0x7f0000000300)=""/146, 0x92) [ 864.692625] erofs: bogus i_mode (0) @ nid 36 [ 864.710320] CPU: 0 PID: 18179 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 864.718257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.727804] Call Trace: [ 864.730432] dump_stack+0x1fc/0x2ef [ 864.734103] should_fail.cold+0xa/0xf [ 864.737926] ? setup_fault_attr+0x200/0x200 [ 864.742266] ? lock_acquire+0x170/0x3c0 [ 864.746268] __should_failslab+0x115/0x180 [ 864.750631] should_failslab+0x5/0x10 [ 864.754471] kmem_cache_alloc_trace+0x284/0x380 [ 864.759173] mpi_alloc+0x43/0x240 [ 864.762648] mpi_read_raw_data+0xd9/0x3f0 [ 864.766812] dh_set_secret+0x185/0x2a0 [ 864.770793] ? dh_compute_value+0x5c0/0x5c0 [ 864.775134] ? crypto_alloc_tfm+0x123/0x230 [ 864.779480] __keyctl_dh_compute+0x5e3/0x13d0 [ 864.784012] ? dh_data_from_key+0x2a0/0x2a0 [ 864.788350] ? proc_fail_nth_write+0x95/0x1d0 [ 864.792898] ? ksys_write+0x241/0x2a0 [ 864.796819] ? lock_downgrade+0x720/0x720 [ 864.800990] ? vfs_write+0x3d7/0x540 [ 864.804850] ? __mutex_unlock_slowpath+0xea/0x610 [ 864.809721] ? check_preemption_disabled+0x41/0x280 [ 864.814777] keyctl_dh_compute+0xbf/0x120 [ 864.818951] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 864.823726] ? fput+0x2b/0x190 [ 864.826941] ? ksys_write+0x1c8/0x2a0 [ 864.830900] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 864.836272] __se_sys_keyctl+0x10f/0x3f0 [ 864.840336] do_syscall_64+0xf9/0x620 [ 864.844146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.849485] RIP: 0033:0x4665d9 [ 864.852687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 864.871692] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 864.879400] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 864.886661] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 23:09:08 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="31fc0827116a1c08cb4d87db59b2268e752b0a12d1cee5403b7443088cda3ed07dd1ffd5297f169e4db059e473a41679f038f7f39d68443056f8b80bf9ce55707b6cac92461a290cec4436f504c3aa0c39fe6171db710d109d53250a4a8afeb2", 0x60, 0xfffffffffffffffc) add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="ea8753a54b71c857d2059fcba295b2b6fe52cebd696c3f646ac912084ebc565eaf4ca4f24b2d93f3daa02ccc21d6b902f114deb074f1", 0x36, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6824f92f3285bc25374aec86615507c79604ada963710c31d0799eb075e079d59ca9f892da9e33b66d1553e25c462678705cb36550e05f1672c1abe34786b2741489aa70c41d60f1aaf5125135bcba45096d7e9e3ac6fada8a7ba9d4c2f86d960baca0fbea10f4c4fb2e7ba431ded7ca2585e175051ee0182d1858a2ff8bffd87d25e63a99fc576463d81b01c498e3698e643987db5372f56098295d3e97e4a67909f0819149b34823f2d07d34e7cd245f8a504be0116ed964e7dd1f0da2d9f89fd23b630907a2ec08e876bfac0452e2aaf408b5e36bf22be7dce6ee19f601fd58c11754bea0bac6055fa1115ec09acfe65e34137d", 0xf5, 0xfffffffffffffffc) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000001c0)="638eb28ad07ba12e4fb447a8a155893fbf487d4c3b4558b361dd6aaac68218bebddb47122146799bdfc281646970ef319fee8d8b1dbd097833e4", 0x3a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:08 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, r0) [ 864.893927] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 864.901197] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000002 [ 864.908468] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 864.971072] erofs: read_super, device -> /dev/loop4 [ 864.976142] erofs: options -> [ 865.000723] erofs: root inode @ nid 36 [ 865.004725] erofs: bogus i_mode (0) @ nid 36 23:09:08 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000100)="11", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) 23:09:08 executing program 2 (fault-call:3 fault-nth:10): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:08 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="3f034289e4cfcfca4ecf800f8d57bae47c43087b40a777c1df731be34271ed6ffb06c7d0f78a9f7c38a6b79b16b40805d0931dbbc5afe684076afbc92bfa6fc95ce2610e0132a29790d44a3d1557224bc4f0235ef56197c54a84e2a71914446db6143c2551c6380adf10fcc539dcbe7cfdc966b3515860be378296d124487b", 0x7f, 0xfffffffffffffffd) 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:08 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 865.169905] FAULT_INJECTION: forcing a failure. [ 865.169905] name failslab, interval 1, probability 0, space 0, times 0 [ 865.176426] erofs: read_super, device -> /dev/loop4 [ 865.197436] erofs: options -> [ 865.207841] erofs: root inode @ nid 36 [ 865.217418] CPU: 1 PID: 18221 Comm: syz-executor.2 Not tainted 4.19.196-syzkaller #0 [ 865.222540] erofs: bogus i_mode (0) @ nid 36 [ 865.225346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.225356] Call Trace: [ 865.225385] dump_stack+0x1fc/0x2ef [ 865.225412] should_fail.cold+0xa/0xf [ 865.249325] ? setup_fault_attr+0x200/0x200 [ 865.253681] ? lock_acquire+0x170/0x3c0 [ 865.257682] __should_failslab+0x115/0x180 [ 865.262000] should_failslab+0x5/0x10 [ 865.265840] __kmalloc+0x2ab/0x3c0 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:08 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 865.269406] ? mpi_alloc_limb_space+0x2f/0x50 [ 865.273963] mpi_alloc_limb_space+0x2f/0x50 [ 865.278322] mpi_alloc+0x1a3/0x240 [ 865.282019] mpi_read_raw_data+0xd9/0x3f0 [ 865.286234] dh_set_secret+0x185/0x2a0 [ 865.290157] ? dh_compute_value+0x5c0/0x5c0 [ 865.294514] ? crypto_alloc_tfm+0x123/0x230 [ 865.298882] __keyctl_dh_compute+0x5e3/0x13d0 [ 865.303413] ? dh_data_from_key+0x2a0/0x2a0 [ 865.307897] ? proc_fail_nth_write+0x95/0x1d0 [ 865.312425] ? ksys_write+0x241/0x2a0 [ 865.316246] ? lock_downgrade+0x720/0x720 23:09:08 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) keyctl$reject(0x13, r0, 0x0, 0x84e, r1) 23:09:08 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)="40a2558ec04da3e4ade1b4449481a3871c16cd4d162b883b91738dad59b3f4047548e077e39942841d13aeb82bbb2e7e6e2aae85b4d16f3dbddac763f9ab9fb3b04de8c7f5887926289f1ff50ecb05a602f01110d50c73ee8bf678bd279a027c787184cbb5c8edc0b42aeb7788258ccf6ab85d4e4ab61d0302d68ee95dd9f5bede6ce9f6bd71ecc4db8a3f88c4f09f9e6811592583168b729ee67e2655a4a998bb1f4821ef8a0b8f2e747b6086714261b2964f71e92d4363ad8a9a1ca28acd793eba30a70b8a6ae303531f86adfc7f8058f011b094147fdca17c926950", 0xdd, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)='@/[U$}:}-\x00', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r2}, 0x0, 0x0, 0x0) [ 865.320416] ? vfs_write+0x3d7/0x540 [ 865.324166] ? __mutex_unlock_slowpath+0xea/0x610 [ 865.329258] ? check_preemption_disabled+0x41/0x280 [ 865.334404] keyctl_dh_compute+0xbf/0x120 [ 865.338690] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 865.343478] ? fput+0x2b/0x190 [ 865.346702] ? ksys_write+0x1c8/0x2a0 [ 865.350531] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 865.356319] __se_sys_keyctl+0x10f/0x3f0 [ 865.360415] do_syscall_64+0xf9/0x620 [ 865.364276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 865.369507] RIP: 0033:0x4665d9 [ 865.372916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.392295] RSP: 002b:00007f6eafaff188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 865.400229] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 865.407601] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000000000017 [ 865.414891] RBP: 00007f6eafaff1d0 R08: 0000000000000000 R09: 0000000000000000 [ 865.422186] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000002 [ 865.429472] R13: 00007ffea8c9561f R14: 00007f6eafaff300 R15: 0000000000022000 [ 865.439887] FAULT_INJECTION: forcing a failure. [ 865.439887] name failslab, interval 1, probability 0, space 0, times 0 [ 865.452293] CPU: 1 PID: 18232 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 865.460206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 865.469568] Call Trace: [ 865.472167] dump_stack+0x1fc/0x2ef [ 865.475793] should_fail.cold+0xa/0xf [ 865.479585] ? setup_fault_attr+0x200/0x200 [ 865.483894] ? lock_acquire+0x170/0x3c0 [ 865.487857] __should_failslab+0x115/0x180 [ 865.492080] should_failslab+0x5/0x10 [ 865.495869] __kmalloc+0x2ab/0x3c0 [ 865.499401] ? __se_sys_memfd_create+0xf8/0x440 [ 865.504060] __se_sys_memfd_create+0xf8/0x440 [ 865.508544] ? memfd_file_seals_ptr+0x150/0x150 [ 865.513202] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 865.518555] ? trace_hardirqs_off_caller+0x6e/0x210 [ 865.523562] ? do_syscall_64+0x21/0x620 [ 865.527614] do_syscall_64+0xf9/0x620 [ 865.531404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 865.536579] RIP: 0033:0x4665d9 [ 865.539771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 865.558765] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 865.566750] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 865.574036] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 865.581380] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 865.588881] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 865.596172] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 865.663970] erofs: read_super, device -> /dev/loop4 [ 865.678769] erofs: options -> [ 865.712231] erofs: root inode @ nid 36 23:09:09 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x21, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:09 executing program 1: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000140)="582043dfac2d860338b7ca004984c9c8a9cc351d860446e5dffeb3a9a51c2e77e673f29a75ecad9afd378fa1e26cc918dc7344274e1e988fcc38fa84ca50153803b2a26892a99da3a71c9b5d80dd9edf076b5d54c40de491d68105000000e0a90e5857870abed9bf9640dc67eb14914b4b27a6865016ce89d19e6003876ba1fa6f6c04b9ca8fb65af47f01d8f565ed0377e9d9505c2be6dc457f26a59eb99b30a5003660375ce463fb3b617621067618c9", 0xb1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000280)="a5aa0919f7171c9a2cfb6660c4710893540a45f5b2dba76cc9c0d29366ebc81b96d070fbe5a3a33a9ff442b84017ed5bb0502f332458", 0x36, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, 0x0) [ 865.736691] erofs: bogus i_mode (0) @ nid 36 23:09:09 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:09 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x22, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:09 executing program 2 (fault-call:3 fault-nth:11): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 865.918204] erofs: read_super, device -> /dev/loop4 [ 865.936445] erofs: options -> [ 865.951239] erofs: root inode @ nid 36 23:09:09 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x23, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:09 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 865.969657] erofs: bogus i_mode (0) @ nid 36 [ 866.058296] FAULT_INJECTION: forcing a failure. [ 866.058296] name failslab, interval 1, probability 0, space 0, times 0 [ 866.061993] erofs: read_super, device -> /dev/loop4 [ 866.090708] erofs: options -> [ 866.102949] erofs: root inode @ nid 36 [ 866.104289] CPU: 0 PID: 18274 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 866.114771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.117411] erofs: bogus i_mode (0) @ nid 36 [ 866.124151] Call Trace: [ 866.124184] dump_stack+0x1fc/0x2ef [ 866.124205] should_fail.cold+0xa/0xf [ 866.124223] ? setup_fault_attr+0x200/0x200 [ 866.124239] ? lock_acquire+0x170/0x3c0 [ 866.124257] __should_failslab+0x115/0x180 [ 866.124274] should_failslab+0x5/0x10 [ 866.124292] kmem_cache_alloc+0x277/0x370 [ 866.159927] ? shmem_destroy_callback+0xb0/0xb0 [ 866.164678] shmem_alloc_inode+0x18/0x40 [ 866.168737] ? shmem_destroy_callback+0xb0/0xb0 [ 866.173499] alloc_inode+0x5d/0x180 [ 866.177127] new_inode+0x1d/0xf0 [ 866.180480] shmem_get_inode+0x96/0x8d0 [ 866.184450] __shmem_file_setup.part.0+0x7a/0x2b0 [ 866.189284] shmem_file_setup+0x61/0x90 [ 866.193248] __se_sys_memfd_create+0x26b/0x440 [ 866.197831] ? memfd_file_seals_ptr+0x150/0x150 [ 866.202496] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 866.207849] ? trace_hardirqs_off_caller+0x6e/0x210 [ 866.212855] ? do_syscall_64+0x21/0x620 [ 866.216819] do_syscall_64+0xf9/0x620 [ 866.220790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.225981] RIP: 0033:0x4665d9 [ 866.229165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 866.248157] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:09:09 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000001cc0)='mounts\x00') preadv(r1, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000800)=""/258, 0x102}, {&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/208, 0xd0}, {&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000000580)=""/58, 0x3a}], 0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000001d00)=ANY=[@ANYBLOB="2c000000c238a2ab450e69add6e5ab3ca7ba56db7262212f1b4b578b64f3df7cb681062395d82c", @ANYRES16=r2, @ANYBLOB="000429bd7000fbdbdf2508000000060001000400000008000b000100000006001c0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x100) r3 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$chown(0x4, r3, 0xee00, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000001d80)={'fscrypt:', @desc3}, &(0x7f0000001dc0)={0x0, "a7949d6c171ff22b7980e73a0599e45a5b16f5f68e4b6a00d64a497ff0ad9e9921f198ad6bec1b83bafeebff3ff5276fbda96bf8302baf958bd37df10b65587d", 0x16}, 0x48, r3) add_key$fscrypt_provisioning(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x2}, &(0x7f00000020c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001e40)={r6, r5, r3}, &(0x7f0000001e80)=""/236, 0xec, &(0x7f0000002000)={&(0x7f0000001f80)={'sha256-avx\x00'}, &(0x7f0000001fc0)="465bd65ce25e074c0b609882cb7b4a6a83a9a9fb142844a995c022beb1c929e594dc5b1a4c955e134f813606637268fd4cbeeb588ffb", 0x36}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4}, &(0x7f00000000c0)=""/228, 0xe4, &(0x7f0000000280)={&(0x7f0000000040)={'rmd160-generic\x00'}, &(0x7f00000001c0)="e90f287ec5a74e71d8bdc8bd15aa1ce5eba5f001fcd91e47f68281bc8ebccabb20305ef6f02b820bb8518a5279423d013c25855a3e9223c29b4b697a068622ac7dee832b6cb392a4cad441044313371f722470cb30fd5a215bf3422f80de84f7528f19587bcb12aaf3fcc70eafa4a75d0e540c01a6c0c21b4c962ec6f6ecc11dab22a8b2b7fb5eefd969f87e12ebb20fb4fda711259585395881ca1b3010e7798a496c07e573c6f2a252fb0baf1382fff4415eab868a81bd2d", 0xb9}) 23:09:09 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x24, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:09 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 866.255858] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 866.263302] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 866.270559] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 866.277819] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 866.285091] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 23:09:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680), 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000580), &(0x7f0000000100), &(0x7f0000001600)="96672ae5", 0xffffffffffffff32, 0xfffffffffffffffb) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000280)="013bfa7b0d895d51b22e1afeb3e42378e4f6e4ad3b00f03a5d732f6d6253cb55b8c294d00febb49061ec1a41e268b8d4e03f517cf7ed546e7a1a242ccc93d1e5cf9449b01f57ea95b1418ccb11a72b684660ae6016fc0393a7ce5ce687da6e21fa5762134349c5cd3613f28c230f9915d597e1f375214675ee0f0becf509c6240c728e0839fd2b1b4e1b2118162853fdff2708549cd8faf1bbdfd5a0be8b62246be99fee350d9d2b19ad01965190337ce5d4a612551a0bc3fad45b5ee391614ac2c1e728ebd1a02d02ea5d2bb786", 0xce, r4) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, 0x0, 0x0, 0x0) r6 = request_key(&(0x7f00000001c0)='asymmetric\x00', 0xfffffffffffffffd, &(0x7f0000000380)='[^*%\x00', r1) request_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='xcbc(anubis-generic)\x00', r6) r7 = add_key$user(&(0x7f0000001640), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0xfd29, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r8}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r6, r8, r5}, &(0x7f0000000600)=""/4096, 0x1000, &(0x7f0000000480)={&(0x7f0000000400)={'nhpoly1305-sse2\x00'}, &(0x7f0000000440)="3c76d6f2bf0dc48f0ae78f6dc6d70fa1d0195287c0eb63875d7094c3778bd51eef160ef8a4ad47a0c5e4bb", 0x2b}) 23:09:09 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x25, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:10 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x2, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:10 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f00000001c0)=""/108, 0x6c}, {&(0x7f0000000240)=""/151, 0x97}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)=""/240, 0xf0}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000004c0)=""/6, 0x6}], 0x7, 0xfffff3e2, 0x6) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) 23:09:10 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:10 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:10 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x26, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:10 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x3, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:10 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x27, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 866.729947] FAULT_INJECTION: forcing a failure. [ 866.729947] name failslab, interval 1, probability 0, space 0, times 0 [ 866.794760] CPU: 0 PID: 18312 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 866.802692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 866.808902] erofs: read_super, device -> /dev/loop4 [ 866.812052] Call Trace: [ 866.812082] dump_stack+0x1fc/0x2ef [ 866.812107] should_fail.cold+0xa/0xf [ 866.812129] ? setup_fault_attr+0x200/0x200 [ 866.812145] ? lock_acquire+0x170/0x3c0 [ 866.812169] __should_failslab+0x115/0x180 [ 866.840214] should_failslab+0x5/0x10 [ 866.844033] kmem_cache_alloc+0x277/0x370 [ 866.847735] erofs: options -> [ 866.848194] __d_alloc+0x2b/0xa10 [ 866.854830] d_alloc_pseudo+0x19/0x70 [ 866.858648] alloc_file_pseudo+0xc6/0x250 [ 866.862814] ? alloc_file+0x4d0/0x4d0 [ 866.866743] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 866.872392] ? shmem_get_inode+0x44c/0x8d0 [ 866.876662] __shmem_file_setup.part.0+0x102/0x2b0 [ 866.878269] erofs: root inode @ nid 36 [ 866.881616] shmem_file_setup+0x61/0x90 [ 866.881634] __se_sys_memfd_create+0x26b/0x440 [ 866.881648] ? memfd_file_seals_ptr+0x150/0x150 [ 866.881666] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 866.881680] ? trace_hardirqs_off_caller+0x6e/0x210 [ 866.881696] ? do_syscall_64+0x21/0x620 [ 866.881712] do_syscall_64+0xf9/0x620 [ 866.881730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 866.881742] RIP: 0033:0x4665d9 [ 866.881756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 866.881763] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 866.881781] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 866.910411] erofs: bogus i_mode (0) @ nid 36 [ 866.913267] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 866.913276] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 866.913283] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 866.913289] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 23:09:10 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x4, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:10 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:10 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x28, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 867.052835] erofs: read_super, device -> /dev/loop4 [ 867.057928] erofs: options -> [ 867.074260] erofs: root inode @ nid 36 [ 867.081801] erofs: bogus i_mode (0) @ nid 36 23:09:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "9ae006f3f8ba64822565142426104fbdc7cf8cdd47002fdabfe4a02896006238b8f8189f2a368e3caef96cdd7ee91db38d60ed67e02884f090e04a95dde84024", 0x2f}, 0x48, 0x0) keyctl$get_persistent(0x16, 0xee01, r1) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x20000) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) keyctl$clear(0x7, r6) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r5, r2}, &(0x7f0000000140)=""/145, 0x91, &(0x7f0000000340)={&(0x7f0000000040)={'crc32c-intel\x00'}, &(0x7f0000000280)="5352c0c1df2f0b45565ac1ea3a38c2d795bcdec27daceb228bae17bad226dcb8910cffb070712e8ed8bfa5c993b428e6414574c72e18a42710cc9f13b7442706398f2750c01537b8268b6f5bf35fb5bd72abfba32900d499707558bcbe5ac0c2a90a6e2ae875a1c5481e15dfef327b5fc02d48e0df4935c77e3939ace88547078d4d", 0x82}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, 0x0, 0x0, 0x0) 23:09:10 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:10 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x5, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 867.105445] FAULT_INJECTION: forcing a failure. [ 867.105445] name failslab, interval 1, probability 0, space 0, times 0 [ 867.168068] CPU: 1 PID: 18335 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 867.176002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.185376] Call Trace: [ 867.187990] dump_stack+0x1fc/0x2ef [ 867.191642] should_fail.cold+0xa/0xf [ 867.195470] ? setup_fault_attr+0x200/0x200 [ 867.199812] ? lock_acquire+0x170/0x3c0 [ 867.203819] __should_failslab+0x115/0x180 [ 867.208116] should_failslab+0x5/0x10 [ 867.211937] kmem_cache_alloc+0x277/0x370 [ 867.216117] __alloc_file+0x21/0x330 [ 867.219862] alloc_empty_file+0x6d/0x170 [ 867.223949] alloc_file+0x5e/0x4d0 [ 867.227515] alloc_file_pseudo+0x165/0x250 [ 867.229165] could not allocate digest TFM handle SRÀÁß/ EVZÁê:8Âו¼ÞÂ}¬ë"‹®ºÒ&ܸ‘ ÿ°pq.ŽØ¿¥É“´(æAEtÇ.¤'ÌŸ·D'9'PÀ7¸&‹o[ó_µ½r«û£) [ 867.231772] ? alloc_file+0x4d0/0x4d0 [ 867.231789] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 867.231807] ? shmem_get_inode+0x44c/0x8d0 [ 867.231825] __shmem_file_setup.part.0+0x102/0x2b0 [ 867.231844] shmem_file_setup+0x61/0x90 [ 867.266627] __se_sys_memfd_create+0x26b/0x440 [ 867.271234] ? memfd_file_seals_ptr+0x150/0x150 [ 867.275978] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 867.281376] ? trace_hardirqs_off_caller+0x6e/0x210 [ 867.286417] ? do_syscall_64+0x21/0x620 [ 867.290417] do_syscall_64+0xf9/0x620 [ 867.294245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.299454] RIP: 0033:0x4665d9 [ 867.302012] erofs: read_super, device -> /dev/loop4 [ 867.302662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.302673] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 867.302688] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 867.302697] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 867.302706] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 867.302712] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 23:09:10 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x29, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:10 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000), 0x7, 0x8040) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r1, r2}, 0x0, 0x0, 0x0) 23:09:11 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="d92b2a9261bc7234f88f7745fa5e950bc79f0d19132ccdce58223b46c8a16f08a498d1d679716f375fdf6fe5ef2cc130fa470613bdf8858b8c5c9875144d038f5680", 0x42, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "0342cb57cc28d8c6e18754edaf5d32e3a5af1e04e249bb2c1cbb52f3ae37d19bb609712b27b1d0d1bff13d461ac153781e97f9a3a899f4d3244419155f8c8da8", 0x10}, 0x48, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r2}, 0x0, 0x0, 0x0) [ 867.302726] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 867.315660] erofs: options -> 23:09:11 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:11 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 867.432335] erofs: root inode @ nid 36 23:09:11 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'ghash-ce\x00'}}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r2, r5}, &(0x7f0000000040)=""/52, 0x34, &(0x7f0000000180)={&(0x7f00000000c0)={'sha256-mb\x00'}, &(0x7f0000000100)="36ee174506b1cf4c1e6edee96cf79e402004fd50ab621fc991cdf128f6ead6e79cbd929a96f582be691e020415334225fb04b409bb2d76bdd81f4eb461d7dc3100e2be4bf53b624700dc67a6a14d13a8bed2ca714d525c3616997d88e30290d57ffc7499605f", 0x66}) 23:09:11 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x6, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 867.471354] erofs: bogus i_mode (0) @ nid 36 [ 867.502447] FAULT_INJECTION: forcing a failure. [ 867.502447] name failslab, interval 1, probability 0, space 0, times 0 [ 867.551204] CPU: 0 PID: 18368 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 867.551247] erofs: read_super, device -> /dev/loop4 [ 867.559136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.573499] Call Trace: [ 867.576121] dump_stack+0x1fc/0x2ef [ 867.579861] should_fail.cold+0xa/0xf [ 867.583672] ? setup_fault_attr+0x200/0x200 [ 867.588000] ? lock_acquire+0x170/0x3c0 [ 867.592000] __should_failslab+0x115/0x180 [ 867.592999] erofs: options -> [ 867.596244] should_failslab+0x5/0x10 [ 867.596265] kmem_cache_alloc_trace+0x284/0x380 [ 867.596287] apparmor_file_alloc_security+0x394/0xad0 [ 867.596306] ? apparmor_file_receive+0x160/0x160 [ 867.617872] ? __alloc_file+0x21/0x330 [ 867.621779] security_file_alloc+0x40/0x90 [ 867.626028] __alloc_file+0xc9/0x330 [ 867.629766] alloc_empty_file+0x6d/0x170 [ 867.633910] alloc_file+0x5e/0x4d0 [ 867.637469] alloc_file_pseudo+0x165/0x250 [ 867.641813] ? alloc_file+0x4d0/0x4d0 [ 867.645624] ? lockdep_annotate_inode_mutex_key+0x43/0x130 23:09:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x52, 0x35, 0x63, 0x36, 0x38, 0x62, 0x37, 0x35, 0x33, 0x65, 0x61, 0x39, 0x63, 0x32, 0x63, 0x38]}, &(0x7f0000000340)={0x0, "4c383016a3bb7be887703d727cec3382d90bf5cffb5b73bd919ce13ab9552c019e520d48a0805d93f85ddced3e142f67001d829be4e3691a4b60814018790aaf", 0x23}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r3) add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000004c0)="bc0a1f07cf882a4bbc00382d2216e36f010b2150f8b573bcc8074c000000dc78aed1da018a4c00da56a707332912356f4511df1191234b123b553d8797a5d9695d36b5421bccd52907e8ae84bd606df6df11404c814149a9e4c23833aeda882f644f5b402033e9947f464104946edc20a27bab378461f0cca21ab751a428d8554f14f84d866bbe3e63422bc38d99e4c232ba", 0x92, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r2}, 0x0, 0x0, 0x0) 23:09:11 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 867.651351] ? shmem_get_inode+0x44c/0x8d0 [ 867.655608] __shmem_file_setup.part.0+0x102/0x2b0 [ 867.660556] shmem_file_setup+0x61/0x90 [ 867.664634] __se_sys_memfd_create+0x26b/0x440 [ 867.669227] ? memfd_file_seals_ptr+0x150/0x150 [ 867.673911] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 867.679292] ? trace_hardirqs_off_caller+0x6e/0x210 [ 867.684323] ? do_syscall_64+0x21/0x620 [ 867.688323] do_syscall_64+0xf9/0x620 [ 867.692148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 867.696218] erofs: root inode @ nid 36 [ 867.697341] RIP: 0033:0x4665d9 [ 867.697361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.697370] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 867.697384] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 867.697396] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 867.702864] erofs: bogus i_mode (0) @ nid 36 [ 867.704532] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 867.704541] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 867.704550] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 867.740372] could not allocate digest TFM handle ghash-ce 23:09:11 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:11 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x7, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:11 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000001cc0)='mounts\x00') preadv(r1, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000800)=""/258, 0x102}, {&(0x7f0000000940)=""/216, 0xd8}, {&(0x7f00000004c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/208, 0xd0}, {&(0x7f0000000780)=""/107, 0x6b}, {&(0x7f0000001b40)=""/191, 0xbf}, {&(0x7f0000000580)=""/58, 0x3a}], 0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000001d00)=ANY=[@ANYBLOB="2c000000c238a2ab450e69add6e5ab3ca7ba56db7262212f1b4b578b64f3df7cb681062395d82c", @ANYRES16=r2, @ANYBLOB="000429bd7000fbdbdf2508000000060001000400000008000b000100000006001c0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x100) r3 = add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$chown(0x4, r3, 0xee00, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000001d80)={'fscrypt:', @desc3}, &(0x7f0000001dc0)={0x0, "a7949d6c171ff22b7980e73a0599e45a5b16f5f68e4b6a00d64a497ff0ad9e9921f198ad6bec1b83bafeebff3ff5276fbda96bf8302baf958bd37df10b65587d", 0x16}, 0x48, r3) add_key$fscrypt_provisioning(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x2}, &(0x7f00000020c0)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001e40)={r6, r5, r3}, &(0x7f0000001e80)=""/236, 0xec, &(0x7f0000002000)={&(0x7f0000001f80)={'sha256-avx\x00'}, &(0x7f0000001fc0)="465bd65ce25e074c0b609882cb7b4a6a83a9a9fb142844a995c022beb1c929e594dc5b1a4c955e134f813606637268fd4cbeeb588ffb", 0x36}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4}, &(0x7f00000000c0)=""/228, 0xe4, &(0x7f0000000280)={&(0x7f0000000040)={'rmd160-generic\x00'}, &(0x7f00000001c0)="e90f287ec5a74e71d8bdc8bd15aa1ce5eba5f001fcd91e47f68281bc8ebccabb20305ef6f02b820bb8518a5279423d013c25855a3e9223c29b4b697a068622ac7dee832b6cb392a4cad441044313371f722470cb30fd5a215bf3422f80de84f7528f19587bcb12aaf3fcc70eafa4a75d0e540c01a6c0c21b4c962ec6f6ecc11dab22a8b2b7fb5eefd969f87e12ebb20fb4fda711259585395881ca1b3010e7798a496c07e573c6f2a252fb0baf1382fff4415eab868a81bd2d", 0xb9}) 23:09:11 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:11 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 867.888989] could not allocate digest TFM handle ghash-ce 23:09:11 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x8, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:11 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:11 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 867.975411] erofs: read_super, device -> /dev/loop4 [ 867.985467] erofs: options -> [ 867.990366] FAULT_INJECTION: forcing a failure. [ 867.990366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 867.995612] erofs: root inode @ nid 36 [ 868.012204] erofs: bogus i_mode (0) @ nid 36 [ 868.037065] CPU: 1 PID: 18414 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 868.045000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.054303] FAULT_INJECTION: forcing a failure. [ 868.054303] name failslab, interval 1, probability 0, space 0, times 0 [ 868.054395] Call Trace: [ 868.068232] dump_stack+0x1fc/0x2ef [ 868.071890] should_fail.cold+0xa/0xf [ 868.075709] ? lock_acquire+0x170/0x3c0 [ 868.079718] ? setup_fault_attr+0x200/0x200 [ 868.084075] __alloc_pages_nodemask+0x239/0x2890 [ 868.088857] ? __lock_acquire+0x6de/0x3ff0 [ 868.093113] ? static_obj+0x50/0x50 [ 868.096755] ? __lock_acquire+0x6de/0x3ff0 [ 868.101084] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 868.105969] ? __lock_acquire+0x6de/0x3ff0 [ 868.110227] ? mark_held_locks+0xf0/0xf0 [ 868.114294] ? unwind_next_frame+0xeee/0x1400 [ 868.118804] ? mark_held_locks+0xf0/0xf0 [ 868.122896] ? deref_stack_reg+0x134/0x1d0 [ 868.127132] ? get_reg+0x176/0x1f0 [ 868.130707] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 868.136590] alloc_pages_vma+0xf2/0x780 [ 868.140561] shmem_alloc_page+0x11c/0x1f0 [ 868.144791] ? shmem_swapin+0x220/0x220 [ 868.148767] ? percpu_counter_add_batch+0x126/0x180 [ 868.153775] ? __vm_enough_memory+0x316/0x650 [ 868.158263] shmem_alloc_and_acct_page+0x15a/0x850 [ 868.163188] shmem_getpage_gfp+0x4e9/0x37f0 [ 868.167529] ? shmem_alloc_and_acct_page+0x850/0x850 [ 868.172635] ? mark_held_locks+0xa6/0xf0 [ 868.176705] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 868.182085] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 868.187385] shmem_write_begin+0xff/0x1e0 [ 868.191575] generic_perform_write+0x1f8/0x4d0 [ 868.196265] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 868.200931] ? current_time+0x1c0/0x1c0 [ 868.204900] ? lock_acquire+0x170/0x3c0 [ 868.209059] __generic_file_write_iter+0x24b/0x610 [ 868.213997] generic_file_write_iter+0x3f8/0x730 [ 868.218756] __vfs_write+0x51b/0x770 [ 868.222919] ? kernel_read+0x110/0x110 [ 868.226846] ? check_preemption_disabled+0x41/0x280 [ 868.231873] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 868.236998] vfs_write+0x1f3/0x540 [ 868.240631] __x64_sys_pwrite64+0x1f7/0x250 [ 868.244953] ? ksys_pwrite64+0x1a0/0x1a0 [ 868.249008] ? trace_hardirqs_off_caller+0x6e/0x210 [ 868.254034] ? do_syscall_64+0x21/0x620 [ 868.258008] do_syscall_64+0xf9/0x620 [ 868.261811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.267007] RIP: 0033:0x419777 23:09:11 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, 0x0, r0}, 0x0, 0x0, 0x0) 23:09:11 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffff8) [ 868.270203] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 868.289110] RSP: 002b:00007f8133c62f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 868.296838] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 [ 868.304114] RDX: 000000000000000f RSI: 0000000020010000 RDI: 0000000000000004 [ 868.311394] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 868.318657] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 868.325922] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 868.333202] CPU: 0 PID: 18422 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 868.341116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.350482] Call Trace: [ 868.353085] dump_stack+0x1fc/0x2ef [ 868.356731] should_fail.cold+0xa/0xf [ 868.360576] ? setup_fault_attr+0x200/0x200 [ 868.364915] ? lock_acquire+0x170/0x3c0 [ 868.369007] __should_failslab+0x115/0x180 [ 868.373262] should_failslab+0x5/0x10 [ 868.377078] __kmalloc+0x2ab/0x3c0 [ 868.380633] ? __se_sys_memfd_create+0xf8/0x440 23:09:12 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x9, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:12 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2f, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 868.385315] __se_sys_memfd_create+0xf8/0x440 [ 868.389831] ? memfd_file_seals_ptr+0x150/0x150 [ 868.394526] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 868.399913] ? trace_hardirqs_off_caller+0x6e/0x210 [ 868.404955] ? do_syscall_64+0x21/0x620 [ 868.408940] do_syscall_64+0xf9/0x620 [ 868.412840] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.418024] RIP: 0033:0x4665d9 [ 868.421206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.440124] RSP: 002b:00007f7082d57f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 868.448045] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 868.455319] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 868.462670] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 868.469924] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 868.477185] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 868.553840] erofs: read_super, device -> /dev/loop4 [ 868.559008] erofs: options -> [ 868.564944] erofs: read_super, device -> /dev/loop0 [ 868.570217] erofs: options -> [ 868.598592] erofs: cannot find valid erofs superblock [ 868.607670] erofs: root inode @ nid 36 [ 868.614960] erofs: bogus i_mode (0) @ nid 36 23:09:12 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:12 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x30, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:12 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:12 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xa, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:12 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:12 executing program 3: add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="1bb78b66207843b7", 0x8, 0xfffffffffffffff8) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0}, 0x0, 0x65, 0x0) [ 868.720966] FAULT_INJECTION: forcing a failure. [ 868.720966] name failslab, interval 1, probability 0, space 0, times 0 [ 868.732701] CPU: 0 PID: 18453 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 868.740631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.744908] FAULT_INJECTION: forcing a failure. [ 868.744908] name failslab, interval 1, probability 0, space 0, times 0 [ 868.750011] Call Trace: [ 868.763804] dump_stack+0x1fc/0x2ef [ 868.767436] should_fail.cold+0xa/0xf [ 868.771249] ? setup_fault_attr+0x200/0x200 [ 868.775574] ? lock_acquire+0x170/0x3c0 [ 868.779553] __should_failslab+0x115/0x180 [ 868.783796] should_failslab+0x5/0x10 [ 868.787610] kmem_cache_alloc+0x277/0x370 [ 868.791782] getname_flags+0xce/0x590 [ 868.795602] do_sys_open+0x26c/0x520 [ 868.799324] ? filp_open+0x70/0x70 [ 868.802890] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 868.808270] ? trace_hardirqs_off_caller+0x6e/0x210 [ 868.813303] ? do_syscall_64+0x21/0x620 [ 868.817293] do_syscall_64+0xf9/0x620 [ 868.821111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 868.826307] RIP: 0033:0x4196c4 [ 868.829527] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 868.848746] RSP: 002b:00007f8133c62ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 868.856487] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 868.863862] RDX: 0000000000000002 RSI: 00007f8133c63000 RDI: 00000000ffffff9c [ 868.871147] RBP: 00007f8133c63000 R08: 0000000000000000 R09: ffffffffffffffff [ 868.878458] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 868.885750] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 868.893056] CPU: 1 PID: 18455 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 868.900968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.910509] Call Trace: [ 868.913126] dump_stack+0x1fc/0x2ef [ 868.916785] should_fail.cold+0xa/0xf [ 868.920607] ? setup_fault_attr+0x200/0x200 [ 868.924946] ? lock_acquire+0x170/0x3c0 [ 868.928941] __should_failslab+0x115/0x180 [ 868.933196] should_failslab+0x5/0x10 [ 868.937012] kmem_cache_alloc+0x277/0x370 [ 868.941291] ? shmem_destroy_callback+0xb0/0xb0 [ 868.945968] shmem_alloc_inode+0x18/0x40 [ 868.950034] ? shmem_destroy_callback+0xb0/0xb0 [ 868.954714] alloc_inode+0x5d/0x180 [ 868.958353] new_inode+0x1d/0xf0 [ 868.961742] shmem_get_inode+0x96/0x8d0 [ 868.965742] __shmem_file_setup.part.0+0x7a/0x2b0 [ 868.970606] shmem_file_setup+0x61/0x90 [ 868.974597] __se_sys_memfd_create+0x26b/0x440 [ 868.979191] ? memfd_file_seals_ptr+0x150/0x150 [ 868.983884] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 868.989269] ? trace_hardirqs_off_caller+0x6e/0x210 [ 868.994309] ? do_syscall_64+0x21/0x620 [ 868.998304] do_syscall_64+0xf9/0x620 [ 869.002135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.004476] erofs: read_super, device -> /dev/loop4 [ 869.007417] RIP: 0033:0x4665d9 23:09:12 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:12 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="435c31f08144a0a1628dab08a39111d21160e5482bbcd2416d6ec30e555017d1b12ee5a67e680e728db22608dee08c775d6e12a2aac42fa6072ffdb999f6edca74760f6b", 0x44, 0xfffffffffffffff8) 23:09:12 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xb, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:12 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x31, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 869.007433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.007446] RSP: 002b:00007f7082d57f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 869.031306] erofs: options -> [ 869.034714] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 869.034725] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 869.034734] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 869.034742] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 869.034751] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 869.050384] FAULT_INJECTION: forcing a failure. [ 869.050384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 869.094111] CPU: 1 PID: 18473 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 869.102010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.111383] Call Trace: [ 869.114025] dump_stack+0x1fc/0x2ef [ 869.117865] should_fail.cold+0xa/0xf [ 869.121697] ? setup_fault_attr+0x200/0x200 [ 869.126051] ? do_writepages+0x290/0x290 [ 869.130152] ? unlock_page+0x13d/0x230 [ 869.134079] __alloc_pages_nodemask+0x239/0x2890 [ 869.138903] ? lock_downgrade+0x720/0x720 [ 869.143087] ? check_preemption_disabled+0x41/0x280 [ 869.144798] erofs: root inode @ nid 36 [ 869.148247] ? __lock_acquire+0x6de/0x3ff0 [ 869.148280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 869.148295] ? lock_downgrade+0x720/0x720 [ 869.148305] ? lock_acquire+0x170/0x3c0 [ 869.148324] ? up_write+0x18/0x150 [ 869.171101] erofs: bogus i_mode (0) @ nid 36 [ 869.173126] ? generic_file_write_iter+0x381/0x730 [ 869.173149] ? iov_iter_init+0xb8/0x1d0 [ 869.173174] cache_grow_begin+0xa4/0x8a0 [ 869.190640] ? setup_fault_attr+0x200/0x200 [ 869.195068] ? lock_acquire+0x170/0x3c0 [ 869.199043] cache_alloc_refill+0x273/0x340 [ 869.203452] kmem_cache_alloc+0x346/0x370 [ 869.207629] getname_flags+0xce/0x590 [ 869.211430] do_sys_open+0x26c/0x520 [ 869.215181] ? filp_open+0x70/0x70 [ 869.218997] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 869.224556] ? trace_hardirqs_off_caller+0x6e/0x210 [ 869.229607] ? do_syscall_64+0x21/0x620 [ 869.233804] do_syscall_64+0xf9/0x620 [ 869.237610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.242791] RIP: 0033:0x4196c4 [ 869.246072] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 869.265067] RSP: 002b:00007f8133c62ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 869.272771] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 869.280028] RDX: 0000000000000002 RSI: 00007f8133c63000 RDI: 00000000ffffff9c [ 869.287375] RBP: 00007f8133c63000 R08: 0000000000000000 R09: ffffffffffffffff [ 869.294732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 869.302025] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:12 executing program 3: r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x5f9, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000002c0)=0x9) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000040), &(0x7f0000000080)=""/94, 0x5e, &(0x7f0000000200)={&(0x7f0000000100)={'hmac(ghash-ce)\x00'}, &(0x7f0000000140)="184a30dc15d9cfc09ff61fbdb0cd6fe1f55600c209e6dd4db30206c6cc91e2224586a7cf3b21ac3815175de4481903d80236ae6b9fcbcc96de0919065593fa5eab5e1053b3da319239183038ad0466e5619cfef50437d310a5b61633054130b3cdccc3fbdb261492f1f00756197b054669d140b16a8da896dc7e89f77626920bbde06f024be5c1f061f0b07b9e4818bf218d6785d4218a11cd2f29adc6d8817e52b9", 0xa2}) 23:09:12 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x32, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 869.390805] erofs: read_super, device -> /dev/loop4 [ 869.399839] erofs: read_super, device -> /dev/loop0 [ 869.401536] erofs: options -> [ 869.410178] erofs: options -> [ 869.415913] erofs: root inode @ nid 36 [ 869.417465] erofs: root inode @ nid 36 [ 869.428814] erofs: mounted on /dev/loop0 with opts: . [ 869.439421] erofs: bogus i_mode (0) @ nid 36 23:09:13 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3fa, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:13 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xc, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:13 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:13 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:13 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x33, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 869.478033] erofs: unmounted for /dev/loop0 23:09:13 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xfffffffffffffffa) 23:09:13 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xd, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 869.529334] FAULT_INJECTION: forcing a failure. [ 869.529334] name failslab, interval 1, probability 0, space 0, times 0 [ 869.541285] CPU: 0 PID: 18495 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 869.549278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.558668] Call Trace: [ 869.561274] dump_stack+0x1fc/0x2ef [ 869.564942] should_fail.cold+0xa/0xf [ 869.568741] ? setup_fault_attr+0x200/0x200 [ 869.573066] ? lock_acquire+0x170/0x3c0 [ 869.577046] __should_failslab+0x115/0x180 [ 869.581284] should_failslab+0x5/0x10 [ 869.585089] kmem_cache_alloc+0x277/0x370 [ 869.589258] __d_alloc+0x2b/0xa10 [ 869.592792] d_alloc_pseudo+0x19/0x70 [ 869.596604] alloc_file_pseudo+0xc6/0x250 [ 869.600779] ? alloc_file+0x4d0/0x4d0 [ 869.604586] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 869.610229] ? shmem_get_inode+0x44c/0x8d0 [ 869.614461] __shmem_file_setup.part.0+0x102/0x2b0 [ 869.619384] shmem_file_setup+0x61/0x90 [ 869.623450] __se_sys_memfd_create+0x26b/0x440 [ 869.628046] ? memfd_file_seals_ptr+0x150/0x150 [ 869.632723] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 869.638141] ? trace_hardirqs_off_caller+0x6e/0x210 [ 869.643259] ? do_syscall_64+0x21/0x620 [ 869.647252] do_syscall_64+0xf9/0x620 [ 869.651236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.656458] RIP: 0033:0x4665d9 [ 869.659641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 869.678535] RSP: 002b:00007f7082d57f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 869.686329] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 869.693630] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 869.700894] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 869.708162] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 869.715507] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 23:09:13 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 869.817193] FAULT_INJECTION: forcing a failure. [ 869.817193] name failslab, interval 1, probability 0, space 0, times 0 [ 869.857147] erofs: read_super, device -> /dev/loop4 [ 869.857316] CPU: 1 PID: 18508 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 869.870254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 869.876481] erofs: options -> [ 869.879645] Call Trace: [ 869.879677] dump_stack+0x1fc/0x2ef [ 869.879702] should_fail.cold+0xa/0xf [ 869.892958] ? setup_fault_attr+0x200/0x200 [ 869.897309] ? lock_acquire+0x170/0x3c0 [ 869.901320] __should_failslab+0x115/0x180 [ 869.905614] should_failslab+0x5/0x10 [ 869.909437] kmem_cache_alloc+0x277/0x370 [ 869.913654] __alloc_file+0x21/0x330 [ 869.917501] alloc_empty_file+0x6d/0x170 [ 869.921628] alloc_file+0x5e/0x4d0 [ 869.925281] alloc_file_pseudo+0x165/0x250 [ 869.929540] ? alloc_file+0x4d0/0x4d0 [ 869.933370] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 869.939145] ? shmem_get_inode+0x44c/0x8d0 [ 869.943413] __shmem_file_setup.part.0+0x102/0x2b0 [ 869.948375] shmem_file_setup+0x61/0x90 [ 869.952461] __se_sys_memfd_create+0x26b/0x440 [ 869.957076] ? memfd_file_seals_ptr+0x150/0x150 [ 869.961859] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 869.967245] ? trace_hardirqs_off_caller+0x6e/0x210 [ 869.972292] ? do_syscall_64+0x21/0x620 [ 869.976303] do_syscall_64+0xf9/0x620 [ 869.980132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 869.985338] RIP: 0033:0x4665d9 [ 869.988553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 870.007479] RSP: 002b:00007f7082d57f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:09:13 executing program 3: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000000c0)={0x0, r1, r1}, 0x0, 0x0, 0x0) 23:09:13 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="20b3f87f402a0657abe2f2ccd124bc7951b6b9b18ac2388d023b6c88d0fec950cccd24379dedc62ea232b700c4f4f18714694e1e988af15dc92445a5f1f96e10cd3ab238a916501345342f9a5bda421e4226c9ce52e26ac74cb95e0fd8c52d29d2bb3bbb4a16", 0x66, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="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", 0x135, r1) 23:09:13 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xe, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x19, 0x8001, 0x4, 0xb1, 0x878, 0xffffffffffffffff, 0x2, '\x00', r3, r4, 0x5, 0x0, 0x3}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0f000000000000000c0000000a000100726f7574650000000c00020008000400", @ANYRES32=0x0, @ANYBLOB="2b7c620e19adcdadf654bec9c7428fb67520bb24304b0e93f6e057d3269ff345ba9d74efd0dcff6797575c4b054780c6b30119466f4829f4447a1456b59918c1de830cfb9321787d482299849e21ad81dcc631642793fe1a3591e31c3ff8fc68"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x8000, 0x7800, 0x6, 0xffffff80, {{0x23, 0x4, 0x3, 0x8, 0x8c, 0x65, 0x0, 0x3, 0x4, 0x0, @empty, @remote, {[@lsrr={0x83, 0x23, 0x34, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @broadcast, @multicast2, @remote]}, @generic={0x44, 0x2}, @cipso={0x86, 0xd, 0x1, [{0x0, 0x7, "04a843c5ee"}]}, @generic={0x82, 0x10, "3d8b428ece1e7d0fad8030be49b5"}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x9, [{@remote, 0x40}, {@loopback, 0x80000000}, {@multicast1, 0x4}, {@loopback, 0x2}, {@empty, 0x4}, {@empty, 0x3}]}]}}}}}) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) [ 870.015215] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 870.022509] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 870.030148] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 870.037436] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 870.044726] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 [ 870.050612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 870.070880] erofs: root inode @ nid 36 [ 870.076920] erofs: bogus i_mode (0) @ nid 36 [ 870.082807] FAULT_INJECTION: forcing a failure. [ 870.082807] name failslab, interval 1, probability 0, space 0, times 0 [ 870.100097] CPU: 0 PID: 18510 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 870.108028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.117398] Call Trace: [ 870.120010] dump_stack+0x1fc/0x2ef [ 870.123665] should_fail.cold+0xa/0xf [ 870.127488] ? setup_fault_attr+0x200/0x200 [ 870.131918] ? lock_acquire+0x170/0x3c0 [ 870.135918] __should_failslab+0x115/0x180 [ 870.140183] should_failslab+0x5/0x10 [ 870.144000] kmem_cache_alloc_trace+0x284/0x380 [ 870.148709] apparmor_file_alloc_security+0x394/0xad0 [ 870.153932] ? apparmor_file_receive+0x160/0x160 [ 870.158897] ? __alloc_file+0x21/0x330 [ 870.162992] security_file_alloc+0x40/0x90 [ 870.166158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 870.167269] __alloc_file+0xc9/0x330 [ 870.167293] alloc_empty_file+0x6d/0x170 [ 870.183644] path_openat+0xe9/0x2df0 [ 870.187387] ? __lock_acquire+0x6de/0x3ff0 [ 870.191740] ? path_lookupat+0x8d0/0x8d0 [ 870.195915] ? mark_held_locks+0xf0/0xf0 [ 870.199998] ? mark_held_locks+0xf0/0xf0 [ 870.204088] do_filp_open+0x18c/0x3f0 [ 870.207901] ? may_open_dev+0xf0/0xf0 [ 870.211715] ? __alloc_fd+0x28d/0x570 [ 870.215531] ? lock_downgrade+0x720/0x720 [ 870.219686] ? lock_acquire+0x170/0x3c0 [ 870.223665] ? __alloc_fd+0x34/0x570 [ 870.227398] ? do_raw_spin_unlock+0x171/0x230 [ 870.231922] ? _raw_spin_unlock+0x29/0x40 [ 870.236069] ? __alloc_fd+0x28d/0x570 [ 870.239865] do_sys_open+0x3b3/0x520 [ 870.243577] ? filp_open+0x70/0x70 [ 870.247123] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 870.252504] ? trace_hardirqs_off_caller+0x6e/0x210 [ 870.257562] ? do_syscall_64+0x21/0x620 [ 870.261552] do_syscall_64+0xf9/0x620 [ 870.265379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.270739] RIP: 0033:0x4196c4 [ 870.273940] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 870.293213] RSP: 002b:00007f8133c62ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 870.301075] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 870.308354] RDX: 0000000000000002 RSI: 00007f8133c63000 RDI: 00000000ffffff9c [ 870.315671] RBP: 00007f8133c63000 R08: 0000000000000000 R09: ffffffffffffffff [ 870.322946] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 870.330226] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 870.387901] erofs: read_super, device -> /dev/loop4 [ 870.399899] erofs: options -> [ 870.404451] erofs: root inode @ nid 36 [ 870.409105] erofs: bogus i_mode (0) @ nid 36 23:09:14 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:14 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xf, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:14 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x34, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:14 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x40002080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x20040070}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000014c0)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24048004}, 0x40004) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000005c0), &(0x7f0000000600)=0x10) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x40001) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) 23:09:14 executing program 0 (fault-call:0 fault-nth:9): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:14 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x35, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 870.565702] FAULT_INJECTION: forcing a failure. [ 870.565702] name failslab, interval 1, probability 0, space 0, times 0 [ 870.567106] erofs: read_super, device -> /dev/loop4 [ 870.607495] FAULT_INJECTION: forcing a failure. [ 870.607495] name failslab, interval 1, probability 0, space 0, times 0 [ 870.630123] CPU: 0 PID: 18558 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 870.638161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.644588] erofs: options -> [ 870.647522] Call Trace: [ 870.647556] dump_stack+0x1fc/0x2ef [ 870.647579] should_fail.cold+0xa/0xf [ 870.659881] erofs: root inode @ nid 36 [ 870.660772] ? setup_fault_attr+0x200/0x200 [ 870.660790] ? lock_acquire+0x170/0x3c0 [ 870.660810] __should_failslab+0x115/0x180 [ 870.660830] should_failslab+0x5/0x10 [ 870.660853] kmem_cache_alloc_trace+0x284/0x380 [ 870.660874] apparmor_file_alloc_security+0x394/0xad0 [ 870.660892] ? apparmor_file_receive+0x160/0x160 [ 870.668938] erofs: bogus i_mode (0) @ nid 36 [ 870.669171] ? __alloc_file+0x21/0x330 23:09:14 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 870.704030] security_file_alloc+0x40/0x90 [ 870.708318] __alloc_file+0xc9/0x330 [ 870.712045] alloc_empty_file+0x6d/0x170 [ 870.716141] alloc_file+0x5e/0x4d0 [ 870.719716] alloc_file_pseudo+0x165/0x250 [ 870.723968] ? alloc_file+0x4d0/0x4d0 [ 870.727788] ? lockdep_annotate_inode_mutex_key+0x43/0x130 [ 870.733432] ? shmem_get_inode+0x44c/0x8d0 [ 870.737687] __shmem_file_setup.part.0+0x102/0x2b0 [ 870.742628] shmem_file_setup+0x61/0x90 [ 870.746611] __se_sys_memfd_create+0x26b/0x440 [ 870.751200] ? memfd_file_seals_ptr+0x150/0x150 [ 870.755883] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 870.761262] ? trace_hardirqs_off_caller+0x6e/0x210 [ 870.766312] ? do_syscall_64+0x21/0x620 [ 870.770287] do_syscall_64+0xf9/0x620 [ 870.774107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 870.779311] RIP: 0033:0x4665d9 [ 870.782510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 870.801593] RSP: 002b:00007f7082d57f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 870.809293] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004665d9 [ 870.816549] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 870.823889] RBP: 0000000000000003 R08: 0000000000001000 R09: ffffffffffffffff [ 870.831145] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000008100000 [ 870.838401] R13: 0000000020000100 R14: 0000000000002000 R15: 0000000020010a00 23:09:14 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x10, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 870.859684] CPU: 0 PID: 18562 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 870.867600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 870.876967] Call Trace: [ 870.879575] dump_stack+0x1fc/0x2ef [ 870.883225] should_fail.cold+0xa/0xf [ 870.887039] ? setup_fault_attr+0x200/0x200 [ 870.891374] ? lock_acquire+0x170/0x3c0 [ 870.895362] __should_failslab+0x115/0x180 [ 870.899650] should_failslab+0x5/0x10 [ 870.903557] kmem_cache_alloc_trace+0x284/0x380 23:09:14 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@gettaction={0x13c, 0x32, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdf}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xebbc}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x81, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf90}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "b14b1b7939f3006b08ea454391af6538e66c509be46a318293e5d87abcfa274e3fb93c2eaa9f6e5667cda7cc7a759076899f5a7700", 0x39}, 0x48, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='sample\x00', r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000170000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x48004804}, 0xc, &(0x7f0000001680)={&(0x7f0000000540)={0x1128, r2, 0x104, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x68d6, 0x18}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x3e, 0x45, "45d7db4a0a7deae417e7bc333e8dd8b985c6fc53101714de23fb31b4a7f29379c6abe69c8370ff471db816eed6cdc8a3632b2044292d7b1c67b7"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "7f8817835d5010ff30378455cbfd0e87ee536a73ceb98a62bbd078fe71e27b90957f3b1453c30eb117502af7229ceee38c1138eebd34343e5d639c346c677d95e837661a98cfc76cc369f03e786f757e1b51240c9fe8ca3fcddb2a66263215fb1ec221eeae446d50ef94d937e03b5929e653fad1bcc7da701be709bc7da3fd03e441c63d106ada447651beb491fd3e9c4a003de0c14a3af6c3462023ea5db2d520db40061f167a8298d523931eaab26bdb2f7353230719"}]}, 0x1128}, 0x1, 0x0, 0x0, 0x4}, 0x20054840) add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='gGY', 0x3, r1) r6 = request_key(&(0x7f0000001700)='rxrpc\x00', &(0x7f0000001740)={'syz', 0x2}, &(0x7f0000001780)='/*,\x00', r1) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f00000017c0)='#,\x93&#%]-\x00', &(0x7f0000001800)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r7) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e40)=ANY=[@ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x4010) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001e00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001880)={0x540, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_TX_RATES={0xc4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x4, 0x101, 0xffff, 0x1, 0x7, 0xe4, 0x1]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x5, 0x2, 0x6, 0x1, 0x73, 0x9, 0x2, 0x5, 0x6, 0x16, 0x16, 0x18, 0xb, 0x1, 0x3, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb5c7, 0x8, 0x6, 0x9, 0x3, 0x2, 0x7ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x36, 0x1b, 0x67, 0x48, 0x3, 0x36, 0x6f, 0x6c, 0x6, 0x18, 0xc, 0x3, 0x3, 0x4, 0x4, 0x6c, 0xc, 0x0, 0x6c, 0x4, 0x4, 0x2d282574c96f214e, 0x16, 0x48, 0x30, 0x0, 0xb, 0x12, 0x76, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0x0, 0xf800, 0x0, 0x4, 0xfffb, 0xdca]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7de, 0xc2a, 0x6, 0x7f, 0x7f, 0x3d7, 0x8, 0x79]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x3, 0x6, 0x8, 0x4, 0x7ff, 0x800, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xb4, 0x8, 0x0, 0x6, 0x2, 0x1, 0x5a]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x2, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x60, 0x5, 0x48, 0x6c, 0x6, 0x30, 0x6c, 0x18, 0x12, 0x60, 0xb, 0x30, 0x60, 0x5, 0x48, 0x60, 0x36, 0x4, 0x0, 0x5, 0x2, 0x48, 0x16]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3ff, 0x33a, 0x7, 0xffff, 0x0, 0xf800, 0xbc]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x36, 0x16, 0x12, 0x5, 0x2, 0x48, 0x5, 0x2, 0x2, 0x1b, 0x6c, 0x5, 0x18, 0x48, 0x48, 0xc, 0x5, 0x40, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6a, 0x6, 0x8000, 0x1, 0x80, 0x81, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x8, 0x7, 0x7fff, 0x9, 0x7, 0x200]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x30]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x2, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x7}, {0x3}, {0x1}, {0x5, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x9}, {0x1, 0x7}, {0x2}, {0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x7}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x6}, {0x2, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x4, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x1}, {0x6, 0x7}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x2, 0x5}, {0x2}, {0x6, 0x7}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x1000, 0x63, 0x8, 0xff, 0x2, 0xbb0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0xcb5, 0x7bf, 0x1, 0x7fff, 0x4, 0x7, 0x6]}}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x1, 0x0, 0x3, 0x0, 0x6, 0x1, 0x2, 0x48, 0x18, 0x18, 0xb, 0x4, 0x4, 0x48, 0x5, 0x60, 0x1]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x7, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x5}, {0x1, 0x4}, {0x1, 0x7}, {0x4}, {0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x6, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x48, 0x0, 0x2, 0x36, 0x30, 0x31, 0x16, 0x6c, 0x18, 0x4, 0x4, 0x16, 0x19, 0x4, 0x2d, 0x48, 0x16, 0x4, 0x3f, 0x6b, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x0, 0x9}, {0x3, 0x8}, {0x2, 0x7}, {0x6}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0xa}, {0x3, 0x2}, {0x5, 0x5}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x5, 0x2}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x3}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x8}, {}, {0x4, 0x2}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x16, 0x2, 0x9, 0x60, 0x36, 0x16, 0x16, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7f, 0x7ff, 0x100, 0x6, 0x1ff, 0x40, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x6, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x4}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {}, {0x3, 0x9}, {0x1, 0x8}, {0x2, 0x6}, {0x5, 0x9}, {0x3, 0x8}, {0x6}, {0x3}, {0x1, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x5, 0xa}, {0x2, 0x5}, {0x4, 0x1}, {0x6}, {0x5, 0x5}, {0x7, 0x9}, {}, {0x6, 0x3}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x5}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xf0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x9, 0x48, 0x18, 0x24, 0x30, 0x6, 0x6, 0x1, 0x9, 0x3, 0xc, 0x18, 0x0, 0x0, 0x18, 0xd, 0x6, 0x60, 0x9, 0x1, 0x30, 0x24, 0x7e, 0x16, 0xb, 0x18, 0x6c, 0x28, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x872, 0x8001, 0x3, 0xa112, 0x5, 0x1000, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x1b, 0x3, 0x16, 0x1, 0x24, 0x30, 0x48, 0x3, 0x7e6edc12b645c617, 0x4, 0x18, 0x0, 0x2, 0x60, 0x36, 0xb, 0x12, 0xb, 0x16, 0x36, 0x2, 0xc]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x6, 0x8}, {0x5}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x3}, {}, {0x4, 0x6}, {0x3, 0x5}, {0x7, 0x2}, {0x7, 0x1}, {0x6, 0x1}, {0x3, 0x2}, {0x6, 0x3}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x8}, {0x1}, {0x7}, {0x1}, {0x2}, {0x3}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x1, 0x4}, {0x2}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x5, 0x7, 0x3, 0x90, 0xfff, 0x5]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x6c, 0x1b, 0x2, 0x1, 0x1f, 0x4, 0x30, 0x1b, 0x12, 0x9, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x9}, {0x2, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x2}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x7}, {0x7}, {0x6, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x3}, {0x3, 0x8}, {0x7, 0x4}, {0x4, 0x4}, {0x5, 0x8}, {0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x3}, {0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x118, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0x1000, 0x0, 0x3f, 0x1c0, 0xd2, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x4, 0x2, 0x2cb0, 0x0, 0x32, 0x4]}}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x8}, {0x3, 0x2}, {0x6}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x1}, {0x7}, {0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x2, 0x4}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4ba5, 0x2, 0x4, 0x400, 0x3, 0xdd, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x48, 0x18, 0x2, 0x1, 0x6, 0x1b, 0x24, 0x48, 0xb, 0x6, 0x36, 0x48, 0x3e, 0x9, 0x6, 0xc]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x60, 0xb, 0x6c, 0x30, 0x48, 0x48, 0x30, 0x24, 0x1b, 0x6, 0x18, 0x34, 0x48]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x30, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0x9, 0x5, 0x4, 0x80, 0x7, 0x2d]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x6}, {0x3, 0x7}, {0x3}, {0x4, 0xa}, {0x5, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x7, 0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x1}, {0x5, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x9}, {0x4, 0x9}, {0x7}, {0x6, 0x2}, {0x3, 0x4}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x7}, {0x4, 0x1}, {0x5, 0x4}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0xa}, {0x3, 0x5}, {0x0, 0x1}, {0x7, 0x9}, {0x6}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0x5}, {0x7, 0xa}, {0x2, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x48, 0x1b, 0xb, 0x60, 0x36, 0x1b, 0x5, 0x48, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2c9, 0x95, 0x7, 0x0, 0x0, 0x1, 0x9]}}]}]}]}, 0x540}}, 0x0) [ 870.908252] apparmor_file_alloc_security+0x394/0xad0 [ 870.913459] ? apparmor_file_receive+0x160/0x160 [ 870.918231] ? __alloc_file+0x21/0x330 [ 870.922487] security_file_alloc+0x40/0x90 [ 870.926736] __alloc_file+0xc9/0x330 [ 870.930464] alloc_empty_file+0x6d/0x170 [ 870.934541] path_openat+0xe9/0x2df0 [ 870.938268] ? __lock_acquire+0x6de/0x3ff0 [ 870.942522] ? path_lookupat+0x8d0/0x8d0 [ 870.946600] ? mark_held_locks+0xf0/0xf0 [ 870.950676] do_filp_open+0x18c/0x3f0 [ 870.954486] ? may_open_dev+0xf0/0xf0 23:09:14 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:14 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x11, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 870.958330] ? __alloc_fd+0x28d/0x570 [ 870.962142] ? lock_downgrade+0x720/0x720 [ 870.966293] ? lock_acquire+0x170/0x3c0 [ 870.970271] ? __alloc_fd+0x34/0x570 [ 870.974003] ? do_raw_spin_unlock+0x171/0x230 [ 870.978513] ? _raw_spin_unlock+0x29/0x40 [ 870.982788] ? __alloc_fd+0x28d/0x570 [ 870.986605] do_sys_open+0x3b3/0x520 [ 870.990360] ? filp_open+0x70/0x70 [ 870.993916] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 870.999288] ? trace_hardirqs_off_caller+0x6e/0x210 [ 871.004317] ? do_syscall_64+0x21/0x620 23:09:14 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x36, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 871.008304] do_syscall_64+0xf9/0x620 [ 871.012120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.017400] RIP: 0033:0x4196c4 [ 871.020600] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 871.039508] RSP: 002b:00007f8133c62ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 871.047266] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 23:09:14 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f00000000c0)={0x0, 0xfb, 0x4f, 0x2, 0x9, "e900a4494971a9dd5749d92873ac423f", "d0f9055ca4c5d27c1d76fdc1d9e26641b12ce889ad3d82218f2ed08efdbf8e2f4e429286f4cbf0e72e5d81c9b23232033bbebf0b3e6d27decc08"}, 0x4f, 0x6) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) [ 871.054631] RDX: 0000000000000002 RSI: 00007f8133c63000 RDI: 00000000ffffff9c [ 871.061908] RBP: 00007f8133c63000 R08: 0000000000000000 R09: ffffffffffffffff [ 871.069194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 871.076467] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:14 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:14 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 871.113244] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.118915] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.220215] FAULT_INJECTION: forcing a failure. [ 871.220215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 871.244603] erofs: read_super, device -> /dev/loop4 [ 871.261755] erofs: options -> 23:09:14 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x12, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:14 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x37, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:14 executing program 3: r0 = syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="6ccfdbaf7a555c6547905fb36930697003c2713161d9fc25363c", 0x1a, 0x10001}, {&(0x7f0000000100)="6e01082b46558aa688cbfdddea76bece370c5add8a144d357b0ebfbab85e1d1d9c5c30886d403d632058f06e90ac5e8da7f8fc52c2b87d215b8a1fe42ae443745e9128c67044f24a25d6528bb8c92f5e1362ddd07f01d1a58970cecb7a7b6a8885f49b99bd875e2fd26bf9c683f4e69aba30521445ffec7b672ce854b87dc17855ca9617d1ee9d138c38eb477c037ca3ce217363f4b43bab134dfa498af81fe45c8b", 0xa2, 0x2}, {&(0x7f00000001c0)="5327ae352377260e489ea4a17be47b673857f05345c4ce9d9aab139a2688a3606c5d0682b0582b40b97d58afe26884a10fbd387165b756317f2f35f88098bf02c06ff6044932de6587b52f98947370fc01d791ce1ff78994790c6820a8a28aa0ef906a72777b1569b6b2f2ad6e2fe755e7800e368ceb6f338b0e8d1fab1ac502933d24e2fa98e6", 0x87, 0x71}], 0x0, &(0x7f0000000300)={[{'.\x86'}, {'$,+^\xe9:$'}, {'%.\xaa'}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, ',\',\\\\!.['}}, {@pcr={'pcr', 0x3d, 0x1e}}, {@obj_role}, {@permit_directio}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x9611}, {0xffffffffffffffff, 0x42}, {0xffffffffffffffff, 0xa109}, {r0, 0x242}, {r1, 0x8080}, {r2, 0x810c}, {r3, 0x11c}, {0xffffffffffffffff, 0x8000}], 0x8, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400), 0x8) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) [ 871.268836] CPU: 0 PID: 18596 Comm: syz-executor.1 Not tainted 4.19.196-syzkaller #0 [ 871.272803] FAULT_INJECTION: forcing a failure. [ 871.272803] name failslab, interval 1, probability 0, space 0, times 0 [ 871.276744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.276750] Call Trace: [ 871.276774] dump_stack+0x1fc/0x2ef [ 871.276795] should_fail.cold+0xa/0xf [ 871.276818] ? lock_acquire+0x170/0x3c0 [ 871.311514] ? setup_fault_attr+0x200/0x200 [ 871.315875] __alloc_pages_nodemask+0x239/0x2890 [ 871.320656] ? __lock_acquire+0x6de/0x3ff0 [ 871.324899] ? static_obj+0x50/0x50 [ 871.328524] ? __lock_acquire+0x6de/0x3ff0 [ 871.332771] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 871.337655] ? __lock_acquire+0x6de/0x3ff0 [ 871.342306] ? mark_held_locks+0xf0/0xf0 [ 871.344920] erofs: root inode @ nid 36 [ 871.346377] ? unwind_next_frame+0xeee/0x1400 [ 871.346390] ? mark_held_locks+0xf0/0xf0 [ 871.346407] ? deref_stack_reg+0x134/0x1d0 [ 871.359251] erofs: bogus i_mode (0) @ nid 36 [ 871.363027] ? get_reg+0x176/0x1f0 [ 871.363044] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 871.363061] alloc_pages_vma+0xf2/0x780 [ 871.363084] shmem_alloc_page+0x11c/0x1f0 [ 871.363099] ? shmem_swapin+0x220/0x220 [ 871.363130] ? percpu_counter_add_batch+0x126/0x180 [ 871.363147] ? __vm_enough_memory+0x316/0x650 [ 871.363163] shmem_alloc_and_acct_page+0x15a/0x850 [ 871.363182] shmem_getpage_gfp+0x4e9/0x37f0 [ 871.407797] ? shmem_alloc_and_acct_page+0x850/0x850 [ 871.412905] ? mark_held_locks+0xa6/0xf0 [ 871.416976] ? ktime_get_coarse_real_ts64+0x1c7/0x290 [ 871.422192] ? iov_iter_fault_in_readable+0x1fc/0x3f0 [ 871.427399] shmem_write_begin+0xff/0x1e0 [ 871.431571] generic_perform_write+0x1f8/0x4d0 [ 871.436428] ? filemap_page_mkwrite+0x2f0/0x2f0 [ 871.441099] ? current_time+0x1c0/0x1c0 [ 871.445083] ? lock_acquire+0x170/0x3c0 [ 871.449057] __generic_file_write_iter+0x24b/0x610 [ 871.453986] generic_file_write_iter+0x3f8/0x730 [ 871.458736] __vfs_write+0x51b/0x770 [ 871.462453] ? kernel_read+0x110/0x110 [ 871.466366] ? check_preemption_disabled+0x41/0x280 [ 871.471483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 871.476501] vfs_write+0x1f3/0x540 [ 871.480037] __x64_sys_pwrite64+0x1f7/0x250 [ 871.484357] ? ksys_pwrite64+0x1a0/0x1a0 [ 871.488412] ? trace_hardirqs_off_caller+0x6e/0x210 [ 871.493697] ? do_syscall_64+0x21/0x620 [ 871.497838] do_syscall_64+0xf9/0x620 [ 871.501640] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.506825] RIP: 0033:0x419777 [ 871.510014] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 871.529003] RSP: 002b:00007f7082d57f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 871.536723] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000419777 [ 871.543993] RDX: 000000000000000f RSI: 0000000020010000 RDI: 0000000000000004 [ 871.551383] RBP: 0000000000000003 R08: 0000000000000000 R09: ffffffffffffffff [ 871.558653] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 871.565919] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 [ 871.573199] CPU: 1 PID: 18600 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 871.581091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 871.590449] Call Trace: [ 871.593039] dump_stack+0x1fc/0x2ef [ 871.596663] should_fail.cold+0xa/0xf [ 871.600462] ? setup_fault_attr+0x200/0x200 [ 871.604881] ? lock_acquire+0x170/0x3c0 [ 871.608855] __should_failslab+0x115/0x180 [ 871.613089] should_failslab+0x5/0x10 [ 871.616895] kmem_cache_alloc_trace+0x284/0x380 [ 871.621637] ? loop_info64_to_compat+0x5e0/0x5e0 [ 871.626478] __kthread_create_on_node+0xd2/0x410 [ 871.631232] ? kthread_parkme+0xa0/0xa0 [ 871.635199] ? lo_ioctl+0x1bb/0x20e0 [ 871.638916] ? __mutex_lock+0x365/0x1200 [ 871.642977] ? lock_downgrade+0x720/0x720 [ 871.647304] ? loop_info64_to_compat+0x5e0/0x5e0 [ 871.652044] kthread_create_on_node+0xbb/0xf0 [ 871.656697] ? __kthread_create_on_node+0x410/0x410 [ 871.661710] ? __fget+0x356/0x510 [ 871.665162] ? do_dup2+0x450/0x450 [ 871.668811] ? __lockdep_init_map+0x100/0x5a0 [ 871.673290] ? __lockdep_init_map+0x100/0x5a0 [ 871.677774] lo_ioctl+0xae5/0x20e0 [ 871.681302] ? loop_set_status64+0x110/0x110 [ 871.685712] blkdev_ioctl+0x5cb/0x1a80 [ 871.689610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.694991] ? blkpg_ioctl+0x9d0/0x9d0 [ 871.698864] ? mark_held_locks+0xf0/0xf0 [ 871.702994] ? mark_held_locks+0xf0/0xf0 [ 871.707055] ? debug_check_no_obj_freed+0x201/0x490 [ 871.712057] ? lock_downgrade+0x720/0x720 [ 871.716226] block_ioctl+0xe9/0x130 [ 871.719842] ? blkdev_fallocate+0x3f0/0x3f0 [ 871.724165] do_vfs_ioctl+0xcdb/0x12e0 [ 871.728035] ? lock_downgrade+0x720/0x720 [ 871.732169] ? check_preemption_disabled+0x41/0x280 [ 871.737186] ? ioctl_preallocate+0x200/0x200 [ 871.741599] ? __fget+0x356/0x510 [ 871.745050] ? do_dup2+0x450/0x450 [ 871.748583] ? do_sys_open+0x2bf/0x520 [ 871.752467] ksys_ioctl+0x9b/0xc0 [ 871.755938] __x64_sys_ioctl+0x6f/0xb0 [ 871.759810] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 871.764378] do_syscall_64+0xf9/0x620 [ 871.768255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 871.773452] RIP: 0033:0x466397 [ 871.776658] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 871.795545] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 871.803410] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 871.810663] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 871.817923] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 871.825283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 871.832647] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:15 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 871.915046] erofs: read_super, device -> /dev/loop1 [ 871.920112] erofs: options -> [ 871.935677] erofs: read_super, device -> /dev/loop4 [ 871.943016] erofs: options -> [ 871.952469] erofs: cannot find valid erofs superblock [ 871.966131] erofs: root inode @ nid 36 23:09:15 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) 23:09:15 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x13, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 871.992226] erofs: bogus i_mode (0) @ nid 36 [ 872.013114] FAULT_INJECTION: forcing a failure. [ 872.013114] name failslab, interval 1, probability 0, space 0, times 0 [ 872.029717] CPU: 0 PID: 18622 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 872.037658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.047033] Call Trace: [ 872.049645] dump_stack+0x1fc/0x2ef [ 872.053308] should_fail.cold+0xa/0xf [ 872.057136] ? setup_fault_attr+0x200/0x200 [ 872.061466] ? lock_acquire+0x170/0x3c0 [ 872.065472] __should_failslab+0x115/0x180 [ 872.069690] should_failslab+0x5/0x10 [ 872.073475] kmem_cache_alloc+0x277/0x370 [ 872.077610] __kernfs_new_node+0xd2/0x680 [ 872.081744] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 872.086605] ? kernfs_activate+0x2c/0x1d0 [ 872.090780] ? lock_downgrade+0x720/0x720 [ 872.094910] ? kernfs_add_one+0x51/0x4c0 [ 872.098954] ? mutex_trylock+0x1a0/0x1a0 [ 872.103007] ? __mutex_unlock_slowpath+0xea/0x610 [ 872.107832] kernfs_new_node+0x92/0x120 [ 872.111792] __kernfs_create_file+0x51/0x340 [ 872.116185] sysfs_add_file_mode_ns+0x226/0x540 [ 872.120840] internal_create_group+0x355/0xb20 [ 872.125426] ? sysfs_remove_link_from_group+0x70/0x70 [ 872.130598] ? lock_downgrade+0x720/0x720 [ 872.134738] lo_ioctl+0xf7c/0x20e0 [ 872.138260] ? loop_set_status64+0x110/0x110 [ 872.142655] blkdev_ioctl+0x5cb/0x1a80 [ 872.146526] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.151873] ? blkpg_ioctl+0x9d0/0x9d0 [ 872.155741] ? mark_held_locks+0xf0/0xf0 [ 872.159781] ? mark_held_locks+0xf0/0xf0 [ 872.163824] ? debug_check_no_obj_freed+0x201/0x490 [ 872.168870] ? lock_downgrade+0x720/0x720 [ 872.173007] block_ioctl+0xe9/0x130 [ 872.176631] ? blkdev_fallocate+0x3f0/0x3f0 [ 872.180934] do_vfs_ioctl+0xcdb/0x12e0 [ 872.184800] ? lock_downgrade+0x720/0x720 [ 872.188929] ? check_preemption_disabled+0x41/0x280 [ 872.193926] ? ioctl_preallocate+0x200/0x200 [ 872.198313] ? __fget+0x356/0x510 [ 872.201749] ? do_dup2+0x450/0x450 [ 872.205270] ? do_sys_open+0x2bf/0x520 [ 872.209138] ksys_ioctl+0x9b/0xc0 [ 872.212573] __x64_sys_ioctl+0x6f/0xb0 [ 872.216454] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 872.221056] do_syscall_64+0xf9/0x620 [ 872.224946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.230131] RIP: 0033:0x466397 [ 872.233329] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.252221] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.259925] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 872.267189] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.274550] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.281825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.289083] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 872.304178] erofs: read_super, device -> /dev/loop0 23:09:15 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x38, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:15 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:15 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) syz_open_procfs(r0, &(0x7f00000000c0)='ns\x00') r1 = fork() r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/l2cap\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/time_for_children\x00') ioctl$RTC_UIE_ON(r2, 0x7003) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000400)=""/110, 0x6e}], 0x5, 0x100001, 0x0) openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x100000, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 872.333736] erofs: options -> 23:09:15 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 872.355281] erofs: root inode @ nid 36 [ 872.367759] erofs: mounted on /dev/loop0 with opts: . 23:09:16 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:16 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x39, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 872.448198] erofs: read_super, device -> /dev/loop1 [ 872.463991] erofs: unmounted for /dev/loop0 [ 872.477548] erofs: options -> [ 872.487665] erofs: root inode @ nid 36 23:09:16 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x14, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 872.502494] erofs: mounted on /dev/loop1 with opts: . 23:09:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 872.534255] erofs: read_super, device -> /dev/loop4 [ 872.552596] erofs: options -> [ 872.564311] erofs: root inode @ nid 36 [ 872.575465] erofs: unmounted for /dev/loop1 23:09:16 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 872.581321] erofs: bogus i_mode (0) @ nid 36 23:09:16 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x15, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 872.628149] FAULT_INJECTION: forcing a failure. [ 872.628149] name failslab, interval 1, probability 0, space 0, times 0 [ 872.639917] CPU: 0 PID: 18655 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 872.647840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.657209] Call Trace: [ 872.659831] dump_stack+0x1fc/0x2ef [ 872.663491] should_fail.cold+0xa/0xf [ 872.667313] ? setup_fault_attr+0x200/0x200 [ 872.671658] ? lock_acquire+0x170/0x3c0 [ 872.675662] __should_failslab+0x115/0x180 [ 872.679937] should_failslab+0x5/0x10 [ 872.683759] kmem_cache_alloc+0x277/0x370 [ 872.687934] __kernfs_new_node+0xd2/0x680 [ 872.692106] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 872.696879] ? __mutex_unlock_slowpath+0xea/0x610 [ 872.701751] ? wait_for_completion_io+0x10/0x10 [ 872.706616] ? kernfs_next_descendant_post+0x19c/0x290 [ 872.711922] kernfs_new_node+0x92/0x120 [ 872.715905] __kernfs_create_file+0x51/0x340 [ 872.720330] sysfs_add_file_mode_ns+0x226/0x540 [ 872.725004] internal_create_group+0x355/0xb20 [ 872.729579] ? sysfs_remove_link_from_group+0x70/0x70 [ 872.734766] ? lock_downgrade+0x720/0x720 [ 872.738932] lo_ioctl+0xf7c/0x20e0 [ 872.742482] ? loop_set_status64+0x110/0x110 [ 872.746890] blkdev_ioctl+0x5cb/0x1a80 [ 872.750783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.756163] ? blkpg_ioctl+0x9d0/0x9d0 [ 872.760056] ? mark_held_locks+0xf0/0xf0 [ 872.764107] ? mark_held_locks+0xf0/0xf0 [ 872.768160] ? debug_check_no_obj_freed+0x201/0x490 [ 872.773183] ? lock_downgrade+0x720/0x720 [ 872.777330] block_ioctl+0xe9/0x130 [ 872.780951] ? blkdev_fallocate+0x3f0/0x3f0 [ 872.785271] do_vfs_ioctl+0xcdb/0x12e0 [ 872.789161] ? lock_downgrade+0x720/0x720 [ 872.793313] ? check_preemption_disabled+0x41/0x280 [ 872.798345] ? ioctl_preallocate+0x200/0x200 [ 872.802756] ? __fget+0x356/0x510 [ 872.806205] ? do_dup2+0x450/0x450 [ 872.809732] ? do_sys_open+0x2bf/0x520 [ 872.813639] ksys_ioctl+0x9b/0xc0 [ 872.817090] __x64_sys_ioctl+0x6f/0xb0 [ 872.820974] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 872.825553] do_syscall_64+0xf9/0x620 [ 872.829343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 872.834536] RIP: 0033:0x466397 [ 872.837720] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.856720] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.864429] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 872.871694] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 23:09:16 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x800, 0x3f, 0x3, 0x1cfd45dd, 0x1ff, 0xff9], 0x7, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/180, 0xb4}], 0x4, &(0x7f00000002c0), 0x0, 0x48002}, 0x40000) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0xd011) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f00000002c0)) [ 872.878961] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.886317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.893588] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 872.971504] erofs: read_super, device -> /dev/loop0 [ 872.975427] erofs: read_super, device -> /dev/loop1 [ 872.983373] erofs: options -> [ 872.992956] erofs: options -> [ 872.994056] erofs: read_super, device -> /dev/loop4 [ 872.996896] erofs: root inode @ nid 36 [ 873.014581] erofs: options -> [ 873.017997] erofs: root inode @ nid 36 23:09:16 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 873.029701] erofs: mounted on /dev/loop1 with opts: . [ 873.035484] erofs: root inode @ nid 36 [ 873.039924] erofs: mounted on /dev/loop0 with opts: . [ 873.054160] erofs: bogus i_mode (0) @ nid 36 23:09:16 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:16 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:16 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x16, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 873.100709] erofs: unmounted for /dev/loop0 [ 873.116886] erofs: unmounted for /dev/loop1 23:09:16 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:16 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000040), 0xc743, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r3 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="513a8e7d78267b869df02e6653633391ebbd623a5e4cc2c58efccb32a644524b925bdf8511acb3e1ec1231552afa5434b6a832d234e7d69b3233c1ff7008508425f5dfc93747e2ccbac1be018df94799304be62d6150dd2a473a76f9900aa945758292085379a5cc9c8bb4a0a2425397af3b922ad51b8e4787116e2d8a2e9253e6a2d73b362bf7cbe19a99288337d154e32e16f817b333b343a72982e4fd3c62369e25fe9ecc5d8e34e3498e6fc5089b02d1bb52028bf68bedd4145809d262a48be5702bc2cc9384d1aee26fa486", 0xce, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r3}, &(0x7f0000000240)=""/236, 0xec, 0x0) [ 873.206050] FAULT_INJECTION: forcing a failure. [ 873.206050] name failslab, interval 1, probability 0, space 0, times 0 [ 873.228757] CPU: 1 PID: 18690 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 873.236684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.246054] Call Trace: [ 873.248681] dump_stack+0x1fc/0x2ef [ 873.252345] should_fail.cold+0xa/0xf 23:09:16 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x1d, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:16 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="e01ed9fe6272a471d9dada93836bab5903baad4b109ca29cb1d2613fe3d3ed7880641bba028403f817ecfd9272b6af8d0760b9", 0x33, 0xfffffffffffffff9) [ 873.256182] ? setup_fault_attr+0x200/0x200 [ 873.260521] ? lock_acquire+0x170/0x3c0 [ 873.264524] __should_failslab+0x115/0x180 [ 873.268788] should_failslab+0x5/0x10 [ 873.272877] kmem_cache_alloc+0x277/0x370 [ 873.277135] __kernfs_new_node+0xd2/0x680 [ 873.281331] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 873.286402] ? __mutex_unlock_slowpath+0xea/0x610 [ 873.291277] ? wait_for_completion_io+0x10/0x10 [ 873.296032] ? kernfs_next_descendant_post+0x19c/0x290 [ 873.301311] kernfs_new_node+0x92/0x120 [ 873.305327] __kernfs_create_file+0x51/0x340 [ 873.309729] sysfs_add_file_mode_ns+0x226/0x540 [ 873.314390] internal_create_group+0x355/0xb20 [ 873.318961] ? sysfs_remove_link_from_group+0x70/0x70 [ 873.324160] ? lock_downgrade+0x720/0x720 [ 873.328310] lo_ioctl+0xf7c/0x20e0 [ 873.331865] ? loop_set_status64+0x110/0x110 [ 873.336266] blkdev_ioctl+0x5cb/0x1a80 [ 873.340179] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 873.345585] ? blkpg_ioctl+0x9d0/0x9d0 [ 873.349465] ? mark_held_locks+0xf0/0xf0 [ 873.353512] ? mark_held_locks+0xf0/0xf0 [ 873.357570] ? debug_check_no_obj_freed+0x201/0x490 [ 873.362574] ? lock_downgrade+0x720/0x720 [ 873.366726] block_ioctl+0xe9/0x130 [ 873.370385] ? blkdev_fallocate+0x3f0/0x3f0 [ 873.374709] do_vfs_ioctl+0xcdb/0x12e0 [ 873.378679] ? lock_downgrade+0x720/0x720 [ 873.382927] ? check_preemption_disabled+0x41/0x280 [ 873.387936] ? ioctl_preallocate+0x200/0x200 [ 873.392342] ? __fget+0x356/0x510 [ 873.395828] ? do_dup2+0x450/0x450 [ 873.399359] ? do_sys_open+0x2bf/0x520 [ 873.403239] ksys_ioctl+0x9b/0xc0 [ 873.406682] __x64_sys_ioctl+0x6f/0xb0 [ 873.410562] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 873.415145] do_syscall_64+0xf9/0x620 [ 873.418949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 873.424137] RIP: 0033:0x466397 [ 873.427323] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.446219] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:09:17 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 873.453932] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 873.461200] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 873.468466] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 873.475732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 873.483087] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 873.524126] erofs: read_super, device -> /dev/loop4 [ 873.547362] erofs: options -> [ 873.549062] erofs: read_super, device -> /dev/loop0 [ 873.565327] erofs: options -> [ 873.571395] erofs: root inode @ nid 36 [ 873.580111] erofs: root inode @ nid 36 [ 873.600471] erofs: mounted on /dev/loop0 with opts: . [ 873.601050] erofs: bogus i_mode (0) @ nid 36 23:09:17 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:17 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x250, 0x0) 23:09:17 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:17 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000003c0)="8f954a14c126cf75a52d3e9282ca42e49a9786202875f1c7062d325fa040b46a3258c6fcb2f20db9a12327b113bc6975c0147a3e984b0690b8fb9d35196b9b3b4f7ca621aec90ec5ac0582400c51621f688272bbe185892c5f337c6644218f64f93b6498ebec7fcf42e00779695b8c8d5c8fbac8e9d0145d137b4e2f525939a55d99b296bbd4c1674bfe7a3c6c803d6ae93381454c83a52cb735af32dee50487016f742dc03c656ffa", 0xa9, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={'xcbc(anubis-generic)\x00'}, 0x0, 0xfffffffffffffe5c}) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, 0x0, r3}, &(0x7f0000000080)=""/49, 0x31, &(0x7f0000000140)={&(0x7f00000000c0)={'xcbc-aes-ce\x00'}, &(0x7f0000000100)="c9412704cb2bca07a40193405118200968f0fcacc489c60a5ac719b86504ec44810119b2e10407f5b79e946aa3daf4047464", 0x32}) [ 873.689201] erofs: unmounted for /dev/loop0 [ 873.699323] erofs: read_super, device -> /dev/loop1 [ 873.708225] erofs: options -> [ 873.714655] erofs: read_super, device -> /dev/loop4 [ 873.723120] erofs: options -> [ 873.729842] erofs: root inode @ nid 36 [ 873.738374] erofs: root inode @ nid 36 [ 873.767568] erofs: bogus i_mode (0) @ nid 36 [ 873.768045] erofs: mounted on /dev/loop1 with opts: . [ 873.833582] FAULT_INJECTION: forcing a failure. [ 873.833582] name failslab, interval 1, probability 0, space 0, times 0 [ 873.845758] CPU: 1 PID: 18736 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 873.853667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.863033] Call Trace: [ 873.865653] dump_stack+0x1fc/0x2ef [ 873.865789] could not allocate digest TFM handle xcbc-aes-ce [ 873.869316] should_fail.cold+0xa/0xf [ 873.869339] ? setup_fault_attr+0x200/0x200 [ 873.869360] ? lock_acquire+0x170/0x3c0 [ 873.887227] __should_failslab+0x115/0x180 [ 873.891463] should_failslab+0x5/0x10 [ 873.895379] kmem_cache_alloc+0x277/0x370 [ 873.899549] __kernfs_new_node+0xd2/0x680 [ 873.903696] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 873.908461] ? __mutex_unlock_slowpath+0xea/0x610 [ 873.913298] ? wait_for_completion_io+0x10/0x10 [ 873.917956] ? kernfs_next_descendant_post+0x19c/0x290 [ 873.923220] kernfs_new_node+0x92/0x120 [ 873.927202] __kernfs_create_file+0x51/0x340 [ 873.931601] sysfs_add_file_mode_ns+0x226/0x540 [ 873.935843] could not allocate digest TFM handle xcbc-aes-ce [ 873.936285] internal_create_group+0x355/0xb20 [ 873.946671] ? sysfs_remove_link_from_group+0x70/0x70 [ 873.951887] ? lock_downgrade+0x720/0x720 [ 873.956060] lo_ioctl+0xf7c/0x20e0 [ 873.959622] ? loop_set_status64+0x110/0x110 [ 873.964133] blkdev_ioctl+0x5cb/0x1a80 [ 873.968025] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 873.973377] ? blkpg_ioctl+0x9d0/0x9d0 [ 873.977253] ? mark_held_locks+0xf0/0xf0 [ 873.981327] ? mark_held_locks+0xf0/0xf0 [ 873.985376] ? debug_check_no_obj_freed+0x201/0x490 [ 873.990379] ? lock_downgrade+0x720/0x720 [ 873.994587] block_ioctl+0xe9/0x130 [ 873.998292] ? blkdev_fallocate+0x3f0/0x3f0 [ 874.002674] do_vfs_ioctl+0xcdb/0x12e0 [ 874.006655] ? lock_downgrade+0x720/0x720 [ 874.010812] ? check_preemption_disabled+0x41/0x280 [ 874.016081] ? ioctl_preallocate+0x200/0x200 [ 874.020486] ? __fget+0x356/0x510 [ 874.023938] ? do_dup2+0x450/0x450 [ 874.027472] ? do_sys_open+0x2bf/0x520 [ 874.031361] ksys_ioctl+0x9b/0xc0 [ 874.034805] __x64_sys_ioctl+0x6f/0xb0 [ 874.038764] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 874.043348] do_syscall_64+0xf9/0x620 [ 874.047154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.052325] RIP: 0033:0x466397 [ 874.055516] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.074404] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.082184] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 874.089526] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 874.096779] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 874.104034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 874.111291] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:17 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:17 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:17 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='syz', 0xfffffffffffffffb) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)="cdeb05d0135a20ab667ec7668dcce607d01d5b4bacff4765749d22925a216f3d0783b6b607635c2fd9c0f446828c81360c05e52284d91b1586978f856fed509410acc2ada07d4e5a4353ebbf575ccdc6f337cdc2fe31babc0ec42a24a7cc242b69e46bed76f0f1b7994597306170e7334ae407041e3212fc2f092ef091a2b88847a57a41f086b5e05678e4026dab2f1123a9503aeb209526eecaade40965efa89fcecea61bc5019e8e05347d92d3ae998c51fe34f23fc7b83437902f5bb6c7815fd0308d6118f22c6c83ee23df88ddf71347e3311225b0c8ad603727737febacb406f32c3f0f0b0a73963966dc160e8edc189a4de5d443", 0xf7, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:17 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 874.201460] erofs: read_super, device -> /dev/loop0 [ 874.215855] erofs: options -> [ 874.219893] erofs: root inode @ nid 36 [ 874.228538] erofs: mounted on /dev/loop0 with opts: . [ 874.234824] erofs: unmounted for /dev/loop1 23:09:17 executing program 0 (fault-call:0 fault-nth:15): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:17 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)='syz', 0xfffffffffffffffa) add_key$user(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)=')\x00', r1) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\xcc\x00', r2) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:17 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x41, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 874.319180] erofs: unmounted for /dev/loop0 [ 874.399575] erofs: read_super, device -> /dev/loop4 [ 874.405179] erofs: read_super, device -> /dev/loop1 [ 874.411300] erofs: options -> [ 874.415696] erofs: options -> [ 874.431250] erofs: root inode @ nid 36 23:09:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x42, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 874.448092] erofs: root inode @ nid 36 [ 874.449133] erofs: mounted on /dev/loop1 with opts: . [ 874.465821] erofs: bogus i_mode (0) @ nid 36 [ 874.486463] FAULT_INJECTION: forcing a failure. [ 874.486463] name failslab, interval 1, probability 0, space 0, times 0 23:09:18 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', 0xee00, r1) r2 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='ns\x00') fstat(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0xfffffffffffff001, 0x2, &(0x7f0000000180)=[{&(0x7f0000000440)="2d8c9e33eef733b966de0da1b58fb8239d85dd7d8600b6fd302daa192122437b317f0301e737dee139359596f6890ffb7be285bb601e24d497f89b3d2bc06a29375986e04a0e823dc83cfcf9aefe1588383f0334552fc25225413c1f5c6ee1b42fe40050deb36041ad765a64833e23566470be29010a0250fb5f3c8d686f696b327b390ba7b97b0fac8b09cc4173a1df9d640025801f6c99f8837875d2d3b70933002052fb860567bcb07c9c0b0a28ba2d5d763caeed5181454d6e8fd0358af7859f886d6a625be2a0bcc3b2", 0xcc, 0x8}, {&(0x7f0000000100), 0x0, 0x7ff}], 0x2222440, &(0x7f0000000540)={[{@shortname_lower}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'wlan1\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_lt={'uid<', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r7}}]}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./control\x00', 0xee00, r9) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000004280)={0x0, 0x0, 0x0}, &(0x7f00000042c0)=0xc) chown(&(0x7f0000000000)='./control\x00', 0xee00, r10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004080), 0x80040, 0x0) [ 874.513065] CPU: 1 PID: 18770 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 874.520992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.530361] Call Trace: [ 874.533095] dump_stack+0x1fc/0x2ef [ 874.536759] should_fail.cold+0xa/0xf [ 874.540589] ? setup_fault_attr+0x200/0x200 [ 874.545026] ? lock_acquire+0x170/0x3c0 [ 874.549029] __should_failslab+0x115/0x180 [ 874.553335] should_failslab+0x5/0x10 [ 874.557152] kmem_cache_alloc+0x277/0x370 [ 874.561327] __kernfs_new_node+0xd2/0x680 [ 874.565491] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 874.575129] ? __mutex_unlock_slowpath+0xea/0x610 [ 874.579973] ? wait_for_completion_io+0x10/0x10 [ 874.584648] ? kernfs_next_descendant_post+0x19c/0x290 [ 874.589959] kernfs_new_node+0x92/0x120 [ 874.594044] __kernfs_create_file+0x51/0x340 [ 874.598455] sysfs_add_file_mode_ns+0x226/0x540 [ 874.603116] internal_create_group+0x355/0xb20 [ 874.607769] ? sysfs_remove_link_from_group+0x70/0x70 [ 874.612975] ? lock_downgrade+0x720/0x720 [ 874.617125] lo_ioctl+0xf7c/0x20e0 [ 874.620682] ? loop_set_status64+0x110/0x110 [ 874.625090] blkdev_ioctl+0x5cb/0x1a80 [ 874.628967] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.634348] ? blkpg_ioctl+0x9d0/0x9d0 [ 874.639536] ? mark_held_locks+0xf0/0xf0 [ 874.643593] ? mark_held_locks+0xf0/0xf0 [ 874.647643] ? debug_check_no_obj_freed+0x201/0x490 [ 874.652675] ? lock_downgrade+0x720/0x720 [ 874.656831] block_ioctl+0xe9/0x130 [ 874.660477] ? blkdev_fallocate+0x3f0/0x3f0 [ 874.665313] do_vfs_ioctl+0xcdb/0x12e0 [ 874.669192] ? lock_downgrade+0x720/0x720 [ 874.673333] ? check_preemption_disabled+0x41/0x280 [ 874.678362] ? ioctl_preallocate+0x200/0x200 [ 874.683382] ? __fget+0x356/0x510 [ 874.686858] ? do_dup2+0x450/0x450 [ 874.690397] ? do_sys_open+0x2bf/0x520 [ 874.694284] ksys_ioctl+0x9b/0xc0 [ 874.697725] __x64_sys_ioctl+0x6f/0xb0 [ 874.701621] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 874.706190] do_syscall_64+0xf9/0x620 [ 874.710000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 874.715198] RIP: 0033:0x466397 [ 874.718378] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.737626] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.745332] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 874.752611] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004100)=[{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)="c1cc8b7c3286466ab332c318165f5524d43aa6bf1e6c238f07aea2d12544a175ab2dbb766468216aa68cef2416772beb48695670ea0044c0e8bd55216d5318b7d8c5cee2c02c56d317dbed03b365b2f35d77839c78677f4fad3d4076a7dede0919ed628c46dd371ba4e5f5b93a1b79191cace3c2915b4f766264f66c1bec9bb50137659ab075a370bbee3aedf0e0ef5c90f6fbb013f99994869c763667", 0x9d}, {&(0x7f0000000180)="a04909e9f4bf208b0ec39eaeee8173005ae653754393", 0x16}, {&(0x7f00000001c0)="9193bc254d917226052969080b72973f7e9b21b04c7adbd832687176d8309535ded434a3ee77eaba0cc30c720e38bcc52b03daa9253379d1d0009b2e90a674b1f986ed8d2dc810a7eb881e33", 0x4c}, {&(0x7f0000000240)="97aa5d1c05b6f00f822b91a995bc8edc7b1f9a69c882c38622b19c3f1ebdae9e7f2b3b7506f875e83eec7c32492d483bd48babdfbc88a07879bbf10a7b48858c7499da6a366ece517af13ebef3976462adcd3b2dcfa783d3215e8ef53218cb464d2bae62997d138aea039443fdeb0d3f6ca5ce4d129e569a501203f8bde7a0dc06a9070b95eb9ee397ab9bc60849fa19322dbe5e0b7f2106b14fba8ff50fa0ebf32fe77741bbe9380b84a0ec703d25b7a9ad954028430d2226a1e0036041afdc9c8ebc9f51b2ac3f443f878b14011bef2c00a1b0a61a", 0xd6}, {&(0x7f0000000340)="384f669d479a4ea34d501a192c3921e92305a8a54432afe5fb17f4f2e1b255af975b1a3420c4ecb9e3eef5371f50aa4ed07c68287793c0da59dcec3234f7c97eedf001696ca10e21d2441177a04040652833b0e3cb739c99f9806878f5376334657db399f4a891b146381d913d65c978368bd07e0a3a53a982de23e6860b901e056d70443a02179571e5518d24cc570dc71dac6155a8d2f4effdd4a73bf2beb7a57af9ac1f56b4cb5bcae5c53d899e03a783eef902a8899a5ccb745eaea276a8658d5bf25e1d11f41f3172c3bd737e7d35ec33", 0xd3}], 0x5, &(0x7f0000000500)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r1}}}], 0x38}, {&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000005c0)="b5dbb6fbd7bd83307072b049950c668adab37e3f511ab7683cd4023d26c4c5ae89611e84fabc725b977333cba84e0b8325fffa3d92f5d68a071fb2bbfb7329fcd2821b7e0c5a22dead7d19e26cc8db968782e6b9f76678cdaa998186a1bdad97a769be845d43961bf4d0338ad352564323554b6befd2b8aaa38bd85e6198567d60ef20f5f6b53b5f954ab4f00530c44d7d04bb81674127ac88597c3be459992b6b7bb5c809f9bb853aac8c43ed941f9ebf4390fd8e7048a03c656c3251746970094d168b0a0647b930806d8099769b2209cd52652a4085c5991464c840", 0xdd}, {&(0x7f00000006c0)="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", 0x1000}], 0x2}, {&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001780)="1b94be6b3c6cdc6f89c661a8020d28c32ddddfe449b5d7811e0d2849f74cd838b82318df23b98fe4cf18c49cdffe5ddeae7c256cf1e82931571b28bdb5122b3ca783d64bb8de02660ca3d65caeae2cd935a22956dc8adb91005d094ec7a1eb04dfe118146443e8ef2c328d253736c127305dc43dc8e8f025d3eaf7e321437adda313d87e6cc531c6b9f30dd920d0edbd4f4eed460f6ddfbe8e2e0a225f22", 0x9e}], 0x1, &(0x7f0000001880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r2}}}], 0x20, 0x85}, {&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001940)="a2f784f7169c367db3aee03c3c5974006ad3dd25e64fad12fe5ee8b652b316a0b58c", 0x22}], 0x1, 0x0, 0x0, 0x2000c894}, {&(0x7f00000019c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000001a40)="6f3c23090bac3cdc5ddac17a83403ef72ea474528211a9bb50b2c07a2d52a6a71abfae76d1b0a9ec3eadb711396f7e543e8a7b156beb9cf0ec28dda00d1ff020bc365ad0a5aecbdc87e17a0ae821e1d98222896ebd442f47fb5bef2bb2e4ac7d40bd8d056de427cb906d0c77b69e095067b0992708bedfba9c44dd815f700580856e8361c15475574a9abb113cc520f6ed749d0adb8e7a712042143becf348a17f33568065a4d9e11f4413bc8dde5f75002ea68e06e6d37acb71ec98adc94aaf4467fb3d20ee28289bb28cb7278afaae22158fa41846ae1a46813d5fc562d0af32793ca9d30ad22b366b87165fe9a187667970e84bf83823f1", 0xf9}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="921bfb306da255e4246a634d66d395c492319d85b0be723a04cc4808a0593641a603c2846dd935df0b2362d1f28aa68975cc27d06da1a81892603fbe5310ecd8830c3c3b580de2f41a11886c1924475b623200f518724083bf51f740f86ae9546c0631fd1a1dac83acadab3e237d47c6cbe617fb4a46fa92020afea53e39e63c29404459ef23e849d6398616abad4376aacf43fe9912f46c958df5016256ec7bfa067fb8", 0xa4}, {&(0x7f0000002c00)="c95d1bb79e2672f5d3e9ee9511132f5f534c8312eb85a7035d2193c4e586fbbddc97ff8366a67f34c558677e0e30cba262cd4eaa2b9c8c36aa47e6ad5695f922f51512eac337fd031db7b4b5ef19f875d998da08bd373d12bdfe4c6128a4c2a8bb0fa80c64e5d87ff62878d117027a9a67ee002568cf56c98ff009eb3842652d7a544c742f1833202ede06b7337d742615d8ac0e1c28b6fcbfb26508c18eb12ff5e8239c1a258909e3ece2a0f54c30e90b7471c7e28753acc49f86f49cf225d7a136511de8ac98acfeae9c39de437d898d8260ef98bc7c5f5bfd69a6a6f01773209b3256c85e7e64f2bb3676ab2c5a8cd2c746", 0xf3}], 0x4, &(0x7f0000002e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x80, 0x810}, {&(0x7f0000002f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f0000002f80)="6b7b4a871fb4bad233a096be7e7be429d76762958bf32741c6b5ee710611e9663d658190e8c3bf00e971057f968c892e1cde49c09fb720c2ff9ba87ffc3b631f06bf4def50a7cd9ec54e779b419d27edb9540a56262d69cd46fb418dffec92fa733b8f026062af3ba3c2857202bfb4f978158be07989709752946fabc5388a023567e6f869cb40541b57aea872a8140751", 0x91}, {&(0x7f0000003040)="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", 0x1000}], 0x2, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r10}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r11]}}], 0x38, 0x20000000}], 0x6, 0x20000000) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) [ 874.759888] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 874.767157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 874.774416] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:18 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="ca23ee8c2fa35f2ed07adfc9aaee031338bff9a1dc948828d6d9cb843a9a978de0f5bc39097d567995984d0cf509ac06dbad71e31157f342691ee76a28002d225fe3a77586e1528ed65bd59f6cf8fdad4273cf81dc1be44138cff2e513fe2542dffd5650d0d013d6e8da1b7ff247365aa183c5fe18fbf3564da20f7da271adbd4864472535d25b1ae5f0f3f2b981678fa14dac1e288b2bb84192b29fc1b6aad7e6e597900c3ee7f0227638c127220d1d2f85e6420176339d5042d5db00f0025ef9de95b8366cf4aa4b1634abf0d686018e9b68ffc49c325459962b82e7cb", 0xde, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) add_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000440)="b52b17a02844cf639e4fd143d636ec72a088336126899985e51d3c4924420b6af8e44386bc9b29b52ad2d9d88888d9f4c333395054ede52da23fc25d02cbfa6941dd649de8972fe1134ef00774434dfa50e13009b694d318236c2a0326cd451e1664ced2664a7c67d2dcd626f8c7750beb8a1018773920a7f561f168159075ebc3f5bdea23133f46ad8da6953938f3bc9d0357367ba8648606fa3e031f6bec22c61c4d23178b9483020ecf9c2d4ed8355385c35ece723cef1588b35c", 0xbc, r3) add_key(0x0, 0x0, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000080), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f00000003c0)="1d2e1ad28b5a8b3024dd41765c9f8c72c371b21453dbb419b94cec915a3bbdd8cc00e99c2086e51785c50b360e9feb26f0d4806c11c836329b72e540a248d196fbd75e140a242e08679dc1c54f26c596396ab90956406ec6e5816083b6e4af2f1f38509580f707692ea5fd9be4913023dac85bd33d4c374b0ecf5487d1", 0x7d, r2) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000700)="a6b7d4559c9bd1a3bda7eff3f1db7f8232a1148c4ad38f5cfc40229bf75df6ab559224e571ed74b6cb0caaa0cc8a37c205fa93ce12437809b1860c654b5503534bcca04f95d8490d03a1d40aefdaf27c95476ffef817fdb5b2644d054fb26f1255626d7271c1bf1400b98cace63e460120fd0f38bbe38d20679d7425d09b35932c9bbb14489aec8640bb35a2b642a297547d9658072b0200b38c3420ebd00296162842a36939aac446f530c40424d0d6e61ba48d80f132c455c706281e6088be83e2741d6d53786e44556fed39d66f95b95ec8ab7d1af4847faa472e208a0500f51aa1f05c7f2f54bcb8bf6ad62bbe67e281", 0xf2, r5) [ 874.812717] erofs: read_super, device -> /dev/loop0 [ 874.817789] erofs: options -> [ 874.837481] erofs: read_super, device -> /dev/loop4 [ 874.843170] erofs: root inode @ nid 36 [ 874.847220] erofs: options -> [ 874.858856] erofs: unmounted for /dev/loop1 23:09:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) fcntl$getflags(r0, 0xb) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000440)=""/116, 0x74}, {&(0x7f0000000240)}], 0x6, 0x3, 0x1f) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x7f, 0x39a, 0x5, 0x6, 0x60, 0x5, 0x4}) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r1}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 874.874892] erofs: root inode @ nid 36 [ 874.879287] erofs: mounted on /dev/loop0 with opts: . [ 874.889762] erofs: bogus i_mode (0) @ nid 36 23:09:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:18 executing program 0 (fault-call:0 fault-nth:16): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:18 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfa03, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 874.988013] erofs: unmounted for /dev/loop0 23:09:18 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) 23:09:18 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r2, r1}, &(0x7f0000000180)=""/43, 0x2b, &(0x7f0000000240)={&(0x7f00000001c0)={'streebog256-generic\x00'}}) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)="ac65398d492885e52755cc0d92f1e975b0c47e9a260b24b6a8ab444feb4bfc251f64ffa02d3f2152681298965b337b6c39e7894fff7b454c4749417190f80cdbebb1cec0c2383da00c17d46d583ad261a8557819a028d1e60374138b643e6ce77b3a6e416ade93245fc6ed3eba656633c7867af8615259c69652fc9e83e92b84b9c29700775603c32a53096876a14bda43276b2503cb8110c0871e1dec75a8de53b4f73be98a8ac51f2cd2d5673875c74ac0cdd20807f6adcac327fa05a8818d297ec8dcb11ef25bd380d030177298721e557c800d84f6300e2ecf4e1eb807fccc92a88612f1b0c81cec7479fdbcaa886a5a5b3951587af97e", 0xf9, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x44, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 875.062091] erofs: read_super, device -> /dev/loop1 [ 875.067158] erofs: options -> [ 875.071781] erofs: root inode @ nid 36 [ 875.076036] erofs: mounted on /dev/loop1 with opts: . 23:09:18 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:18 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x45, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:18 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4411, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="dd5a926393b998ec908953310529e359b9f88088a7af18b3823f07f4f5afb3233667f4b0a2309130815f6e092aca1fc7216321616a075e1fb0d2bc1e75bcab9c2ba62a34198fd595dc4dfb2a8251baac09fd90caf13eba15d3d8ed80330c6cbe52eba3686995e48e67b51a44bf307ae3ef1071974da2c501a540e01011b172cffb3e49f017daaa4d7f583818d1e64544a22741cdbe4fc0aabfc96f97b221ddf3ffd13405271423e469eb11983214d845a92eaa07de03d04b721ba7a59e508d192ece749df9388d0a47cc8821c0284b1ad906b00b3b3cc09a01b394f3e8", 0xdd, 0x5}], 0x200004, &(0x7f0000003680)={[{@fat=@usefree}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x9}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@uid_gt={'uid>', 0xee01}}]}) write$binfmt_elf32(r0, &(0x7f0000003700)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x3, 0x2, 0xffffffffffff8001, 0x3, 0x6, 0xfffffffc, 0x3b1, 0x38, 0x35, 0x3f, 0x3, 0x20, 0x1, 0x9, 0x6, 0x6}, [{0x1, 0x0, 0xff, 0x7, 0x726, 0x3, 0x2, 0x7}], "4e223511f9fe356fe4184ab8fe5ced76fd4156b5fcc18c57b064f96914d744dd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x978) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="9372b78b77c9be43dbd67c5cb61d60b79a4d66920d5f7fb8279c62262317767d7c562744af446786176335f7dc60ab588db4191ea9dfb6dc2575556192e393a23bc2fcadd7a0532778d477077d7650683db718f3768625ebf99515e3c8b3f07ba30dc5183797b19a4f18c60f45f498c9156d95d6520064d1f53a0290b79e93d742a31d747941da32f18ddefa8acafecf1d148748ea4fd19a7defecd323e02b6a6ab6eed6240b7c83021e5e57bf96bc23adb3ee93610a289bc80fcf37f21d7aa94099cea82c64409438d7279e1b75c39c042b76624ed3dd5cfa60", 0xda}, {&(0x7f0000000000)="c24890", 0x3}, {&(0x7f0000000040)="e6654b27", 0x4}, {&(0x7f00000001c0)="675203cebf51b9b12e09e78f7b69a57b61ba531c668279e59b49a2bb0720209252b59d7ace3145622623b46f66c122f2f83f975babf58bb3ec132d7fb2cd1daac57ee4f5b3a11c6769e9043373aed621dabb381502b1fa1b01d0e7799bb5794d29a8f50544472331efee879c7956482425a794668722a5fbd5b9bf8daa060dbdfad4a45836f714a9b618eff8e6366ed2767471532389f8367c41f0af03709ccf7df1da4d1006f8d31484b6fb2cbc19374404deb2d6a00c6c11db92fe94d963c188ac5c131858b77d", 0xc8}, {&(0x7f00000002c0)="94fc6687eedb0601ad8ab5c04a58dc8caacb460810f3b1c2fb329ad37a1fddaf0d662d5fca69de4202b37fe99fb34472c9041891422b4ce25bf28bc0", 0x3c}, {&(0x7f0000000300)="a09981c2a76641e6121276b7a4a7efe616763b1fd5bbe9d4591e49bf30507cef81876eb2b5be04f6d72ed0a57b7526cff90b7409f87fbfdbc9c751b11ef162d91f36ce8d5c79f0ad096a081353af39c6e988f6173a785c8e4186d49dcb9b74a423cd666dae94e22e38a8dfd8b9dbbc67b845e0542dc581dbc4f41d21700c8de3183f45d1a26fe41deb1bd5b24d3ced665d577ffe99a3c953d51dabb13e11542520a6", 0xa2}, {&(0x7f00000003c0)="f1300fd56def4cc8f581ec240a23a491913fc27a2f1a1458255f8862b7ea8d6f79a450604c8ebb667c9675d5ed2f4c7e4efe20fb9977a0225620abddf17cc1800ba0aa4f55d2753df1ee991f894058bb3dc5f3a940d2d09470e89d94446382087d154f2d0dc65c41ae8c48ae1d1d83e105be017dcf36236a933b50f03e11042ea4f3dbf1d4c78a59fff9a853c11ca689dc5d1f6b9acbd4d1f1d774a2d7686e6a5d8fc39d12574de322d8c72447a9cf56c4ccf37bc9bcc1c482b9215664f29b929c33b0aba7084e8367e417602aee8700004a80a806d9243ae0ff70d71e0702462504183670ea", 0xe6}, {&(0x7f00000004c0)="20ba63cb0c637c67eec8139fbcf219b726f29ad105551f745e0269d8cea6cc40e23c9ebb5c0576109a261419b5137db8e308899d606bc9b638d3280151c00f2dde1f160cbef74a694d49a89643a3641c95856dbc249d1ef5c370741e", 0x5c}, {&(0x7f0000003340)="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", 0x1a5}, {&(0x7f0000000640)="3ed2cef3f26fef391f9c4e69f28d314b91fdc84622c2cd9c10f75e5bde60672f8739647e4991e05283f2ddecbabe41e748988d20cf61812bc3b7b8e70a480ac10dd2e9e8ac24c0c93e99afb7f0d7eacfc2bcd3c19439049c2f", 0x59}], 0xa}}, {{&(0x7f0000000780)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="a74c8f6e4eb8777d0525b5cca60ca999ad8cf211fb32f612aab936e665e1f5eeae245c22ca8ea12af877c6e6d87fe5ecdec68f4f73967f29ea56f49928ad3d15ebf4a404580ea996b26b4b576262967fc03898a9aa27bb746780a32463bc7a4c7d4671d553d0e5b9935c12c99ee038d6052b72ff5a879a00af2da96090c0efdc77925b74d4746d2c7adc012cae47918cf9022659452ff78c290be4d9e6d9a8182c50efaaf6bb556c", 0xa8}, {&(0x7f00000008c0)="64c86db2eff71eed5774c36bbf5ac855f79ad92171624806451dc3e241d9329fe9b2715cc69ca16367627314ed8158a4e721ec9efc", 0x35}, {&(0x7f0000000900)="d2c8370f23b98d23a2ebbd2481a366e2bb45bbf17d01f78e318921029566e98ff5627ddba914f7b7e151267d977f46e4a0ca2f1a900e022230c4066875e2ff0298a646784fa3aafbda8de5c2d42b5570d7bef3ac696d89a138491ee562c65db3592b1e1a249ba663b44830323483af646bff1493c4abd3c2012e87d131843814415f651637e55a3b444682d62ec0027cbc13fac0df6b290783e82e7d50d90cf0eb600090", 0xa4}, {&(0x7f00000009c0)="d88867824050452bfb2a0c66f83583f64d8efaa4aeca2cfa598bf8130d9bd22e0306885f85fdb28d00e82742e355ee3fb404445190ba892f542d48a51cd59cc7dd4c2ab58b3213", 0x47}, {&(0x7f0000000a40)="c0adac230f55354071f0e7f608de866871679c1f87", 0x15}], 0x5, &(0x7f0000000b00)=[{0xb0, 0x10c, 0x4f, "54041f206a31e0e74f3f77da19a19952e5307ec696086a9375b96c81d34e3899eafc40506e71f6df18aa0a9b58b13a630306000000adb38d36abd6af475d364f3a726cb7ae4e79fbd9c7841e0a45a93aa9556a2cf73b1fb15c3651741037141c180c9cccbedc500f05d01db224779299e960a0680dd8207ebe774a10745677c0f01c40a0253b7185521d24474ab524b9563110df02cd1b5b17695c6382"}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000003500)="0035a4982c44e92f5439b6fdaaa0ce4daff090236f03c5a304b3b488741b755266c203ac0243236353b80cfc76b2000952e47d2795e5fc2eafb5e3a6cc0245286e0c199203c46e2a9b892ed926ff1081e487037de0f92e37cc9869f3c62b6cb37d505e2d0b5edb0ef3fc769e62508a68e88e1c21d7063d96eb9d8560f41a3a2719a0b779cddc7bfe8945b59011cc8ae5f2c1ca3793817b126c0f6d9ebbbc3fb831e2b8a9dd6ada7e07d35781f0dd5d145875d3d01d62bc82cadafbc3aa323886f34df9d0869beb2cb4f2ece12914cfeed4928b07581f65b3e8e23e07a19b0c9164e566ab677c69533edf7db32471af0210dd01aebaf7e075215ca39a9252bfad3b05388bbab2e241988c9311f591441e5a92b6efde7cb0c6ef33032e25b6c06b95d694461d0960f6234dbac0abb447109061f9ffef1b79fabd8c433e0e490f468d73cdd6b0dd04bd987dc23e0c6da873cf07b8346c8b4bf2257b2bb95051547b94f59cf02bbb6fb36b868122acfdcb", 0x16f}, {&(0x7f0000000cc0)}], 0x2, &(0x7f0000000d40)}}, {{&(0x7f0000000d80)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="85eb2c9d5a5663ae18cabe47f648c08aeff217bda22cea26ef0d482df4974f7c1ef0e1691ce4a1914ba7e546777dd58a1983d3506267df3b33e4eca84177f57f8c4fba13cdd015b246d27587762529e9c639eff891d4e2989259f2bcccd7a196ea318b35b89769cea4743506b8ec656232d8f07dc57faa7ca1f26701207705b33f322aa507f0da432b6d0a0b2d3202ac0d80f0d9bb74", 0x96}, {&(0x7f0000001ec0)="fdd65ef33a0714b30ae3e8168e90d12b4d9646ac414f37b424525ac80e4946ba731e3a835990bae006fa71fda6c0feaefa2d83369bfa4b2c9e7c42ce32e3a495cc42f73bbd1185bdcd", 0x49}, {&(0x7f0000001f40)="24af62f090edeb41253c6a72bade8d7a00f862be8c7f00610e9ba5edf006eea58eea7ee3e5188c1cff893dcaf12f4fa328b26686b0ed5c985245cedb61dcab0ec25bf29da33f27fda799d2e22b90788264b61af19969bb197d33c6d7b31d0605583d014d838e1d97dd2c27f45321164f5080eb136a7ed803081043132c1c800d128981c4742514cec6fa85ec032a4cb890a863329fda032a37169fd677b018f7265b958770cdb982d9069d3190703de2033a60616c9f7ac393911cf7838217db1951c9c71b5ced34010b386787cd6f48a477b9b3c85d265098a32f4eed51258d73fe5a2a3c8ebffe0ed5229ee09786fd", 0xf0}], 0x4, &(0x7f0000002080)=[{0xa8, 0x100, 0x7, "661a7a75df0c49a5e3ef325ce4f39f1bbaeb87dbbdc2debeb5f10c2518d878bcbf6590ff6386e98e3ab1eba2918f5e95ea25f4b7e7be1325b32524c10a403ba9e58e64a2990d94f8b389c965e2882ea82e824bb54165be90ad500b504ca257ebebbd53a96ee13e5aa992db72c973cec99aa0d6c641ccffc5716e78f573b21320f17c6db2fe98b5d2b27421c493ff352be9bf"}, {0x30, 0x104, 0x0, "431875cd6c47305921f30b18e65181ffc12f22a9c71380d6628e797318"}, {0xc8, 0x102, 0x401, "8033d6f416a0ec7d5855e77b14ebbdb2e423bad728c5d597f669f3bc8607b1721b2ee8cf1512b6fbd6083f6b17a437f09f4d913eae3604c11554c9859e76d870cea86c165d045657bf08f56c218eab57280a1f04d72a3a7098fd8304d17918ace80f740561335c5ccdfcca168874d9461df908c8be0a7b5d71965807e7cbb4b596b841a8eac01e0c36deb8ebb4c147462ed9d6f0ef47dbeba056f2b81fa7fb1732f5ab7bef7647bbbf5c357966be4b0c2c6ebe5a0b"}, {0x38, 0x10a, 0xffff, "b217528d6d02333ea3426f94a41f198548a22f4ac766936f6111d7f78108ead61ccf339fc1"}, {0xc0, 0x103, 0x8, "e774138d75d3ffceb5c699e340b0cd6bbdd7af120790afeb5d9f4ce60e02f38d8ee3c9ebb1aff81fb02f918471688926743f765848cea6efbf5b84fa943f7516af14a5ba08ecf94d2855d14db958623d00cd77101a4bc0873ca1f3a5c50668a1b139d13b48e6d9f196724f438a0c483be0751f44660d39d83572d820cbf24c75f0d25fb16d9a56fad78babbb4ef0a3fc7234705a88c7c7cce09efb522ddf04146fef17a0e913fb9572a611"}, {0xd0, 0x11, 0x5, "c5234b2bce8bbb10dd40fa64bdf5f1ab9d88148f20337b1c9b096521d2f6bba86f45ad3106774c4efaacf7167f584a663d764f77426fe789d1d3363e2dad7efc2bf8afa9eec1188f9322adc36da866ca1f3ef00ee7481230c49a981ac9b26d3707ae72972894627de18693ad8ad774837609a55f0fb36dd78b70a68c27989b9e26d0bcb2b065bd6e3015805feece82f9627ac432d8d05166db70cf38a320bda0596ef90e58777b15ccd839a08f46eb28297c38e0cf8fdf490215605732"}], 0x368}}, {{&(0x7f0000002400)=@l2tp6={0xa, 0x0, 0x80, @mcast1, 0x8, 0x2}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002480)="dd51fafde80c00488183ac0cf5ad93ea266595dbec1281029936fecb8ef5f3c4d7cb56dd843e9783b6461852ed32ae063566611181c95eaed994ef5dbbc4cc0ec0e15659a74dcd6af60dd1e4715c1cfe92a40fe3ab3fccfe83667ac10aa39cd05335c661adad3899f250fd955bae2028d33d921b7c6d07846eeb72d39b4944b3d0af3b1dc4f56354e2b99686acce447d8b9682e6a5463770c842a7258b4e8c681bbd1048d8d23defc611e40bd99db3f5dd6c3090bf126f3acae8ed36502211769466b21d6b360a9db69924", 0xcb}, {&(0x7f0000002580)="1dd698558657434b319590a02823bfa73bb72be23895114fa24e7cd815dad82db69de23d90a443211d1d57277e37f60073399e48c56c44641ce1a7c27d9269f426700b5267aa128dc709357bd0d561c6fb4c4288a395a864", 0x58}], 0x2, &(0x7f0000002640)=[{0x12, 0x111, 0x3, "07165679e06a9038aec43c7539137da24286a00dc5bc126d25d093e497010c57472b07fe3a044c07a8701c176bee36a082171c9954c64b335a5f06f5caaf574a3550c54d21adeee6703b6c7765fb396733700c41c44a91379ea22605559111a99fdbbae60ef26ace25a6e04960"}, {0x20, 0x10e, 0x4, "f0d92b029ada63c7b427c7311c"}, {0xd8, 0x10e, 0x8, "b0a26ebd6d906c66c3989724123aa10ab713758b149cd5bdf48932a6fc6b4d9a32eda020f5b9699c3e13c04b530ab999b276e620e9c426c5867e75e98c9a8d2952e31ccbdcbcbc4327e431e85bbde26ab3c8245b13e716442286b06b3a468c4c7b21a04e324a6762a374df2ed94210191ac24325ef4f4bc5ca929e0afc62e5bae1a0c43982fea93ff156a79d8c7334d70b8390061f7929538e21de51ac5fc1e8fb0940532c5080bdb159fd5603073dd183118d94981e338ac416c25052cbcc950635cf73e849"}, {0xe0, 0x10f, 0x1, "5d4ae8fccfbb1b593aeff2636e34c537e86a51eca824dd1bc34f3f82c3dedc042977a7e3849a85465bcffb7cc8d3ed10292962d4ffcb0ff42ad2bc0a6f71587959cc1fdbc4f1ff58d99633e069c60b5145d4d86aee687f8f537b3600ea7af6e31c1892e7586681ac44649f0ed7bc2576a9fa4fb85ed88b37a99158129c8177fa59e2a32e3a1787a4305e3553f9d151491dd1345a66b09daf68e13a098810dee2d3d364eb7fc8db088ac734876a916df352b0d393c73ecc24daa46bcbc09a44224a85e4e657a056d1be294ca7"}, {0x10, 0x88, 0x10000}, {0x28, 0x10a, 0x9, "50a61bcd1b3585fb8e87bac3515049c67519ba"}], 0x290}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002900)="ff8344ec0a970d030d4b25ecc9b494a17505101823872a6e9fd0890a94772dc75fbf86470635d28e2f9558ebe22929236cbf5b992fcd12a5ab8ec47dd861d07ab62e01719282455a", 0x48}, {&(0x7f0000002980)="212178feda9b0e2982d56d91e18c3c2b1d893b918f783859e6be571cfae4b09251fd5aea5d782216", 0x28}, {&(0x7f00000029c0)="8adfc0d02eea38478e9c1d90a1a8b21fed2bd0c180d50205c89806e0a198d948289cc79f10bfa77d4a3dc882478e9bdb085d925c48f73b6d92399b883774d5ab10cf74f45aa4e9651a1c4b128891232a1f6a38d1bc57ed0352a2508ef7654ec397066750c1a213e37eb5ef11a764f330c545c2d3dbdc38454472818cc519056ae635f0f44e18829729706db69306616a6488b83e", 0x94}, {&(0x7f0000002a80)="fa36", 0x2}, {&(0x7f0000002ac0)="80a6d1c578aec847cd24", 0xa}], 0x5, &(0x7f0000002b80)=[{0x100, 0x0, 0x100, "0334e7064ea5b16ce609ef30dbcf83c1a96ba0db8220c2c363d7005123323f27e2b06326e73c0681cd3e28897a29d16371258a3f3ead3ef89d2fa1cadbca890be638e2758081dba78dacf63f864cd158b72e191e399dfae5f42650bd0287a355c86f7ea25d979a587595c248168ea4c14ce4f6309b55104f13f053a1f5bca36401bfff57e170a9ec0d9aec20dd35fd4bb177cbc10d6f9c73b26ab9c829625c4cc12695aa7ebb59ea44b69ad319b9f02f95e225ade4fa632b79dd481c7aa9958bd82ab814dceb430b78b63c4d97791d398c79e8ae26ac8a14d5f8e73dba9adc7417f38b22f0a4f420247355bc155c4c"}, {0x30, 0x118, 0x8, "ebf40ffd93ae9e6e7a67c6ce37ef245796c8980a77f3c8f02420"}], 0x130}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002cc0)="511d3fd7f79d9ef62e672e633de41414ad9e756ade24f65d4e3cab256b81f28b644b2c97c54fbe2c25ba2bb444be561c245a106aac5393a05e65aad5400823adc27e846f1ca5bd3be0583c8af9f89415c238f568914b202d2a40f8588c990bebf7db1da791b6c6e2c4e3d0cba97e92248082342e32e8c0ed3c508ed01aca8faa65b7e7058dc84f480b", 0x89}, {&(0x7f0000002d80)="2f85e7be46f59888fa91468409b532c70e5d019c64a4c5a4db3ac6319aabbeb3c49cfb04c206e5e41ab955325675f5dd5e32d2a754bf99e0f3c1", 0x3a}], 0x2, &(0x7f0000002e00)=[{0xc8, 0x111, 0x7, "b1aff5815d7c0da86d032c85444f93bff4e619a3f3ec5fc82569821718de83fa774e5451b252f81cb6e0de5417875b0d5ade53d0003668923ab49f932ef4385230cb46b5218e58d79b19d1ea757e11262ea98864f858855c922feb27c450ddf9f4de93735435cba473c7d642a217b6080f109c56c88764b45086acee2c9df35a54f3de4e29dbbcdb5d4dbc5c6c15135c28a8b92dd0905028345f0d664a1481554679f427ec6d04227e0aa21bc1c54b5effb73ecff9d0"}, {0x78, 0x28, 0x9, "2a9bc535157a0e0e04f7202c4f5ab503ab13ca6167d2975fadbb53489c86ab27cb4613c413afec5863fba1877eba1532ad5766864b406c94749dcedd3f738b40bb1a91e6229769a34932190dfbb7a7f3268c64c7ee713cdf22ac78e516ae86199a"}, {0xb8, 0x110, 0x8005, "0cd92c7b6a67d508faec570a53d4f3877718df49e9e48e3fc5c9758b1631f2ed0c3f5da9adb1497b903af65eca3a27837baf71721e2d60e744fa0613b860db8ca27d01eebbfc9adb63eb2dd86bb0c18003d88d7be8408c8ec9b0363f49ddca51f192d47d900a1f184161d1090a8b7e3b4c9e167c0d1e7593b55199cb9540181b9638214da698b9663c60bf3f1bd6b60b5234de2d5e7a871119cf6f1bbb25145ad994215f"}, {0xa0, 0x113, 0xff, "6b4d7d84f6fb039f636d52ca727c544c090e7f4b8ef796f0915737306e8c922d89486cf765c17d713016f6a6237b7a2a962c877fed69f54a16cde1dd5e3cd12dab5380c05c25ee9ac1c98bd5e1a4c687b3ab474931d74d075f8498bdfb46df175d620c82f15f44333acc93abcaecb4e6498c8dda560a2e3d23c4b3f695cde2a1e28e9ddab7561f4ca8"}, {0xb8, 0x112, 0x0, "5ed1e753c9695c13e596b3d729e1f32f54e6d8b37abab703b534780a9fd3d3d9c3e47a7b402d5cdf2a779c0d9697a6b463d567a638e92cd74f1a31ba28c4b1976e016acea57fdd16e9a88f35f6af098c56184b0b803c7f03d6f624e5c6a7a913669213cb0dbd08fb0c0e1579073827bdfd1bb0fb01511a354050a42d1542991e0ed41e3063adcab7674bc8c3ce4131fbec4fb075a193ad18fd7bcd8c496b58413ca937"}], 0x350}}], 0x7, 0x24001000) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) [ 875.153667] erofs: read_super, device -> /dev/loop4 [ 875.155938] erofs: unmounted for /dev/loop1 [ 875.163372] erofs: options -> [ 875.171894] erofs: root inode @ nid 36 [ 875.182007] erofs: bogus i_mode (0) @ nid 36 [ 875.222522] could not allocate digest TFM handle streebog256-generic [ 875.235277] could not allocate digest TFM handle streebog256-generic [ 875.253897] FAULT_INJECTION: forcing a failure. [ 875.253897] name failslab, interval 1, probability 0, space 0, times 0 [ 875.275598] CPU: 0 PID: 18820 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 875.283623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.293079] Call Trace: [ 875.295693] dump_stack+0x1fc/0x2ef [ 875.299354] should_fail.cold+0xa/0xf [ 875.303260] ? setup_fault_attr+0x200/0x200 [ 875.307611] ? lock_acquire+0x170/0x3c0 [ 875.311605] __should_failslab+0x115/0x180 [ 875.315857] should_failslab+0x5/0x10 [ 875.319673] kmem_cache_alloc+0x277/0x370 [ 875.323853] __kernfs_new_node+0xd2/0x680 [ 875.328020] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 875.332806] ? __mutex_unlock_slowpath+0xea/0x610 [ 875.337667] ? wait_for_completion_io+0x10/0x10 [ 875.342372] ? kernfs_next_descendant_post+0x19c/0x290 [ 875.347667] kernfs_new_node+0x92/0x120 [ 875.351658] __kernfs_create_file+0x51/0x340 [ 875.356081] sysfs_add_file_mode_ns+0x226/0x540 [ 875.360773] internal_create_group+0x355/0xb20 [ 875.365384] ? sysfs_remove_link_from_group+0x70/0x70 [ 875.370587] ? lock_downgrade+0x720/0x720 23:09:18 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 875.374748] lo_ioctl+0xf7c/0x20e0 [ 875.378296] ? loop_set_status64+0x110/0x110 [ 875.382717] blkdev_ioctl+0x5cb/0x1a80 [ 875.386614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 875.391979] ? blkpg_ioctl+0x9d0/0x9d0 [ 875.395899] ? mark_held_locks+0xf0/0xf0 [ 875.399977] ? mark_held_locks+0xf0/0xf0 [ 875.404053] ? debug_check_no_obj_freed+0x201/0x490 [ 875.409080] ? lock_downgrade+0x720/0x720 [ 875.413357] block_ioctl+0xe9/0x130 [ 875.416975] ? blkdev_fallocate+0x3f0/0x3f0 [ 875.421298] do_vfs_ioctl+0xcdb/0x12e0 [ 875.425199] ? lock_downgrade+0x720/0x720 [ 875.429466] ? check_preemption_disabled+0x41/0x280 [ 875.434524] ? ioctl_preallocate+0x200/0x200 [ 875.438939] ? __fget+0x356/0x510 [ 875.442399] ? do_dup2+0x450/0x450 [ 875.445938] ? do_sys_open+0x2bf/0x520 [ 875.449820] ksys_ioctl+0x9b/0xc0 [ 875.453269] __x64_sys_ioctl+0x6f/0xb0 [ 875.457157] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 875.461751] do_syscall_64+0xf9/0x620 [ 875.465556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 875.470736] RIP: 0033:0x466397 [ 875.473927] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 875.492833] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.500631] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 875.507899] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 875.515171] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 23:09:19 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x46, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 875.522439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 875.529794] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 875.544438] erofs: read_super, device -> /dev/loop0 [ 875.549492] erofs: options -> [ 875.554037] erofs: root inode @ nid 36 [ 875.559218] erofs: read_super, device -> /dev/loop4 [ 875.565072] erofs: options -> [ 875.568358] erofs: mounted on /dev/loop0 with opts: . 23:09:19 executing program 0 (fault-call:0 fault-nth:17): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 875.574947] erofs: root inode @ nid 36 [ 875.583784] erofs: read_super, device -> /dev/loop1 [ 875.595962] erofs: options -> [ 875.606760] erofs: bogus i_mode (0) @ nid 36 [ 875.619998] erofs: root inode @ nid 36 23:09:19 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="af6261e52656f64da44469eec5ef9b552c0aaaec5bbe05", 0x17, r3) keyctl$get_persistent(0x16, 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:19 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:19 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "44233c1c9c6ff78070483afc1278f52567dd165c41f2775f0fadb61a799624089b19fb1d91fd8ab34f72cfa5e63fac27fc026bdb1de64ac663418e2c6b99035b", 0x22}, 0x48, 0xfffffffffffffffa) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, r2}, &(0x7f0000000200)=""/229, 0xe5, &(0x7f0000000340)={&(0x7f0000000300)={'tgr192-generic\x00'}}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) [ 875.643315] erofs: unmounted for /dev/loop0 [ 875.661152] erofs: mounted on /dev/loop1 with opts: . 23:09:19 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x47, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:19 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 875.773897] erofs: unmounted for /dev/loop1 23:09:19 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x48, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:19 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)="766ebee809e4d5110fa93a2c6e8a8040da0148a38640aec8c868781f117f9818112d744f489a6fe6a7f0985fcbe427d2634c85b6215dd9814f960454af4cadc4629a41", 0x43, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r1, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r4 = add_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000340)="8b7f836fd8c025d86280ce5f462b74485256241896e84f401ddbbc635d641fa05dc7948b0e", 0x25, 0xfffffffffffffffb) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="494ab5a637b717616d91acdffb75ba262c27603298dd4247883b9f3cc5ad5b632cb09897c4720bcf802d67a35b6467adede62d26d4b1ea1db131f32044281f55b2d45b80c4adc4c54bc0c79e1a51cdd8de95b351ab858a05b21d75be5a795756be5897a516d709e17d2dbe27da4a9f16eb1d5bf3c55c3893a787fc06c2a0670c55235b733d90f92d26028829b368c41093ac37d0158c7f795c8cb76ae2a3cb2eb6a1be9584e8f9a981d77d1a081c7fcdbb014c537bf540d9455edcc37163eb926a0c2166ff5876eb629aa9f85504fb892cdb711283a38c3ccd7ec5e6c87e8d7e9134ff1701690b3b570dd1f99132c99577dc3c", 0xf3, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000600)={r3, r4, r5}, &(0x7f0000000640)=""/45, 0x2d, &(0x7f0000000700)={&(0x7f0000000680)={'wp512-generic\x00'}, &(0x7f00000006c0)="1e7d91af91e4545c85a68eb3a222682efb9da6ea7a12288c06ceb8d2e26693aa1a12d9fa45e66308e3cf35729ea94016dac29a0aec96abe3", 0x38}) [ 875.833838] FAULT_INJECTION: forcing a failure. [ 875.833838] name failslab, interval 1, probability 0, space 0, times 0 [ 875.848815] CPU: 0 PID: 18862 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 875.856739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.866109] Call Trace: [ 875.868722] dump_stack+0x1fc/0x2ef [ 875.872374] should_fail.cold+0xa/0xf [ 875.876201] ? setup_fault_attr+0x200/0x200 [ 875.880548] ? lock_acquire+0x170/0x3c0 [ 875.884533] __should_failslab+0x115/0x180 [ 875.888760] should_failslab+0x5/0x10 [ 875.892549] kmem_cache_alloc+0x277/0x370 [ 875.896687] __kernfs_new_node+0xd2/0x680 [ 875.900839] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 875.905697] ? __mutex_unlock_slowpath+0xea/0x610 [ 875.910553] ? wait_for_completion_io+0x10/0x10 [ 875.915228] ? kernfs_next_descendant_post+0x19c/0x290 [ 875.920514] kernfs_new_node+0x92/0x120 [ 875.924486] __kernfs_create_file+0x51/0x340 [ 875.928883] sysfs_add_file_mode_ns+0x226/0x540 [ 875.933550] internal_create_group+0x355/0xb20 [ 875.938136] ? sysfs_remove_link_from_group+0x70/0x70 [ 875.943339] ? lock_downgrade+0x720/0x720 [ 875.947660] lo_ioctl+0xf7c/0x20e0 [ 875.951203] ? loop_set_status64+0x110/0x110 [ 875.955613] blkdev_ioctl+0x5cb/0x1a80 [ 875.959486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 875.964838] ? blkpg_ioctl+0x9d0/0x9d0 [ 875.968713] ? mark_held_locks+0xf0/0xf0 [ 875.972848] ? mark_held_locks+0xf0/0xf0 [ 875.976926] ? debug_check_no_obj_freed+0x201/0x490 [ 875.982086] ? lock_downgrade+0x720/0x720 [ 875.986240] block_ioctl+0xe9/0x130 [ 875.989877] ? blkdev_fallocate+0x3f0/0x3f0 [ 875.994204] do_vfs_ioctl+0xcdb/0x12e0 [ 875.998099] ? lock_downgrade+0x720/0x720 [ 876.002248] ? check_preemption_disabled+0x41/0x280 [ 876.007461] ? ioctl_preallocate+0x200/0x200 [ 876.011864] ? __fget+0x356/0x510 [ 876.015326] ? do_dup2+0x450/0x450 [ 876.018871] ? do_sys_open+0x2bf/0x520 [ 876.022779] ksys_ioctl+0x9b/0xc0 [ 876.026234] __x64_sys_ioctl+0x6f/0xb0 [ 876.030217] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 876.034796] do_syscall_64+0xf9/0x620 [ 876.038589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.043763] RIP: 0033:0x466397 [ 876.046970] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.065877] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.073576] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 23:09:19 executing program 3: r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='}\xfd\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, 0x0, r0}, 0x0, 0x5d, 0x0) [ 876.080843] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 876.088118] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 876.095374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 876.102634] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 876.135534] erofs: read_super, device -> /dev/loop0 [ 876.149271] erofs: read_super, device -> /dev/loop4 [ 876.167013] erofs: read_super, device -> /dev/loop1 [ 876.170696] erofs: options -> [ 876.172660] erofs: options -> [ 876.180458] erofs: root inode @ nid 36 [ 876.182076] erofs: root inode @ nid 36 [ 876.197191] erofs: options -> [ 876.199298] erofs: mounted on /dev/loop0 with opts: . [ 876.208652] erofs: bogus i_mode (0) @ nid 36 [ 876.219018] erofs: root inode @ nid 36 23:09:19 executing program 0 (fault-call:0 fault-nth:18): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 876.237928] erofs: mounted on /dev/loop1 with opts: . 23:09:19 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) add_key$user(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x0}, &(0x7f0000001440)="7636cc40ca3190efbbe5e71fd5dd752a0e228aae0e65d4db3cf30d04c7f9af6fe6b63523247260e9afd19469bc35489f62df2bc58eb6932c2dcadd7dd8ebdaaa3486d8501b837cb0383ec5f0d6c8f8a990040fb8a4667edae643225f816bbfeeed64d4f594732ada48bcb67b621abe0a003c78241b3aec3bdfb0ed9e3375114c008989b685948f716b10a8b9552155da65f5444d54fa74d9d7f8624a37746c4c88688046fb2031d869d8877494d1607e", 0xb0, 0xfffffffffffffffc) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "ad300749ac3af296d1ed3a7bf1b1490fb43550ccab6ea8f3ae0f586ee027d2ce82e6e0c3c0a3f882f7694ecba140c7a1d39e35ca409db34031add40866a9d7fa", 0x36}, 0x48, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0}, &(0x7f0000000180)=""/11, 0xb, &(0x7f0000000300)={&(0x7f00000001c0)={'sha512-neon\x00'}, &(0x7f0000000200)="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", 0xfa}) add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="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", 0x1000, 0x0) [ 876.270880] erofs: unmounted for /dev/loop0 23:09:19 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x49, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:19 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='syz', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r0}, &(0x7f00000002c0)=""/108, 0xb, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'user\x00', 0x20, 0x3}, 0x2d, 0xfffffffffffffffd) add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000001600)="ed235c7e564784ab2748a7281ebd6ec451677c9def68a8204ae6e47865d41589e622a62488b024138c1ef4ebb8aad41ef5bb8fae1601b98bb8fe326799519082f6e773fd5fe00357a6e3db3b97b5258bb3e36afd05f8f7af", 0x58, r3) add_key(&(0x7f0000000340)='big_key\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="558a0bbc48dbd30fbb0c9c2fdc30f90281933d1ad8b5ff6d1a717f67e228d63dd947451b777f9005e27884a58d9c72bb42fdec5f3afa9a992b2cee133cfe5cbbf99cc73890f09b0230b7cb011c1b221797751f37fb3faa1cbd22109b18560136e507b9a30be6c3b8049acc695cd292106d5f38e59ae49befdb836c8f41e713582d7ecd70649216b113a87c87bd4bbde31fe0e7d2dbe144f456a7d6ce537d037504bf949532199a7fcd9bc51a20f1a1a1e6d53bbeeb05739ace30cebbcc7b1c1d4ea13978a1b9879b3d213967cfc886f24756a2", 0xd3, r3) 23:09:19 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 876.312338] erofs: read_super, device -> /dev/loop4 [ 876.317414] erofs: options -> [ 876.349460] erofs: root inode @ nid 36 [ 876.357875] erofs: bogus i_mode (0) @ nid 36 [ 876.385136] erofs: unmounted for /dev/loop1 23:09:20 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:20 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)='^%,.\x00', 0xfffffffffffffffe) 23:09:20 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:20 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000080), &(0x7f00000000c0)="91731b3e3de28decd9412acb7aaf17045f744955ef747125", 0x18, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:20 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 876.482309] FAULT_INJECTION: forcing a failure. [ 876.482309] name failslab, interval 1, probability 0, space 0, times 0 [ 876.498065] CPU: 1 PID: 18902 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 876.506010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.515367] Call Trace: [ 876.517955] dump_stack+0x1fc/0x2ef [ 876.521576] should_fail.cold+0xa/0xf [ 876.525526] ? setup_fault_attr+0x200/0x200 [ 876.529923] ? lock_acquire+0x170/0x3c0 [ 876.533889] __should_failslab+0x115/0x180 [ 876.538116] should_failslab+0x5/0x10 [ 876.541916] kmem_cache_alloc+0x277/0x370 [ 876.546051] __kernfs_new_node+0xd2/0x680 [ 876.550183] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 876.555054] ? __mutex_unlock_slowpath+0xea/0x610 [ 876.560133] ? wait_for_completion_io+0x10/0x10 [ 876.564968] ? kernfs_next_descendant_post+0x19c/0x290 [ 876.570226] kernfs_new_node+0x92/0x120 [ 876.574197] __kernfs_create_file+0x51/0x340 [ 876.578587] sysfs_add_file_mode_ns+0x226/0x540 [ 876.583242] internal_create_group+0x355/0xb20 [ 876.587806] ? sysfs_remove_link_from_group+0x70/0x70 [ 876.592988] ? lock_downgrade+0x720/0x720 [ 876.597130] lo_ioctl+0xf7c/0x20e0 [ 876.600658] ? loop_set_status64+0x110/0x110 [ 876.605135] blkdev_ioctl+0x5cb/0x1a80 [ 876.609104] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.614454] ? blkpg_ioctl+0x9d0/0x9d0 [ 876.618324] ? mark_held_locks+0xf0/0xf0 [ 876.622373] ? mark_held_locks+0xf0/0xf0 [ 876.626418] ? debug_check_no_obj_freed+0x201/0x490 [ 876.631525] ? lock_downgrade+0x720/0x720 [ 876.635790] block_ioctl+0xe9/0x130 [ 876.639448] ? blkdev_fallocate+0x3f0/0x3f0 [ 876.643810] do_vfs_ioctl+0xcdb/0x12e0 [ 876.647717] ? lock_downgrade+0x720/0x720 [ 876.651848] ? check_preemption_disabled+0x41/0x280 [ 876.656847] ? ioctl_preallocate+0x200/0x200 [ 876.661259] ? __fget+0x356/0x510 [ 876.664718] ? do_dup2+0x450/0x450 [ 876.668250] ? do_sys_open+0x2bf/0x520 [ 876.672142] ksys_ioctl+0x9b/0xc0 [ 876.675586] __x64_sys_ioctl+0x6f/0xb0 [ 876.679455] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 876.684030] do_syscall_64+0xf9/0x620 [ 876.687834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 876.693002] RIP: 0033:0x466397 [ 876.696191] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.715084] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.722812] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 23:09:20 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="95e44be0803bea4343705a74c8a2a2481d0e59b71aa0ea64e30ada4a7f146e1eae43", 0x22, 0xffffffffffffffff) [ 876.730074] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 876.737325] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 876.744578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 876.751827] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 876.792664] erofs: read_super, device -> /dev/loop1 [ 876.797753] erofs: options -> [ 876.801256] erofs: read_super, device -> /dev/loop0 [ 876.829791] erofs: options -> [ 876.835554] erofs: root inode @ nid 36 [ 876.845431] erofs: root inode @ nid 36 [ 876.855190] erofs: mounted on /dev/loop1 with opts: . [ 876.866926] erofs: mounted on /dev/loop0 with opts: . [ 876.916957] erofs: read_super, device -> /dev/loop4 23:09:20 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:20 executing program 0 (fault-call:0 fault-nth:19): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:20 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:20 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="7ed9bb13d5fef25e441297ae7eecd27a26885b9b2d37a660d00b2a5927d0515711981be88cdaf2786bf56dde5072335aa2d5bb2ed9af40403399abd52e36097e58fce265a1b65bec36b7fa8a2a4358c912bdfa7ec36b2347ffbd0b405b34d4", 0x5f, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r3, r0}, &(0x7f00000003c0)=""/84, 0x54, &(0x7f0000000340)={&(0x7f0000000240)={'sha224-avx\x00'}, &(0x7f0000000440)="21fc1c038cb20585ac4bbc3908ae44f214da82f7f99aa59923534840d785b1ffd7ebf0e5c77d6ee462a4f8dfd151fbb31ee5836521c986b0978b34f24ac02bdd5c25b00fab0b820ada6d303274fdfc50ae55ad75accfccd764c9bead324536a47c324e37256764b102a342ac9bbdc7d55b02c55481cc3785eeb78bebbad63c0f68c7847a5c8fd09aa9e988b79353df5b8c291e9110a8b72158503252dc8d54500a5f2fdc3c4853c356a27327db", 0xad}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r5, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 876.938765] erofs: unmounted for /dev/loop1 [ 876.947812] erofs: options -> [ 876.958091] erofs: unmounted for /dev/loop0 [ 876.987658] erofs: root inode @ nid 36 23:09:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x507]}, 0x8, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000002c0)={0xfff, 0x2, 0xff, @multicast, 'veth1_to_team\x00'}) preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x0, 0x0, 0x1, 0x4}}, 0x26) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x2, 0x0) r2 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='#+)\x00', 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r3}, &(0x7f0000000340)=""/4096, 0x1000, 0x0) [ 877.011413] erofs: bogus i_mode (0) @ nid 36 23:09:20 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r1, r0}, &(0x7f00000002c0)=""/115, 0x22, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="e6c55101e67b63142217cd53e6a99c66aca90570600ff3f3487d559a0fb44b1025af862ad2c8edabbc8282d90db768d41374bea2a8851584838759241777bb307dd3473939eab590290d982b624a42da676214c84244e26d41ce890b8e11cd4cac72261fe9ecf1903e31cf57483e90bbb1430de27d17d56288c00315bcdad56a2c83f471e5c5ea4944ae019236ce6aec95938ac97bde969357cb355fccad1d9f4ed91d11558a05a1abe79786f223bc905ccffee39f0e61d482fabe7ffa20ccd343e826fcfca80c6028974582fd6eea5e041426533af65dd31e1acc4ee8fca4eae13514bb71fa4404990bd2820b646c", 0xef, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r1}, &(0x7f00000000c0)=""/62, 0x3e, &(0x7f0000000180)={&(0x7f0000000140)={'rmd160-generic\x00'}, &(0x7f0000000440)="542e1b4c6ca99c1533779949100c6261f1c1bc2fe69a80800c566de031c773acc5d2d46f8846820adcf041177d34141a22ecb952b13af38842a37bbf25cbd2d59fb1e9115b07a725b4fb437c366c1429fa9bebfac5d6c1df41a737564642960f65dcb333e80d67d7bccf01393f83708fee101cd6b95dcc1fb6b802c069990b3ac2e58163ac5404444357865bc6ae56b0e693435bff4eec5be53e27adc61ee28267289245523954ae3e36d5fc5fd71924da41bdfc60934d7fc468b8c03db578549f5968188e4a36d0c018b9650a34a43db3dd90d423b8f2e1e992a751b2b09047d7e5dc2037b944bb97bb39f87e043db0330f7b0d2c414133", 0xf8}) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f0000000600)={0x0, "5ea68ed6b10803c1bd7e9dd4558a3bfbc90ec37e22d5d584d44e8a8c825dbf1ac6b45c936e9999a4b6d2d6388e72498fae2cd67f40a5ec93f5b3a79f24990504", 0x1a}, 0x48, 0x0) [ 877.066107] erofs: read_super, device -> /dev/loop4 [ 877.072718] erofs: options -> [ 877.092254] erofs: read_super, device -> /dev/loop1 [ 877.092622] erofs: root inode @ nid 36 [ 877.107742] erofs: options -> [ 877.113664] FAULT_INJECTION: forcing a failure. [ 877.113664] name failslab, interval 1, probability 0, space 0, times 0 [ 877.129426] erofs: root inode @ nid 36 [ 877.130922] erofs: bogus i_mode (0) @ nid 36 [ 877.146235] CPU: 0 PID: 18953 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 877.148016] erofs: mounted on /dev/loop1 with opts: . [ 877.154152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.154158] Call Trace: [ 877.154190] dump_stack+0x1fc/0x2ef [ 877.154214] should_fail.cold+0xa/0xf [ 877.154236] ? setup_fault_attr+0x200/0x200 [ 877.154255] ? lock_acquire+0x170/0x3c0 [ 877.154276] __should_failslab+0x115/0x180 [ 877.154291] should_failslab+0x5/0x10 [ 877.154309] __kmalloc+0x2ab/0x3c0 [ 877.199108] ? kobject_get_path+0xbf/0x240 [ 877.203370] kobject_get_path+0xbf/0x240 [ 877.207449] kobject_uevent_env+0x25c/0x1480 [ 877.211883] lo_ioctl+0xff9/0x20e0 [ 877.215453] ? loop_set_status64+0x110/0x110 [ 877.219964] blkdev_ioctl+0x5cb/0x1a80 [ 877.223860] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.229231] ? blkpg_ioctl+0x9d0/0x9d0 [ 877.233111] ? mark_held_locks+0xf0/0xf0 [ 877.237264] ? mark_held_locks+0xf0/0xf0 [ 877.241320] ? debug_check_no_obj_freed+0x201/0x490 [ 877.246326] ? lock_downgrade+0x720/0x720 [ 877.250462] block_ioctl+0xe9/0x130 [ 877.254076] ? blkdev_fallocate+0x3f0/0x3f0 [ 877.258385] do_vfs_ioctl+0xcdb/0x12e0 [ 877.262278] ? lock_downgrade+0x720/0x720 [ 877.266426] ? check_preemption_disabled+0x41/0x280 [ 877.271443] ? ioctl_preallocate+0x200/0x200 [ 877.275840] ? __fget+0x356/0x510 [ 877.279287] ? do_dup2+0x450/0x450 [ 877.282827] ? do_sys_open+0x2bf/0x520 [ 877.286710] ksys_ioctl+0x9b/0xc0 [ 877.290211] __x64_sys_ioctl+0x6f/0xb0 [ 877.294090] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 877.298673] do_syscall_64+0xf9/0x620 [ 877.302463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.307636] RIP: 0033:0x466397 [ 877.310811] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.329697] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.337398] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 877.344657] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 877.351939] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 877.359192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 877.366448] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:21 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:21 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xee01, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x4b, 0x0) r3 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='user\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r3, r2}, &(0x7f00000003c0)=""/100, 0x64, &(0x7f0000000240)={&(0x7f00000001c0)={'poly1305\x00'}}) 23:09:21 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, 0x0) [ 877.418719] erofs: read_super, device -> /dev/loop0 [ 877.432967] erofs: options -> [ 877.444616] erofs: root inode @ nid 36 [ 877.455572] erofs: mounted on /dev/loop0 with opts: . 23:09:21 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 0 (fault-call:0 fault-nth:20): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:21 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x41, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 877.519217] erofs: unmounted for /dev/loop1 [ 877.534376] erofs: unmounted for /dev/loop0 [ 877.608668] erofs: read_super, device -> /dev/loop1 [ 877.625519] erofs: read_super, device -> /dev/loop4 [ 877.629229] erofs: options -> [ 877.639648] erofs: options -> [ 877.655045] erofs: root inode @ nid 36 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4f, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:21 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000680), &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)="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", 0x1000, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = request_key(&(0x7f0000001840)='cifs.idmap\x00', &(0x7f0000001880)={'syz', 0x3}, &(0x7f00000018c0)='keyring\x00', 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000001900), &(0x7f0000001940)={'syz', 0x3}, &(0x7f0000001980)="92e6b5250f80e0f8b3266147b4360890237fef31c77fa00484c23be7d910b03e99c8fe38289cc7f3e1d2a295ebf50a98f7423d76f5ac01392e08e4175ebd0a4da4cf1a999e364a3f", 0x48, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001a00)={r3, r4, r1}, &(0x7f0000001a40)=""/239, 0xef, &(0x7f0000001bc0)={&(0x7f0000001b40)={'hmac(sha256)\x00'}, &(0x7f0000001b80)="852ab33b7cefbe53a6de640b75b93cb31b493b87637eda641ce9e8077724c6fa5c8e87c92f960a5b66ce8fb8c51d7f2ca85985ec21", 0x35}) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000600)="0de5353b08978a4e9594b5b1258c3e57b67fbaf2494fcc7290f90ef712d581daf015778c695964c9a8a33c4c2d89e2fc3859bcc93cf1f95f6145dba71062bcef33", 0x41, 0x0) r7 = request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='keyring\x00', r5) r8 = add_key$user(&(0x7f0000000340), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000006c0)="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", 0x12a, r7) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000003c0)="749817f2c4d06089e8c1b499552556218d35cc0b95cfc0b3f020e791c935e5e734b012b08a9d97902d2d27bff07aaa440e7e320a3ce02a72ce3e935d2b01967ce5ec6ce3ff596f802ba1d04e6f41d2032d4ab8e3035ff40e7c7fdc79f4aca3ed0d2d2d90f7399e38ae111777e754eba79455aa898fd20463f2277b4787ee138100caef6e1f02226cb15a8cc2f3e13fa46eb2d11e7747f11d6f365c4cba781a698c38517875002c4fb519ae7ea5db41f4d21f67fea3fc609f783ef515e05d8ac5c8a125d4", 0xc4, 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000002c80), &(0x7f0000002cc0)={'fscrypt:', @desc3}, &(0x7f0000002d00)={0x0, "668e270d8c0485cb82597c5719656325bfa61d405870200d92f85785d9997c2c74e6ab5ee4efdad01ddcd45aa6ca965b29fae0f571b91ac0396b6f1ccf1de9a7", 0x37}, 0x48, r6) add_key$user(&(0x7f0000003040), &(0x7f0000001c00)={'syz', 0x1}, &(0x7f0000003080)="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"/4171, 0xffffff1e, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r8, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r10}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000002d80)={r7, r10, r8}, &(0x7f0000002dc0)=""/234, 0xea, &(0x7f0000003000)={&(0x7f0000002ec0)={'blake2s-224\x00'}, &(0x7f0000002f00)="8e228f9286cb54e65dfc06521442467e103be0cae0f37141ff40a11992648fe5b18c4bccf289c713d11d1fbcd50854772d097e2b98179b7f4643fca686fbbf3ef8ec5b19e3bbd71ec4f75ecbc7ff3256537a7f9797f0cab27f06008bbb1d3bb925f17becf59200dcb54382c2ae859a523b8cf335d30f6d9d4d44eefcc03eddcdd8fd42a141f80767f30578e4c43f3fc40f755e3321705b07cdf93ba1f313f8b03ac1a65040404f75543fda0e65a8865d84d731552d347cf4702b1ff0aeec32f7f7f0497a30ca77cee43c392f58ded2b0ca459b402e661127c9278bd78b0ff69b0388c103", 0xe4}) [ 877.662629] erofs: root inode @ nid 36 [ 877.675476] erofs: mounted on /dev/loop1 with opts: . [ 877.681723] erofs: bogus i_mode (0) @ nid 36 23:09:21 executing program 3: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 877.732573] FAULT_INJECTION: forcing a failure. [ 877.732573] name failslab, interval 1, probability 0, space 0, times 0 [ 877.755600] CPU: 0 PID: 18994 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 877.763526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.772900] Call Trace: [ 877.775526] dump_stack+0x1fc/0x2ef [ 877.779170] should_fail.cold+0xa/0xf 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x50, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 877.783077] ? setup_fault_attr+0x200/0x200 [ 877.787412] ? lock_acquire+0x170/0x3c0 [ 877.791492] __should_failslab+0x115/0x180 [ 877.795744] should_failslab+0x5/0x10 [ 877.799559] kmem_cache_alloc_node+0x245/0x3b0 [ 877.804152] __alloc_skb+0x71/0x560 [ 877.807790] alloc_uevent_skb+0x7b/0x210 [ 877.811861] kobject_uevent_env+0xa90/0x1480 [ 877.816282] lo_ioctl+0xff9/0x20e0 [ 877.819812] ? loop_set_status64+0x110/0x110 [ 877.824212] blkdev_ioctl+0x5cb/0x1a80 [ 877.828108] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.833484] ? blkpg_ioctl+0x9d0/0x9d0 [ 877.837379] ? mark_held_locks+0xf0/0xf0 [ 877.841449] ? mark_held_locks+0xf0/0xf0 [ 877.845523] ? debug_check_no_obj_freed+0x201/0x490 [ 877.850550] ? lock_downgrade+0x720/0x720 [ 877.854695] block_ioctl+0xe9/0x130 [ 877.858316] ? blkdev_fallocate+0x3f0/0x3f0 [ 877.862640] do_vfs_ioctl+0xcdb/0x12e0 [ 877.866621] ? lock_downgrade+0x720/0x720 [ 877.870844] ? check_preemption_disabled+0x41/0x280 [ 877.875849] ? ioctl_preallocate+0x200/0x200 [ 877.880300] ? __fget+0x356/0x510 [ 877.883843] ? do_dup2+0x450/0x450 [ 877.887384] ? do_sys_open+0x2bf/0x520 [ 877.891346] ksys_ioctl+0x9b/0xc0 [ 877.894787] __x64_sys_ioctl+0x6f/0xb0 [ 877.899147] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 877.903727] do_syscall_64+0xf9/0x620 [ 877.907527] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.912707] RIP: 0033:0x466397 [ 877.915919] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.934811] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.942518] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 877.949986] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 877.957271] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 877.964538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 877.971827] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 23:09:21 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x23, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, 0x0, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 877.990112] erofs: unmounted for /dev/loop1 [ 878.031806] erofs: read_super, device -> /dev/loop0 [ 878.038416] erofs: options -> [ 878.052476] erofs: root inode @ nid 36 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x51, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 878.075905] erofs: mounted on /dev/loop0 with opts: . 23:09:21 executing program 3: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:21 executing program 0 (fault-call:0 fault-nth:21): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 878.153199] erofs: unmounted for /dev/loop0 23:09:21 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, 0x0, r0}, &(0x7f00000002c0)=""/118, 0xfffffffffffffe6b, 0x0) 23:09:21 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x52, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:21 executing program 3: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x250, 0x0) [ 878.201278] erofs: read_super, device -> /dev/loop4 [ 878.206796] erofs: read_super, device -> /dev/loop1 [ 878.220731] erofs: options -> [ 878.224267] erofs: options -> [ 878.232412] erofs: root inode @ nid 36 [ 878.237682] erofs: root inode @ nid 36 [ 878.283122] erofs: bogus i_mode (0) @ nid 36 [ 878.291052] erofs: mounted on /dev/loop1 with opts: . 23:09:21 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 878.366983] FAULT_INJECTION: forcing a failure. [ 878.366983] name failslab, interval 1, probability 0, space 0, times 0 [ 878.399064] CPU: 1 PID: 19037 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 878.406992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:09:22 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)='\b', 0x1, 0xfffffffffffffff8) keyctl$clear(0x7, 0xfffffffffffffffc) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)=')\x86\x00', 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r5 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000440)='(4*\x00j\x98\xd3\fpK\xbd9X\'\xc5\xd0\x10\xaf\x94\xa7\x9dO\x86\x98\x1f\x1d\xeaK\xeb\xc8\xf0\x12\xf8W\x86r\x84\xab~\xf7:+\x8f\xe1<\xf6C\x84l\xb2\x81UT\xb2\xe6\x85a\xe3\xe8\x88b\x97i\xff\x7f\xff\xff\xc3D%\x8d\xe3\x7f=\xc3\xc9\xf4\xe4', 0xfffffffffffffffd) r6 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000040)={0x0, 0x0}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r0, r5}, &(0x7f00000003c0)=""/122, 0x7a, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r7 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r7) r8 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "2c80085d09fa6ac3f378726ef14e43714cf04351fae33667a9f7faf242639a3a633817008b683baac0fcf8ce2deeb9e1958004a8948dd802a1878ac904a84265", 0x2e}, 0x48, r7) add_key$user(&(0x7f0000000580), &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)="a8b0469e25233ddacdb6a1ff3987e2123d57d0c2fd5d943b265006a0975c0ddb5a6cf7ef972abc8fb7e4ecb9b79330ce7e6275848f5c6ebc17f1e483a6bbacb41bd8d65d34ccd6d64d3d79ef73e78979985bb34daef1c5439d3a21edb0", 0x5d, r8) request_key(&(0x7f00000004c0)='.request_key_auth\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='user\x00', r7) r9 = add_key$keyring(0x0, &(0x7f0000000900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, 0x0, 0x0, 0x0, r9) [ 878.416358] Call Trace: [ 878.418984] dump_stack+0x1fc/0x2ef [ 878.422638] should_fail.cold+0xa/0xf [ 878.426465] ? setup_fault_attr+0x200/0x200 [ 878.430818] ? lock_acquire+0x170/0x3c0 [ 878.434816] __should_failslab+0x115/0x180 [ 878.439077] should_failslab+0x5/0x10 [ 878.442901] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 878.448036] __kmalloc_node_track_caller+0x38/0x70 [ 878.452991] __alloc_skb+0xae/0x560 [ 878.456633] alloc_uevent_skb+0x7b/0x210 [ 878.460701] kobject_uevent_env+0xa90/0x1480 [ 878.465105] lo_ioctl+0xff9/0x20e0 [ 878.468681] ? loop_set_status64+0x110/0x110 [ 878.473089] blkdev_ioctl+0x5cb/0x1a80 [ 878.476983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 878.482353] ? blkpg_ioctl+0x9d0/0x9d0 [ 878.486242] ? mark_held_locks+0xf0/0xf0 [ 878.490304] ? mark_held_locks+0xf0/0xf0 [ 878.494364] ? debug_check_no_obj_freed+0x201/0x490 [ 878.499386] ? lock_downgrade+0x720/0x720 [ 878.503529] block_ioctl+0xe9/0x130 [ 878.507174] ? blkdev_fallocate+0x3f0/0x3f0 [ 878.511491] do_vfs_ioctl+0xcdb/0x12e0 [ 878.515385] ? lock_downgrade+0x720/0x720 [ 878.519534] ? check_preemption_disabled+0x41/0x280 [ 878.524545] ? ioctl_preallocate+0x200/0x200 [ 878.528950] ? __fget+0x356/0x510 [ 878.532393] ? do_dup2+0x450/0x450 [ 878.536016] ? do_sys_open+0x2bf/0x520 [ 878.539920] ksys_ioctl+0x9b/0xc0 [ 878.543401] __x64_sys_ioctl+0x6f/0xb0 [ 878.547296] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 878.551860] do_syscall_64+0xf9/0x620 [ 878.555673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 878.560850] RIP: 0033:0x466397 [ 878.564027] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 878.583510] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.591216] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 878.598506] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 878.605768] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 23:09:22 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:22 executing program 3: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, 0x0, r0}, &(0x7f00000002c0)=""/118, 0xfffffffffffffe6b, 0x0) 23:09:22 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x53, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 878.613121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 878.620394] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 878.632659] erofs: unmounted for /dev/loop1 [ 878.690986] erofs: read_super, device -> /dev/loop0 [ 878.710526] erofs: options -> [ 878.723142] erofs: root inode @ nid 36 [ 878.762734] erofs: mounted on /dev/loop0 with opts: . [ 878.833460] erofs: read_super, device -> /dev/loop1 [ 878.838520] erofs: options -> 23:09:22 executing program 0 (fault-call:0 fault-nth:22): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 878.888792] erofs: root inode @ nid 36 [ 878.903444] erofs: unmounted for /dev/loop0 [ 878.904585] erofs: mounted on /dev/loop1 with opts: . [ 878.910966] erofs: read_super, device -> /dev/loop4 [ 878.935981] erofs: options -> 23:09:22 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000100), &(0x7f00000001c0)='\x00', 0x1, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="ef28b4845a6bfedbf1769ecf0b9910b8df9520a83cde53f4a90836bd16ab7663c7bc06f096dffd5d083d80bf07663e769b9206496bca3ee093ed87bc70120242b253e703471aa3cbd89daa4a9ba9f8ba1e3f", 0x52, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:22 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x54, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:22 executing program 3: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xb, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 878.953688] erofs: root inode @ nid 36 [ 878.965093] erofs: bogus i_mode (0) @ nid 36 23:09:22 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000100)="90", 0x1, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000003c0)="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", 0x194, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r0}, &(0x7f0000000600)=""/140, 0x8c, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r4}, &(0x7f00000002c0)=""/114, 0x72, 0x0) 23:09:22 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 879.069739] erofs: read_super, device -> /dev/loop4 [ 879.078038] erofs: options -> [ 879.078081] erofs: unmounted for /dev/loop1 [ 879.094497] erofs: root inode @ nid 36 [ 879.103412] FAULT_INJECTION: forcing a failure. [ 879.103412] name failslab, interval 1, probability 0, space 0, times 0 23:09:22 executing program 3 (fault-call:6 fault-nth:0): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 879.117603] erofs: bogus i_mode (0) @ nid 36 [ 879.126645] CPU: 0 PID: 19074 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 879.134697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.144155] Call Trace: [ 879.146771] dump_stack+0x1fc/0x2ef [ 879.150435] should_fail.cold+0xa/0xf [ 879.154269] ? setup_fault_attr+0x200/0x200 [ 879.158618] ? lock_acquire+0x170/0x3c0 [ 879.162720] __should_failslab+0x115/0x180 [ 879.166966] should_failslab+0x5/0x10 [ 879.170787] kmem_cache_alloc_trace+0x284/0x380 [ 879.175745] ? wait_for_completion_io+0x10/0x10 [ 879.180438] ? kobj_ns_initial+0x90/0x90 [ 879.184750] call_usermodehelper_setup+0x84/0x300 [ 879.189627] kobject_uevent_env+0xe83/0x1480 [ 879.194067] lo_ioctl+0xff9/0x20e0 [ 879.197627] ? loop_set_status64+0x110/0x110 [ 879.202054] blkdev_ioctl+0x5cb/0x1a80 [ 879.205965] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.211344] ? blkpg_ioctl+0x9d0/0x9d0 [ 879.215232] ? mark_held_locks+0xf0/0xf0 [ 879.219302] ? mark_held_locks+0xf0/0xf0 [ 879.223639] ? debug_check_no_obj_freed+0x201/0x490 [ 879.228751] ? lock_downgrade+0x720/0x720 [ 879.232890] block_ioctl+0xe9/0x130 [ 879.236504] ? blkdev_fallocate+0x3f0/0x3f0 [ 879.240833] do_vfs_ioctl+0xcdb/0x12e0 [ 879.244706] ? lock_downgrade+0x720/0x720 [ 879.248840] ? check_preemption_disabled+0x41/0x280 [ 879.254175] ? ioctl_preallocate+0x200/0x200 [ 879.258575] ? __fget+0x356/0x510 [ 879.262016] ? do_dup2+0x450/0x450 [ 879.265638] ? do_sys_open+0x2bf/0x520 [ 879.270042] ksys_ioctl+0x9b/0xc0 [ 879.273482] __x64_sys_ioctl+0x6f/0xb0 [ 879.277355] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 879.281957] do_syscall_64+0xf9/0x620 [ 879.285758] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.290945] RIP: 0033:0x466397 [ 879.294213] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.313637] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.321518] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 879.328789] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 879.336062] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 879.343351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 879.350770] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 879.417232] FAULT_INJECTION: forcing a failure. [ 879.417232] name failslab, interval 1, probability 0, space 0, times 0 [ 879.428759] CPU: 1 PID: 19090 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 879.436654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.446020] Call Trace: [ 879.448628] dump_stack+0x1fc/0x2ef [ 879.452261] should_fail.cold+0xa/0xf [ 879.456073] ? setup_fault_attr+0x200/0x200 [ 879.460388] ? lock_acquire+0x170/0x3c0 [ 879.464442] __should_failslab+0x115/0x180 [ 879.468672] should_failslab+0x5/0x10 [ 879.472491] __kmalloc_track_caller+0x2a6/0x3c0 [ 879.477172] ? strndup_user+0x70/0x120 [ 879.481069] memdup_user+0x22/0xb0 [ 879.484619] strndup_user+0x70/0x120 [ 879.488346] __keyctl_dh_compute+0x1b0/0x13d0 [ 879.492838] ? check_preemption_disabled+0x41/0x280 [ 879.497954] ? dh_data_from_key+0x2a0/0x2a0 [ 879.502280] ? proc_fail_nth_write+0x95/0x1d0 [ 879.506794] ? __might_fault+0x11f/0x1d0 [ 879.510848] ? lock_downgrade+0x720/0x720 [ 879.514992] ? lock_acquire+0x170/0x3c0 [ 879.518978] ? __might_fault+0xef/0x1d0 [ 879.523485] ? __might_fault+0x192/0x1d0 [ 879.527631] keyctl_dh_compute+0xbf/0x120 [ 879.531783] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 879.536535] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 879.541900] __se_sys_keyctl+0x10f/0x3f0 [ 879.545955] do_syscall_64+0xf9/0x620 [ 879.549768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.554976] RIP: 0033:0x4665d9 [ 879.558267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 879.577181] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 879.584893] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 879.592149] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 879.599406] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 879.606675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:09:23 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:23 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000100)="01cc7887ef0148c4b8de0a36f6d90c0fc28c1083c8ab6b3db8518b36fb1a4a00f685ed4b906f8fa09720cbe9bf717abc5d2a707242038047f43585be05f6dfb693558d210b20e5b5e706fe0e7c313cd8e26ad49ed5bee07addc9e54bf1d49493f5355f", 0x63, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:23 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x55, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 879.614138] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 879.627779] erofs: read_super, device -> /dev/loop0 [ 879.637168] erofs: options -> [ 879.649505] erofs: root inode @ nid 36 23:09:23 executing program 3 (fault-call:6 fault-nth:1): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 879.667554] erofs: mounted on /dev/loop0 with opts: . 23:09:23 executing program 0 (fault-call:0 fault-nth:23): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:23 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x56, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 879.753322] erofs: unmounted for /dev/loop0 23:09:23 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="95e6bd19beff53f1a2ce9ba00e8533ab5d24ebec8b52174becdb9adaa52d930b1167b014261a33242d3605314d88793b31d8f0eb2e125b1fd988cf98650329db2a2ac428b763f86eab700ae3907bd4186799359dc3a2af0f7e1a4749069df9907fa777540ee8e63d9d2bea0afe91385335743a88e4c39fa83db842a2f3604deeadc9c551aef4c93d74bac8dd66e80200f1c02b5fb08700594d", 0x99, 0xfffffffffffffffc) [ 879.798583] erofs: read_super, device -> /dev/loop1 [ 879.822083] erofs: options -> [ 879.837746] FAULT_INJECTION: forcing a failure. [ 879.837746] name failslab, interval 1, probability 0, space 0, times 0 [ 879.849357] erofs: read_super, device -> /dev/loop4 [ 879.850525] erofs: root inode @ nid 36 [ 879.863569] erofs: options -> [ 879.868400] FAULT_INJECTION: forcing a failure. [ 879.868400] name failslab, interval 1, probability 0, space 0, times 0 [ 879.876615] erofs: mounted on /dev/loop1 with opts: . [ 879.880828] erofs: root inode @ nid 36 [ 879.892139] erofs: bogus i_mode (0) @ nid 36 [ 879.896880] CPU: 1 PID: 19112 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 879.904790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.914161] Call Trace: [ 879.916764] dump_stack+0x1fc/0x2ef [ 879.920449] should_fail.cold+0xa/0xf [ 879.924254] ? setup_fault_attr+0x200/0x200 [ 879.928571] ? lock_acquire+0x170/0x3c0 [ 879.932542] __should_failslab+0x115/0x180 [ 879.936778] should_failslab+0x5/0x10 [ 879.940586] kmem_cache_alloc+0x277/0x370 [ 879.944786] skb_clone+0x151/0x3d0 [ 879.948368] netlink_broadcast_filtered+0x8e5/0xbc0 [ 879.953389] netlink_broadcast+0x35/0x40 [ 879.957458] kobject_uevent_env+0xa56/0x1480 [ 879.961909] lo_ioctl+0xff9/0x20e0 [ 879.965462] ? loop_set_status64+0x110/0x110 [ 879.969869] blkdev_ioctl+0x5cb/0x1a80 [ 879.973754] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 879.979291] ? blkpg_ioctl+0x9d0/0x9d0 [ 879.983170] ? mark_held_locks+0xf0/0xf0 [ 879.987223] ? mark_held_locks+0xf0/0xf0 [ 879.991282] ? debug_check_no_obj_freed+0x201/0x490 [ 879.996314] ? lock_downgrade+0x720/0x720 [ 880.000544] block_ioctl+0xe9/0x130 [ 880.004942] ? blkdev_fallocate+0x3f0/0x3f0 [ 880.009258] do_vfs_ioctl+0xcdb/0x12e0 [ 880.013144] ? lock_downgrade+0x720/0x720 [ 880.017292] ? check_preemption_disabled+0x41/0x280 [ 880.022301] ? ioctl_preallocate+0x200/0x200 [ 880.026704] ? __fget+0x356/0x510 [ 880.030170] ? do_dup2+0x450/0x450 [ 880.033705] ? do_sys_open+0x2bf/0x520 [ 880.037587] ksys_ioctl+0x9b/0xc0 [ 880.041040] __x64_sys_ioctl+0x6f/0xb0 [ 880.044922] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 880.049497] do_syscall_64+0xf9/0x620 [ 880.053298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.058785] RIP: 0033:0x466397 [ 880.061967] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.080955] RSP: 002b:00007f8133c62f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 880.088855] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 0000000000466397 [ 880.096139] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 880.103410] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 880.110680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 23:09:23 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x57, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 880.117949] R13: 0000000000000004 R14: 0000000020000248 R15: 0000000000000003 [ 880.125321] CPU: 0 PID: 19107 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 880.133222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.136981] erofs: read_super, device -> /dev/loop0 [ 880.142631] Call Trace: [ 880.142658] dump_stack+0x1fc/0x2ef [ 880.142679] should_fail.cold+0xa/0xf [ 880.142698] ? setup_fault_attr+0x200/0x200 [ 880.142712] ? lock_acquire+0x170/0x3c0 [ 880.142731] __should_failslab+0x115/0x180 [ 880.142749] should_failslab+0x5/0x10 [ 880.142762] __kmalloc+0x2ab/0x3c0 [ 880.142781] ? crypto_create_tfm+0x79/0x2e0 [ 880.148199] erofs: options -> [ 880.150641] ? up_read+0x17/0x110 [ 880.150659] crypto_create_tfm+0x79/0x2e0 [ 880.150675] crypto_alloc_tfm+0xff/0x230 [ 880.150696] __keyctl_dh_compute+0x1e0/0x13d0 [ 880.150714] ? check_preemption_disabled+0x41/0x280 [ 880.150739] ? dh_data_from_key+0x2a0/0x2a0 [ 880.154813] erofs: root inode @ nid 36 [ 880.158266] ? proc_fail_nth_write+0x95/0x1d0 23:09:23 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="f5522268160922bf0d4b52903d", 0xd, 0xfffffffffffffff9) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, r1) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:23 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x58, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 880.158294] ? __might_fault+0x11f/0x1d0 [ 880.158319] ? lock_downgrade+0x720/0x720 [ 880.163172] erofs: mounted on /dev/loop0 with opts: . [ 880.166597] ? lock_acquire+0x170/0x3c0 [ 880.166615] ? __might_fault+0xef/0x1d0 [ 880.166634] ? __might_fault+0x192/0x1d0 [ 880.166657] keyctl_dh_compute+0xbf/0x120 [ 880.251946] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 880.256740] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 880.262134] __se_sys_keyctl+0x10f/0x3f0 [ 880.266221] do_syscall_64+0xf9/0x620 [ 880.270045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.275330] RIP: 0033:0x4665d9 [ 880.278516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.297696] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 880.305600] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 880.312959] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 880.320253] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 880.327521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.334957] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 880.355428] could not allocate digest TFM handle xcbc(anubis-generic) 23:09:24 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x383, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:24 executing program 0 (fault-call:0 fault-nth:24): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 880.383952] erofs: unmounted for /dev/loop0 [ 880.390556] erofs: read_super, device -> /dev/loop4 [ 880.396849] erofs: options -> [ 880.407475] erofs: root inode @ nid 36 [ 880.412928] erofs: bogus i_mode (0) @ nid 36 [ 880.425365] erofs: unmounted for /dev/loop1 23:09:24 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:24 executing program 3 (fault-call:6 fault-nth:2): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:24 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000003c0)="afd0d7edfae4eaf65d20c1f6f8c5eea376d148bebc1c026e2928615d7e03a2c372258479ccae839b58b1be8b3a6c550177b57d1321b854ecbc81a18a87f1e7ad6b49bb481cb116c67798b55e27b56ae4ecb1ccc30e7de2f4325f2c296622159e5c12f6c699d34f02279bc285d5003b3e3dd10976f732e44e1b71bcb14d5ed6193ea5ab73ed386ac0fe6e5ea1e05ad5185b362384bc1bc8ab7835dc030b546dcfe9fd875e2f5d9cad46a995d923c3e0ca182975394d6a222004f07a", 0xbb, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r2) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, 0x0, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:24 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x59, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 880.515869] FAULT_INJECTION: forcing a failure. [ 880.515869] name failslab, interval 1, probability 0, space 0, times 0 [ 880.574577] CPU: 0 PID: 19141 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 880.582693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.592067] Call Trace: [ 880.594678] dump_stack+0x1fc/0x2ef [ 880.598330] should_fail.cold+0xa/0xf [ 880.602156] ? setup_fault_attr+0x200/0x200 [ 880.606633] ? lock_acquire+0x170/0x3c0 [ 880.610638] __should_failslab+0x115/0x180 [ 880.614896] should_failslab+0x5/0x10 [ 880.618746] kmem_cache_alloc+0x277/0x370 [ 880.622908] getname_flags+0xce/0x590 [ 880.622913] erofs: read_super, device -> /dev/loop1 [ 880.622923] erofs: options -> [ 880.626714] do_mkdirat+0x8d/0x2d0 [ 880.626729] ? __ia32_sys_mknod+0x120/0x120 [ 880.626744] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 880.626765] ? trace_hardirqs_off_caller+0x6e/0x210 [ 880.648496] FAULT_INJECTION: forcing a failure. [ 880.648496] name failslab, interval 1, probability 0, space 0, times 0 [ 880.653262] ? do_syscall_64+0x21/0x620 [ 880.653278] do_syscall_64+0xf9/0x620 [ 880.653299] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.653311] RIP: 0033:0x4656e7 [ 880.653335] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 880.694059] erofs: root inode @ nid 36 [ 880.700792] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 880.700808] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 880.700817] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 880.700825] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 880.700833] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 880.700839] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 880.711553] CPU: 0 PID: 19157 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 880.757010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.766375] Call Trace: [ 880.768998] dump_stack+0x1fc/0x2ef [ 880.769072] erofs: mounted on /dev/loop1 with opts: . [ 880.772637] should_fail.cold+0xa/0xf [ 880.772657] ? setup_fault_attr+0x200/0x200 [ 880.772684] ? lock_acquire+0x170/0x3c0 [ 880.772704] __should_failslab+0x115/0x180 [ 880.772725] should_failslab+0x5/0x10 [ 880.772740] __kmalloc+0x2ab/0x3c0 [ 880.772756] ? __crypto_alloc_tfm+0xc1/0x4e0 [ 880.772772] __crypto_alloc_tfm+0xc1/0x4e0 [ 880.772789] crypto_spawn_tfm+0xe6/0x1d0 [ 880.772804] ? xcbc_exit_tfm+0x40/0x40 [ 880.772821] xcbc_init_tfm+0x42/0xc0 [ 880.822097] ? xcbc_exit_tfm+0x40/0x40 [ 880.825989] crypto_create_tfm+0x163/0x2e0 [ 880.830214] crypto_alloc_tfm+0xff/0x230 [ 880.834410] __keyctl_dh_compute+0x1e0/0x13d0 [ 880.838910] ? check_preemption_disabled+0x41/0x280 [ 880.843943] ? dh_data_from_key+0x2a0/0x2a0 [ 880.848261] ? proc_fail_nth_write+0x95/0x1d0 [ 880.852846] ? __might_fault+0x11f/0x1d0 [ 880.856918] ? lock_downgrade+0x720/0x720 [ 880.861164] ? lock_acquire+0x170/0x3c0 [ 880.865137] ? __might_fault+0xef/0x1d0 [ 880.869147] ? __might_fault+0x192/0x1d0 [ 880.873212] keyctl_dh_compute+0xbf/0x120 [ 880.877348] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 880.882125] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 880.887491] __se_sys_keyctl+0x10f/0x3f0 [ 880.891548] do_syscall_64+0xf9/0x620 [ 880.895364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 880.900734] RIP: 0033:0x4665d9 [ 880.904022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:24 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 880.923031] RSP: 002b:00007f0940a13188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 880.930765] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 880.938042] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 880.945476] RBP: 00007f0940a131d0 R08: 00000000200001c0 R09: 0000000000000000 [ 880.952742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.960118] R13: 00007ffff3f3a1ff R14: 00007f0940a13300 R15: 0000000000022000 [ 880.980637] could not allocate digest TFM handle xcbc(anubis-generic) 23:09:24 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f8, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 881.037992] erofs: read_super, device -> /dev/loop4 [ 881.060005] erofs: unmounted for /dev/loop1 23:09:24 executing program 3 (fault-call:6 fault-nth:3): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:24 executing program 0 (fault-call:0 fault-nth:25): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 881.098246] erofs: options -> 23:09:24 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)={0x0, 0x0, @auto=[0x3f, 0x32]}, 0xa, 0xfffffffffffffffe) keyctl$invalidate(0x15, r7) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r6, r2}, &(0x7f00000000c0), 0x0, 0x0) [ 881.122288] erofs: root inode @ nid 36 [ 881.141433] erofs: bogus i_mode (0) @ nid 36 23:09:24 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 881.177882] FAULT_INJECTION: forcing a failure. [ 881.177882] name failslab, interval 1, probability 0, space 0, times 0 [ 881.198452] CPU: 1 PID: 19177 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 881.206386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.215782] Call Trace: [ 881.218396] dump_stack+0x1fc/0x2ef [ 881.222060] should_fail.cold+0xa/0xf 23:09:24 executing program 2: add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x3e, 0x30, 0x63, 0x36, 0x62, 0x35, 0x62, 0x62, 0x32, 0x31, 0x35, 0x61, 0x39, 0x34, 0x54, 0x66]}, &(0x7f00000003c0)={0x0, "9cd83da37bcff54a292d1592d829648fecc9ce35784e6a023a08005dd4cd7cd64fc337d6ffc621937c6fb8536a29fb58e7343c6adaa479fefe4bb793f8a0ba39", 0x1a}, 0x48, r1) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r0, r1}, &(0x7f00000002c0)=""/105, 0x69, 0x0) [ 881.225925] ? setup_fault_attr+0x200/0x200 [ 881.230276] ? lock_acquire+0x170/0x3c0 [ 881.234280] __should_failslab+0x115/0x180 [ 881.238539] should_failslab+0x5/0x10 [ 881.238544] erofs: read_super, device -> /dev/loop1 [ 881.238554] erofs: options -> [ 881.242347] __kmalloc+0x2ab/0x3c0 [ 881.242371] ? __keyctl_dh_compute+0x29a/0x13d0 [ 881.242389] __keyctl_dh_compute+0x29a/0x13d0 [ 881.242410] ? check_preemption_disabled+0x41/0x280 [ 881.242429] ? dh_data_from_key+0x2a0/0x2a0 [ 881.248411] erofs: root inode @ nid 36 [ 881.250657] ? proc_fail_nth_write+0x95/0x1d0 [ 881.250696] ? __might_fault+0x11f/0x1d0 [ 881.250715] ? lock_downgrade+0x720/0x720 [ 881.250725] ? lock_acquire+0x170/0x3c0 [ 881.250741] ? __might_fault+0xef/0x1d0 [ 881.254719] erofs: mounted on /dev/loop1 with opts: . [ 881.258971] ? __might_fault+0x192/0x1d0 [ 881.258996] keyctl_dh_compute+0xbf/0x120 [ 881.259015] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 881.315951] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 881.321311] __se_sys_keyctl+0x10f/0x3f0 [ 881.325417] do_syscall_64+0xf9/0x620 [ 881.329210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.334550] RIP: 0033:0x4665d9 [ 881.337744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.356918] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 881.365159] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 881.372552] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 881.379846] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 881.387228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.394511] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 881.409014] FAULT_INJECTION: forcing a failure. [ 881.409014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 881.420974] CPU: 0 PID: 19182 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 881.429072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.438521] Call Trace: [ 881.441145] dump_stack+0x1fc/0x2ef [ 881.444801] should_fail.cold+0xa/0xf [ 881.448628] ? setup_fault_attr+0x200/0x200 [ 881.452977] ? wake_up_q+0x93/0xe0 [ 881.456542] ? __mutex_unlock_slowpath+0x2be/0x610 [ 881.461502] __alloc_pages_nodemask+0x239/0x2890 [ 881.466297] ? __lock_acquire+0x6de/0x3ff0 [ 881.470594] ? gfp_pfmemalloc_allowed+0x150/0x150 23:09:25 executing program 3 (fault-call:6 fault-nth:4): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 881.475546] ? blkdev_ioctl+0x11a/0x1a80 [ 881.479868] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.485257] ? blkpg_ioctl+0x9d0/0x9d0 [ 881.489179] ? debug_check_no_obj_freed+0x201/0x490 [ 881.494233] ? lock_downgrade+0x720/0x720 [ 881.498437] cache_grow_begin+0xa4/0x8a0 [ 881.502535] ? setup_fault_attr+0x200/0x200 [ 881.506948] ? lock_acquire+0x170/0x3c0 [ 881.511038] cache_alloc_refill+0x273/0x340 [ 881.515428] kmem_cache_alloc+0x346/0x370 [ 881.519693] getname_flags+0xce/0x590 [ 881.523517] do_mkdirat+0x8d/0x2d0 [ 881.527075] ? __ia32_sys_mknod+0x120/0x120 [ 881.531414] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 881.536824] ? trace_hardirqs_off_caller+0x6e/0x210 [ 881.542568] ? do_syscall_64+0x21/0x620 [ 881.546566] do_syscall_64+0xf9/0x620 [ 881.550483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.555732] RIP: 0033:0x4656e7 [ 881.558977] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.567299] FAULT_INJECTION: forcing a failure. [ 881.567299] name failslab, interval 1, probability 0, space 0, times 0 [ 881.577900] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 881.577916] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 881.577923] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 881.577929] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 881.577937] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 23:09:25 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:25 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:25 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="a901f84943bd25dc88ace4b155f400ca3a6eb354b8fcd999b7a0a12f636f26ab15bd893aacc774249e831a2845bc323a7582fbb8b9adebbb442b97f730f6", 0x3e, 0xfffffffffffffff8) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='\x00', r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:25 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 881.577945] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 881.619563] erofs: read_super, device -> /dev/loop0 [ 881.619577] erofs: options -> [ 881.661412] erofs: root inode @ nid 36 [ 881.665447] erofs: mounted on /dev/loop0 with opts: . 23:09:25 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 881.688541] erofs: unmounted for /dev/loop1 23:09:25 executing program 0 (fault-call:0 fault-nth:26): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:25 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "442929eeaede3cceb52cd6242e4afd4e7bb76c742c14d5e0fc8a0b43ebbbefa7f7ff20f4310f61da7bbfc96f14014cc89dfc0a88a1bd5b98fee2fbf49048511a", 0x32}, 0x48, 0xfffffffffffffff9) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="7a7cd3d95f1cbf5291e16332afbedbe6cb", 0x11, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r5) keyctl$link(0x8, r5, r3) keyctl$link(0x8, r0, r4) [ 881.722706] CPU: 0 PID: 19200 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 881.730632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.740175] Call Trace: [ 881.742788] dump_stack+0x1fc/0x2ef [ 881.746618] should_fail.cold+0xa/0xf [ 881.750534] ? setup_fault_attr+0x200/0x200 [ 881.754970] ? lock_acquire+0x170/0x3c0 [ 881.759092] __should_failslab+0x115/0x180 [ 881.763440] should_failslab+0x5/0x10 [ 881.767268] __kmalloc_track_caller+0x2a6/0x3c0 [ 881.772047] ? dh_data_from_key+0x17e/0x2a0 [ 881.776400] kmemdup+0x23/0x50 [ 881.779614] dh_data_from_key+0x17e/0x2a0 [ 881.783793] __keyctl_dh_compute+0x329/0x13d0 [ 881.788331] ? check_preemption_disabled+0x41/0x280 [ 881.793379] ? dh_data_from_key+0x2a0/0x2a0 [ 881.797744] ? proc_fail_nth_write+0x95/0x1d0 [ 881.802274] ? __might_fault+0x11f/0x1d0 [ 881.806374] ? lock_downgrade+0x720/0x720 [ 881.810550] ? lock_acquire+0x170/0x3c0 [ 881.814547] ? __might_fault+0xef/0x1d0 [ 881.818587] ? __might_fault+0x192/0x1d0 23:09:25 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000600)="ca7a50c8d899ed055ca784200a8093959ee6be1ed9d53bb14cfdd94483ea952bd8a003879e381dc4ee1b4a2ed25e8d726c74eac1468e7e58c7d6a58479ffbc94117f31f11bbcd79a0456ccbf55f1a4c8eaedfd3042f27557c671fa6138da6213a788a94ad5c4aa0e788f5e31406903f2b73328f8a7143a494a28a97a9d0f74d9861772ee5629f45f110d825b0388054d599f07442dfcdd0fd3a8a6b3f4f64f308ad92ba037820763e8716cf90df12c285cf601836f579426d6606e43a8d1f11da982eda585088a0d2adb1c8d3dc3f415090c8b014f7eb03cd4b1e9bf6358a2b6480bbcfac3993dda32390b2030389f90d16d23a150e8bef6a21ca321d0c51f3523dfc4f6fe2d14f579c9d00858129b94a60f14849b2a47ee081a38640034780533d9387ccf3ee3fce7e4f69498d4aa321410790988dbf8c15f2eaf755a13dba5c7588f155b9158876228688613870128fe4417c4f4b3d3ba92d7ab82bb50e7b4daff8b8debe9da638cd47dab2acffaed0b3028996b85aac89e6be1a8ee1dccf0895ec65202b30f79302c4053a3045d150e6adad976d883e608d9b10fcda432ad635b5bf905cae7b93eb14e9747cd52da67f5ea49ec0118d4991e94b53d5e9279e7f6221beb6f27decd9f2a08cd8d87242aed0db776313346233766676e2c2fd24f46ff835e0573a815c02ab8e87785bf4c7eb37afb9216e86eb933edea9e0a762f42532e578d213e686a72550085781f569031b6709ef5b6606110d4dff25a7cbcb18cd61f8ae8f468322a4e72e849bc017b5b9cdaefeda39465a9679ff388d5df370d003ba0fdf39eca524ec6c0c3f8c7068d051b920339603d4c5be27a13cba34f0df05ee2b9306216f8b6034fe5869b981e6462269b276066180095bffad28e0fb8c6d1884a99e4e999b4067c8f3864741f0de0800cd74fd6b1b9535f986f95405bf6964d73873dd5990700726c1d9b618b9deb7b22ae2b39128671a9e1fa63103fc00d96109164f74fd41f405049ac10eeca2f25b97107771ac71741670d3c9ddc63e16b914554a6936aef74798871578a2c7f3b144651bb741fae37a80f99771feafc03f5fe59dab340de16c7666c30c5c286ecb4f89ed7ae1a26f2a221a14336b7bffaac20927cef4d97d308638847b3db55cfc7bca652f28da7149e91c7be761e3517c91fdc9f86d9a03e83594303d85ee8f996a00f42eb2213e5f6e6d88bfd8b332f877d023046a46e7e0eb9dbb7d4a81ba5d1c14b9a7bf8ea7b541960d315eda34623820c57fab0d53ff20ee3071840a1c94aaac7935ef3c8e2225691f3897b9e38086f00b85cc541548897b3ad0550aa6907055fe9585557e827461c27ee7687c6deaf82a8e53c566b96ed2a8ba9aa45b75faefc46a03ef1eb31daa87362f07d3e9fe99e47cabdcb755676781776523c65529a1f05b5600e2121dde4cd5190f767f553f7a053bbec01120f0484c00bec15d88f1ded90f09e7090af5d8f4bb032adcb8197c9df7ba8ad16cd0eaffbace9f341cf58f8e35d79c6a558a988ca11e1c878dc7cd10adb052dd4ea107b3872b14bff37d90f8c7178aab4b39c973130ec0a38fe0b8297eca88b044c7709426d2a29e6e7df12052597c8facb6b678ef433039a3af475e9ede033375694bb70efdc90e9b7e8b5be9aa45d15d146f00854e19fbce8741ae125b48bdae95d1ef9a40da27268ad4c143f3f54202be7c09d6333639a6a1c589f5ba43c6ec2df3a8c519d22ed3f159ba97afc513e25fce3527b339050439896faa7ba8124954ec78143718a16eebf4f011e1d64e4ecb6d30d0c9fb0ed8f6fb80cb6d37b3fbd3f706b3c0b1916208c0a27c464cefb75204444cea1fca63d866cc1b031efba3cbf4b597ad6eb1fd2f8b290f7bc0fbb536aea13dd187a389575eb62d3d1f34f17af34b54a4df50fca98f1f0b813ad3c6d622f653575a74a58128d506b88401121e36159b81da002d7d5ba9dbdde4bada690adc10268d6497864ce5f9df89f2b83121f43e4c4fac0408ce60390027fc5ff140bdaa607a5b0c5576f8e5fd828b759d51f4ff04d7740cc2a603cf50aab72b2745baa2cd494207498f3f182bd4e0efce3bb69b9090424e50498508ad7f855cf96f5282f97c0a4fa96104c7fbaef5f212d1524f3457d3b18d6f78ac289ddd8b689d842207b79f916a71c154273a6fc9899bb24b876a7b64d78c80e639efbc25ce42ee6f203eac899c971477d30fbbb2601caef8a8501aba38327abb39b63ca62b0223cd7b975d5bd1ac3705c6c1385336ae13c4f426a14579b2b4c71f5f3d134e400c4acb24248076aebacddba25bd41f1233a524b4e366746a27eeedb18ef6eb02f128c65e8219aa0b535456bf518bc558c5aaaf5a9a6a170482bd9639ef7d50cdd3024ad3cd73d1196c108bdd669d57a4d7d8cf207dd89d5e4e1070a8ddb53f007503bfb86764c4fc14ce5810ef7eabcb7c8d456ba7cff879d18894ab8197a6371af9dbda43f195aed8631be0f4fea8b06e404c081788daf54aaf0dcd0c0a612356905930266af33b81c3f4e64c635d4837d50c2ede1a663bb5b549794d1e359371f581b1111d2a51823b2a00dbda197707f8415f129de3473ec43ce6e20b7095345231ad64443397ece6634c0f9192a3165ae61d063950d1be18dc151ff3c0778eddc0030f98410a8e11fed34b011a4503dd0c6c862d51191af10abb69bdd8635f1dc4ff28bbdd40752b0de9655afba0aaae87884ba1a4c31acf255264882a6696973252e3f1b8cd31bfdcdb3b5a709c1287d1abc076f2e024fd5b6fa43cb04e082f3333c60ef16254f69471bafbfb54abf6ddbfd5e4b06ec7f2a302fb588987eb931ab9f32e1cde63a1128763b2c99a75674977de5cb005e7d88b0830e63f665adecaa7046cffd3db48319932a96c66126b77cd4cf901070ae26eac1173b907fb051e4e3627a9a553d19a3a590b49fc3f0295d40f6166af5a2fbaaf6dd5397bf9f1744baebbfee80f2a6332e904dcd2d468ba056ef1b3ac44057430d7682f16d51e1275be60bb2225e5533bdea98f82c306484b67d724c1e0c801aaf90943f8b4241ba8e622c46580ee00c66dc9ca775c077ddfa950fe47fbbee13a8f806d1f6e1645d4e41d5debc8e1905db5ab363e3b9acdd3985da47d84510f09ee89aa8ce6edabf63c3715adae00afa733c35ee3f33cd4169a4a69294142b8236895feec7d72455fd97ff013c31ea1f49eb0b14f328aedb5140a329f9c09eaf204c4809c9cb03b06fbaf662c1663b5f195889b073f19ff387f91cb3de44be10f4e71a9d169d213ef2201e525d553035e2abd4f25954060c61e2e918b2de88d1bd1ff3264f60adcd9c595103f127600af9e1685a7cc46098bd479a149871cf77f3d5a2833633da8d060522d456038fbc09434b066ebd14cf09024ac60d77f5e905a144cf17844c759689228a70d0ac8ed8512704bf0f5732e36c969f329cdd4f2c1ee6efed98da4d223ecf8db2e5f0af0cc1223836a54334c1e34ff1c04a4f6a0517612c51c0b9dcd7be968229f83244a0b08ceae69e35a32238d5020aeb8bc09551c26be01b82bfcd2679aee445f2c1d8e5446a99af4fa81018e430ad2e871168cc91747e664ddc1a6dcd7744f78d5265c7560a3147e6bfb8dee8f9b2971d36a3e55d6a326724dc5477104202488cd9bfb49c655d83791e9c3e260ad287865fea6a4452ab8affa53f43b0d053c307ff0de9b99a7cc3f82ab26759af8179d7e4195dd7cd07686fd0df8c44d8c81c8a63a18a9b04a9eeafae5c971692827ced50d344d4cab6c0a1f831849c9f04271b9b79ba4007c040e18c6cacf4182c6c7ba36b2ce8e7a4d754111da35b1792d9cf0bdf7aec14367839313d3d7893ce0a29fd258fb38f8917cd9e1bcc95724f157e0d559e108d5db6446f5a490bb58ea913e1d535ef172d2759c4054f7f2d11eaf7f29c32f8382b57f97c55dc0af869d3589bb9deb63b4bfd0d9deae5f6a1bfc634636b1c30752d2a438762f5b4a6bd54e72c3aff6f24790c0749832938c3d9bc919172d8d49c9e00a88e80fa09a5562dcbc2631fa3633c81d877b69b40633cbda7cf4af67e377b5a6550e6e36caa90f273274b55f282667f7467e5a9ca1b16bcd8f13ca30d4bbfa65cf7cafb3f221d872d7f4abc28b1a1ca2ca2ce7aea73e8b2b2d0fca7372d1ebdcd03da1b9d4f7e8df8d8ba6de18f676d0e7de6bdb0e53f8d767584d38664ab046f1159b8b7f4886151c3e181fd2347110540366011cf965dc632407195214c9ee7d6a16593a3ea44ff83af996e2712a92cdbf87dd37b853b38eb33fd3aaf2784593d309cefb2c9ee3924118321e6d106a51bbb246abdde5983645cdc16ede08f31ce813ad6b6ec0e31397bcd488235e7071b45f877dd9eef9988dcc7ea55c3aeaf2a81582b43ae657c27e23543b4b720c076b4faa8eeea49efa3a7a88a3c138c2ae88f9acced91c4ce109bdc6afd9dc93780bdb45bb1a11e45d8eea15f24ca4c3f2c45cda37cb233f37bd69a0e40b2e483b06edb3d426ba960ed33e62285341be9c9e1f584bdfb6e119c3a40f9e3b81e630d478bebf012858c05c273085d525f98c1e53f6d315e167190d35ca18ecd1bd54e9e9d90801013c4f24d7c86a711f7bf62d84df3944c84ae9a77143c4ce2ee96185b3d0598ca05df783eefa02e68f3369888ed9500e701dea3171be4de867b9677e08cb3818b98fa189ffd97585e0a37e25933b738c70757a9f3106ba005ad2e4c9b16ac25cb6a1c86d88b5ba5387a57626450ae0687b2d16fbeccde177d1c72b57901863c2da6571959db6e6f0cb19d1553bff312c143e4a9825ee3d539212915ce853c8bb4c6273a2ccc519828e1509975725a1806894a80d85dc5d930d196c3557e907c3944c46654ab36ac415b7204ab77809470366bc40cd64a5e060d929f642158c17aa33e5c92b978753e1e6e4af1b3357be386acd75bb5f66eddc6c67d6ab05b83ee3707ae33e0a7603529129f4addc0ae073d920eaf752d28723e998edcc2c0db47fe54ab41ae425b0ab0f27133f88d8325c2de9ae61f7f079c77711c5638d2d58d5e7763779e8090e3f68def3097803ce2dd5bdb9a9d20df69644b6e436b034e958d3a971a8931b83fec84cfb22fb9966acaeecb1f46b26d4f65564fdf38cc3442bf9d046cf87c069cd759a35169b34f2b67cb699c7bc14075b1cc5839bd7cd16c45a74185994cc3656bf0aa4fa43b289ae600a207754e867f2ffc9692ed4ff9089f122747c2b38987dffc171c81c13fe1b56ca79c985feecd02d127fe53656bdd5fd9136c97125eeb31f6223a310fea8548b3da38fdb6163e759f2cfe4c64d799285e9a78bbd9c1bb1df20c4b0d2d0db7e1b3de4842215945b8da807a88202c57682ac6f5d1fa62435b077b84617fbb4a589b8fec3b92fb796dbd39fc1fe99f08b1c8a00eee7dd2673538575bc46931ecffee4abf182d4dabb9452b8dc0189150a6d0a957204432d628c623bb36ff4fd34428b1ac56d614a6d605df0db7c8849c49432dbbc0741b6085fdde3d7538b4352063b52051d60281324e392f05ea3ee825806a6734d41f4bac94268cf1f543d9c3ee9b51f13a527193b88cc1fcca0793b66cd82d621a8601d69261e741f3d6abd90fd0f426da30a5f9957619a3bdefe639cec6820a076c9f6a1725e6f16627aec1085c72506c4c801546c4a877bcc3b1ac82e0a68995def78e0f149e59656a61e4a837f83e94099251e1488adc8a66527c4707897fee63b5b7bc85f7fb1c9062c32d379d4030", 0x1000, 0xfffffffffffffff9) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 881.822737] keyctl_dh_compute+0xbf/0x120 [ 881.826900] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 881.831678] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 881.837154] __se_sys_keyctl+0x10f/0x3f0 [ 881.837587] erofs: read_super, device -> /dev/loop1 [ 881.841230] do_syscall_64+0xf9/0x620 [ 881.841251] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 881.841262] RIP: 0033:0x4665d9 [ 881.841276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.841282] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 881.841294] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 881.841301] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 881.841314] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 881.864914] erofs: options -> [ 881.877805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.877814] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 881.905649] could not allocate digest TFM handle user [ 881.909001] erofs: unmounted for /dev/loop0 [ 881.945530] erofs: read_super, device -> /dev/loop4 [ 881.962326] erofs: options -> 23:09:25 executing program 3 (fault-call:6 fault-nth:5): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:25 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 881.974884] erofs: root inode @ nid 36 [ 881.989040] erofs: bogus i_mode (0) @ nid 36 23:09:25 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="1b503ed418297ac688f9a9aa5119e78c1278eb3c0465375c9fe9b7dba5f3ea2a4d82d24458c13a439f0f1bf218ca0d2e46ca29fd18804037c501f742f381ee8d733d3ab03fe9409273ecee583b4dbaea664ab9d60d91de12cff9c6075ffb98504f44d5712284ff2f7e15af3d4c93fc30efe93663e6d268aa56f9ffffcd9f72aea95639ccecca0bdb0fd61c099f16649529b1924f43d8a79d955af1557f2f1185666ffc819233eb330d168a7dec707b12eca1560ce3f5c5ff471a44ff16d3dd", 0xbf, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000003c0)="289bcc26b4892455055d5b992eb2a207b7435882f491222b66796276bd598f094e28ef6960eeb1e0c4994739d89a3bed47ac83da54a0e1baf80f227ed1af42cc1c44011a0887133d84961bd7918f3f8bd1145b082583a9793ef5636abb7b9335d282828c1ee0cf6aeb5726719ab375369649de7cc8702c7607ff9ce7dfccf2e956b1a26a41444a7c1d6cc351e263c3d26c56038ef5bf13d2b770bf9569e4a056a9b14f8a55f410150ef425a201ee536d0a740beff9acc71be98f69fec94c1b6c1bbe23e39fe96dbb6587dfbbd85d66faf03bd79aceaf9e1c3265f8369dabc8a8421263ed2bff7aef46b914b6fb510a35f48400"/258, 0x102, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000600)="3e8415bcf99849ea3bfc1e31782aa0ae5a6f7954c5f20976c1de727d55cdb31060bc6c199dbb48407338596a5ad4c5da3a9a177a81235c7553b07576d7d635cf34badc89b53146ea821b57620ee58819275f96e55417004056c303130530bf77f48d60f8293471f87525a65cf96d30b460d8a82b722422a96de4654bcdcd43ffae090f75286c0dde84042b5a1eed9f521fd72c3abf6326f610db5ce9977ead0c5d7246aa633ffc7814a48e02913e4c7231987b57dad453a0af5a6bbdccd50b7c2f96272010f12491b253e82b448824de826378b1f06316d828a8507ac9dab8fc2568bdb58fa3a85dbcda67691212f0bf582b5b4825960d70424ae56db265e54e947091b34855c6ea39237379e9cf8f297011f16bbf878d09fe0eb38ff10e93844eb1192ba45047fe87d7ed67a2f8cea263cdc7e0258db5f4078f21e8d4599d11f6a7b6d59e65c346e20e16fc5593ae93362fab18604f00f6899e4dbd5b448233e1cfa2a848414300ba4509bd28bc2c11822982e5472a13a0be8e9e3297f71d657a5e12c4fe68886f692cffb689a1e56d797491091ed2bd27c61116a3465af205897b7716f29b0919e03b29dfbbdcd66e46a01256c65657c68543ea592c8e57cdb3685e7c4e1dc8d58e3dcea9f87c15f5bdc20a130e692d724c9dba32e51b95b5bd95337277f8c2127078f8954f3afc3cfc55e7d365ccef3c59ecc9519f76f9c327038255472563ade2f1f33ba67e52af596f7f68cf52f4dc4ece4d240c381267d00da64c5c1406bd1a8374238b72a0c77082be2fb5213cb77999c38ebdafdbc4676215e12525a389d175a5a0ee56fa254df84ca05a44546a9cef3493a91b3fed184beba4b0aa393cf2a7cfc6e7fcf3dda35b24689a51b804df2dc35f8adccc8ccdee421fa18f6b87d818f8f9065dd2580091d994e85bdddb20dfa3d68cbf711a2856fd463a64bd40421d732588ce7319641f60cb2df3db5fdde44e2f0f7a53cafca7983b8a374ecceb2ca0e3c65d43b7a65c94d0a170c635b9f3889b773c7bc3fecc37327f1b47b17677f8d81f846db58dead0f2d59eeed3eecd619013fd4759af43004b12614504e0e8ef5b8fece92a5ca35a5c299ac513074eafc011b1fa8245808f8f59f4e4a73037fa92ad311795cb48bf97af73ed2e666bfd3dfd446ec6302e374dd35e7ef991e002d6a1ae6e34efc3ab3b773295e6d4b6e25706d3a58f95dfab95f6202f8d8e0f681e633844b0ff09b6aa2c3eb3374aa637c0d47b80418ebc86c9b8e14f3fdccd946657597e305a94cf68ad57847317fa00cc52a46ec8ffb76778faaba2c0ea36dcf9693a52a749d36f5e963b5a46de90dbcf6a0b0255e907c7a90d70f496a5e7a177ec3c8bd6f37e8de0659ed70d5b8a5e37dae4c2bd16b82193392ae03061b8a9113d5da9f53790d556053d420dc28d1a3e321289f7310400c38ddfb8cf0e18ac1c6cea6c8dfac199c6a16a27ca47ca411beae6b99c93ba20a97af1705450d6f7a73c26a7b74450949ef887663044ea69dfad43e6d42bfebb379072865da75e004d78fa816b1c18019d1ac39ad8e65b31a24d9a7296387218f260dbe078d8c7f289d65882ffff15477be8eafc7e5cdb34755675a014bda65613bf32fbcebabec9c3337542f1c34dec3beaf599c9d89f5c5215331de5936f76f48e51e056e8bc9bee234dc9bcc14c57c1bd4e153eaf1fca8514a9286af235782008cf774deeae56c2cb5de9a6b00e6f62fac575d4c369462b53b9c859c4369e2e70d126b02553846594ac3dc34fef4c09ef17060010048f35d0ae78d24c35d710bac27d852a36b2a30da62bee1792d02db7683f95b35d47bc97bfb4683593fc24fef03613f6e7ad07782e9d5ff9288bc11a41272947d8726ee3b8e9a6847c8213b94039dda73cc289641bf874befcf191d57f45742b08ee134bbf5430ae1d6314fe5fc77ac1d5b7c18f36c5ce3993ce428d25efe7c68788033bd0dbc8808fa5a170cc912db5576de1a66e0b6b5d7d3d0687ac61613ab8fcc607a23c721ffb9bbf9a68ee2aaadb75fd0184680da93faaee262337b40dcb13a1c1c9dc5f9b6de24ee2ecdba34d183d2dbe59592774a9dfa45fbc07c1f3256f2a3d4c9e776236d728434a0551a158cf9e85d1e922ee939f4c85f4443dab2520d60a03753c7ab66846b491d7f036edfef9702255c2a5bb936d4b15085c1506061cae10fb15f5de3bdd9eabffe47d55d433f82395a8e7c27462c3d6fd919e551e88ec3bebb4181abcc5ebfa7288e1f1e9afcc8dae21365ad28851fc4dfc6ac27bf59bed122979bfbf7f708d4e548dd7255afdb74d4ef148e3057e262a0e4502f1a1a749d35989593c4934fd7940bebe2ec42ae2881f18142d9e28d7fdd6171f371b248d42366a18b4ce780d0a08c03a0675c1880d598a2198b6823441d586db7ec298731ba07fc1310aca069c107cff54e9fa44c8dc74e2e9ca38df6b387f818d94a35e6e17cdcbbc9ed75a8ac27fbce8a2a0803d62c54e72c11ddc13def1feaae4d2a3b77d9264882d9d664b2df947144424d4bf3689d2782595cad0860f017212a2998d48f71edc9b3dc262f70b6bc8d17a97b6ab24654136a3147fc24ec48127ecc17d5adf85f0e433e98622e522bab33529fe3ba46523acdcf1fb828d7127ba5d445ffa560e6b8d4ace8178321c65899bc7dc29bb49ed76e8af2302b1d494bd1ab21f83e2ed6de2f5b53a21f5f30a6acf45a8cc81151b578a5b27c118302d117d13880d9b9a28e6de61b4a512d9a99b361d0101325ca9894dbd823510af4e513415b9bb76ee35971549af02aa3d9d0df95e4254334e04bf30b9ee639704038fbad50c486b1a835997ca0c218fec633402aecacc940bd1444b38bcc47a7c83ef44ddf25d5d600e0c2a0c07beb967fcab693ab060bc3d53ae51d51a58f80ce8d60d01335aa36b205a12706d1d9f4d2e316cfcc102f2d6c23b574484551c7a96061e190f19e1fb8d8480a865211a1d6206f9d6e46bee7ed276d97726324806f9c5b7aa6678f10cacd73db4e2316f8c6a98ddb30604b6e97cb6a2532b967e3939139996ddd108f7268b22e794a15886088ce0b05b0645564f30b8f247d876147bf6a5bbfac1e63eda0652fce408b302e0f99f2b35bf676d2379e32b5d1e678ece458948477ac1f2db1a179c120f0c36094c088263aa0459f3b4bd4057f4059cde4556cdb7cbae6f9738bdaaf9ad22c5c92e7143f5245d98b8ac3194a02340c60888c145e535e548da495155407cff80f1447851367d7ef61690406ce18e9a382a951f84da3021ee481db5eee597584df6e31ad5dda83d8c3658397da9ec9f2de2d290db148fcdaf759996e2070412041c37865c7bd46753bdab6194865720c50234a9b05476d076ac6fdc24a51f795d4a1d9976e1ef4a6a3141a20d3af233e29f0d316afbfd229384b979054a3602470ab4ab50410137492dcaa0a2aae265d9aef54d5e0b3b8c363b83193f152dfb31c8b020a3f69e260aeab7f84d7f7279dabc3d3dfe258bcdd2fb6d4864a4903bcc17690c657203c4ae69c4ca3b9fc4e4a0f324ff28054698713ce86af8614de71006ae8bff9939e1c9c72293e46c12de50d74642fa5090bf857f960de539b3fdea623ea6c34718918fd22807d38a512b4ed22659310dac6cb48d2cdaef6f8ccb374523f361d90d7f26ae78d7a4517c9c5cdcb0b9271e48c2c1e6cd23459e38d90361e4815aa7a89b9ef3c0d152a6818096f4611479b9d8357660e8b8685240be1c716b6f5a1011b32425fd44f67d9d2c6233571ecdd1845b6ac443b20f2bda3f61130b09f36ceed3e5cedcfefd5b66b0984e29cdbb6923fcc5ceae7206c4c400c7dfa7cc31c9faba5eac14fa40715d33f4f67f5b861ce8aad2e2286bda7feffee47299f04403dc7449899ec173fb22c975e0b000e9377afaeb3a8bab5edcf74aec2dd4d45a2e4b9de7a1f4dbb1d0d7626307ab6985c08077bcd0191f78ed1f15be49767177b9b8fee2ff62c26b04a141cc2feb87ed3e080a6da9e9c419e29787359bdaa8bddc11065f694b6c32e47528aa7c9bf0aa2d877d175e6b23d1527342658a4ef3ae4b7be17b6d1762c469dfffe18b232a66908df175e8441512cfa60271da6db34af738cf4c06a05499f6ec78e8b190f0498b32fffb41dbeb298ed6ea23464e2dfc750f1191c3fec15bfccb072134a4e71e823a9d497f64be05016e6bcdcfd585488fd177ba702f43f95de48a02fc895721a89a7166cd8839a060ebba7d128ff63c756652dc148436a6ccb2d19df1a404ec41266ff90302a30baafd6ad4298b0141ea6fc427b5da2d554142d0f9e27b32e096bb81d86abb33f0decc082a13274f5f23e78b6273c8669eea67fad2fb87759702868bf95048c766fb406d58363b51f9f002b77331732564ddc6387b599a02ae0374824248d343cd7fcc852e58089b8ae30e514439f25090e330c319abcc48443f0b0161127bfd9c7866c9612032e7717e211cc39eef17a064faf5d497349ec0f763ed5c78e090c326c224be0ca4f1c9570a58ae7419803da52a32c7d3ff754b4438d0f75fe7446094d6ce6906b5ff8fc71ed8900951b765878204602ee34e3f21c547d7a22898953a1b01fb6e6be468325cbe9664127fb73d8c4eeed5315dc8c1d1d1161fc69461800b13e5a9fb9871da150b3ed60100ff725a95b8fdf6476a65e73493d528e0f11a4109b0a1afadfcda501a2eed65fba54e12c0ffaa6fad6b47ceba6d8adfa2e58de94b6d6ceccb787477cf149711bcc289c5b54e0936258974eaeef1ffddd2025c28b3654f2ef531f9a05c2436238514a5e22f8cdac18d5c0b5bcb215d586a3db0f8ee0d901d4401fc3ded01c4d4e7013dba32f94da71f267a898fc5ad6308fa37ec3090af40f27bd1fdc356a7e51375394e6ca15afc4f1e50d422b61998ead2b1e78fbd15c7aec1c626b33e0fc2abad4093b85a8c301c8f1cb894c0d41f63860c89f3dfcde12e4677f0114e78f6c28f82b204b38b5eb56f9a32570072503b0e8d28af943d022dd2d7d3639515e121912c882d488990191bab785e8aa29407026ddd28658d833ed73bdda1a4c218213dd6a444063af9d055964bb6e8b727055c910990d38fa0ab23d29aaacef2c0856e975f863c1270d90d9ee371d2173b1d66bff399dfda0a780ff83811a3cb2d3214442c2196e0820f8bed7b79c6df6a1464e0ae0d43b42921b14396bd3eeac4f755a4aacaea9505b5468787373e498b3be242ab1268349fa00f2931fdc039d2c7e6c06f678a2ab2eef6ef54400b2aebb39341be7dc5a9f587332da2195ca96928cd0275013b8a5d0bedccc887c6ba0c5f23130af5d88c74a29bb1387c32b0ecbfc781015e8b136ba226a9644c8a2e09bae852a77110577c280c7af3e0cc19f38de138c0f08393b24e720ba8cbc37c5941b567fbf133fd891fe039840868db5afa8e84713d5749dcc25f9c83b443cd5bae5c59d79fb3721e6102b155e21afa37de43e9dff76504ec696df4a4b1ca948622067aab443038aae1b422a92147d4183a8fc155ab97d52175ddf72ccbe7cbac1e4d564eddc2458d7fe9db07a9662cdb106276a1adb7b26195697ffd04481d8ca9843ef01836d6617d29bd579bcf4f064ec4a7f7f91c9e5a2814fa1722fc9d0cd5230e74d5b7b820e4e7974b78772fafff5975714b57873651928ef8c477b514a7d9c6f1839259ce5f082bb9c94b9aa10e9ddd46034280ac9a1c2440fe2a95b9e6f6b4b1910ecb06e674236dbbf470427ef336bf48cb0da79b79e19c", 0x1000, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:25 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x5f, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 882.031464] erofs: root inode @ nid 36 [ 882.035590] erofs: mounted on /dev/loop1 with opts: . [ 882.047944] FAULT_INJECTION: forcing a failure. [ 882.047944] name failslab, interval 1, probability 0, space 0, times 0 [ 882.065196] CPU: 1 PID: 19235 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 882.073160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.082531] Call Trace: [ 882.085154] dump_stack+0x1fc/0x2ef [ 882.088874] should_fail.cold+0xa/0xf [ 882.092739] ? setup_fault_attr+0x200/0x200 [ 882.097097] ? lock_acquire+0x170/0x3c0 [ 882.101106] __should_failslab+0x115/0x180 [ 882.105361] should_failslab+0x5/0x10 [ 882.109164] __kmalloc_track_caller+0x2a6/0x3c0 [ 882.113842] ? dh_data_from_key+0x17e/0x2a0 [ 882.118171] kmemdup+0x23/0x50 [ 882.121378] dh_data_from_key+0x17e/0x2a0 [ 882.125540] __keyctl_dh_compute+0x4a1/0x13d0 [ 882.130052] ? check_preemption_disabled+0x41/0x280 [ 882.135182] ? dh_data_from_key+0x2a0/0x2a0 [ 882.139621] ? proc_fail_nth_write+0x95/0x1d0 [ 882.144136] ? __might_fault+0x11f/0x1d0 [ 882.148496] ? lock_downgrade+0x720/0x720 [ 882.152955] ? lock_acquire+0x170/0x3c0 [ 882.156933] ? __might_fault+0xef/0x1d0 [ 882.160932] ? __might_fault+0x192/0x1d0 [ 882.164988] keyctl_dh_compute+0xbf/0x120 [ 882.169126] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 882.173892] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 23:09:25 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 882.179248] __se_sys_keyctl+0x10f/0x3f0 [ 882.183301] do_syscall_64+0xf9/0x620 [ 882.187111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.192306] RIP: 0033:0x4665d9 [ 882.195507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 882.214516] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 882.222225] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 882.229492] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 882.236769] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 882.244027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.251637] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:25 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:25 executing program 3 (fault-call:6 fault-nth:6): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:25 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x60, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 882.336862] erofs: unmounted for /dev/loop1 [ 882.340168] erofs: read_super, device -> /dev/loop4 [ 882.346635] erofs: options -> [ 882.352133] erofs: root inode @ nid 36 [ 882.356435] erofs: bogus i_mode (0) @ nid 36 23:09:26 executing program 2: r0 = add_key$user(&(0x7f00000000c0), &(0x7f00000005c0), &(0x7f0000000080)="ae512d062b", 0x5, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 882.427418] FAULT_INJECTION: forcing a failure. [ 882.427418] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 882.439283] CPU: 0 PID: 19252 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 882.447186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.456671] Call Trace: [ 882.460241] dump_stack+0x1fc/0x2ef [ 882.463901] should_fail.cold+0xa/0xf [ 882.467735] ? setup_fault_attr+0x200/0x200 [ 882.472080] ? wake_up_q+0x93/0xe0 [ 882.475644] ? __mutex_unlock_slowpath+0x2be/0x610 [ 882.480606] __alloc_pages_nodemask+0x239/0x2890 [ 882.485422] ? __lock_acquire+0x6de/0x3ff0 [ 882.489703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 882.494559] ? blkdev_ioctl+0x11a/0x1a80 [ 882.498736] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.504213] ? blkpg_ioctl+0x9d0/0x9d0 [ 882.508124] ? debug_check_no_obj_freed+0x201/0x490 [ 882.517862] ? lock_downgrade+0x720/0x720 [ 882.522045] cache_grow_begin+0xa4/0x8a0 [ 882.523343] erofs: read_super, device -> /dev/loop1 [ 882.526120] ? setup_fault_attr+0x200/0x200 [ 882.526139] ? lock_acquire+0x170/0x3c0 [ 882.526165] cache_alloc_refill+0x273/0x340 [ 882.544709] kmem_cache_alloc+0x346/0x370 [ 882.548978] getname_flags+0xce/0x590 [ 882.552802] do_mkdirat+0x8d/0x2d0 [ 882.556360] ? __ia32_sys_mknod+0x120/0x120 [ 882.560704] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 882.566102] ? trace_hardirqs_off_caller+0x6e/0x210 [ 882.571247] ? do_syscall_64+0x21/0x620 [ 882.575242] do_syscall_64+0xf9/0x620 [ 882.579071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.584284] RIP: 0033:0x4656e7 [ 882.587497] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 882.597919] erofs: options -> [ 882.606418] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 882.606433] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 882.606440] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 882.606447] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 882.606456] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 882.606464] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 882.636736] FAULT_INJECTION: forcing a failure. [ 882.636736] name failslab, interval 1, probability 0, space 0, times 0 [ 882.661234] erofs: read_super, device -> /dev/loop4 [ 882.689487] CPU: 1 PID: 19271 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 882.689845] erofs: options -> [ 882.697424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.697431] Call Trace: [ 882.697458] dump_stack+0x1fc/0x2ef [ 882.697481] should_fail.cold+0xa/0xf [ 882.716417] erofs: root inode @ nid 36 [ 882.720120] ? setup_fault_attr+0x200/0x200 [ 882.720137] ? lock_acquire+0x170/0x3c0 [ 882.720158] __should_failslab+0x115/0x180 [ 882.720175] should_failslab+0x5/0x10 [ 882.720193] __kmalloc_track_caller+0x2a6/0x3c0 [ 882.729861] erofs: bogus i_mode (0) @ nid 36 [ 882.732356] ? dh_data_from_key+0x17e/0x2a0 [ 882.732381] kmemdup+0x23/0x50 [ 882.757029] dh_data_from_key+0x17e/0x2a0 [ 882.761210] __keyctl_dh_compute+0x4d3/0x13d0 [ 882.765732] ? check_preemption_disabled+0x41/0x280 [ 882.770780] ? dh_data_from_key+0x2a0/0x2a0 [ 882.775120] ? proc_fail_nth_write+0x95/0x1d0 [ 882.779653] ? __might_fault+0x11f/0x1d0 [ 882.783740] ? lock_downgrade+0x720/0x720 [ 882.786103] erofs: root inode @ nid 36 [ 882.787898] ? lock_acquire+0x170/0x3c0 [ 882.787915] ? __might_fault+0xef/0x1d0 [ 882.787932] ? __might_fault+0x192/0x1d0 [ 882.803843] keyctl_dh_compute+0xbf/0x120 [ 882.806031] erofs: mounted on /dev/loop1 with opts: . [ 882.808006] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 882.808032] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 882.823325] __se_sys_keyctl+0x10f/0x3f0 [ 882.827596] do_syscall_64+0xf9/0x620 [ 882.831432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 882.836723] RIP: 0033:0x4665d9 [ 882.839932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 882.858852] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 882.866583] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 882.873878] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 882.877070] erofs: read_super, device -> /dev/loop0 [ 882.881537] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 882.881545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.881553] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 882.950785] erofs: unmounted for /dev/loop1 [ 882.951961] erofs: options -> [ 882.958545] erofs: root inode @ nid 36 [ 882.978943] erofs: mounted on /dev/loop0 with opts: . 23:09:26 executing program 0 (fault-call:0 fault-nth:27): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:26 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x61, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:26 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/107, 0x6b, 0x0) 23:09:26 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:26 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:26 executing program 3 (fault-call:6 fault-nth:7): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 883.061470] erofs: unmounted for /dev/loop0 23:09:26 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)=' ', 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 883.089288] FAULT_INJECTION: forcing a failure. [ 883.089288] name failslab, interval 1, probability 0, space 0, times 0 [ 883.101111] CPU: 0 PID: 19287 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 883.109020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.118565] Call Trace: [ 883.121175] dump_stack+0x1fc/0x2ef [ 883.124819] should_fail.cold+0xa/0xf [ 883.128727] ? setup_fault_attr+0x200/0x200 [ 883.133496] ? lock_acquire+0x170/0x3c0 [ 883.137485] __should_failslab+0x115/0x180 [ 883.141724] should_failslab+0x5/0x10 [ 883.145689] __kmalloc+0x2ab/0x3c0 [ 883.149219] ? __keyctl_dh_compute+0x512/0x13d0 [ 883.153895] __keyctl_dh_compute+0x512/0x13d0 [ 883.158398] ? dh_data_from_key+0x2a0/0x2a0 [ 883.162711] ? proc_fail_nth_write+0x95/0x1d0 [ 883.167202] ? __might_fault+0x11f/0x1d0 [ 883.171269] ? lock_downgrade+0x720/0x720 [ 883.175414] ? lock_acquire+0x170/0x3c0 [ 883.179388] ? __might_fault+0xef/0x1d0 [ 883.183364] ? __might_fault+0x192/0x1d0 [ 883.187426] keyctl_dh_compute+0xbf/0x120 [ 883.191580] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 883.196365] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 883.201740] __se_sys_keyctl+0x10f/0x3f0 [ 883.206012] do_syscall_64+0xf9/0x620 [ 883.210056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 883.215255] RIP: 0033:0x4665d9 [ 883.218453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:26 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x62, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 883.237534] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 883.245264] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 883.252542] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 883.259825] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 883.267103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.274491] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:26 executing program 3 (fault-call:6 fault-nth:8): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 883.330038] erofs: read_super, device -> /dev/loop1 [ 883.335116] erofs: options -> [ 883.349026] erofs: read_super, device -> /dev/loop4 [ 883.371151] erofs: options -> [ 883.376487] erofs: root inode @ nid 36 [ 883.388038] erofs: root inode @ nid 36 [ 883.397996] erofs: mounted on /dev/loop1 with opts: . [ 883.415063] erofs: bogus i_mode (0) @ nid 36 23:09:27 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000004c0)="28f565d4896591c62e76ffcb45fc2e6364d8acf49cf4614c19f3879b481e76672ef34f44b9b187d90c763e34f2a68a81b53a6761161168932d94553be431a83c9cc7b27a1538d33e2b324719259b2c49420d4d920a35b6db701e9f43d280ae1b3bd3f4dca5a1932141daa895df7c4a31fd0b0c28122768c2df72ae670b6797b9375c5ed7c25f5cf9a66c1f44f6822a608f81798f8c22da0a724095aeb13ebb139a85cf6a5d4fc1395a91a842b4e7affd214c7a8943b314a5990f3a730e38df46ab6268495bcb3d89d0e6a0de266fb59fa1fe3e0b701bcbcc5612714fffdd82176bb6797b3816c442069c152e", 0xec, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)='8', 0x1, r1) add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)="271769204d0cbbee29d0201950300ab63ac7abd262101258e14414e00782b4ff81a8e895294c37ae3bac694c8491db18970f15e78f63f813d7d6845148f0ae38e120bbc34e220137fd5c9fa7661c3bbcc1b9fcd6c86378e5df23d5c0b2b484f1c194dac91bfaf953638dd1c8b4ca04086357303fdc2085a2e7e54c1a8c3ef9e2f205b5ca7315fff5ca4707620876036476db9dcc9e9c380036f4783dd8806de2a73a3308ef15d56f48f9177d2c5c1c07e7b6a4cae90b1ab61fed6c7f4a80daf157e032fe1135e9101fd6699f1aab400315dc74", 0xd3, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 883.416404] FAULT_INJECTION: forcing a failure. [ 883.416404] name failslab, interval 1, probability 0, space 0, times 0 [ 883.432048] FAULT_INJECTION: forcing a failure. [ 883.432048] name failslab, interval 1, probability 0, space 0, times 0 [ 883.452189] CPU: 1 PID: 19308 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 883.460160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.469564] Call Trace: [ 883.472165] dump_stack+0x1fc/0x2ef [ 883.475873] should_fail.cold+0xa/0xf [ 883.479666] ? setup_fault_attr+0x200/0x200 [ 883.483980] ? __lock_acquire+0x6de/0x3ff0 [ 883.488205] __should_failslab+0x115/0x180 [ 883.492428] should_failslab+0x5/0x10 [ 883.496242] __kmalloc+0x2ab/0x3c0 [ 883.499766] ? ext4_find_extent+0x9bb/0xc70 [ 883.504078] ext4_find_extent+0x9bb/0xc70 [ 883.508308] ext4_ext_map_blocks+0x1c0/0x7390 [ 883.512812] ? __lock_acquire+0x6de/0x3ff0 [ 883.517055] ? __lock_acquire+0x6de/0x3ff0 [ 883.521299] ? mark_held_locks+0xf0/0xf0 [ 883.525358] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 883.530730] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 883.535947] ? mark_held_locks+0xf0/0xf0 [ 883.540006] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 883.544845] ? ext4_es_lookup_extent+0x375/0xb60 [ 883.549605] ? lock_downgrade+0x720/0x720 [ 883.553740] ? lock_acquire+0x170/0x3c0 [ 883.557792] ? check_preemption_disabled+0x41/0x280 [ 883.562910] ? lock_acquire+0x170/0x3c0 [ 883.566883] ? ext4_map_blocks+0x33e/0x1a50 [ 883.571340] ext4_map_blocks+0xd88/0x1a50 [ 883.575500] ? check_preemption_disabled+0x41/0x280 [ 883.580535] ? ext4_issue_zeroout+0x160/0x160 [ 883.585059] ? __brelse+0x84/0xa0 [ 883.588539] ? __ext4_new_inode+0x2eb/0x5a20 [ 883.593047] ext4_getblk+0xad/0x4f0 [ 883.596686] ? ext4_iomap_begin+0xe00/0xe00 [ 883.601017] ? ext4_free_inode+0x1780/0x1780 [ 883.605414] ? debug_check_no_obj_freed+0x201/0x490 [ 883.610440] ? __dquot_initialize+0x298/0xb70 [ 883.614925] ext4_bread+0x7c/0x210 [ 883.618452] ? ext4_getblk+0x4f0/0x4f0 [ 883.622419] ? dquot_initialize_needed+0x290/0x290 [ 883.627338] ? trace_hardirqs_off+0x64/0x200 [ 883.631752] ext4_append+0x155/0x370 [ 883.635454] ext4_mkdir+0x5bd/0xe10 [ 883.639092] ? ext4_init_dot_dotdot+0x600/0x600 [ 883.643757] ? generic_permission+0x116/0x4d0 [ 883.648424] ? inode_permission.part.0+0x10c/0x450 [ 883.653342] vfs_mkdir+0x508/0x7a0 [ 883.656873] do_mkdirat+0x262/0x2d0 [ 883.660504] ? __ia32_sys_mknod+0x120/0x120 [ 883.664902] ? trace_hardirqs_off_caller+0x6e/0x210 [ 883.669906] ? do_syscall_64+0x21/0x620 [ 883.674061] do_syscall_64+0xf9/0x620 [ 883.677853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 883.683028] RIP: 0033:0x4656e7 [ 883.686223] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.705110] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 883.712805] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 23:09:27 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x63, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 883.720171] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 883.727433] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 883.735021] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 883.742310] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 883.749709] CPU: 0 PID: 19311 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 883.757625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.767112] Call Trace: [ 883.769718] dump_stack+0x1fc/0x2ef 23:09:27 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 883.773365] should_fail.cold+0xa/0xf [ 883.777201] ? setup_fault_attr+0x200/0x200 [ 883.781554] ? lock_acquire+0x170/0x3c0 [ 883.785575] __should_failslab+0x115/0x180 [ 883.789843] should_failslab+0x5/0x10 [ 883.793701] __kmalloc+0x2ab/0x3c0 [ 883.797265] ? crypto_create_tfm+0x79/0x2e0 [ 883.801611] ? up_read+0x17/0x110 [ 883.805129] crypto_create_tfm+0x79/0x2e0 [ 883.809309] crypto_alloc_tfm+0xff/0x230 [ 883.813400] __keyctl_dh_compute+0x55c/0x13d0 [ 883.817938] ? dh_data_from_key+0x2a0/0x2a0 [ 883.822288] ? proc_fail_nth_write+0x95/0x1d0 [ 883.826822] ? __might_fault+0x11f/0x1d0 [ 883.831141] ? lock_downgrade+0x720/0x720 [ 883.835419] ? lock_acquire+0x170/0x3c0 [ 883.839673] ? __might_fault+0xef/0x1d0 [ 883.843662] ? __might_fault+0x192/0x1d0 [ 883.847745] keyctl_dh_compute+0xbf/0x120 [ 883.851918] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 883.856686] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 883.862062] __se_sys_keyctl+0x10f/0x3f0 [ 883.866133] do_syscall_64+0xf9/0x620 [ 883.869962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 883.875179] RIP: 0033:0x4665d9 [ 883.878373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.897861] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 883.905583] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 883.912859] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 883.920144] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 883.927451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.934760] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 883.945274] erofs: unmounted for /dev/loop1 [ 883.958291] erofs: read_super, device -> /dev/loop0 [ 883.963881] erofs: options -> [ 883.969111] erofs: root inode @ nid 36 [ 883.974271] erofs: mounted on /dev/loop0 with opts: . 23:09:27 executing program 0 (fault-call:0 fault-nth:28): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:27 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x64, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:27 executing program 3 (fault-call:6 fault-nth:9): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 884.032337] erofs: read_super, device -> /dev/loop4 [ 884.038094] erofs: options -> [ 884.065851] erofs: root inode @ nid 36 [ 884.096032] erofs: unmounted for /dev/loop0 [ 884.096424] erofs: bogus i_mode (0) @ nid 36 [ 884.112637] erofs: read_super, device -> /dev/loop1 [ 884.127101] erofs: options -> [ 884.137387] FAULT_INJECTION: forcing a failure. [ 884.137387] name failslab, interval 1, probability 0, space 0, times 0 [ 884.150349] erofs: root inode @ nid 36 [ 884.156553] CPU: 0 PID: 19332 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 884.161180] erofs: mounted on /dev/loop1 with opts: . [ 884.164490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.164499] Call Trace: [ 884.164529] dump_stack+0x1fc/0x2ef [ 884.164552] should_fail.cold+0xa/0xf [ 884.189510] ? setup_fault_attr+0x200/0x200 [ 884.193846] ? lock_acquire+0x170/0x3c0 [ 884.197923] __should_failslab+0x115/0x180 [ 884.202177] should_failslab+0x5/0x10 [ 884.205984] kmem_cache_alloc_trace+0x284/0x380 [ 884.210674] ? crypto_dh_decode_key+0x36c/0x4a0 [ 884.215342] mpi_alloc+0x43/0x240 [ 884.218893] mpi_read_raw_data+0xd9/0x3f0 [ 884.223114] ? mpi_free+0x10/0x150 [ 884.226768] dh_set_secret+0xe8/0x2a0 [ 884.230879] ? dh_compute_value+0x5c0/0x5c0 [ 884.235230] ? crypto_alloc_tfm+0x123/0x230 [ 884.239581] __keyctl_dh_compute+0x5e3/0x13d0 [ 884.244099] ? dh_data_from_key+0x2a0/0x2a0 [ 884.248561] ? proc_fail_nth_write+0x95/0x1d0 [ 884.253095] ? __might_fault+0x11f/0x1d0 [ 884.257583] ? lock_downgrade+0x720/0x720 [ 884.261769] ? lock_acquire+0x170/0x3c0 [ 884.265760] ? __might_fault+0xef/0x1d0 [ 884.269750] ? __might_fault+0x192/0x1d0 [ 884.273820] keyctl_dh_compute+0xbf/0x120 [ 884.277968] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 884.282734] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 884.288182] __se_sys_keyctl+0x10f/0x3f0 [ 884.292239] do_syscall_64+0xf9/0x620 [ 884.296070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.301300] RIP: 0033:0x4665d9 [ 884.304619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.323557] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 884.331491] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 884.338773] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 23:09:27 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:27 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x65, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:27 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="d3fcc2eeb9b7e108369916747f2872d8617d761f99831c363a6cb7fede001a98d9d27f456187a96e46b8e0b47c89957a39f77138a2a7c8b860c2e7057d9bc79fab8ac7c47d01d58430e4c10e340568a96f484f0ecdfa6572ae687c95975f739c860b1a3c3f8c55fc9605abb0597e5bb88e3f5ff6affb00017d71028ac386faf739c0b38dbc1597900dc2d03052b633347837881506c2eed0146022532577ea7b85338dfad74c3bc8cfcc8f624b12ec1415f5743dabe5ff95fe3e18477a492c63510282566618e682175a5f60b674680a38fd7c95a6ab5be3fd353e7ad05bfdca4d666b5a72fc1e77", 0xe8, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r4}, &(0x7f0000000140)=""/177, 0xb1, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r5}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 884.346125] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 884.353502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.360944] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:28 executing program 3 (fault-call:6 fault-nth:10): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:28 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x66, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:28 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "bb293a8645c658b2d165a47c31bcc80a66b132a9a4ac3201f7685a86af60951343cdf571e37c977d556eaf71c3ba3cfe7804d0fe13055f1913c91fae6f6abac6", 0x16}, 0x48, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/104, 0x68, 0x0) 23:09:28 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 884.512814] erofs: unmounted for /dev/loop1 [ 884.528643] FAULT_INJECTION: forcing a failure. [ 884.528643] name failslab, interval 1, probability 0, space 0, times 0 [ 884.560506] CPU: 0 PID: 19353 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 884.565987] FAULT_INJECTION: forcing a failure. [ 884.565987] name failslab, interval 1, probability 0, space 0, times 0 [ 884.568546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.589300] Call Trace: [ 884.591915] dump_stack+0x1fc/0x2ef [ 884.595594] should_fail.cold+0xa/0xf [ 884.599504] ? setup_fault_attr+0x200/0x200 [ 884.603841] ? lock_acquire+0x170/0x3c0 [ 884.607853] __should_failslab+0x115/0x180 [ 884.612114] should_failslab+0x5/0x10 [ 884.615951] __kmalloc+0x2ab/0x3c0 [ 884.619542] ? mpi_alloc_limb_space+0x2f/0x50 [ 884.624060] mpi_alloc_limb_space+0x2f/0x50 [ 884.628410] mpi_alloc+0x1a3/0x240 [ 884.631983] mpi_read_raw_data+0xd9/0x3f0 [ 884.636232] ? mpi_free+0x10/0x150 [ 884.639885] dh_set_secret+0xe8/0x2a0 [ 884.643788] ? dh_compute_value+0x5c0/0x5c0 [ 884.648134] ? crypto_alloc_tfm+0x123/0x230 [ 884.652488] __keyctl_dh_compute+0x5e3/0x13d0 [ 884.657115] ? dh_data_from_key+0x2a0/0x2a0 [ 884.661465] ? proc_fail_nth_write+0x95/0x1d0 [ 884.663553] erofs: read_super, device -> /dev/loop1 [ 884.666002] ? __might_fault+0x11f/0x1d0 [ 884.666025] ? lock_downgrade+0x720/0x720 [ 884.666043] ? lock_acquire+0x170/0x3c0 [ 884.683240] ? __might_fault+0xef/0x1d0 [ 884.687242] ? __might_fault+0x192/0x1d0 [ 884.688885] erofs: options -> [ 884.691473] keyctl_dh_compute+0xbf/0x120 [ 884.691490] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 884.691515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 884.691534] __se_sys_keyctl+0x10f/0x3f0 [ 884.691554] do_syscall_64+0xf9/0x620 [ 884.691569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 884.691582] RIP: 0033:0x4665d9 [ 884.691596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.691602] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 884.691620] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 884.715448] erofs: root inode @ nid 36 [ 884.716953] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 884.716964] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 884.716973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.716988] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 884.723828] erofs: read_super, device -> /dev/loop4 [ 884.732380] CPU: 1 PID: 19356 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 884.805714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.815085] Call Trace: [ 884.817702] dump_stack+0x1fc/0x2ef [ 884.821410] should_fail.cold+0xa/0xf [ 884.824189] erofs: options -> [ 884.825506] ? setup_fault_attr+0x200/0x200 [ 884.825525] ? __lock_acquire+0x6de/0x3ff0 [ 884.825549] __should_failslab+0x115/0x180 [ 884.832393] erofs: root inode @ nid 36 [ 884.833064] should_failslab+0x5/0x10 [ 884.849364] __kmalloc+0x2ab/0x3c0 [ 884.850028] erofs: bogus i_mode (0) @ nid 36 [ 884.852909] ? ext4_find_extent+0x9bb/0xc70 [ 884.852928] ext4_find_extent+0x9bb/0xc70 [ 884.852950] ext4_ext_map_blocks+0x1c0/0x7390 [ 884.852970] ? __lock_acquire+0x6de/0x3ff0 [ 884.869000] erofs: mounted on /dev/loop1 with opts: . [ 884.870317] ? __lock_acquire+0x6de/0x3ff0 [ 884.870340] ? mark_held_locks+0xf0/0xf0 [ 884.870356] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 884.870370] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 884.870384] ? mark_held_locks+0xf0/0xf0 [ 884.870400] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 884.870416] ? ext4_es_lookup_extent+0x375/0xb60 23:09:28 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x67, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:28 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="b9fea309159747526ab0cf9f6a9637fe02227408d7671b1eae2fed71a3328ba15d584de99e9e3bf361211136364d43d77f4d9fec3311a36f", 0x38, r3) [ 884.870433] ? lock_downgrade+0x720/0x720 [ 884.870443] ? lock_acquire+0x170/0x3c0 [ 884.870464] ? check_preemption_disabled+0x41/0x280 [ 884.925601] ? lock_acquire+0x170/0x3c0 [ 884.930266] ? ext4_map_blocks+0x33e/0x1a50 [ 884.934757] ext4_map_blocks+0xd88/0x1a50 [ 884.939436] ? check_preemption_disabled+0x41/0x280 [ 884.944581] ? ext4_issue_zeroout+0x160/0x160 [ 884.949187] ? __brelse+0x84/0xa0 [ 884.952657] ? __ext4_new_inode+0x2eb/0x5a20 [ 884.957071] ext4_getblk+0xad/0x4f0 [ 884.960699] ? ext4_iomap_begin+0xe00/0xe00 [ 884.965014] ? ext4_free_inode+0x1780/0x1780 [ 884.969408] ? debug_check_no_obj_freed+0x201/0x490 [ 884.974561] ? __dquot_initialize+0x298/0xb70 [ 884.979174] ext4_bread+0x7c/0x210 [ 884.982725] ? ext4_getblk+0x4f0/0x4f0 [ 884.986847] ? dquot_initialize_needed+0x290/0x290 [ 884.991785] ? trace_hardirqs_off+0x64/0x200 [ 884.996572] ext4_append+0x155/0x370 [ 885.000288] ext4_mkdir+0x5bd/0xe10 [ 885.003995] ? ext4_init_dot_dotdot+0x600/0x600 [ 885.008658] ? generic_permission+0x116/0x4d0 [ 885.013146] ? inode_permission.part.0+0x10c/0x450 [ 885.018195] vfs_mkdir+0x508/0x7a0 [ 885.021769] do_mkdirat+0x262/0x2d0 [ 885.025390] ? __ia32_sys_mknod+0x120/0x120 [ 885.029882] ? trace_hardirqs_off_caller+0x6e/0x210 [ 885.035270] ? do_syscall_64+0x21/0x620 [ 885.039402] do_syscall_64+0xf9/0x620 [ 885.043203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 885.048902] RIP: 0033:0x4656e7 [ 885.052080] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.071266] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 885.078968] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 885.086256] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 885.093815] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 885.101435] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 885.108938] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 885.152556] erofs: read_super, device -> /dev/loop0 [ 885.164448] erofs: options -> [ 885.176871] erofs: root inode @ nid 36 [ 885.183932] erofs: unmounted for /dev/loop1 [ 885.185132] erofs: mounted on /dev/loop0 with opts: . [ 885.191098] erofs: read_super, device -> /dev/loop4 [ 885.200980] erofs: options -> [ 885.205117] erofs: root inode @ nid 36 [ 885.211222] erofs: bogus i_mode (0) @ nid 36 23:09:28 executing program 0 (fault-call:0 fault-nth:29): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:28 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x68, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:28 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000440)={0x0, r0, r2}, &(0x7f0000000480)=""/79, 0x4f, &(0x7f0000000540)={&(0x7f0000000500)={'xcbc(des3_ede-generic)\x00'}, &(0x7f0000000600)="b3b3e13d52e51483534255ab75f50a537e62d68272d9a5a4bfe67f2e59065966e4e54a8880cdc5d2992d27eaa8eee357c18d70f12d5eb327d67a916525f8079ecb2b690f60c7110696dde83abca0cb820edf125d1965fdbfb2157f8038d0100c4f2c2634a5d3d013502cedd2bfab87d3cf573a217592bf573072f9cd462571243dd48ed059a04934118bbc6d32f0b9d8aff77d62ba766bbac372454d634199d109375c043672e8b2dfef208dd01a1c57be5ad4fb93eee9", 0xb7}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)='keyring\x00', 0xfffffffffffffffa) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000003c0)="510c3769fd1ac042706e3d851ef3cc5e681023af86dfd2d70a2984ab6e1f1abf3f0162fc299ecf69774b2de12678403d0f6895828f3ff2b1599eb721f9573fcf77af1ccea04046edd35905d29367", 0x4e, r3) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r4) 23:09:28 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:28 executing program 3 (fault-call:6 fault-nth:11): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:28 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2300, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 885.266257] erofs: unmounted for /dev/loop0 23:09:28 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x69, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 885.326069] FAULT_INJECTION: forcing a failure. [ 885.326069] name failslab, interval 1, probability 0, space 0, times 0 [ 885.354890] erofs: read_super, device -> /dev/loop1 [ 885.361267] erofs: options -> [ 885.367501] erofs: read_super, device -> /dev/loop4 [ 885.374144] erofs: root inode @ nid 36 [ 885.378247] erofs: options -> [ 885.382410] erofs: mounted on /dev/loop1 with opts: . [ 885.388149] erofs: root inode @ nid 36 [ 885.394584] erofs: bogus i_mode (0) @ nid 36 [ 885.402378] FAULT_INJECTION: forcing a failure. [ 885.402378] name failslab, interval 1, probability 0, space 0, times 0 [ 885.414159] CPU: 1 PID: 19407 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 885.422088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.431456] Call Trace: [ 885.434073] dump_stack+0x1fc/0x2ef [ 885.437737] should_fail.cold+0xa/0xf [ 885.441564] ? setup_fault_attr+0x200/0x200 [ 885.446219] ? lock_downgrade+0x720/0x720 [ 885.451612] __should_failslab+0x115/0x180 [ 885.456040] should_failslab+0x5/0x10 [ 885.459934] __kmalloc+0x2ab/0x3c0 [ 885.463473] ? ext4_find_extent+0x9bb/0xc70 [ 885.467788] ext4_find_extent+0x9bb/0xc70 [ 885.471939] ext4_ext_map_blocks+0x1c0/0x7390 [ 885.476446] ? __lock_acquire+0x6de/0x3ff0 [ 885.480778] ? mark_held_locks+0xf0/0xf0 [ 885.484834] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 885.490213] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 885.495413] ? mark_held_locks+0xf0/0xf0 [ 885.499467] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 885.504307] ? ext4_es_lookup_extent+0x375/0xb60 [ 885.509073] ? ext4_map_blocks+0x59f/0x1a50 [ 885.513390] ? lock_acquire+0x170/0x3c0 [ 885.517608] ? ext4_map_blocks+0x740/0x1a50 [ 885.521946] ext4_map_blocks+0x7a2/0x1a50 [ 885.526106] ? check_preemption_disabled+0x41/0x280 [ 885.531133] ? ext4_issue_zeroout+0x160/0x160 [ 885.535634] ? __brelse+0x84/0xa0 [ 885.539087] ? __ext4_new_inode+0x2eb/0x5a20 [ 885.543600] ext4_getblk+0xad/0x4f0 [ 885.547308] ? ext4_iomap_begin+0xe00/0xe00 [ 885.551633] ? ext4_free_inode+0x1780/0x1780 [ 885.556075] ? debug_check_no_obj_freed+0x201/0x490 [ 885.561178] ? __dquot_initialize+0x298/0xb70 [ 885.565756] ext4_bread+0x7c/0x210 [ 885.569574] ? ext4_getblk+0x4f0/0x4f0 [ 885.573545] ? dquot_initialize_needed+0x290/0x290 [ 885.578505] ? trace_hardirqs_off+0x64/0x200 [ 885.582928] ext4_append+0x155/0x370 [ 885.586645] ext4_mkdir+0x5bd/0xe10 [ 885.590374] ? ext4_init_dot_dotdot+0x600/0x600 [ 885.595041] ? generic_permission+0x116/0x4d0 [ 885.599529] ? inode_permission.part.0+0x10c/0x450 [ 885.604457] vfs_mkdir+0x508/0x7a0 [ 885.608018] do_mkdirat+0x262/0x2d0 [ 885.611634] ? __ia32_sys_mknod+0x120/0x120 [ 885.615951] ? trace_hardirqs_off_caller+0x6e/0x210 [ 885.620959] ? do_syscall_64+0x21/0x620 [ 885.624928] do_syscall_64+0xf9/0x620 [ 885.628746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 885.633935] RIP: 0033:0x4656e7 [ 885.637120] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.657004] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 885.664706] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 885.671966] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 885.679236] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 885.686594] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 885.693852] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 885.701130] CPU: 0 PID: 19394 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 885.709047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.718439] Call Trace: [ 885.721060] dump_stack+0x1fc/0x2ef 23:09:29 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:29 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000100), &(0x7f0000000540)="8f88631e75226534aa521ac45f5c9de249ad4d689ec28bc9223f2c974174d8c437dac7bb8f37c613c5c9fabb1dda0adcac2f5b4508ef2b0ae8c8abd97f033ff39688485be4743e2ca45a3fe0266265416caeb58b367f816b281b335304659633db47b36eae41cbe02d3ff20661abbed8f310d8178f6522eef021f92efe", 0xb5, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000140)="f758309cb71ec99f64d7e2835db4e17a28", 0x11, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000080)="24ddbbc53e50f1f3201751995356c8d0f3cf8163ee4751158de491c75819011ddeaa2084e0a22e550a056c0bb0a0e67c363b91680639987e8f4444e613eeb7a69755f6880c820f05c9345f6da6df59db9bd77afd181744b74811f6f50a7884af89199884ea74231dbd144214a51e686f30c07e0e", 0x74, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r6}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000006c0)={r1, r4, r6}, &(0x7f0000000700)=""/186, 0xba, &(0x7f0000000900)={&(0x7f00000007c0)={'digest_null-generic\x00'}, &(0x7f0000000800)="228c4380c5976a0c70a6c8ed19aeecf8163675c52aea6e8f84fe00cb98eeac3460f98254b20be37104fb52afd8f57662e5bf125a97579900056fced7d7c9a603799fa88070c0b2aa04467f6ce9e34e6f4412cb792d97603ed4e6855b25855cc8b6698da87febc6ba380f84675d9fa82ee8ae8d4261f7a7ba83c5ad15d9e4733bc64a229b6e076c043d9ae4b418f2e341ff1e3dbe2fc97b985da3b11418d73a1bd64830a6c6cec6f5c3eee51b452f3b75eda9ae93335e3b6f096745379e78f2a21e55eecf71568beeba6d200e0e804c3aaca049a2d69d676fc4dee5497b99239f498d48b6451ff8cd0000f672d5709036034bcb2c", 0xf4}) r7 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r7) r8 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r8) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "732994d74e79256f4a40f27218433a4b5e5346faca5a7ea764e1cce2665bba4d13b55153ee45f74712edf2b19687558dfb431e85067e9008f252dfb0651aedbd", 0x2f}, 0x48, r8) request_key(&(0x7f0000000600)='big_key\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='&%.\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000480)='.dead\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='e355a76a11a1be18', r7) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)="0ad45ae87618fff5e6ffe2c40d6064ef0124a310a09aa1b78af7fa3ecffb4b176520a051ad3fe6eabfe33a4dbbc0ffda60d1b4d0058e2a333b8e0a4a7ab66bd77b3fe29f2ab536102f85a2fea9cad9108c9e2d5b2ce0de85118f", 0x5a, r7) [ 885.724854] should_fail.cold+0xa/0xf [ 885.728829] ? setup_fault_attr+0x200/0x200 [ 885.733186] ? lock_acquire+0x170/0x3c0 [ 885.737202] __should_failslab+0x115/0x180 [ 885.741818] should_failslab+0x5/0x10 [ 885.745648] kmem_cache_alloc_trace+0x284/0x380 [ 885.750351] mpi_alloc+0x43/0x240 [ 885.753841] mpi_read_raw_data+0xd9/0x3f0 [ 885.758021] dh_set_secret+0x146/0x2a0 [ 885.761936] ? dh_compute_value+0x5c0/0x5c0 [ 885.766292] ? crypto_alloc_tfm+0x123/0x230 [ 885.770647] __keyctl_dh_compute+0x5e3/0x13d0 [ 885.775226] ? dh_data_from_key+0x2a0/0x2a0 [ 885.779575] ? proc_fail_nth_write+0x95/0x1d0 [ 885.784107] ? __might_fault+0x11f/0x1d0 [ 885.788271] ? lock_downgrade+0x720/0x720 [ 885.792434] ? lock_acquire+0x170/0x3c0 [ 885.796463] ? __might_fault+0xef/0x1d0 [ 885.800570] ? __might_fault+0x192/0x1d0 [ 885.804655] keyctl_dh_compute+0xbf/0x120 [ 885.808836] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 885.813608] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 885.818983] __se_sys_keyctl+0x10f/0x3f0 [ 885.823066] do_syscall_64+0xf9/0x620 [ 885.826890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 885.832200] RIP: 0033:0x4665d9 [ 885.835806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.854817] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 885.862647] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 885.869916] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 23:09:29 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 885.877219] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 885.884485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.891785] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 885.908825] erofs: unmounted for /dev/loop1 23:09:29 executing program 0 (fault-call:0 fault-nth:30): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:29 executing program 3 (fault-call:6 fault-nth:12): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:29 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 885.963599] erofs: read_super, device -> /dev/loop4 [ 885.968676] erofs: options -> [ 885.975956] erofs: root inode @ nid 36 [ 885.992972] erofs: bogus i_mode (0) @ nid 36 23:09:29 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 886.063216] erofs: read_super, device -> /dev/loop1 [ 886.083053] erofs: options -> [ 886.110089] erofs: root inode @ nid 36 [ 886.114770] FAULT_INJECTION: forcing a failure. [ 886.114770] name failslab, interval 1, probability 0, space 0, times 0 [ 886.128689] erofs: mounted on /dev/loop1 with opts: . 23:09:29 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000003c0)="ecda0675315828db9a42efcecd4a50d02f1da96161a60f2e929c3dc9d8cc1c46fc6637df1e66a9db24a62c1fe68800987d8c116efc6c960f08b1221a1c57159c55a7560419eaa17cf20bacb9447fb93dffe2c833f7cf7a755be0c6dcb863dd8aa2d82b33137f21aee2d585617d999ff48391bbdd0bfd4fc8c7bc69eea7b3b3c1be96e237", 0x84, 0xfffffffffffffffb) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="755f18b63bdc8635", 0x8, 0xfffffffffffffffb) 23:09:29 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 886.188432] CPU: 0 PID: 19434 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 886.196456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.205940] Call Trace: [ 886.208582] dump_stack+0x1fc/0x2ef [ 886.212256] should_fail.cold+0xa/0xf [ 886.216080] ? setup_fault_attr+0x200/0x200 [ 886.220821] ? lock_acquire+0x170/0x3c0 [ 886.224930] __should_failslab+0x115/0x180 [ 886.229376] should_failslab+0x5/0x10 [ 886.233392] __kmalloc+0x2ab/0x3c0 [ 886.237215] ? mpi_alloc_limb_space+0x2f/0x50 [ 886.241749] mpi_alloc_limb_space+0x2f/0x50 [ 886.246197] mpi_alloc+0x1a3/0x240 [ 886.248123] FAULT_INJECTION: forcing a failure. [ 886.248123] name failslab, interval 1, probability 0, space 0, times 0 [ 886.249768] mpi_read_raw_data+0xd9/0x3f0 [ 886.249788] dh_set_secret+0x146/0x2a0 [ 886.249802] ? dh_compute_value+0x5c0/0x5c0 [ 886.249822] ? crypto_alloc_tfm+0x123/0x230 [ 886.249843] __keyctl_dh_compute+0x5e3/0x13d0 [ 886.249866] ? dh_data_from_key+0x2a0/0x2a0 [ 886.249880] ? proc_fail_nth_write+0x95/0x1d0 [ 886.249906] ? __might_fault+0x11f/0x1d0 [ 886.249928] ? lock_downgrade+0x720/0x720 [ 886.249951] ? lock_acquire+0x170/0x3c0 [ 886.249964] ? __might_fault+0xef/0x1d0 [ 886.249985] ? __might_fault+0x192/0x1d0 [ 886.311944] keyctl_dh_compute+0xbf/0x120 [ 886.316350] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 886.321237] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 886.326993] __se_sys_keyctl+0x10f/0x3f0 [ 886.331118] do_syscall_64+0xf9/0x620 [ 886.335107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.340425] RIP: 0033:0x4665d9 [ 886.343615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.363487] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 886.371878] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 886.379231] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 886.386491] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 886.394028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.401377] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 886.408667] CPU: 1 PID: 19438 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 886.416662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.426058] Call Trace: [ 886.428799] dump_stack+0x1fc/0x2ef [ 886.432460] should_fail.cold+0xa/0xf 23:09:30 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:30 executing program 3 (fault-call:6 fault-nth:13): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 886.436304] ? setup_fault_attr+0x200/0x200 [ 886.440822] ? __es_tree_search.isra.0+0x1af/0x210 [ 886.445782] __should_failslab+0x115/0x180 [ 886.450594] should_failslab+0x5/0x10 [ 886.454505] kmem_cache_alloc+0x3f/0x370 [ 886.458595] __es_insert_extent+0x39b/0x13b0 [ 886.463028] ? lock_acquire+0x170/0x3c0 [ 886.467108] ? ext4_es_insert_extent+0x17e/0x5e0 [ 886.471903] ext4_es_insert_extent+0x22e/0x5e0 [ 886.476558] ? lock_downgrade+0x720/0x720 [ 886.480819] ? ext4_es_find_delayed_extent_range+0x9f0/0x9f0 23:09:30 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 886.486648] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 886.491692] ? ext4_es_find_delayed_extent_range+0x7d9/0x9f0 [ 886.497549] ext4_ext_map_blocks+0x2129/0x7390 [ 886.502161] ? __lock_acquire+0x6de/0x3ff0 [ 886.506421] ? __lock_acquire+0x6de/0x3ff0 [ 886.510670] ? mark_held_locks+0xf0/0xf0 [ 886.514742] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 886.520125] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 886.525747] ? mark_held_locks+0xf0/0xf0 [ 886.530478] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 23:09:30 executing program 2: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="5839ff0419cc12c0a78bf3ce9d2c111b21a5c033bc262c170dc53d45e2fbc0410221ab8b820a44ff02c023833fe2e571199a6be6035fb4e27a03b27840cd109acb9ddd223c19cda5e514282020ab5824f5a53b2bc11b89d98303c79881426672b5be202f4cbfb35fa76541ddce16670f71204bce405da663bda9c63fbb2f43a74b2adea6a0239abe7eb3e69e978f400300bebc0367df21e22f47593171797d2224c10cd706677906b6d19e3cc909502b", 0xb0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="079d1dc91aceb59744bc527edb98e9862799d0aebea5755574036ab52a0fd6e9d770a4909176c4342518961fc02d1148c3eaac34dc3132e87e61f67b35a17e0106e638efd6ea45a65d0179cd4689b7f9392955dd247152413e060c5268923b1d520649f89146e0dcabebfa420f0fda63e9fffe72de91594f9611272b5e3193db432836c227ed39efc5bdc9cd992a61d628ccb362c400a99f121bc42fff269df47fde69139e512bee51574d9a8edbb833fa72c32ee97166e03832ffe708c8b8d92429f02cb43ced959d54282dd9f7", 0xce, r1) r6 = add_key(&(0x7f0000000340)='.dead\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="9c", 0x1, r1) add_key$user(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, &(0x7f0000000780)="7d42262c22a88d091d0f7d6dfcc3679711bbbf4db3c1", 0x16, r1) keyctl$dh_compute(0x17, &(0x7f0000000540)={r3, r5, r6}, &(0x7f0000000600)=""/176, 0xb0, &(0x7f00000006c0)={&(0x7f0000000580)={'cbcmac-aes-ce\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r2}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r7 = add_key$keyring(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x2}, 0x0, 0x0, r6) add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x3}, &(0x7f0000000840)="b387713925ed552592f73058345720f6fbccbf7fc6562d91bac0fc65bcfa4f874aa1a15618197b12006e8de58de15c86feaac98357bfaee2a98bafc4407c1e323d0d0001528f14a345ae7212a7b16a2b1c3e9e320e45b010cb456dcce24982e686c0998d6d29991981f42739ac71c39f1758e270198a84335a4f358d3693e1d44f05779c787a1eb47a6ef4d55aa60ab3339bd08811406bc9f4e92dc924d198a744b8dca5d7aa40d4c9f9757a3ef1b88d856986f4852a6ac2c917", 0xba, r7) [ 886.535704] ? ext4_es_lookup_extent+0x375/0xb60 [ 886.541215] ? check_preemption_disabled+0x41/0x280 [ 886.546567] ? lock_acquire+0x170/0x3c0 [ 886.550634] ? ext4_map_blocks+0x33e/0x1a50 [ 886.555580] ext4_map_blocks+0xd88/0x1a50 [ 886.560133] ? check_preemption_disabled+0x41/0x280 [ 886.565624] ? ext4_issue_zeroout+0x160/0x160 [ 886.570262] ? __brelse+0x84/0xa0 [ 886.573736] ? __ext4_new_inode+0x2eb/0x5a20 [ 886.578178] ext4_getblk+0xad/0x4f0 [ 886.581973] ? ext4_iomap_begin+0xe00/0xe00 [ 886.586411] ? ext4_free_inode+0x1780/0x1780 [ 886.590848] ? debug_check_no_obj_freed+0x201/0x490 [ 886.595899] ? __dquot_initialize+0x298/0xb70 [ 886.600606] ext4_bread+0x7c/0x210 [ 886.604179] ? ext4_getblk+0x4f0/0x4f0 [ 886.606195] could not allocate digest TFM handle cbcmac-aes-ce [ 886.608139] ? dquot_initialize_needed+0x290/0x290 [ 886.608161] ? trace_hardirqs_off+0x64/0x200 [ 886.608184] ext4_append+0x155/0x370 [ 886.608207] ext4_mkdir+0x5bd/0xe10 [ 886.631065] ? ext4_init_dot_dotdot+0x600/0x600 [ 886.632707] could not allocate digest TFM handle cbcmac-aes-ce [ 886.635850] ? generic_permission+0x116/0x4d0 [ 886.635872] ? inode_permission.part.0+0x10c/0x450 [ 886.635892] vfs_mkdir+0x508/0x7a0 [ 886.635922] do_mkdirat+0x262/0x2d0 [ 886.635940] ? __ia32_sys_mknod+0x120/0x120 [ 886.663124] ? trace_hardirqs_off_caller+0x6e/0x210 [ 886.668255] ? do_syscall_64+0x21/0x620 [ 886.672262] do_syscall_64+0xf9/0x620 [ 886.676095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 886.681619] RIP: 0033:0x4656e7 [ 886.681817] erofs: read_super, device -> /dev/loop4 23:09:30 executing program 2: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 886.684811] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.684819] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 886.684832] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 886.684839] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 886.684846] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff 23:09:30 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 886.684858] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 886.729756] erofs: options -> [ 886.731072] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 886.759863] erofs: read_super, device -> /dev/loop0 [ 886.763503] erofs: unmounted for /dev/loop1 [ 886.765064] erofs: options -> [ 886.772737] erofs: root inode @ nid 36 [ 886.776761] erofs: mounted on /dev/loop0 with opts: . [ 886.816612] FAULT_INJECTION: forcing a failure. [ 886.816612] name failslab, interval 1, probability 0, space 0, times 0 23:09:30 executing program 0 (fault-call:0 fault-nth:31): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:30 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x6f, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 886.860722] erofs: root inode @ nid 36 [ 886.867213] erofs: unmounted for /dev/loop0 [ 886.885769] erofs: bogus i_mode (0) @ nid 36 [ 886.886376] CPU: 1 PID: 19470 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 886.898173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.907850] Call Trace: [ 886.910606] dump_stack+0x1fc/0x2ef [ 886.914278] should_fail.cold+0xa/0xf [ 886.918086] ? setup_fault_attr+0x200/0x200 [ 886.922519] ? lock_acquire+0x170/0x3c0 [ 886.926491] __should_failslab+0x115/0x180 [ 886.930813] should_failslab+0x5/0x10 [ 886.934607] kmem_cache_alloc_trace+0x284/0x380 [ 886.939275] mpi_alloc+0x43/0x240 [ 886.942887] mpi_read_raw_data+0xd9/0x3f0 [ 886.947043] dh_set_secret+0x185/0x2a0 [ 886.950934] ? dh_compute_value+0x5c0/0x5c0 [ 886.955276] ? crypto_alloc_tfm+0x123/0x230 [ 886.959597] __keyctl_dh_compute+0x5e3/0x13d0 [ 886.964117] ? dh_data_from_key+0x2a0/0x2a0 [ 886.968432] ? proc_fail_nth_write+0x95/0x1d0 [ 886.972924] ? __might_fault+0x11f/0x1d0 [ 886.977000] ? lock_downgrade+0x720/0x720 [ 886.981142] ? lock_acquire+0x170/0x3c0 [ 886.985106] ? __might_fault+0xef/0x1d0 [ 886.989072] ? __might_fault+0x192/0x1d0 [ 886.993166] keyctl_dh_compute+0xbf/0x120 [ 886.997572] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 887.002353] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 887.007734] __se_sys_keyctl+0x10f/0x3f0 [ 887.011881] do_syscall_64+0xf9/0x620 [ 887.015698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 887.020966] RIP: 0033:0x4665d9 [ 887.024162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.043052] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 887.050762] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 23:09:30 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(0x0, 0x0, 0x0, 0x0, r1) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000440)='syz', r1) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "1d76509f7b354794b85c3092d6fb80df1e04a82b2cd5bf2437e9cd69188f23fb051f6ac38fe6201930c9975b9a252618d87c856100", 0x15}, 0x48, 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000500)="189ceece65457265713cf865c24e2f54a5b73a272766ebd1ad2e62b83c3cf9484f16d4e666a233870bf5688a439412403959564c70b5e9731e29c1fe389978215dc8528f16bd3bcc7d4abbb4b0618a6eb70a86f7248ee78d5df67e940136ef7536d23433899eda08899a796aeb702028dba41cdca8032d4895e466b67791179b", 0x80, r2) keyctl$revoke(0x3, r6) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)='syz', r5) [ 887.058200] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 887.065833] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 887.073106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.080543] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 887.160300] erofs: read_super, device -> /dev/loop1 [ 887.167641] erofs: options -> [ 887.168532] FAULT_INJECTION: forcing a failure. [ 887.168532] name failslab, interval 1, probability 0, space 0, times 0 [ 887.179151] erofs: root inode @ nid 36 [ 887.182395] CPU: 1 PID: 19487 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 887.182407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.182411] Call Trace: [ 887.182439] dump_stack+0x1fc/0x2ef [ 887.182464] should_fail.cold+0xa/0xf [ 887.182486] ? setup_fault_attr+0x200/0x200 [ 887.182505] ? __es_tree_search.isra.0+0x1af/0x210 [ 887.182527] __should_failslab+0x115/0x180 [ 887.182546] should_failslab+0x5/0x10 [ 887.182562] kmem_cache_alloc+0x3f/0x370 [ 887.182578] __es_insert_extent+0x39b/0x13b0 [ 887.182601] ext4_es_insert_extent+0x22e/0x5e0 [ 887.182622] ? ext4_map_blocks+0x59f/0x1a50 [ 887.200289] erofs: mounted on /dev/loop1 with opts: . [ 887.204208] ? ext4_es_find_delayed_extent_range+0x9f0/0x9f0 [ 887.204243] ext4_map_blocks+0xa2a/0x1a50 [ 887.264065] ? ext4_issue_zeroout+0x160/0x160 [ 887.268658] ? __brelse+0x84/0xa0 [ 887.272137] ? __ext4_new_inode+0x2eb/0x5a20 [ 887.276547] ext4_getblk+0xad/0x4f0 [ 887.280164] ? ext4_iomap_begin+0xe00/0xe00 [ 887.284505] ? ext4_free_inode+0x1780/0x1780 [ 887.288919] ? debug_check_no_obj_freed+0x201/0x490 [ 887.293945] ? __dquot_initialize+0x298/0xb70 [ 887.298465] ext4_bread+0x7c/0x210 [ 887.302022] ? ext4_getblk+0x4f0/0x4f0 [ 887.305935] ? dquot_initialize_needed+0x290/0x290 [ 887.310863] ? trace_hardirqs_off+0x64/0x200 [ 887.315285] ext4_append+0x155/0x370 [ 887.319012] ext4_mkdir+0x5bd/0xe10 [ 887.322670] ? ext4_init_dot_dotdot+0x600/0x600 [ 887.327350] ? generic_permission+0x116/0x4d0 [ 887.333002] ? inode_permission.part.0+0x10c/0x450 [ 887.338060] vfs_mkdir+0x508/0x7a0 [ 887.341599] do_mkdirat+0x262/0x2d0 [ 887.345219] ? __ia32_sys_mknod+0x120/0x120 [ 887.349543] ? trace_hardirqs_off_caller+0x6e/0x210 [ 887.354551] ? do_syscall_64+0x21/0x620 [ 887.358515] do_syscall_64+0xf9/0x620 [ 887.362468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 887.367943] RIP: 0033:0x4656e7 [ 887.371220] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.390999] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 887.399137] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 887.406413] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 887.413669] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 887.420923] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 887.428225] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 23:09:31 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:31 executing program 3 (fault-call:6 fault-nth:14): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:31 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x70, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.471691] erofs: read_super, device -> /dev/loop0 [ 887.481332] erofs: options -> [ 887.509184] erofs: root inode @ nid 36 23:09:31 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8303, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 887.525793] erofs: mounted on /dev/loop0 with opts: . [ 887.538582] erofs: unmounted for /dev/loop1 [ 887.557266] FAULT_INJECTION: forcing a failure. [ 887.557266] name failslab, interval 1, probability 0, space 0, times 0 23:09:31 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x71, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.577108] CPU: 1 PID: 19503 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 887.585049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.594424] Call Trace: [ 887.597043] dump_stack+0x1fc/0x2ef [ 887.600753] should_fail.cold+0xa/0xf [ 887.604582] ? setup_fault_attr+0x200/0x200 [ 887.608978] ? lock_acquire+0x170/0x3c0 [ 887.612985] __should_failslab+0x115/0x180 [ 887.617273] should_failslab+0x5/0x10 [ 887.621135] __kmalloc+0x2ab/0x3c0 23:09:31 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000009c0)="50669327dba6bd1b80b9642653ca40603b922e85eb8500f8d4937220dadeb472de94e3f3abd937f590c9068e44e600000000000000000000000000000000176cf22e263694d325821d40c257d1846b08b83ae26cd0cdcb57669209f12f408db50fdab773", 0x64, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'sha3-224-generic\x00'}}) r6 = request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)='asymmetric\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r3, r6}, &(0x7f0000000600)=""/253, 0xfd, &(0x7f0000000840)={&(0x7f0000000700)={'sha256-ni\x00'}, &(0x7f0000000740)="5166c869eb090cf715d6cabe5181faa92942df88c24f763bcb845773eb48b6a9a9797e88dd8b11741d889caccdab5581e8b8e5672a104e8534bd79ce0d8f0cdfaeba3b9dfef2595bfe57eacc575e6ca3fe7b090ee1ff3601fbba584bdd42152c41cda4c0bb8269bba3dc712cfe23be976cc25201fd7b5253b0dc9e481c52dace71c697d2b57061b60f51249f2b87d5d9ccb03e3b09f36c6aab9de5d9917748df5299167c3708134662b3395b0b2b8b498c09ac7a171498aaaeae98b1f65335b0059496f356a543cef16ddf905296927b1206176eb4fbac48956a6769", 0xdc}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r8 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='user\x00', 0x0) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r10}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={r3, r8, r10}, &(0x7f00000003c0)=""/66, 0x42, &(0x7f0000000240)={&(0x7f00000001c0)={'crc32\x00'}, &(0x7f0000000440)="4776a4c21387ab3b9514e51d8400e546774268d7ff7298fcf2b2e7909e8af18152a65ede1cc7f8d93ddbb4e1009b09498e3f58c7d494e4b970b534434f132ad9b0245fa86d88211bcf17f13449d107e75effc10487fb27ca6e52ebdbd32c73774df29219165ea7d20a79b8fdb30a5600bb4b54ae34148cd3c14a37d2b23b57493bfe2bcf319a29bc", 0x88}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r11 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r11) add_key$user(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)="1821b69facf4bdafee2de8d7acd166", 0xf, r11) [ 887.624700] ? mpi_alloc_limb_space+0x2f/0x50 [ 887.629232] mpi_alloc_limb_space+0x2f/0x50 [ 887.633587] mpi_alloc+0x1a3/0x240 [ 887.637160] mpi_read_raw_data+0xd9/0x3f0 [ 887.641349] dh_set_secret+0x185/0x2a0 [ 887.645261] ? dh_compute_value+0x5c0/0x5c0 [ 887.649614] ? crypto_alloc_tfm+0x123/0x230 [ 887.653981] __keyctl_dh_compute+0x5e3/0x13d0 [ 887.658520] ? dh_data_from_key+0x2a0/0x2a0 [ 887.662872] ? proc_fail_nth_write+0x95/0x1d0 [ 887.667557] ? __might_fault+0x11f/0x1d0 [ 887.671656] ? lock_downgrade+0x720/0x720 23:09:31 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xa8, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.675825] ? lock_acquire+0x170/0x3c0 [ 887.679819] ? __might_fault+0xef/0x1d0 [ 887.683822] ? __might_fault+0x192/0x1d0 [ 887.687914] keyctl_dh_compute+0xbf/0x120 [ 887.692114] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 887.697001] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 887.702398] __se_sys_keyctl+0x10f/0x3f0 [ 887.706661] do_syscall_64+0xf9/0x620 [ 887.710493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 887.715712] RIP: 0033:0x4665d9 [ 887.718924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.737989] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 887.745722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 887.753012] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 887.760304] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 887.767594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:09:31 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="167b2006c07c936d209dbbd04c23442b6758f01a6a5817169bbfe26b939caaa30befebbb582e1772a1dc2071", 0x2c, 0xfffffffffffffff9) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r6 = add_key(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r6}, &(0x7f0000000600)=""/108, 0x6c, &(0x7f00000006c0)={&(0x7f0000000680)={'sha384\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r1, r1}, &(0x7f0000000140)=""/170, 0xaa, &(0x7f0000000340)={&(0x7f00000000c0)={'sha3-512\x00'}, &(0x7f0000000240)="bdb7d4ee0a", 0x5}) add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffa) 23:09:31 executing program 0 (fault-call:0 fault-nth:32): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 887.774878] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 887.790116] erofs: read_super, device -> /dev/loop4 [ 887.795183] erofs: options -> [ 887.810759] erofs: unmounted for /dev/loop0 [ 887.817306] erofs: root inode @ nid 36 23:09:31 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xb0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.836906] erofs: bogus i_mode (0) @ nid 36 23:09:31 executing program 3 (fault-call:6 fault-nth:15): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.858555] erofs: read_super, device -> /dev/loop1 [ 887.871830] erofs: options -> [ 887.886515] erofs: root inode @ nid 36 [ 887.891561] erofs: read_super, device -> /dev/loop4 [ 887.896607] erofs: options -> 23:09:31 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xe4, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 887.922408] erofs: root inode @ nid 36 [ 887.926542] erofs: mounted on /dev/loop1 with opts: . [ 887.937432] erofs: bogus i_mode (0) @ nid 36 [ 887.957830] FAULT_INJECTION: forcing a failure. [ 887.957830] name failslab, interval 1, probability 0, space 0, times 0 [ 887.977284] CPU: 1 PID: 19536 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 887.985211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.985292] FAULT_INJECTION: forcing a failure. [ 887.985292] name failslab, interval 1, probability 0, space 0, times 0 [ 887.994576] Call Trace: [ 887.994612] dump_stack+0x1fc/0x2ef [ 887.994632] should_fail.cold+0xa/0xf [ 887.994650] ? setup_fault_attr+0x200/0x200 [ 887.994663] ? lock_downgrade+0x720/0x720 [ 887.994690] ? check_preemption_disabled+0x41/0x280 [ 888.029509] __should_failslab+0x115/0x180 [ 888.033850] should_failslab+0x5/0x10 [ 888.037649] kmem_cache_alloc+0x277/0x370 [ 888.041814] ext4_mb_new_blocks+0x60a/0x4370 [ 888.046226] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 888.051241] ? ext4_cache_extents+0x68/0x2d0 [ 888.055638] ? ext4_find_extent+0x9bb/0xc70 [ 888.059954] ? ext4_discard_preallocations+0xfb0/0xfb0 [ 888.065336] ? ext4_ext_search_right+0x2c7/0xb60 [ 888.070125] ? ext4_inode_to_goal_block+0x2d2/0x3e0 [ 888.075146] ext4_ext_map_blocks+0x2aa2/0x7390 [ 888.079744] ? __lock_acquire+0x6de/0x3ff0 [ 888.083972] ? mark_held_locks+0xf0/0xf0 [ 888.088141] ? __ext4_handle_dirty_metadata+0x1e0/0x590 [ 888.093518] ? ext4_find_delalloc_cluster+0x1f0/0x1f0 [ 888.098698] ? mark_held_locks+0xf0/0xf0 [ 888.102912] ? ext4_mark_iloc_dirty+0x1b0d/0x2b30 [ 888.107756] ? ext4_es_lookup_extent+0x375/0xb60 [ 888.112519] ? ext4_map_blocks+0x59f/0x1a50 [ 888.116849] ext4_map_blocks+0x7a2/0x1a50 [ 888.121081] ? check_preemption_disabled+0x41/0x280 [ 888.126090] ? ext4_issue_zeroout+0x160/0x160 [ 888.130601] ? __brelse+0x84/0xa0 [ 888.134044] ? __ext4_new_inode+0x2eb/0x5a20 [ 888.138449] ext4_getblk+0xad/0x4f0 [ 888.142074] ? ext4_iomap_begin+0xe00/0xe00 [ 888.146392] ? ext4_free_inode+0x1780/0x1780 [ 888.150792] ? debug_check_no_obj_freed+0x201/0x490 [ 888.155890] ? __dquot_initialize+0x298/0xb70 [ 888.160378] ext4_bread+0x7c/0x210 [ 888.163910] ? ext4_getblk+0x4f0/0x4f0 [ 888.167799] ? dquot_initialize_needed+0x290/0x290 [ 888.172809] ? trace_hardirqs_off+0x64/0x200 [ 888.177233] ext4_append+0x155/0x370 [ 888.180942] ext4_mkdir+0x5bd/0xe10 [ 888.184564] ? ext4_init_dot_dotdot+0x600/0x600 [ 888.189226] ? generic_permission+0x116/0x4d0 [ 888.193714] ? inode_permission.part.0+0x10c/0x450 [ 888.198653] vfs_mkdir+0x508/0x7a0 [ 888.202185] do_mkdirat+0x262/0x2d0 [ 888.205805] ? __ia32_sys_mknod+0x120/0x120 [ 888.210124] ? trace_hardirqs_off_caller+0x6e/0x210 [ 888.215157] ? do_syscall_64+0x21/0x620 [ 888.219146] do_syscall_64+0xf9/0x620 [ 888.223239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 888.228769] RIP: 0033:0x4656e7 [ 888.232080] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.251566] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 888.259309] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004656e7 [ 888.266707] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 888.273972] RBP: 00007f8133c63040 R08: 0000000000000000 R09: ffffffffffffffff [ 888.281409] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000000 [ 888.288667] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 888.295951] CPU: 0 PID: 19545 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 888.303868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.313246] Call Trace: [ 888.315862] dump_stack+0x1fc/0x2ef [ 888.319510] should_fail.cold+0xa/0xf [ 888.323333] ? setup_fault_attr+0x200/0x200 [ 888.327673] ? lock_acquire+0x170/0x3c0 [ 888.331770] __should_failslab+0x115/0x180 [ 888.336153] should_failslab+0x5/0x10 [ 888.339953] __kmalloc+0x2ab/0x3c0 [ 888.343537] ? __keyctl_dh_compute+0x69e/0x13d0 [ 888.348430] __keyctl_dh_compute+0x69e/0x13d0 [ 888.352965] ? dh_data_from_key+0x2a0/0x2a0 [ 888.357283] ? proc_fail_nth_write+0x95/0x1d0 [ 888.361801] ? __might_fault+0x11f/0x1d0 [ 888.365863] ? lock_downgrade+0x720/0x720 [ 888.370005] ? lock_acquire+0x170/0x3c0 [ 888.373976] ? __might_fault+0xef/0x1d0 [ 888.377939] ? __might_fault+0x192/0x1d0 [ 888.382006] keyctl_dh_compute+0xbf/0x120 [ 888.386312] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 888.391075] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 888.396768] __se_sys_keyctl+0x10f/0x3f0 [ 888.400825] do_syscall_64+0xf9/0x620 [ 888.404755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 888.409930] RIP: 0033:0x4665d9 [ 888.413107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.432000] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 888.439811] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 888.447258] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 888.454517] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 888.461776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.469114] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:32 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:32 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 23:09:32 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xfc, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:32 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:32 executing program 3 (fault-call:6 fault-nth:16): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:32 executing program 0 (fault-call:0 fault-nth:33): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:32 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="9c3bc4ac203201d9a3f2f135e2c21239d6189f93b86cf9b911d92fccc5ca8ac7a934e1237099c5099b723c1594642bd1203c66175d23875bc056f97d65db04e211e0266c423c684b9e8044422894fc89ef7dac9a613be6968c935a3a705a8177dab7b878a47b5430", 0x68, 0xfffffffffffffff8) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x61, 0x23, 0x52, 0x31, 0x64, 0x34, 0x65, 0x33, 0x62, 0x35, 0x38, 0x37, 0x5d, 0x30, 0x64, 0x62]}, &(0x7f00000003c0)={0x0, "2595dbc16da4b328f671e1b5a11ced62d11e6f019dcc487fd78ab80548e0c7674471c36a78e6b4641abf66ed24f20e508a3ed63381dc1998286333188be1b5d2", 0x3e}, 0x48, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000340)={r3, r2, r2}, &(0x7f0000000440)=""/3, 0x3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 888.578458] erofs: unmounted for /dev/loop1 23:09:32 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xfe, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 888.615386] FAULT_INJECTION: forcing a failure. [ 888.615386] name failslab, interval 1, probability 0, space 0, times 0 [ 888.637009] CPU: 1 PID: 19562 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 888.645042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.654414] Call Trace: [ 888.657028] dump_stack+0x1fc/0x2ef [ 888.660675] should_fail.cold+0xa/0xf 23:09:32 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="ebd49ceceb7646df4125383c05697c3e3f73505698e80c6526eef1eb1f1f253a53ab9d33181b3536f000509884468f5f7ad8a8e797facb647da7e82f2f1e741ec0ac57c275fca1f2f6b503916b8a15acfaacf8cc64e2d8c5ac9bfe6f49aecb882e6b1cd5d910faf7a02d10a5ecbbccc6d29789106d85f74c68eb4b10bc7cc96067c0ae6ffcb7040dfa5d76578cc964dad7b1af380459b8f0c5337f3a", 0x9c, 0xfffffffffffffff9) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)='&\x89,!\']\x00', 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 888.664507] ? setup_fault_attr+0x200/0x200 [ 888.668845] ? lock_acquire+0x170/0x3c0 [ 888.672844] __should_failslab+0x115/0x180 [ 888.677099] should_failslab+0x5/0x10 [ 888.680912] __kmalloc+0x2ab/0x3c0 [ 888.681393] FAULT_INJECTION: forcing a failure. [ 888.681393] name failslab, interval 1, probability 0, space 0, times 0 [ 888.684465] ? __keyctl_dh_compute+0x725/0x13d0 [ 888.700329] ? sg_init_one+0xd9/0x180 [ 888.704150] __keyctl_dh_compute+0x725/0x13d0 [ 888.708657] ? dh_data_from_key+0x2a0/0x2a0 [ 888.712973] ? proc_fail_nth_write+0x95/0x1d0 [ 888.717644] ? __might_fault+0x11f/0x1d0 [ 888.721699] ? lock_downgrade+0x720/0x720 [ 888.725853] ? lock_acquire+0x170/0x3c0 [ 888.729824] ? __might_fault+0xef/0x1d0 [ 888.733822] ? __might_fault+0x192/0x1d0 [ 888.737924] keyctl_dh_compute+0xbf/0x120 [ 888.742063] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 888.746815] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 888.752197] __se_sys_keyctl+0x10f/0x3f0 [ 888.756254] do_syscall_64+0xf9/0x620 [ 888.760047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 888.765413] RIP: 0033:0x4665d9 [ 888.768594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.787480] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 888.795176] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 888.802518] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 888.809781] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 888.817058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.824313] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 888.831615] CPU: 0 PID: 19564 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 888.832696] erofs: read_super, device -> /dev/loop4 [ 888.839514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.839520] Call Trace: [ 888.839543] dump_stack+0x1fc/0x2ef [ 888.839561] should_fail.cold+0xa/0xf 23:09:32 executing program 3 (fault-call:6 fault-nth:17): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:32 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x390, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 888.839578] ? setup_fault_attr+0x200/0x200 [ 888.839593] ? lock_acquire+0x170/0x3c0 [ 888.839614] __should_failslab+0x115/0x180 [ 888.839630] should_failslab+0x5/0x10 [ 888.839644] __kmalloc_track_caller+0x2a6/0x3c0 [ 888.839661] ? strndup_user+0x70/0x120 [ 888.839680] memdup_user+0x22/0xb0 [ 888.839697] strndup_user+0x70/0x120 [ 888.839715] ksys_mount+0x34/0x130 [ 888.839733] __x64_sys_mount+0xba/0x150 [ 888.839749] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 888.839764] do_syscall_64+0xf9/0x620 [ 888.839782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 888.839794] RIP: 0033:0x467afa [ 888.839809] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.839816] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 888.839829] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 888.839838] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 888.839847] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 888.839855] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 888.839863] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 888.986124] erofs: options -> [ 888.995850] erofs: root inode @ nid 36 [ 889.000376] erofs: bogus i_mode (0) @ nid 36 [ 889.015743] FAULT_INJECTION: forcing a failure. [ 889.015743] name failslab, interval 1, probability 0, space 0, times 0 [ 889.041377] CPU: 1 PID: 19579 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 889.050158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.059627] Call Trace: [ 889.062238] dump_stack+0x1fc/0x2ef 23:09:32 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xe00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 889.065887] should_fail.cold+0xa/0xf [ 889.069742] ? setup_fault_attr+0x200/0x200 [ 889.074078] ? lock_acquire+0x170/0x3c0 [ 889.078079] __should_failslab+0x115/0x180 [ 889.082353] should_failslab+0x5/0x10 [ 889.086340] kmem_cache_alloc_trace+0x284/0x380 [ 889.091010] ? cache_alloc_refill+0x95/0x340 [ 889.095434] mpi_alloc+0x43/0x240 [ 889.098914] dh_compute_value+0x8b/0x5c0 [ 889.102992] ? dh_exit_tfm+0x20/0x20 [ 889.106718] ? __lockdep_init_map+0x100/0x5a0 [ 889.111233] ? __lockdep_init_map+0x100/0x5a0 [ 889.115839] __keyctl_dh_compute+0x953/0x13d0 [ 889.120354] ? dh_data_from_key+0x2a0/0x2a0 [ 889.124685] ? proc_fail_nth_write+0x95/0x1d0 [ 889.129227] ? __might_fault+0x11f/0x1d0 [ 889.133315] ? __might_fault+0xef/0x1d0 [ 889.137396] ? __might_fault+0x192/0x1d0 [ 889.141475] keyctl_dh_compute+0xbf/0x120 [ 889.145641] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 889.150421] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 889.156009] __se_sys_keyctl+0x10f/0x3f0 [ 889.160229] do_syscall_64+0xf9/0x620 [ 889.164312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 889.169517] RIP: 0033:0x4665d9 [ 889.172723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.191633] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 889.199356] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 889.206635] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 889.213937] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 889.221229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.228513] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 889.260211] erofs: read_super, device -> /dev/loop1 [ 889.279845] erofs: read_super, device -> /dev/loop4 [ 889.293764] erofs: options -> [ 889.304413] erofs: root inode @ nid 36 [ 889.306689] erofs: options -> [ 889.318235] erofs: root inode @ nid 36 [ 889.319943] erofs: mounted on /dev/loop1 with opts: . [ 889.325864] erofs: bogus i_mode (0) @ nid 36 [ 889.366898] erofs: unmounted for /dev/loop1 23:09:33 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfa030000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:33 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xf00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:33 executing program 0 (fault-call:0 fault-nth:34): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:33 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="02d990f9aefa2a9bd0817c307a2f357eaae6d5c20416da98ae1ef1c92fd6bfb4fa87915b3acfb8d76f5355814d931487ac58da3f0cc556dd8af9772037a7ba1033cdaf63b64655a9e0b2f2a93b54329c991dfe064f1c542e6fa61c9b506928f02fad50bb791b00"/112, 0x70, r1) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="c52daa08ffaceda810bb371408f8c778541880a0e022621d03edc4300338a14c0e", 0x21, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:33 executing program 3 (fault-call:6 fault-nth:18): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:33 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf803, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:33 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1100, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 889.483587] FAULT_INJECTION: forcing a failure. [ 889.483587] name failslab, interval 1, probability 0, space 0, times 0 [ 889.516120] erofs: read_super, device -> /dev/loop1 23:09:33 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r3}, &(0x7f0000000140)=""/119, 0x77, &(0x7f00000001c0)={&(0x7f00000000c0)={'hmac(cbcmac-aes-ce)\x00'}, &(0x7f00000003c0)="873db0ca6bfacbc5fa3790941a1ac89b8b498853d7c498d2341e1454323ce6384c1a4998b9fe6f2e941e6a565f8d81ff95b2c3ca754a4f71eafe25a7fd4f0b048c362ea342652bd91852b33f549c89867e7fa46c02e2d39122cbf718f6d0ac", 0x5f}) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000440)='syz', 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 889.532880] erofs: options -> [ 889.538484] CPU: 1 PID: 19612 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 889.546385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.556083] Call Trace: [ 889.558693] dump_stack+0x1fc/0x2ef [ 889.562340] should_fail.cold+0xa/0xf [ 889.566160] ? setup_fault_attr+0x200/0x200 [ 889.566242] erofs: root inode @ nid 36 [ 889.570512] ? lock_acquire+0x170/0x3c0 [ 889.570535] __should_failslab+0x115/0x180 [ 889.570551] should_failslab+0x5/0x10 [ 889.570567] __kmalloc+0x2ab/0x3c0 [ 889.574761] erofs: mounted on /dev/loop1 with opts: . [ 889.578424] ? mpi_alloc_limb_space+0x2f/0x50 [ 889.578447] mpi_alloc_limb_space+0x2f/0x50 [ 889.604224] mpi_powm+0x43d/0x1a30 [ 889.607755] ? should_fail+0x142/0x7b0 [ 889.611628] ? fs_reclaim_release+0xd0/0x110 [ 889.616050] ? setup_fault_attr+0x200/0x200 [ 889.620376] ? lock_acquire+0x170/0x3c0 [ 889.624335] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 889.629510] ? mpi_alloc+0x43/0x240 [ 889.633123] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 889.638124] ? kmem_cache_alloc_trace+0x323/0x380 [ 889.642953] dh_compute_value+0x34e/0x5c0 [ 889.647086] ? dh_exit_tfm+0x20/0x20 [ 889.650814] ? __lockdep_init_map+0x100/0x5a0 [ 889.655355] ? __lockdep_init_map+0x100/0x5a0 [ 889.659852] __keyctl_dh_compute+0x953/0x13d0 [ 889.664343] ? dh_data_from_key+0x2a0/0x2a0 [ 889.668677] ? proc_fail_nth_write+0x95/0x1d0 [ 889.673185] ? __might_fault+0x11f/0x1d0 [ 889.677263] ? __might_fault+0xef/0x1d0 [ 889.681231] ? __might_fault+0x192/0x1d0 [ 889.685281] keyctl_dh_compute+0xbf/0x120 [ 889.689432] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 889.694177] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 889.700537] __se_sys_keyctl+0x10f/0x3f0 [ 889.704602] do_syscall_64+0xf9/0x620 [ 889.708547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 889.713750] RIP: 0033:0x4665d9 [ 889.717035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 889.736106] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 889.743898] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 889.751597] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 889.758866] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 889.766170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 889.773434] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:33 executing program 3 (fault-call:6 fault-nth:19): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 889.823809] FAULT_INJECTION: forcing a failure. [ 889.823809] name failslab, interval 1, probability 0, space 0, times 0 [ 889.846123] erofs: read_super, device -> /dev/loop4 [ 889.851498] erofs: options -> [ 889.878577] erofs: root inode @ nid 36 [ 889.886796] erofs: bogus i_mode (0) @ nid 36 [ 889.892644] CPU: 0 PID: 19623 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 889.900545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.909905] Call Trace: [ 889.912511] dump_stack+0x1fc/0x2ef [ 889.916159] should_fail.cold+0xa/0xf [ 889.916429] FAULT_INJECTION: forcing a failure. [ 889.916429] name failslab, interval 1, probability 0, space 0, times 0 [ 889.920012] ? setup_fault_attr+0x200/0x200 [ 889.920030] ? lock_acquire+0x170/0x3c0 [ 889.920053] __should_failslab+0x115/0x180 [ 889.920069] should_failslab+0x5/0x10 [ 889.920083] __kmalloc_track_caller+0x2a6/0x3c0 [ 889.920097] ? strndup_user+0x70/0x120 [ 889.920114] memdup_user+0x22/0xb0 [ 889.920128] strndup_user+0x70/0x120 [ 889.920143] ksys_mount+0x34/0x130 [ 889.920158] __x64_sys_mount+0xba/0x150 [ 889.920179] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 889.975809] do_syscall_64+0xf9/0x620 [ 889.979645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 889.984859] RIP: 0033:0x467afa [ 889.988153] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.007062] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 890.014791] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa 23:09:33 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xff0f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 890.023115] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 890.030400] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 890.037681] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 890.044964] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 890.052495] erofs: unmounted for /dev/loop1 [ 890.076913] CPU: 1 PID: 19636 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 890.084828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.094281] Call Trace: [ 890.096887] dump_stack+0x1fc/0x2ef [ 890.100524] should_fail.cold+0xa/0xf [ 890.104334] ? setup_fault_attr+0x200/0x200 [ 890.108664] ? lock_acquire+0x170/0x3c0 [ 890.112656] __should_failslab+0x115/0x180 [ 890.116922] should_failslab+0x5/0x10 [ 890.120726] __kmalloc+0x2ab/0x3c0 [ 890.124276] ? mpi_resize+0x185/0x230 [ 890.128249] mpi_resize+0x185/0x230 [ 890.131863] mpi_powm+0x706/0x1a30 [ 890.135404] ? fs_reclaim_release+0xd0/0x110 [ 890.139809] ? lock_acquire+0x170/0x3c0 [ 890.143765] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 890.148938] ? mpi_alloc+0x43/0x240 [ 890.152546] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 890.157727] ? kmem_cache_alloc_trace+0x323/0x380 [ 890.162739] dh_compute_value+0x34e/0x5c0 [ 890.166877] ? dh_exit_tfm+0x20/0x20 [ 890.170575] ? __lockdep_init_map+0x100/0x5a0 [ 890.175085] ? __lockdep_init_map+0x100/0x5a0 [ 890.179579] __keyctl_dh_compute+0x953/0x13d0 [ 890.184131] ? dh_data_from_key+0x2a0/0x2a0 [ 890.188445] ? proc_fail_nth_write+0x95/0x1d0 [ 890.192958] ? __might_fault+0x11f/0x1d0 [ 890.197013] ? __might_fault+0xef/0x1d0 [ 890.200974] ? __might_fault+0x192/0x1d0 [ 890.205019] keyctl_dh_compute+0xbf/0x120 [ 890.209154] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 890.213900] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 890.219426] __se_sys_keyctl+0x10f/0x3f0 [ 890.223758] do_syscall_64+0xf9/0x620 [ 890.227891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 890.233062] RIP: 0033:0x4665d9 [ 890.237010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.255909] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 890.263784] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 890.271060] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 23:09:33 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f00, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:33 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000002c0)="58aa94b1404c34655af2bf9127bbf075ba08b6828f650e83f8531416f65a15d8a0f27d5ad591963337d15bf33cc91c70ade3201adfe6eb34398fc352420b1d440eae7c8e6d550acd53dc5af6a499079afbdf3e5f74281f9200823db5", 0x5c, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r1, r0}, &(0x7f00000003c0)=""/124, 0x7c, 0x0) 23:09:33 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1200, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 890.278427] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 890.285773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 890.293203] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:33 executing program 0 (fault-call:0 fault-nth:35): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:33 executing program 3 (fault-call:6 fault-nth:20): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 890.396270] erofs: read_super, device -> /dev/loop1 [ 890.406756] erofs: read_super, device -> /dev/loop4 [ 890.412176] erofs: options -> [ 890.416605] erofs: root inode @ nid 36 [ 890.417369] erofs: options -> [ 890.430892] erofs: bogus i_mode (0) @ nid 36 [ 890.455582] erofs: root inode @ nid 36 23:09:34 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff7f, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:34 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "d0c192741eff23a67ac7a1b9bae34f769553739fd3418567a66400e14fc3e016d55978a9a0a348405bd0af76192559490d2a32f7ebb7c7a46354646f2f4ba645", 0x2d}, 0x48, 0xffffffffffffffff) r3 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)='&[/!(\\@\x00', 0xfffffffffffffffb) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in=@private, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) r5 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "475ac766b03dde05a7e067513d00677f78db092b3fcfed91d5f383bd6726c5ecd722ee3eb2c9bf2211c601a86cd65d6a19697ce1efb81d9bdb826ef747bab16e", 0x18}, 0x48, r2) keyctl$get_persistent(0x16, r4, r5) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r2, r3, r1}, &(0x7f0000000400)=""/242, 0xf2, &(0x7f0000000580)={&(0x7f0000000500)={'nhpoly1305-avx2\x00'}, &(0x7f0000000540)}) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r6, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 890.481099] erofs: mounted on /dev/loop1 with opts: . [ 890.484326] FAULT_INJECTION: forcing a failure. [ 890.484326] name failslab, interval 1, probability 0, space 0, times 0 [ 890.528298] CPU: 0 PID: 19662 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 890.536306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.545680] Call Trace: [ 890.548304] dump_stack+0x1fc/0x2ef [ 890.551930] should_fail.cold+0xa/0xf [ 890.555936] ? setup_fault_attr+0x200/0x200 [ 890.560350] ? lock_acquire+0x170/0x3c0 [ 890.564717] __should_failslab+0x115/0x180 [ 890.569161] should_failslab+0x5/0x10 [ 890.572967] __kmalloc+0x2ab/0x3c0 [ 890.576512] ? mpi_alloc_limb_space+0x2f/0x50 [ 890.581023] mpi_alloc_limb_space+0x2f/0x50 [ 890.585423] mpi_powm+0xb56/0x1a30 [ 890.589088] ? fs_reclaim_release+0xd0/0x110 [ 890.593714] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 890.599216] ? mpi_alloc+0x43/0x240 [ 890.602900] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 890.607933] ? kmem_cache_alloc_trace+0x323/0x380 [ 890.612793] dh_compute_value+0x34e/0x5c0 [ 890.616935] ? dh_exit_tfm+0x20/0x20 [ 890.620738] ? __lockdep_init_map+0x100/0x5a0 [ 890.625261] ? __lockdep_init_map+0x100/0x5a0 [ 890.629771] __keyctl_dh_compute+0x953/0x13d0 [ 890.634274] ? dh_data_from_key+0x2a0/0x2a0 [ 890.638599] ? proc_fail_nth_write+0x95/0x1d0 [ 890.643095] ? __might_fault+0x11f/0x1d0 [ 890.647228] ? __might_fault+0xef/0x1d0 [ 890.651232] ? __might_fault+0x192/0x1d0 [ 890.655391] keyctl_dh_compute+0xbf/0x120 [ 890.659564] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 890.664381] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 890.669754] __se_sys_keyctl+0x10f/0x3f0 [ 890.673818] do_syscall_64+0xf9/0x620 [ 890.677621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 890.682799] RIP: 0033:0x4665d9 [ 890.685985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.704968] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 890.712667] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 890.720029] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 23:09:34 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1300, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 890.727316] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 890.734670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 890.742191] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 890.763780] FAULT_INJECTION: forcing a failure. [ 890.763780] name failslab, interval 1, probability 0, space 0, times 0 23:09:34 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 890.790681] CPU: 1 PID: 19664 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 890.798789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.808305] Call Trace: [ 890.810927] dump_stack+0x1fc/0x2ef [ 890.814616] should_fail.cold+0xa/0xf [ 890.818442] ? setup_fault_attr+0x200/0x200 [ 890.822784] ? lock_acquire+0x170/0x3c0 [ 890.826785] __should_failslab+0x115/0x180 [ 890.831148] should_failslab+0x5/0x10 [ 890.834971] __kmalloc_track_caller+0x2a6/0x3c0 23:09:34 executing program 3 (fault-call:6 fault-nth:21): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 890.839664] ? strndup_user+0x70/0x120 [ 890.843619] ? _copy_from_user+0xd2/0x130 [ 890.847794] memdup_user+0x22/0xb0 [ 890.851379] strndup_user+0x70/0x120 [ 890.855126] ksys_mount+0x6f/0x130 [ 890.858689] __x64_sys_mount+0xba/0x150 [ 890.862691] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 890.867299] do_syscall_64+0xf9/0x620 [ 890.871131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 890.876340] RIP: 0033:0x467afa [ 890.880103] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 890.899114] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 890.906846] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 890.910870] FAULT_INJECTION: forcing a failure. [ 890.910870] name failslab, interval 1, probability 0, space 0, times 0 [ 890.914128] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 890.914138] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 890.914147] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 890.914156] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 890.961400] erofs: unmounted for /dev/loop1 [ 890.968507] erofs: read_super, device -> /dev/loop4 [ 890.981846] erofs: options -> 23:09:34 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1400, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 890.988699] could not allocate digest TFM handle nhpoly1305-avx2 [ 890.994178] CPU: 1 PID: 19681 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 891.002888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.003824] erofs: root inode @ nid 36 [ 891.012429] Call Trace: [ 891.012461] dump_stack+0x1fc/0x2ef [ 891.012485] should_fail.cold+0xa/0xf [ 891.012504] ? setup_fault_attr+0x200/0x200 [ 891.012519] ? lock_acquire+0x170/0x3c0 [ 891.012538] __should_failslab+0x115/0x180 [ 891.012555] should_failslab+0x5/0x10 [ 891.012569] __kmalloc+0x2ab/0x3c0 [ 891.012582] ? mpi_alloc_limb_space+0x2f/0x50 [ 891.012602] mpi_alloc_limb_space+0x2f/0x50 [ 891.022058] erofs: bogus i_mode (0) @ nid 36 [ 891.022987] mpi_powm+0xf28/0x1a30 [ 891.023022] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 891.069713] ? mpi_alloc+0x43/0x240 [ 891.073335] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 891.078345] ? kmem_cache_alloc_trace+0x323/0x380 [ 891.083180] dh_compute_value+0x34e/0x5c0 [ 891.087334] ? dh_exit_tfm+0x20/0x20 [ 891.091418] ? __lockdep_init_map+0x100/0x5a0 [ 891.096169] ? __lockdep_init_map+0x100/0x5a0 [ 891.100700] __keyctl_dh_compute+0x953/0x13d0 [ 891.105221] ? dh_data_from_key+0x2a0/0x2a0 [ 891.109547] ? proc_fail_nth_write+0x95/0x1d0 [ 891.114145] ? __might_fault+0x11f/0x1d0 [ 891.118284] ? __might_fault+0xef/0x1d0 [ 891.122252] ? __might_fault+0x192/0x1d0 [ 891.126322] keyctl_dh_compute+0xbf/0x120 [ 891.130653] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 891.135405] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 891.140777] __se_sys_keyctl+0x10f/0x3f0 [ 891.144839] do_syscall_64+0xf9/0x620 [ 891.148664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 891.153875] RIP: 0033:0x4665d9 [ 891.157082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.176194] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 891.183907] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 891.191167] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 891.198436] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 891.205720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.213109] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 [ 891.236137] could not allocate digest TFM handle nhpoly1305-avx2 23:09:34 executing program 0 (fault-call:0 fault-nth:36): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:34 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000140)="006bd2a61667da53e08895bd3f83efd5e07a23ed0f58936d627e66d30ec5d2c11caa2d82bbc35f3a65744e23834df0a0049a8c59352e00d86ace620f0f8af0f720529264c2f3eb8041c3a3f750dc39848f4ef3c26f8c9ca41c1857f1dae9dcf7071eb8fbdf3a7b3e6dfe343a0d6de32949eca70b46ee78f4a0653834401d9b9f28fb5656", 0x84, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000340)="6b9a25d6379a62a82d89dcfa816a4eeb0b214581b69f7efefe257c038592cf28c6d324221ffe7155c7a0942e9785eda2d08a0e6d585ca3d27b83d9ce5e2f19a3c6cd3a59adf3344eeff23960504e7bbde3d1051680ee1de66e84de51a7022c420cd9e77c8195ac23dde74ef1cb466d4f35bb4589cada04b27b529958370f1479", 0x80, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:34 executing program 3 (fault-call:6 fault-nth:22): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:34 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1500, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 891.348321] erofs: read_super, device -> /dev/loop4 [ 891.358411] erofs: options -> [ 891.382107] erofs: root inode @ nid 36 [ 891.390594] erofs: read_super, device -> /dev/loop1 [ 891.397154] erofs: bogus i_mode (0) @ nid 36 23:09:35 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1600, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:35 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000004c0)="b09546570abf55557955d63510ba7206f9801db8b0ec1e204e9f92e2688c8177fdd6022b8079e76cd4ab1776beca7bf57232b068da8b2950b0ec63299a8add0a1faadd3d53b6bf74175d3f5ef7969cd6d901c56b7687d3dad2d1958271270b35d2cbd0e4764f5939a0e07d763b0133ad7db6b3ceb135322b4285a16ff9e2f2770677d638a474844b5c7647e25e7d5f906b16ba2d33b03d1f3e3cc4e722267d2bb9505cb6a6ebb112cd7eab4395f521573ddcba2cf2a5a6eb384bc20625c5", 0xbe, 0x0) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000003c0)="d502415dd274c710f0dab3d73627ecdc6c938fc8821f74a7c7f55eddd85b1ef46677536bc17cab554918279d4d29b2ef1fd42b9159f2ed1092a9e32a599883355ac0742292606ef2fb57b4e57175b088030a99d250918144da011d22f7bea713980226e4d30c384a86239b9760d76c7073a5ce4a71362811f70d5134aee6032cb14ad3138ec50829614baa4f65abeef907b9ce32e3be1a2c05333b18e5d6d4099982d8236441209c2f80233fa94484edc222dfc5e6bd1db87441aabaf4f35432b8dd097f4adff913d889ac2642", 0xcd, r3) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r4) [ 891.425408] erofs: options -> [ 891.429038] FAULT_INJECTION: forcing a failure. [ 891.429038] name failslab, interval 1, probability 0, space 0, times 0 [ 891.446571] CPU: 1 PID: 19707 Comm: syz-executor.3 Not tainted 4.19.196-syzkaller #0 [ 891.447710] erofs: root inode @ nid 36 [ 891.454629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.454637] Call Trace: [ 891.454670] dump_stack+0x1fc/0x2ef [ 891.454692] should_fail.cold+0xa/0xf [ 891.454714] ? setup_fault_attr+0x200/0x200 [ 891.454733] ? lock_acquire+0x170/0x3c0 [ 891.454754] __should_failslab+0x115/0x180 [ 891.454769] should_failslab+0x5/0x10 [ 891.454785] __kmalloc+0x2ab/0x3c0 [ 891.454801] ? mpi_alloc_limb_space+0x2f/0x50 [ 891.454816] ? mpihelp_submul_1+0x75/0x1a0 [ 891.454833] mpi_alloc_limb_space+0x2f/0x50 [ 891.454867] mpihelp_mul_karatsuba_case+0x105/0xc00 [ 891.454886] ? mpihelp_divrem+0x5ff/0x13c0 [ 891.454906] ? mpihelp_mul+0x560/0x560 [ 891.466669] erofs: mounted on /dev/loop1 with opts: . [ 891.468658] mpi_powm+0xec0/0x1a30 [ 891.468692] ? mpihelp_mul_karatsuba_case+0xc00/0xc00 [ 891.539113] ? mpi_alloc+0x43/0x240 [ 891.542736] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 891.548876] ? kmem_cache_alloc_trace+0x323/0x380 [ 891.554065] dh_compute_value+0x34e/0x5c0 [ 891.558461] ? dh_exit_tfm+0x20/0x20 [ 891.562184] ? __lockdep_init_map+0x100/0x5a0 [ 891.566774] ? __lockdep_init_map+0x100/0x5a0 [ 891.571273] __keyctl_dh_compute+0x953/0x13d0 [ 891.575772] ? dh_data_from_key+0x2a0/0x2a0 [ 891.580101] ? proc_fail_nth_write+0x95/0x1d0 [ 891.584618] ? __might_fault+0x11f/0x1d0 [ 891.588677] ? __might_fault+0xef/0x1d0 [ 891.592733] ? __might_fault+0x192/0x1d0 [ 891.596808] keyctl_dh_compute+0xbf/0x120 [ 891.601041] ? __keyctl_dh_compute+0x13d0/0x13d0 [ 891.605817] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 891.611182] __se_sys_keyctl+0x10f/0x3f0 [ 891.615241] do_syscall_64+0xf9/0x620 [ 891.619034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 891.624325] RIP: 0033:0x4665d9 [ 891.627525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.646665] RSP: 002b:00007f0940a34188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 891.654402] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 891.661785] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000017 [ 891.669056] RBP: 00007f0940a341d0 R08: 00000000200001c0 R09: 0000000000000000 [ 891.676331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 891.683605] R13: 00007ffff3f3a1ff R14: 00007f0940a34300 R15: 0000000000022000 23:09:35 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:35 executing program 3 (fault-call:6 fault-nth:23): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 891.720831] FAULT_INJECTION: forcing a failure. [ 891.720831] name failslab, interval 1, probability 0, space 0, times 0 [ 891.759392] CPU: 0 PID: 19710 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 891.767331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.776704] Call Trace: [ 891.779326] dump_stack+0x1fc/0x2ef [ 891.782993] should_fail.cold+0xa/0xf [ 891.786825] ? setup_fault_attr+0x200/0x200 [ 891.791166] ? lock_acquire+0x170/0x3c0 [ 891.795166] __should_failslab+0x115/0x180 [ 891.799423] should_failslab+0x5/0x10 [ 891.803246] kmem_cache_alloc+0x277/0x370 [ 891.807416] getname_flags+0xce/0x590 [ 891.811240] user_path_at_empty+0x2a/0x50 [ 891.815407] do_mount+0x147/0x2f10 [ 891.818966] ? cmp_ex_sort+0xc0/0xc0 [ 891.822704] ? __do_page_fault+0x180/0xd60 [ 891.826960] ? copy_mount_string+0x40/0x40 [ 891.831224] ? memset+0x20/0x40 [ 891.834523] ? copy_mount_options+0x26f/0x380 [ 891.839042] ksys_mount+0xcf/0x130 [ 891.842601] __x64_sys_mount+0xba/0x150 [ 891.846587] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 891.851280] do_syscall_64+0xf9/0x620 [ 891.855148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 891.860445] RIP: 0033:0x467afa [ 891.863738] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 891.882656] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 891.890386] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 891.897670] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 891.905331] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 891.912796] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 23:09:35 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1700, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 891.920084] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 891.946234] erofs: read_super, device -> /dev/loop4 23:09:35 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:35 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000003c0)="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", 0xfe, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:35 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 891.974427] erofs: options -> [ 891.993977] erofs: root inode @ nid 36 23:09:35 executing program 0 (fault-call:0 fault-nth:37): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:35 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1800, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 892.016795] erofs: unmounted for /dev/loop1 [ 892.024907] erofs: bogus i_mode (0) @ nid 36 23:09:35 executing program 2: add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) syz_open_pts(r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000140)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x7) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r4, r4}, &(0x7f00000003c0)=""/130, 0x82, 0x0) 23:09:35 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x2, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 892.124725] erofs: read_super, device -> /dev/loop4 [ 892.135461] erofs: options -> [ 892.145095] erofs: root inode @ nid 36 [ 892.151839] FAULT_INJECTION: forcing a failure. [ 892.151839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 892.163876] CPU: 1 PID: 19751 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 892.171889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.181264] Call Trace: [ 892.183900] dump_stack+0x1fc/0x2ef [ 892.187571] should_fail.cold+0xa/0xf [ 892.191410] ? setup_fault_attr+0x200/0x200 [ 892.195768] ? unwind_next_frame+0xeee/0x1400 [ 892.200286] ? __save_stack_trace+0x72/0x190 [ 892.204722] ? deref_stack_reg+0x134/0x1d0 [ 892.208993] ? get_reg+0x176/0x1f0 [ 892.212576] __alloc_pages_nodemask+0x239/0x2890 [ 892.217369] ? cmp_ex_search+0x87/0xb0 [ 892.221470] ? __lock_acquire+0x6de/0x3ff0 [ 892.225853] ? copy_mount_options+0x1e9/0x380 [ 892.230399] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 892.235282] ? ex_handler_default+0x14/0x90 [ 892.239633] ? phys_mem_access_encrypted+0x10/0x10 [ 892.244685] ? no_context+0xce/0x940 [ 892.248469] ? force_sig_info_fault.constprop.0+0x320/0x320 [ 892.254210] ? bad_area_access_error+0x23b/0x4a0 [ 892.259132] cache_grow_begin+0xa4/0x8a0 [ 892.263305] ? setup_fault_attr+0x200/0x200 [ 892.267748] ? lock_acquire+0x170/0x3c0 [ 892.271773] cache_alloc_refill+0x273/0x340 [ 892.276239] kmem_cache_alloc+0x346/0x370 [ 892.280431] getname_flags+0xce/0x590 [ 892.284353] user_path_at_empty+0x2a/0x50 [ 892.288531] do_mount+0x147/0x2f10 [ 892.292105] ? cmp_ex_sort+0xc0/0xc0 [ 892.295859] ? __do_page_fault+0x180/0xd60 [ 892.300133] ? copy_mount_string+0x40/0x40 [ 892.304406] ? memset+0x20/0x40 [ 892.307719] ? copy_mount_options+0x26f/0x380 [ 892.312359] ksys_mount+0xcf/0x130 [ 892.315943] __x64_sys_mount+0xba/0x150 [ 892.319975] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 892.324590] do_syscall_64+0xf9/0x620 [ 892.328463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 892.333680] RIP: 0033:0x467afa [ 892.336896] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.355864] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 892.363599] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa 23:09:35 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x3, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:35 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x4, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 892.370979] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 892.378282] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 892.385574] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 892.392869] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 892.427852] erofs: read_super, device -> /dev/loop0 [ 892.433056] erofs: options -> [ 892.436516] erofs: root inode @ nid 36 [ 892.442168] erofs: mounted on /dev/loop0 with opts: . [ 892.447902] erofs: bogus i_mode (0) @ nid 36 23:09:36 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:36 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x5, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:36 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1900, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 892.472305] erofs: read_super, device -> /dev/loop1 [ 892.495071] erofs: unmounted for /dev/loop0 [ 892.517064] erofs: options -> [ 892.526301] erofs: root inode @ nid 36 [ 892.551122] erofs: mounted on /dev/loop1 with opts: . 23:09:36 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1fffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:36 executing program 0 (fault-call:0 fault-nth:38): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:36 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x6, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:36 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1a00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 892.590435] erofs: read_super, device -> /dev/loop4 [ 892.595872] erofs: options -> [ 892.601243] erofs: root inode @ nid 36 [ 892.610424] erofs: bogus i_mode (0) @ nid 36 23:09:36 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xedc000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 892.662258] erofs: unmounted for /dev/loop1 [ 892.728916] FAULT_INJECTION: forcing a failure. [ 892.728916] name failslab, interval 1, probability 0, space 0, times 0 [ 892.745214] CPU: 1 PID: 19799 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 892.753753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.763425] Call Trace: [ 892.766207] dump_stack+0x1fc/0x2ef [ 892.770289] should_fail.cold+0xa/0xf [ 892.774100] ? setup_fault_attr+0x200/0x200 [ 892.778508] ? lock_acquire+0x170/0x3c0 [ 892.782492] __should_failslab+0x115/0x180 [ 892.786723] should_failslab+0x5/0x10 [ 892.790524] kmem_cache_alloc+0x277/0x370 [ 892.794679] alloc_vfsmnt+0x23/0x780 [ 892.798382] ? _raw_read_unlock+0x29/0x40 [ 892.802533] vfs_kern_mount.part.0+0x27/0x470 [ 892.807033] do_mount+0x113c/0x2f10 [ 892.810662] ? cmp_ex_sort+0xc0/0xc0 [ 892.814398] ? __do_page_fault+0x180/0xd60 [ 892.818621] ? copy_mount_string+0x40/0x40 [ 892.822992] ? memset+0x20/0x40 [ 892.826302] ? copy_mount_options+0x26f/0x380 [ 892.830832] ksys_mount+0xcf/0x130 [ 892.834402] __x64_sys_mount+0xba/0x150 [ 892.838386] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 892.842985] do_syscall_64+0xf9/0x620 [ 892.846822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 892.852055] RIP: 0033:0x467afa [ 892.855270] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.874266] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 892.881991] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 892.889323] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 892.896585] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 892.903878] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 892.911133] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 892.946557] erofs: read_super, device -> /dev/loop1 [ 892.964971] erofs: read_super, device -> /dev/loop4 [ 892.974907] erofs: options -> [ 892.979303] erofs: options -> [ 892.985337] erofs: root inode @ nid 36 [ 892.985907] erofs: root inode @ nid 36 [ 892.996404] erofs: bogus i_mode (0) @ nid 36 [ 893.002508] erofs: mounted on /dev/loop1 with opts: . 23:09:36 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000003c0)={0x1ff, {{0xa, 0x4e24, 0x2, @local, 0x2}}, {{0xa, 0x4e21, 0x8, @private0, 0x5}}}, 0x108) r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:36 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1b00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:36 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x7, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:36 executing program 0 (fault-call:0 fault-nth:39): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:36 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:36 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 893.104702] erofs: unmounted for /dev/loop1 23:09:36 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1c00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:36 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x8, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 893.176157] FAULT_INJECTION: forcing a failure. [ 893.176157] name failslab, interval 1, probability 0, space 0, times 0 [ 893.225813] erofs: read_super, device -> /dev/loop4 [ 893.236875] CPU: 0 PID: 19824 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 893.237426] erofs: read_super, device -> /dev/loop1 [ 893.245163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.245172] Call Trace: [ 893.245206] dump_stack+0x1fc/0x2ef [ 893.245230] should_fail.cold+0xa/0xf [ 893.245252] ? setup_fault_attr+0x200/0x200 23:09:36 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="e8b01f6a3d053754cb5214d563b434cd7d244613b5d63c1007541c11d2fb4e785569372a4551a9b982678389e1783d39902c4116c49d61e3306599ef4c04132df2782edaa5553c2edd63641004071030f46fca861d0096da4a7c7fe095630b8718f93d1bb67a773d4a1b1acb9e6bc05a467aa6709647aeeb1732d0d8568a008192d2a9ea88890e2c37936c8d93c011fc6524a7906cc834d36cac63179a4e", 0x9e, r2) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000080), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 893.245269] ? lock_acquire+0x170/0x3c0 [ 893.245292] __should_failslab+0x115/0x180 [ 893.245309] should_failslab+0x5/0x10 [ 893.245322] kmem_cache_alloc+0x277/0x370 [ 893.245338] getname_kernel+0x4e/0x370 [ 893.245354] kern_path+0x1b/0x40 [ 893.245371] lookup_bdev+0xfc/0x220 [ 893.245385] ? bd_acquire+0x440/0x440 [ 893.245407] blkdev_get_by_path+0x1b/0xd0 [ 893.245421] mount_bdev+0x5b/0x3b0 [ 893.245439] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 893.245457] erofs_mount+0x8c/0xc0 [ 893.245471] ? erofs_kill_sb+0x20/0x20 [ 893.245489] ? alloc_pages_current+0x19b/0x2a0 [ 893.245503] ? __lockdep_init_map+0x100/0x5a0 [ 893.245517] mount_fs+0xa3/0x310 [ 893.245538] vfs_kern_mount.part.0+0x68/0x470 [ 893.245555] do_mount+0x113c/0x2f10 [ 893.245573] ? cmp_ex_sort+0xc0/0xc0 [ 893.245591] ? __do_page_fault+0x180/0xd60 [ 893.245608] ? copy_mount_string+0x40/0x40 [ 893.245629] ? memset+0x20/0x40 [ 893.245663] ? copy_mount_options+0x26f/0x380 [ 893.245684] ksys_mount+0xcf/0x130 [ 893.245703] __x64_sys_mount+0xba/0x150 [ 893.245724] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 893.252848] erofs: options -> [ 893.260317] do_syscall_64+0xf9/0x620 [ 893.260346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 893.260359] RIP: 0033:0x467afa [ 893.260373] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.260380] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 23:09:37 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x9, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 893.260393] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 893.260400] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 893.260408] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 893.260415] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 893.260422] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 893.282035] erofs: options -> [ 893.310751] erofs: root inode @ nid 36 [ 893.456925] erofs: root inode @ nid 36 [ 893.463831] erofs: mounted on /dev/loop1 with opts: . 23:09:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1d00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:37 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:37 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xa, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:37 executing program 0 (fault-call:0 fault-nth:40): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 893.530850] erofs: bogus i_mode (0) @ nid 36 [ 893.537172] erofs: unmounted for /dev/loop1 23:09:37 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="1d5eab835623c92d5c116166726585770d5e3dde026e9e8cfeb065f65b5a1c68d72ae07d2068afe826274e22ca306ae4cd80a4c503362b0f51b5c033f423bf29f2c1c412c055b8939bba4057a4ee5c190f84788f3de691bc2b55cefe18880edb50831b87ac2b7c842de66618f690cef05dc367c31b", 0x75, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r2, r0}, &(0x7f0000000240)=""/1, 0x1, &(0x7f0000000400)={&(0x7f0000000340)={'sha224-avx2\x00'}, &(0x7f00000003c0)}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r4, r5, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1e00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 893.645214] erofs: read_super, device -> /dev/loop1 [ 893.646135] FAULT_INJECTION: forcing a failure. [ 893.646135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 893.651991] erofs: options -> [ 893.669989] CPU: 0 PID: 19869 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 893.670665] erofs: read_super, device -> /dev/loop4 [ 893.678005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.678015] Call Trace: [ 893.678047] dump_stack+0x1fc/0x2ef [ 893.678073] should_fail.cold+0xa/0xf [ 893.702489] ? lock_acquire+0x170/0x3c0 [ 893.705204] erofs: root inode @ nid 36 [ 893.706488] ? setup_fault_attr+0x200/0x200 [ 893.706520] __alloc_pages_nodemask+0x239/0x2890 [ 893.714472] erofs: options -> [ 893.714898] ? pcpu_alloc+0x91f/0x1190 [ 893.726898] ? mark_held_locks+0xf0/0xf0 [ 893.730991] ? pcpu_alloc+0xe78/0x1190 [ 893.734922] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 893.739801] ? check_preemption_disabled+0x41/0x280 [ 893.740031] erofs: mounted on /dev/loop1 with opts: . [ 893.744834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 893.744853] ? pcpu_alloc+0xc9/0x1190 [ 893.744873] alloc_pages_current+0x193/0x2a0 [ 893.744892] ? __lockdep_init_map+0x100/0x5a0 [ 893.767899] get_zeroed_page+0x10/0x40 [ 893.771821] mount_fs+0x203/0x310 [ 893.775304] vfs_kern_mount.part.0+0x68/0x470 [ 893.779832] do_mount+0x113c/0x2f10 [ 893.783491] ? cmp_ex_sort+0xc0/0xc0 [ 893.787237] ? __do_page_fault+0x180/0xd60 [ 893.791502] ? copy_mount_string+0x40/0x40 [ 893.795774] ? memset+0x20/0x40 [ 893.799086] ? copy_mount_options+0x26f/0x380 [ 893.800216] erofs: root inode @ nid 36 [ 893.803622] ksys_mount+0xcf/0x130 [ 893.811050] __x64_sys_mount+0xba/0x150 [ 893.815060] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 893.819675] do_syscall_64+0xf9/0x620 [ 893.823507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 893.828722] RIP: 0033:0x467afa [ 893.831940] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.850967] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 893.852592] erofs: bogus i_mode (0) @ nid 36 [ 893.858686] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 893.858695] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 893.858702] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 893.858709] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 893.858718] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 893.883812] could not allocate digest TFM handle user [ 893.957701] erofs: unmounted for /dev/loop1 23:09:37 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:37 executing program 2: r0 = syz_mount_image$gfs2meta(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3ff, 0x5, &(0x7f0000000540)=[{&(0x7f0000000140)="69d35efbf78ce5767b842b3e0a00671b64c35b983d329e9e12b117a5c05d360c6678add3076a04b35f44f9d6a53e266327957fa84b932dcf3d5db9d2549c3e307204457d280105f3044c2d77aeba75df354918020f7e1ca44aacc4b8382b8b2604d1d72539e30237131be740241408ba03bbd085aeecab116eb1c43a00352a80d9933b366549850a8e4d0460f9f2def9bd9b3668a68bbf5030b2407615d1f6411185c9575e40", 0xa6, 0x40}, {&(0x7f00000003c0)="a207a62261c331fe00c2dc4b615ab0b7ea85bc520ae690bd5dc8f463c82b95967c8cb6220c0b8d156b32221d098dab39cdd1baaef2aaf3d3b59cedbabde5b1bbd7c7bc006110c0300f945f8a0941881a82959d5db5e6cc46c1aa5261677c505be606efff0341ed62c8f903d534cedfae7dc072bebb60cf33dc182714fdf579850fe64cbf3ff89100", 0x88, 0x3}, {&(0x7f0000000240)="2ac54d0c7409f03f68d8eea604aeec36ade59c5ab1e461ca9a3a5b6b0a0211896654", 0x22, 0x2}, {&(0x7f0000000480)="4840d66077df5d521dbc8651774491cc06a4a3379e30ab945961ef0b15941c1a776226f5be8c9e8f3e8948c6e7f81f4538b05a5639df277cb21613aa58b12f9986999afd595dcab7cc6c51dfac56b731ecbd2e64f48c66e2d22412d753c8c3bc0dddd1306f6d78f03c45db20dc21db64974e0e481ef5d76b3efe4c09c31962e3a71df9534daeed77f95444164166d1df77b3bba8b41a99b1893f791875af4e50b745", 0xa2, 0xca}, {&(0x7f0000000340)="dcafc07e6320ca3d3cfdf8f73fb8307b5ed6dbda26205da64af084d97db47aff6d65e970ebc5ddee9656858da50b1c756b992c6171da", 0x36, 0x7ff}], 0x1100000, &(0x7f0000000600)={[], [{@dont_hash}, {@subj_user={'subj_user', 0x3d, 'syz'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+.'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x35, 0x61, 0x62, 0x64, 0x63, 0x61, 0x65], 0x2d, [0x33, 0x31, 0x36, 0x36], 0x2d, [0x34, 0x36, 0x62, 0x39], 0x2d, [0x38, 0x38, 0x65, 0x68], 0x2d, [0x30, 0x35, 0x32, 0x66, 0x8, 0x64, 0x30, 0x34]}}}]}) r1 = openat(r0, &(0x7f00000006c0)='./file0\x00', 0x8000, 0x1) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) recvmsg(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003840)=""/160, 0xa0}, 0x40010001) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r2}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1f00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:37 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:37 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xb, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2000, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 894.126265] erofs: read_super, device -> /dev/loop1 [ 894.159875] erofs: options -> 23:09:37 executing program 0 (fault-call:0 fault-nth:41): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:37 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xc, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 894.189061] erofs: root inode @ nid 36 23:09:37 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000080)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 894.220355] erofs: mounted on /dev/loop1 with opts: . [ 894.269587] erofs: read_super, device -> /dev/loop4 23:09:37 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2100, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:37 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:37 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="55729b5925500555a952eae128d0", 0xe, r1) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) [ 894.302412] erofs: options -> [ 894.306379] FAULT_INJECTION: forcing a failure. [ 894.306379] name failslab, interval 1, probability 0, space 0, times 0 [ 894.316505] erofs: root inode @ nid 36 [ 894.324410] erofs: bogus i_mode (0) @ nid 36 [ 894.343315] erofs: unmounted for /dev/loop1 [ 894.372558] CPU: 1 PID: 19929 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 894.380485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.389999] Call Trace: [ 894.392625] dump_stack+0x1fc/0x2ef [ 894.396270] should_fail.cold+0xa/0xf [ 894.400180] ? setup_fault_attr+0x200/0x200 [ 894.404495] ? lock_acquire+0x170/0x3c0 [ 894.408620] __should_failslab+0x115/0x180 [ 894.412983] should_failslab+0x5/0x10 [ 894.416790] __kmalloc+0x2ab/0x3c0 [ 894.420417] ? __list_lru_init+0xd3/0x7f0 [ 894.424574] __list_lru_init+0xd3/0x7f0 [ 894.428640] ? up_write+0x18/0x150 [ 894.432242] sget_userns+0x7e2/0xcd0 [ 894.435948] ? set_bdev_super+0x110/0x110 [ 894.440084] ? ns_test_super+0x50/0x50 [ 894.443964] ? set_bdev_super+0x110/0x110 [ 894.448097] ? ns_test_super+0x50/0x50 [ 894.451972] sget+0x102/0x140 [ 894.455084] mount_bdev+0xf8/0x3b0 [ 894.458623] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 894.463908] erofs_mount+0x8c/0xc0 [ 894.467553] ? erofs_kill_sb+0x20/0x20 [ 894.471717] ? alloc_pages_current+0x19b/0x2a0 [ 894.476494] ? __lockdep_init_map+0x100/0x5a0 [ 894.480995] mount_fs+0xa3/0x310 [ 894.484371] vfs_kern_mount.part.0+0x68/0x470 [ 894.488930] do_mount+0x113c/0x2f10 [ 894.492836] ? cmp_ex_sort+0xc0/0xc0 [ 894.496541] ? __do_page_fault+0x180/0xd60 [ 894.500772] ? copy_mount_string+0x40/0x40 [ 894.505082] ? memset+0x20/0x40 [ 894.508347] ? copy_mount_options+0x26f/0x380 [ 894.512831] ksys_mount+0xcf/0x130 [ 894.516361] __x64_sys_mount+0xba/0x150 [ 894.520427] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 894.525081] do_syscall_64+0xf9/0x620 [ 894.528891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 894.534075] RIP: 0033:0x467afa [ 894.537272] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 894.556382] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 894.564081] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 894.571779] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 894.579247] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 894.586509] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 894.593771] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 894.650130] erofs: read_super, device -> /dev/loop4 [ 894.661339] erofs: options -> [ 894.665250] erofs: root inode @ nid 36 [ 894.672306] erofs: bogus i_mode (0) @ nid 36 23:09:38 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:38 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2200, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:38 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xd, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:38 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) keyctl$unlink(0x9, r3, 0xffffffffffffffff) 23:09:38 executing program 0 (fault-call:0 fault-nth:42): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 894.720969] erofs: read_super, device -> /dev/loop1 [ 894.728383] erofs: options -> [ 894.744979] erofs: root inode @ nid 36 [ 894.766255] erofs: mounted on /dev/loop1 with opts: . 23:09:38 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:38 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2300, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:38 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r1) add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="5bd226834ebfc05cc67b43d8872f077e882da597ee136c0dcf71930522725c113680102dad4af4eb45c29e2c6726a0eef65d228d7abfe7d8f504caa8dd4579b8f7b2b07bfd5a08c5f239db48efb8a5efe86140cc98b00be920efadd96132a5f51cfceea34f27e58ced243f9cbec4e024d94fa50312af662bdc91c3aab151361616a56332af569054ca4cf7592ed6f4ddb0def5893665c8c1cac9caa09f9a3c3ddf4d1c994ac610fe660baa2804e3bede2c42816b0760e25fbc7c7a55", 0xbc, r1) r2 = request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='syz', 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r0, r2}, &(0x7f00000003c0)=""/79, 0x4f, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000600)="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", 0x1000, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:38 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xe, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 894.887759] FAULT_INJECTION: forcing a failure. [ 894.887759] name failslab, interval 1, probability 0, space 0, times 0 [ 894.917538] erofs: unmounted for /dev/loop1 [ 894.965594] erofs: read_super, device -> /dev/loop4 [ 894.992405] erofs: options -> [ 894.999307] CPU: 1 PID: 19965 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 895.007228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.016607] Call Trace: [ 895.019219] dump_stack+0x1fc/0x2ef [ 895.022870] should_fail.cold+0xa/0xf [ 895.024888] erofs: root inode @ nid 36 [ 895.026688] ? setup_fault_attr+0x200/0x200 [ 895.026726] ? lock_acquire+0x170/0x3c0 [ 895.038941] __should_failslab+0x115/0x180 [ 895.043309] should_failslab+0x5/0x10 [ 895.047138] kmem_cache_alloc_trace+0x284/0x380 [ 895.049306] erofs: bogus i_mode (0) @ nid 36 [ 895.051832] ? set_bdev_super+0x110/0x110 [ 895.051848] ? ns_test_super+0x50/0x50 [ 895.051866] sget_userns+0x122/0xcd0 [ 895.068007] ? set_bdev_super+0x110/0x110 [ 895.072173] ? ns_test_super+0x50/0x50 [ 895.076081] ? set_bdev_super+0x110/0x110 [ 895.080241] ? ns_test_super+0x50/0x50 [ 895.084185] sget+0x102/0x140 [ 895.087313] mount_bdev+0xf8/0x3b0 23:09:38 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2400, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 895.090872] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 895.096176] erofs_mount+0x8c/0xc0 [ 895.099737] ? erofs_kill_sb+0x20/0x20 [ 895.103646] ? alloc_pages_current+0x19b/0x2a0 [ 895.108429] ? __lockdep_init_map+0x100/0x5a0 [ 895.112921] mount_fs+0xa3/0x310 [ 895.116283] vfs_kern_mount.part.0+0x68/0x470 [ 895.120864] do_mount+0x113c/0x2f10 [ 895.124601] ? cmp_ex_sort+0xc0/0xc0 [ 895.128338] ? __do_page_fault+0x180/0xd60 [ 895.132597] ? copy_mount_string+0x40/0x40 [ 895.136839] ? memset+0x20/0x40 [ 895.140110] ? copy_mount_options+0x26f/0x380 [ 895.144839] ksys_mount+0xcf/0x130 [ 895.148397] __x64_sys_mount+0xba/0x150 [ 895.152410] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 895.157111] do_syscall_64+0xf9/0x620 [ 895.160930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 895.166117] RIP: 0033:0x467afa [ 895.169295] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:38 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0xf, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:38 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="3965941ffdb512161e7da2cd0e8f27ceffdd5f6015a2d37f53352f843463bfe5f2391c3842ca6d6f6eec6b4a41f9", 0x2e, r2) add_key$keyring(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, r3) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r5, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r6) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x64, 0x33, 0x38, 0x39, 0x34, 0x62, 0x34, 0x34, 0x66, 0x31, 0x37, 0x36, 0x31, 0x33, 0x33, 0x36]}, &(0x7f00000004c0)={0x0, "dc68928de4b709aa64f32f0e42624329f929149013fa0ddc066d60331d7e482f96da2c3b18438c4bab37f2a11e1ec0ea78009cd343823ba080d6218be47a7950", 0x38}, 0x48, r6) [ 895.188277] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 895.196030] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 895.203292] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 895.210557] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 895.217814] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 895.225079] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 895.279380] erofs: read_super, device -> /dev/loop1 [ 895.298549] erofs: options -> [ 895.313216] erofs: root inode @ nid 36 [ 895.336414] erofs: read_super, device -> /dev/loop4 [ 895.338923] erofs: mounted on /dev/loop1 with opts: . [ 895.342810] erofs: options -> [ 895.372393] erofs: root inode @ nid 36 [ 895.391998] erofs: bogus i_mode (0) @ nid 36 23:09:39 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:39 executing program 0 (fault-call:0 fault-nth:43): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:39 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000700)="b12b097a1ea67523837b877a0f69934ecf813704f12ac11082045ca93540599bfed28c492124c1ebd0403fafb5b7a6b7ad32bfe19dad52769cb3efedcc3de6fd676f5f7e409ef556", 0x48, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)="20492ef5db154a64dca417e4faecbe9401a31765c13ae93568d7c0520906da771648874a89efbaedf9e22d9ca6475aa688104d15dd7bad822d02448b4f3914291fd583f64e1531a6fe16b6b22d09b759bbead75e86893a9b1ce7d6c77192860d91f19b05727e38defbfb7337deb433c8690c660494defe8113fcbf311e7d4d4d14c4e63a1503d441e38e140bb14cf6f38b4e21343cbd07fdea213f872aa5af879d2143c84d5e5afb0aeb585fb64cbdbe03de23299564a28e4c3b28575aeffbd3a282728b56316b8349e16bc61785722b7d98987145eab0331ff79162cabb9cfb3e53708f", 0xe4, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f00000004c0)=""/216, 0xd8, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000680)={0x0, "f0230524d63f76a375bc38d8eb304b791aba605490ec86c87b30aafad7cf9ff3155a9b80fee346b46f00d150f914265db310ef59895d297736b43d7c95b71831", 0x1a}, 0x48, 0xfffffffffffffffc) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000600)="a9bee59b0b8560301ec143c8ada3e881139a2aeb8330c555b4c752359439bccc72db551d75ddfe9c435b1bd523e1c2f4d9c151b5553edc942bbd2ae1d64aaccc22b6ab8e69a0f1d6c07d5c6560aa248ab9", 0x51, r4) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, 0x0, 0x0, r4) 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2500, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x10, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 895.428000] erofs: unmounted for /dev/loop1 23:09:39 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x11, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 895.513403] FAULT_INJECTION: forcing a failure. [ 895.513403] name failslab, interval 1, probability 0, space 0, times 0 [ 895.559124] CPU: 0 PID: 20014 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 895.567035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.576399] Call Trace: [ 895.579003] dump_stack+0x1fc/0x2ef [ 895.582658] should_fail.cold+0xa/0xf [ 895.586480] ? setup_fault_attr+0x200/0x200 [ 895.590811] ? lock_acquire+0x170/0x3c0 [ 895.594804] __should_failslab+0x115/0x180 [ 895.599051] should_failslab+0x5/0x10 [ 895.602897] kmem_cache_alloc+0x277/0x370 [ 895.607088] getname_kernel+0x4e/0x370 [ 895.610986] kern_path+0x1b/0x40 [ 895.614363] lookup_bdev+0xfc/0x220 [ 895.618103] ? bd_acquire+0x440/0x440 [ 895.621917] blkdev_get_by_path+0x1b/0xd0 [ 895.626073] mount_bdev+0x5b/0x3b0 [ 895.629717] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 895.635007] erofs_mount+0x8c/0xc0 [ 895.638561] ? erofs_kill_sb+0x20/0x20 [ 895.642460] ? alloc_pages_current+0x19b/0x2a0 [ 895.647048] ? __lockdep_init_map+0x100/0x5a0 [ 895.651643] mount_fs+0xa3/0x310 [ 895.655034] vfs_kern_mount.part.0+0x68/0x470 [ 895.659550] do_mount+0x113c/0x2f10 [ 895.663187] ? cmp_ex_sort+0xc0/0xc0 [ 895.666912] ? __do_page_fault+0x180/0xd60 [ 895.671157] ? copy_mount_string+0x40/0x40 [ 895.675410] ? memset+0x20/0x40 [ 895.678704] ? copy_mount_options+0x26f/0x380 [ 895.683213] ksys_mount+0xcf/0x130 [ 895.686763] __x64_sys_mount+0xba/0x150 [ 895.690752] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 895.695442] do_syscall_64+0xf9/0x620 [ 895.699258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 895.704449] RIP: 0033:0x467afa 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2600, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x12, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2700, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 895.707645] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 895.726556] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 895.734373] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 895.741742] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 895.749379] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2800, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 895.756656] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 895.763940] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 895.829446] erofs: read_super, device -> /dev/loop4 [ 895.834587] erofs: options -> [ 895.837845] erofs: root inode @ nid 36 [ 895.846713] erofs: read_super, device -> /dev/loop1 [ 895.852619] erofs: options -> [ 895.871241] erofs: bogus i_mode (0) @ nid 36 [ 895.876132] erofs: root inode @ nid 36 [ 895.884182] erofs: mounted on /dev/loop1 with opts: . 23:09:39 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:39 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x13, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 0 (fault-call:0 fault-nth:44): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2900, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="0eec24c8ec86f94f1de3cb2080347b601573b920b0caad84e7b4e34d627caf8e9fff9f0403946296d26451fa5861db9795e1", 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:39 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 895.953021] erofs: read_super, device -> /dev/loop4 [ 895.958151] erofs: options -> [ 895.962551] erofs: root inode @ nid 36 [ 895.967026] erofs: bogus i_mode (0) @ nid 36 [ 895.977063] erofs: unmounted for /dev/loop1 [ 896.046524] FAULT_INJECTION: forcing a failure. [ 896.046524] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 896.058444] CPU: 1 PID: 20069 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 896.066329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.075690] Call Trace: [ 896.078298] dump_stack+0x1fc/0x2ef [ 896.081943] should_fail.cold+0xa/0xf [ 896.085759] ? setup_fault_attr+0x200/0x200 [ 896.090102] ? get_page_from_freelist+0x1d60/0x4170 [ 896.095242] __alloc_pages_nodemask+0x239/0x2890 [ 896.100115] ? get_page_from_freelist+0x1d60/0x4170 [ 896.105319] ? bad_range+0x260/0x3c0 [ 896.109051] ? __lock_acquire+0x6de/0x3ff0 [ 896.113304] ? preempt_count_add+0xaf/0x190 [ 896.117650] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 896.122516] ? mark_held_locks+0xf0/0xf0 [ 896.126593] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.131992] cache_grow_begin+0xa4/0x8a0 [ 896.136070] ? setup_fault_attr+0x200/0x200 [ 896.140405] ? lock_acquire+0x170/0x3c0 23:09:39 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e58e3ce6686c5ec601959bfdd69788cea71d83d788409905d45abef9fb8d2db3e29d94c1449d9c1388f60dffdb1d908857fce91a6a6558fb23fbaa115d49ea41", 0x3b}, 0x48, r2) keyctl$dh_compute(0x17, &(0x7f0000000240)={r3, r0, r0}, &(0x7f0000000340)=""/33, 0x21, &(0x7f0000000440)={&(0x7f00000003c0)={'cbcmac-aes-ce\x00'}, &(0x7f0000000400)="7b49c1af07de22d6f4297cdf4d46ec7be28c0f851c4d39c86156ea9dea", 0x1d}) r4 = add_key(0x0, 0x0, 0x0, 0x0, r2) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='+-{-\x00', r3) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x0, r2) r6 = request_key(&(0x7f0000000640)='rxrpc\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)=')\x00', 0xfffffffffffffffd) r7 = request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f0000000600)='logon\x00', r6) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r5, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r9}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r10 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r12 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r12) keyctl$dh_compute(0x17, &(0x7f0000000140)={r10, r11, r11}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000700)={r8, r4, r10}, &(0x7f0000000740)=""/3, 0x3, &(0x7f00000007c0)={&(0x7f0000000780)={'sha3-384-generic\x00'}}) 23:09:39 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x14, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:39 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2a00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 896.144392] cache_alloc_refill+0x273/0x340 [ 896.148826] kmem_cache_alloc+0x346/0x370 [ 896.152990] getname_kernel+0x4e/0x370 [ 896.156891] kern_path+0x1b/0x40 [ 896.160273] lookup_bdev+0xfc/0x220 [ 896.163914] ? bd_acquire+0x440/0x440 [ 896.167739] blkdev_get_by_path+0x1b/0xd0 [ 896.172072] mount_bdev+0x5b/0x3b0 [ 896.175627] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 896.181007] erofs_mount+0x8c/0xc0 [ 896.184567] ? erofs_kill_sb+0x20/0x20 [ 896.188491] ? alloc_pages_current+0x19b/0x2a0 [ 896.193092] ? __lockdep_init_map+0x100/0x5a0 [ 896.197606] mount_fs+0xa3/0x310 [ 896.200977] vfs_kern_mount.part.0+0x68/0x470 [ 896.205493] do_mount+0x113c/0x2f10 [ 896.209123] ? cmp_ex_sort+0xc0/0xc0 [ 896.212825] ? __do_page_fault+0x180/0xd60 [ 896.217051] ? copy_mount_string+0x40/0x40 [ 896.221302] ? memset+0x20/0x40 [ 896.224570] ? copy_mount_options+0x26f/0x380 [ 896.229053] ksys_mount+0xcf/0x130 [ 896.232602] __x64_sys_mount+0xba/0x150 [ 896.236572] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 896.241166] do_syscall_64+0xf9/0x620 [ 896.244973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.250154] RIP: 0033:0x467afa [ 896.253343] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.272235] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 896.279955] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 896.287222] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 896.294493] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 896.301841] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 896.309268] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 896.344150] erofs: read_super, device -> /dev/loop4 [ 896.353278] erofs: read_super, device -> /dev/loop1 [ 896.364624] erofs: options -> [ 896.368597] erofs: options -> [ 896.374438] erofs: root inode @ nid 36 [ 896.381731] erofs: root inode @ nid 36 [ 896.382366] could not allocate digest TFM handle cbcmac-aes-ce 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2b00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x15, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 896.393024] erofs: bogus i_mode (0) @ nid 36 [ 896.410490] erofs: read_super, device -> /dev/loop0 [ 896.415767] erofs: options -> [ 896.421698] erofs: mounted on /dev/loop1 with opts: . [ 896.428797] erofs: root inode @ nid 36 [ 896.435127] erofs: mounted on /dev/loop0 with opts: . 23:09:40 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 896.520283] erofs: read_super, device -> /dev/loop4 [ 896.535020] erofs: options -> [ 896.552407] erofs: unmounted for /dev/loop1 [ 896.569565] erofs: root inode @ nid 36 [ 896.572742] could not allocate digest TFM handle cbcmac-aes-ce [ 896.582232] erofs: unmounted for /dev/loop0 [ 896.584342] erofs: bogus i_mode (0) @ nid 36 23:09:40 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2c00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 0 (fault-call:0 fault-nth:45): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:40 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="50ab8a208939f45dbf42d61c4b3f6aa0d686a68656ec6b8546308d8c751c8ca8a466a3270efbaa6762d7e3c029193431ba039c579f9b620fce91fb18011f7019a18e798a39751c525640abf76261ea8b9633a1c288dd299dcd34aab58bc6628d79bb47cfa5ae96633ff53bdcd8b9d5c259812fd5efb9c83918cc57f5b5e564d553822b571eaae7a986dc72f932de5fd4b8dd8b917a8eab224f85b4", 0x9b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000003c0)="54af0350427b4c074bd0e889b433cabb48c916934afd47777efde765895493215fc8505cf94a3583685ddeeb32c2b75fc1a745eb114f9e60ef3c21c77119cf03a7eee9cc3cd0c4234def7eb0f0b62901c168c576bd2402fdc0754d68d818024c49d4f0c85f947a7c9ab5622348c51f0af05e932f7e1c523b471a58c56a82c6609b903db8a4d700", 0x87, 0xfffffffffffffff8) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x16, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 896.687145] erofs: read_super, device -> /dev/loop1 [ 896.707194] erofs: options -> [ 896.716405] erofs: root inode @ nid 36 [ 896.729916] erofs: mounted on /dev/loop1 with opts: . 23:09:40 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 896.755601] FAULT_INJECTION: forcing a failure. [ 896.755601] name failslab, interval 1, probability 0, space 0, times 0 [ 896.794782] erofs: unmounted for /dev/loop1 23:09:40 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000003c0)="a81130bce7610ebf736facb537e91dc87c4c4bce32700a283882cb60cd6dfb799f527c1a006c8045e0ea5a60ba99c432b22eccc08b20d73c6183884c0bdcdffdb0d0f798a82834122d0a3a2c42212f6153c41d0dcbf5412a40ea9e141e55c2d288e2aabdd1172801c2744fe2595e4848a727964176b5e81fd4fbf16ef0692c74808606c839db6ed5498b9f6bf624fb9951cac336afa8198234f831ddad29a6de0d13f349c6649eb384ddd2729d1e2636549897eaf4752d4eaccd0705131d79cae662730cd497719741fadb", 0xcb, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "3577b81208249a977f4788ed86c73feea7e610975edb2fe63d5c030cbe67efca326682b1b94a93f8e5aa95a95f9f99978a39d34691cfbfd9b898b0be13062bc7", 0x3f}, 0x48, 0x0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r2) r3 = request_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='user\x00', r2) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f0000000600)='fscrypt:', 0xffffffffffffffff) request_key(&(0x7f0000000640)='rxrpc\x00', &(0x7f0000000680)={'syz', 0x2}, &(0x7f00000006c0)='fscrypt:', r3) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)=')-\'\x00', 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x1c, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2d00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 896.804566] erofs: read_super, device -> /dev/loop4 [ 896.823949] erofs: options -> [ 896.828533] erofs: root inode @ nid 36 [ 896.830339] CPU: 0 PID: 20138 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 896.840429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.849798] Call Trace: [ 896.852497] dump_stack+0x1fc/0x2ef [ 896.856321] should_fail.cold+0xa/0xf [ 896.860228] ? setup_fault_attr+0x200/0x200 [ 896.862777] erofs: bogus i_mode (0) @ nid 36 [ 896.864561] ? lock_acquire+0x170/0x3c0 [ 896.864585] __should_failslab+0x115/0x180 [ 896.877201] should_failslab+0x5/0x10 [ 896.881025] __kmalloc+0x2ab/0x3c0 [ 896.884586] ? __list_lru_init+0xd3/0x7f0 [ 896.888764] __list_lru_init+0xd3/0x7f0 [ 896.893190] ? up_write+0x18/0x150 [ 896.897041] sget_userns+0x7e2/0xcd0 [ 896.900767] ? set_bdev_super+0x110/0x110 [ 896.904932] ? ns_test_super+0x50/0x50 [ 896.908830] ? set_bdev_super+0x110/0x110 [ 896.912984] ? ns_test_super+0x50/0x50 [ 896.916884] sget+0x102/0x140 [ 896.920021] mount_bdev+0xf8/0x3b0 [ 896.923580] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 896.928882] erofs_mount+0x8c/0xc0 [ 896.932439] ? erofs_kill_sb+0x20/0x20 [ 896.936348] ? alloc_pages_current+0x19b/0x2a0 [ 896.940991] ? __lockdep_init_map+0x100/0x5a0 [ 896.945515] mount_fs+0xa3/0x310 [ 896.948990] vfs_kern_mount.part.0+0x68/0x470 [ 896.953530] do_mount+0x113c/0x2f10 [ 896.957171] ? cmp_ex_sort+0xc0/0xc0 [ 896.960898] ? __do_page_fault+0x180/0xd60 [ 896.965148] ? copy_mount_string+0x40/0x40 [ 896.969416] ? memset+0x20/0x40 [ 896.972720] ? copy_mount_options+0x26f/0x380 [ 896.977242] ksys_mount+0xcf/0x130 [ 896.980809] __x64_sys_mount+0xba/0x150 [ 896.984797] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 896.989396] do_syscall_64+0xf9/0x620 [ 896.993315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 896.998517] RIP: 0033:0x467afa [ 897.001726] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 897.020654] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 897.028389] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 897.035675] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 897.042939] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2e00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x1d, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 897.050214] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 897.057472] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 897.075787] erofs: read_super, device -> /dev/loop1 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2f00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0xfffffffffffff001, 0x2, &(0x7f0000000180)=[{&(0x7f0000000440)="2d8c9e33eef733b966de0da1b58fb8239d85dd7d8600b6fd302daa192122437b317f0301e737dee139359596f6890ffb7be285bb601e24d497f89b3d2bc06a29375986e04a0e823dc83cfcf9aefe1588383f0334552fc25225413c1f5c6ee1b42fe40050deb36041ad765a64833e23566470be29010a0250fb5f3c8d686f696b327b390ba7b97b0fac8b09cc4173a1df9d640025801f6c99f8837875d2d3b70933002052fb860567bcb07c9c0b0a28ba2d5d763caeed5181454d6e8fd0358af7859f886d6a625be2a0bcc3b2", 0xcc, 0x8}, {&(0x7f0000000100), 0x0, 0x7ff}], 0x2222440, &(0x7f0000000540)={[{@shortname_lower}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'wlan1\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_lt={'uid<', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@dont_appraise}, {@euid_eq={'euid', 0x3d, r1}}]}) r2 = request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='user\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000001c0)="1fe5d3bce0a85dafaa59a74efc00000000000000", 0x14, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 897.097848] erofs: options -> [ 897.108486] erofs: root inode @ nid 36 [ 897.129671] erofs: mounted on /dev/loop1 with opts: . 23:09:40 executing program 0 (fault-call:0 fault-nth:46): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x39, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3000, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:40 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x72, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:40 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3100, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 897.341880] erofs: unmounted for /dev/loop1 23:09:41 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3200, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 897.377895] erofs: read_super, device -> /dev/loop4 23:09:41 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000003c0)="916e798eb426302a1a141eaac5995866a7e361041f3e2383a185afc98855666fbc82723df03f163f19eb09a67c8427b642720af0544871651abb0f42aac76a4254f2cb6837824511bae1d039229de1fa4eab4ff191a8be3ba21a5ac1f055f04c6d5c2f802a39e9f69afd23c18291475dbc721e917596384b4b1a775089bfe527451bcdc3321068321bf4de6f7a9ad9c3e9bed9b26cab85cd6910054f7d53b03b351bce8136aab2522c0759d8a06145f48d97a6453150c48d9c302dc792478f869c1181a3958b6219c3455a90bf", 0xcd, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 897.416668] erofs: options -> [ 897.428368] erofs: root inode @ nid 36 [ 897.445230] FAULT_INJECTION: forcing a failure. [ 897.445230] name failslab, interval 1, probability 0, space 0, times 0 [ 897.451303] erofs: bogus i_mode (0) @ nid 36 [ 897.493834] CPU: 1 PID: 20205 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 897.501753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.511117] Call Trace: [ 897.513721] dump_stack+0x1fc/0x2ef [ 897.517369] should_fail.cold+0xa/0xf [ 897.521188] ? setup_fault_attr+0x200/0x200 [ 897.525527] ? lock_acquire+0x170/0x3c0 [ 897.529525] __should_failslab+0x115/0x180 [ 897.533773] should_failslab+0x5/0x10 [ 897.537580] __kmalloc+0x2ab/0x3c0 23:09:41 executing program 2: r0 = add_key$user(&(0x7f0000000080), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 897.541130] ? prealloc_shrinker+0x15d/0x340 [ 897.545555] prealloc_shrinker+0x15d/0x340 [ 897.549905] sget_userns+0x7b4/0xcd0 [ 897.553623] ? set_bdev_super+0x110/0x110 [ 897.557782] ? ns_test_super+0x50/0x50 [ 897.561672] ? set_bdev_super+0x110/0x110 [ 897.565908] ? ns_test_super+0x50/0x50 [ 897.569781] sget+0x102/0x140 [ 897.572872] mount_bdev+0xf8/0x3b0 [ 897.576399] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 897.582110] erofs_mount+0x8c/0xc0 [ 897.586088] ? erofs_kill_sb+0x20/0x20 [ 897.589971] ? alloc_pages_current+0x19b/0x2a0 [ 897.594546] ? __lockdep_init_map+0x100/0x5a0 [ 897.599057] mount_fs+0xa3/0x310 [ 897.602436] vfs_kern_mount.part.0+0x68/0x470 [ 897.607009] do_mount+0x113c/0x2f10 [ 897.610625] ? cmp_ex_sort+0xc0/0xc0 [ 897.614347] ? __do_page_fault+0x180/0xd60 [ 897.618576] ? copy_mount_string+0x40/0x40 [ 897.622812] ? memset+0x20/0x40 [ 897.626085] ? copy_mount_options+0x26f/0x380 [ 897.630571] ksys_mount+0xcf/0x130 [ 897.634117] __x64_sys_mount+0xba/0x150 [ 897.638083] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 897.642671] do_syscall_64+0xf9/0x620 [ 897.646463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 897.651637] RIP: 0033:0x467afa [ 897.654840] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 897.673802] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 897.681960] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 897.689236] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 897.696704] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 897.704177] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 897.711550] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 897.741304] erofs: read_super, device -> /dev/loop1 [ 897.760935] erofs: options -> [ 897.764393] erofs: root inode @ nid 36 [ 897.768540] erofs: mounted on /dev/loop1 with opts: . [ 897.804477] erofs: read_super, device -> /dev/loop4 [ 897.809942] erofs: options -> [ 897.819638] erofs: root inode @ nid 36 [ 897.871776] erofs: bogus i_mode (0) @ nid 36 23:09:41 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:41 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3300, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:41 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:41 executing program 0 (fault-call:0 fault-nth:47): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:41 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:41 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000100)="9ac1d6c600ddd900000000000000000000a2c2a49dab12ed10b3ff166bce9d4d2429ae7ad934e2e8647c326064034d9547da90ad8b881001bb3bb6b225c524acfb80b30e5f98306c03d8a22486038de192e34b6efff85545e66f56cc5e08fbc559d4f66ee43043174c054642ce8a7b4a1052c1477b34f2ca9db399c2b63c756a4414764bae73052f14b595e892036a5de0b73e2fe6aff5592d1e324d3dad774f752a568730327d83ab4aa5c314394e23107f8f164ad0f50eb1282b4573305c442d", 0xc1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "cf1f332d2661f69c9cd517aeece69a3cfd8715d6dcd6bc3031653cde6c5e072859c4e0a07fd53953a80b87a87de1e510df75b320f20ba6330b279427192dda4a", 0x3a}, 0x48, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r2}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 897.912786] erofs: unmounted for /dev/loop1 23:09:41 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:41 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3400, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:41 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 898.065910] erofs: read_super, device -> /dev/loop1 [ 898.069013] FAULT_INJECTION: forcing a failure. [ 898.069013] name failslab, interval 1, probability 0, space 0, times 0 [ 898.071180] erofs: options -> [ 898.092821] erofs: root inode @ nid 36 [ 898.102138] erofs: mounted on /dev/loop1 with opts: . [ 898.155015] erofs: read_super, device -> /dev/loop4 [ 898.163826] CPU: 0 PID: 20245 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 898.167659] erofs: options -> [ 898.171744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.171750] Call Trace: [ 898.171775] dump_stack+0x1fc/0x2ef [ 898.171796] should_fail.cold+0xa/0xf [ 898.171814] ? setup_fault_attr+0x200/0x200 [ 898.171830] ? lock_acquire+0x170/0x3c0 23:09:41 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x23000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:41 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0xf, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:41 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3500, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 898.171850] __should_failslab+0x115/0x180 [ 898.171865] should_failslab+0x5/0x10 [ 898.171878] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 898.171896] __kmalloc_node+0x38/0x70 [ 898.171915] kvmalloc_node+0x61/0xf0 [ 898.182028] erofs: root inode @ nid 36 [ 898.184663] __list_lru_init+0x4c6/0x7f0 [ 898.184679] ? up_write+0x13/0x150 [ 898.184699] sget_userns+0x7e2/0xcd0 [ 898.192011] erofs: bogus i_mode (0) @ nid 36 [ 898.194690] ? set_bdev_super+0x110/0x110 [ 898.194709] ? ns_test_super+0x50/0x50 [ 898.194726] ? set_bdev_super+0x110/0x110 [ 898.255291] ? ns_test_super+0x50/0x50 [ 898.259165] sget+0x102/0x140 [ 898.262256] mount_bdev+0xf8/0x3b0 [ 898.265785] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 898.271048] erofs_mount+0x8c/0xc0 [ 898.274569] ? erofs_kill_sb+0x20/0x20 [ 898.278440] ? alloc_pages_current+0x19b/0x2a0 [ 898.283019] ? __lockdep_init_map+0x100/0x5a0 [ 898.287516] mount_fs+0xa3/0x310 [ 898.290868] vfs_kern_mount.part.0+0x68/0x470 [ 898.295356] do_mount+0x113c/0x2f10 [ 898.298970] ? cmp_ex_sort+0xc0/0xc0 [ 898.302673] ? __do_page_fault+0x180/0xd60 [ 898.306891] ? copy_mount_string+0x40/0x40 [ 898.311218] ? memset+0x20/0x40 [ 898.314618] ? copy_mount_options+0x26f/0x380 [ 898.319380] ksys_mount+0xcf/0x130 [ 898.322922] __x64_sys_mount+0xba/0x150 [ 898.326886] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 898.331457] do_syscall_64+0xf9/0x620 [ 898.335245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.340415] RIP: 0033:0x467afa [ 898.343604] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 898.364057] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 898.371842] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 898.379193] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 898.386693] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 898.393994] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 898.401247] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 898.409405] erofs: unmounted for /dev/loop1 [ 898.501000] erofs: read_super, device -> /dev/loop4 [ 898.510488] erofs: options -> [ 898.514069] erofs: root inode @ nid 36 [ 898.518229] erofs: bogus i_mode (0) @ nid 36 23:09:42 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:42 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000240), &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)="0ad70d0bc1ecedac775bc9f614c5b49f8925025308bdb9a46c1ada1afce05a3de6468800150180d433a004636483eb43499f1d", 0x33, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, r3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$clear(0x7, r3) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="a4b01e14067d26", 0x7, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000580)={r0, r4, r6}, &(0x7f0000000600)=""/32, 0x20, &(0x7f0000000680)={&(0x7f0000000640)={'cbcmac(twofish-generic)\x00'}}) r7 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x100402) 23:09:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x10, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 0 (fault-call:0 fault-nth:48): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3600, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 898.574272] erofs: read_super, device -> /dev/loop1 [ 898.599885] erofs: options -> [ 898.605472] erofs: root inode @ nid 36 [ 898.624823] erofs: mounted on /dev/loop1 with opts: . [ 898.641000] erofs: read_super, device -> /dev/loop4 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3700, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 898.664779] erofs: options -> [ 898.667192] FAULT_INJECTION: forcing a failure. [ 898.667192] name failslab, interval 1, probability 0, space 0, times 0 [ 898.680674] erofs: root inode @ nid 36 [ 898.704253] erofs: bogus i_mode (0) @ nid 36 23:09:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x11, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 898.716362] erofs: unmounted for /dev/loop1 [ 898.733458] CPU: 0 PID: 20305 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 898.741469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.750841] Call Trace: [ 898.753441] dump_stack+0x1fc/0x2ef [ 898.757091] should_fail.cold+0xa/0xf [ 898.760904] ? setup_fault_attr+0x200/0x200 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3800, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 898.765229] ? lock_acquire+0x170/0x3c0 [ 898.769215] __should_failslab+0x115/0x180 [ 898.773486] should_failslab+0x5/0x10 [ 898.777294] __kmalloc+0x2ab/0x3c0 [ 898.780832] ? __list_lru_init+0xd3/0x7f0 [ 898.785102] __list_lru_init+0xd3/0x7f0 [ 898.789084] ? up_write+0x13/0x150 [ 898.792626] sget_userns+0x810/0xcd0 [ 898.796337] ? set_bdev_super+0x110/0x110 [ 898.800531] ? ns_test_super+0x50/0x50 [ 898.804414] ? set_bdev_super+0x110/0x110 [ 898.808551] ? ns_test_super+0x50/0x50 [ 898.812433] sget+0x102/0x140 [ 898.815531] mount_bdev+0xf8/0x3b0 [ 898.819080] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 898.824502] erofs_mount+0x8c/0xc0 [ 898.828030] ? erofs_kill_sb+0x20/0x20 [ 898.831912] ? alloc_pages_current+0x19b/0x2a0 [ 898.836479] ? __lockdep_init_map+0x100/0x5a0 [ 898.840973] mount_fs+0xa3/0x310 [ 898.844420] vfs_kern_mount.part.0+0x68/0x470 [ 898.848915] do_mount+0x113c/0x2f10 [ 898.852562] ? cmp_ex_sort+0xc0/0xc0 [ 898.856262] ? __do_page_fault+0x180/0xd60 [ 898.860497] ? copy_mount_string+0x40/0x40 [ 898.864729] ? memset+0x20/0x40 [ 898.868008] ? copy_mount_options+0x26f/0x380 [ 898.872661] ksys_mount+0xcf/0x130 [ 898.876186] __x64_sys_mount+0xba/0x150 [ 898.880155] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 898.884858] do_syscall_64+0xf9/0x620 [ 898.888646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.893838] RIP: 0033:0x467afa [ 898.897011] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:42 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="d37a262352a6dc0fc8fc0d76d25f6508e5325cab64f5098af66f0eb8fb28eb4e695ce6ebb2fdc787b185d1e74f92d336b4877e1c55e26811dad1bfcacdfca439b2319af83236924690412d515b3636b9bd77e55316498be095d75877ba14451fd57015697e974fbbc8f9d7c9ca12d7", 0x6f, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) add_key$user(&(0x7f0000000240), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000600)="70d3e8883e998d14b6e8168ddb3c46cfc57a6b2197e8ae57c7765ba7b60d44fee8de35e256a3ea206742902fcd52f3c6afa9682001fe164bc2b353ec1f50e7efb99372f665af963d0d55286e592220dd404f2490e33b5d2ab359fdd0325045a9e3104bd886bb7e20b60c79b54bfb1ada06aa5127a9bbc27ad069fb6e2a9a081cc8c2b851cbacd751d08c9dc50c09111eb3d80d3764dde80a238e6e2c7eb9f7e096d20ee7548be537ce6b160dc8980e65ae4ed2b93297c39e92a9a8a2d43e70b60b9b7f43a514d19eede7beba0fd56b1e12", 0xd1, r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x3}, &(0x7f00000003c0)="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", 0x1b1, 0xfffffffffffffffb) [ 898.916689] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 898.924382] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 898.931635] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 898.939068] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 898.946425] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 898.953696] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 23:09:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3900, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 899.034142] erofs: read_super, device -> /dev/loop4 [ 899.053491] erofs: options -> [ 899.073246] erofs: root inode @ nid 36 [ 899.095073] erofs: read_super, device -> /dev/loop1 [ 899.109836] erofs: bogus i_mode (0) @ nid 36 [ 899.119306] erofs: options -> [ 899.126802] erofs: root inode @ nid 36 [ 899.148444] erofs: mounted on /dev/loop1 with opts: . 23:09:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x13, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:42 executing program 0 (fault-call:0 fault-nth:49): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3a00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x60000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:42 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffa) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) r4 = request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='xcbc(anubis-generic)\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f0000000580)='cifs.idmap\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="918a808bb90737a64c1941c3f458c25d9132c7e19454b496d7aba28ef2e0f9afde680f1317ecdc6cdb77b6b79cf1952734aec991b256736c884b4fd9aefcbad8ef425eb0f1d470fcadba26c721281a56e9d777c301727d6646519be5ec3b3728d7", 0x61, r5) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000007c0), &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)="c64294a0396e1c0461f94b744846c7748f459a0f4164b0c1401c3f4e6b99c83a9aa764342a0a702019f80e08ce37a4f77a6ea4ddc4f31b100ce5adc55e496eaf52a3aac1a50a6432e4e8e06d5e880dd22326539e6b10bf17fc130283cb0b455ef11167ac8c9c2cb9faa36498d1073cf61a0157b437600a341f87e68b10f32e9bac1c7fac08a9cd05bc143b543f13e8754414de494ecc4b4a4f445b08478cdf25793993cf4cb5499f7a5ade6ca33aed1d7ed5", 0xb2, r5) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x66, 0x61, 0x5a, 0x0, 0x36, 0x30, 0x64, 0x31, 0x34, 0x37, 0x66, 0x64, 0x64, 0x31, 0x65, 0x36]}, &(0x7f0000000600)={0x0, "7ef3ca64d9b78236e864a0c79f012382afa242ccda2f087d8ab6d639f5022de03968e537ed8ed2df334bfb7c2aeb44890ad8d5c572860f5ad6f452237486ae60", 0x21}, 0x48, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, &(0x7f00000009c0)="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", 0x1000, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r2, r6}, &(0x7f00000003c0)=""/113, 0x71, &(0x7f0000000340)={&(0x7f0000000240)={'xcbc-aes-neon\x00'}}) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000007c0)=ANY=[], 0x48, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r8, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) [ 899.213840] erofs: unmounted for /dev/loop1 23:09:42 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x14, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:42 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3b00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 899.331372] could not allocate digest TFM handle xcbc-aes-neon [ 899.344116] erofs: read_super, device -> /dev/loop0 [ 899.344532] erofs: read_super, device -> /dev/loop4 [ 899.356478] erofs: options -> [ 899.356808] erofs: options -> [ 899.362714] FAULT_INJECTION: forcing a failure. [ 899.362714] name failslab, interval 1, probability 0, space 0, times 0 [ 899.379358] erofs: read_super, device -> /dev/loop1 [ 899.384408] erofs: options -> [ 899.394872] erofs: root inode @ nid 36 [ 899.401297] erofs: root inode @ nid 36 [ 899.406017] erofs: bogus i_mode (0) @ nid 36 [ 899.407098] could not allocate digest TFM handle xcbc-aes-neon 23:09:43 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3c00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 899.435403] CPU: 1 PID: 20354 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 899.443322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.452765] Call Trace: [ 899.455055] erofs: mounted on /dev/loop1 with opts: . [ 899.455364] dump_stack+0x1fc/0x2ef [ 899.464176] should_fail.cold+0xa/0xf [ 899.467998] ? setup_fault_attr+0x200/0x200 [ 899.472341] ? lock_acquire+0x170/0x3c0 [ 899.476343] __should_failslab+0x115/0x180 [ 899.480597] should_failslab+0x5/0x10 [ 899.484414] kmem_cache_alloc_trace+0x284/0x380 [ 899.489090] erofs_fill_super+0x167/0x12cc [ 899.493325] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 899.498731] ? vsprintf+0x30/0x30 [ 899.502175] ? wait_for_completion_io+0x10/0x10 [ 899.506831] ? set_blocksize+0x163/0x3f0 [ 899.510887] mount_bdev+0x2fc/0x3b0 [ 899.514505] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 899.519784] erofs_mount+0x8c/0xc0 [ 899.523481] ? erofs_kill_sb+0x20/0x20 [ 899.527375] ? alloc_pages_current+0x19b/0x2a0 [ 899.532039] ? __lockdep_init_map+0x100/0x5a0 [ 899.536680] mount_fs+0xa3/0x310 [ 899.540064] vfs_kern_mount.part.0+0x68/0x470 [ 899.544590] do_mount+0x113c/0x2f10 [ 899.548264] ? cmp_ex_sort+0xc0/0xc0 [ 899.551998] ? __do_page_fault+0x180/0xd60 [ 899.556432] ? copy_mount_string+0x40/0x40 [ 899.560945] ? memset+0x20/0x40 [ 899.564307] ? copy_mount_options+0x26f/0x380 [ 899.568916] ksys_mount+0xcf/0x130 [ 899.572570] __x64_sys_mount+0xba/0x150 [ 899.576548] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 899.581139] do_syscall_64+0xf9/0x620 [ 899.585067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 899.590442] RIP: 0033:0x467afa [ 899.593622] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.612604] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 899.620479] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 899.627917] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 23:09:43 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x15, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:43 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000003c0)="1460bf70dbd4ee0c9b7ed2d82aa0b167632863dabdfdec51516bc67be0fc29cc2928a61e69ce47e91b7b9f1fba7a4696dd2e9015ddd05c2b96ac13775391ac68d6dd042a397240b9efb5014f260d7ad89ed6b84ed181be2414fe551375f00b24719ac1f39ece52a83f885a6298b89b9e8ca42330d24d133d4a46d94333ecebb2f56e650a7af5c0d44971bf06c856af3f3e8f5b07b27e16abe0bee23210038ede41d63f613b7d2acc98a35ffbf83f29ae55b6305ac5660e3f45e5df8be293bb7407f22458e8b6e7e46fcdf4a4026fce5e1ded6ecfeb183a", 0xd7, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) r4 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000540)={0x0, "6680264ac6f2e0eb95bfb0efbe1573a7e287c8e3638569c7e7c01cf58f8ca1dc971aaf3ba81342cc429318c052bd3ca32e72f59c7c3cfc3fb3e302862efdd8ca", 0x1d}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000340)='user\x00', r4) [ 899.635308] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 899.642576] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 899.650037] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 899.713834] erofs: read_super, device -> /dev/loop4 23:09:43 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x83030000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 899.737983] erofs: options -> [ 899.754028] erofs: root inode @ nid 36 [ 899.772142] erofs: bogus i_mode (0) @ nid 36 23:09:43 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x16, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 899.789912] erofs: unmounted for /dev/loop1 23:09:43 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:43 executing program 0 (fault-call:0 fault-nth:50): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002880)) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)='(', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="0eea6750fa7118989270784a6cd1975facf615aeac6ba1bf67e95bc982adce35cfaa286ad76e294da81798d87b98da3ce2514ebb1de4410e54249150e02f37420f34ffa84dbd027ed46dd8009147f82b695b7a2ad6640614cd72d1d4a08f40ded66c4186c179eba058115b1bfcbb9693781e7aa2", 0x74, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r2, r1}, &(0x7f0000001600)=""/4096, 0x1000, &(0x7f00000026c0)={&(0x7f0000002600)={'sha3-224-ce\x00'}, &(0x7f0000002640)="7f661ef52dec292352cba7401e271ffbe3053623f8804ad8f43e564bc294550e988506c4b4c8ee5d426900eae8d54697813e0b0d60aca428e3cd83ae9d026ca3c50ae6194954379392a1ef5ac9e4c68d572481fd2f69b6", 0x57}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r1}, &(0x7f00000002c0)=""/113, 0x71, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @auto=[0x39, 0x39, 0x39, 0x33, 0x30, 0x38, 0x63, 0x65, 0x62, 0x66, 0x31, 0x34, 0x30, 0x61, 0x66, 0x37]}, &(0x7f0000000180)={0x0, "c7029e2785a6723014c72548583f8eafa7e3e8478305cc4b355ff1a4f2fc7664d5215c57218b9cb2fec137e57dca1e59976ef56211e36842414d20b669c8f2ee", 0x34}, 0x48, 0xfffffffffffffff8) request_key(&(0x7f00000028c0)='rxrpc_s\x00', &(0x7f0000002900)={'syz', 0x1}, &(0x7f0000002940)='){E)^[\x00', r5) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r7 = request_key(&(0x7f0000002980)='asymmetric\x00', &(0x7f00000027c0)={'syz', 0x0}, &(0x7f0000002840)='.\x00', 0xfffffffffffffff8) add_key$user(&(0x7f0000002700), &(0x7f0000002740)={'syz', 0x0}, &(0x7f0000002780)="d39392b20af288f50d109e8fa2c5990c92b17619f8c8cd6e5a60e46b68cff0c51569489a18216906bb013a8ebc14367eb03d", 0x32, r7) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r8, r8}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000240)={r5, r8}, &(0x7f00000003c0)=""/134, 0x86, &(0x7f0000000340)={&(0x7f0000000280)={'sha1-asm\x00'}, &(0x7f0000000600)="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", 0x1000}) 23:09:43 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3d00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:43 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3e00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:43 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x17, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 899.933404] erofs: read_super, device -> /dev/loop1 [ 899.940645] FAULT_INJECTION: forcing a failure. [ 899.940645] name failslab, interval 1, probability 0, space 0, times 0 [ 899.953226] erofs: options -> [ 899.973251] erofs: root inode @ nid 36 [ 899.987770] erofs: mounted on /dev/loop1 with opts: . [ 900.004334] CPU: 0 PID: 20411 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 900.012266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.019362] erofs: read_super, device -> /dev/loop4 [ 900.021623] Call Trace: [ 900.021655] dump_stack+0x1fc/0x2ef [ 900.021678] should_fail.cold+0xa/0xf [ 900.021702] ? setup_fault_attr+0x200/0x200 [ 900.035642] erofs: options -> [ 900.036728] ? lock_acquire+0x170/0x3c0 [ 900.036752] __should_failslab+0x115/0x180 [ 900.036773] should_failslab+0x5/0x10 [ 900.056494] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 900.060369] erofs: root inode @ nid 36 [ 900.061781] __kmalloc_node+0x38/0x70 [ 900.061805] kvmalloc_node+0x61/0xf0 [ 900.061822] __list_lru_init+0x4c6/0x7f0 [ 900.061842] ? up_write+0x13/0x150 [ 900.068347] erofs: bogus i_mode (0) @ nid 36 [ 900.069529] sget_userns+0x810/0xcd0 [ 900.069545] ? set_bdev_super+0x110/0x110 [ 900.069562] ? ns_test_super+0x50/0x50 [ 900.069578] ? set_bdev_super+0x110/0x110 [ 900.069590] ? ns_test_super+0x50/0x50 [ 900.069605] sget+0x102/0x140 [ 900.069622] mount_bdev+0xf8/0x3b0 [ 900.069640] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 900.069657] erofs_mount+0x8c/0xc0 [ 900.069669] ? erofs_kill_sb+0x20/0x20 [ 900.069690] ? alloc_pages_current+0x19b/0x2a0 [ 900.069703] ? __lockdep_init_map+0x100/0x5a0 [ 900.069716] mount_fs+0xa3/0x310 [ 900.069740] vfs_kern_mount.part.0+0x68/0x470 [ 900.142088] do_mount+0x113c/0x2f10 [ 900.145781] ? cmp_ex_sort+0xc0/0xc0 [ 900.149982] ? __do_page_fault+0x180/0xd60 [ 900.154270] ? copy_mount_string+0x40/0x40 [ 900.158557] ? memset+0x20/0x40 [ 900.161857] ? copy_mount_options+0x26f/0x380 [ 900.166397] ksys_mount+0xcf/0x130 [ 900.169971] __x64_sys_mount+0xba/0x150 [ 900.174018] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 900.178635] do_syscall_64+0xf9/0x620 [ 900.182464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.187673] RIP: 0033:0x467afa [ 900.190893] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.209995] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 900.217733] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 900.225182] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 23:09:43 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 900.232920] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 900.240219] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 900.247553] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 23:09:43 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:43 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 23:09:44 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 900.332626] erofs: read_super, device -> /dev/loop4 [ 900.337788] erofs: options -> [ 900.363556] erofs: root inode @ nid 36 [ 900.376476] erofs: bogus i_mode (0) @ nid 36 23:09:44 executing program 0 (fault-call:0 fault-nth:51): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:44 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x19, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 900.405489] erofs: unmounted for /dev/loop1 23:09:44 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4000, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:44 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:44 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(0x0, 0x0, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="0020facd7d57e9927470609703de7766bdd68dcf23ad7a12a03af6053571ffe57a5d1dafedc010bb96444512ae01a11566df59bec14f52dbf61c0bae818966311d657dde2f41bd3de488c5d57e0be4c54401e8e54acc5f126a40478a2589c8fd19088e7970fe3fbcaf6243cfcb9b779a59c5524782ea0b242389cd2a8bc6d423964ceea68364afbbd9d9ca4114819fcf77ef327f2590f32ebb0fd60dbc6ad200000000000000", 0xa6, r1) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="59810f9a14ac27fac29703787ebffdd554eadd971dee41ee0ffd695bf513", 0x1e, r5) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r6 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r2) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='\x00', r6) [ 900.501939] FAULT_INJECTION: forcing a failure. [ 900.501939] name failslab, interval 1, probability 0, space 0, times 0 [ 900.526730] CPU: 0 PID: 20457 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 900.534849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.544656] Call Trace: [ 900.547399] dump_stack+0x1fc/0x2ef [ 900.551063] should_fail.cold+0xa/0xf [ 900.554904] ? setup_fault_attr+0x200/0x200 [ 900.559442] ? lock_acquire+0x170/0x3c0 [ 900.563637] __should_failslab+0x115/0x180 [ 900.568080] should_failslab+0x5/0x10 [ 900.571915] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 900.577238] __kmalloc_node+0x38/0x70 [ 900.581068] kvmalloc_node+0x61/0xf0 [ 900.584824] __list_lru_init+0x4c6/0x7f0 [ 900.588911] ? up_write+0x13/0x150 [ 900.592487] sget_userns+0x810/0xcd0 [ 900.596410] ? set_bdev_super+0x110/0x110 [ 900.600591] ? ns_test_super+0x50/0x50 [ 900.604513] ? set_bdev_super+0x110/0x110 [ 900.608691] ? ns_test_super+0x50/0x50 [ 900.612604] sget+0x102/0x140 [ 900.615736] mount_bdev+0xf8/0x3b0 [ 900.619303] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 900.624644] erofs_mount+0x8c/0xc0 [ 900.628208] ? erofs_kill_sb+0x20/0x20 [ 900.632118] ? alloc_pages_current+0x19b/0x2a0 [ 900.636712] ? __lockdep_init_map+0x100/0x5a0 [ 900.641231] mount_fs+0xa3/0x310 [ 900.644626] vfs_kern_mount.part.0+0x68/0x470 [ 900.649161] do_mount+0x113c/0x2f10 [ 900.652908] ? cmp_ex_sort+0xc0/0xc0 [ 900.656646] ? __do_page_fault+0x180/0xd60 [ 900.661000] ? copy_mount_string+0x40/0x40 [ 900.665272] ? memset+0x20/0x40 [ 900.668620] ? copy_mount_options+0x26f/0x380 [ 900.673153] ksys_mount+0xcf/0x130 [ 900.676696] __x64_sys_mount+0xba/0x150 [ 900.680688] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 900.685313] do_syscall_64+0xf9/0x620 [ 900.689134] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.694372] RIP: 0033:0x467afa [ 900.697588] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.716508] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 900.724238] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 900.731525] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 900.738810] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 900.746099] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 900.753393] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 23:09:44 executing program 0 (fault-call:0 fault-nth:52): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 900.881837] erofs: read_super, device -> /dev/loop4 [ 900.891273] erofs: read_super, device -> /dev/loop1 [ 900.902681] erofs: options -> [ 900.936290] erofs: root inode @ nid 36 [ 900.947661] erofs: options -> [ 900.968262] erofs: mounted on /dev/loop1 with opts: . [ 900.974859] erofs: root inode @ nid 36 [ 900.990356] erofs: bogus i_mode (0) @ nid 36 23:09:44 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x406e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:44 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1a, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.024359] erofs: read_super, device -> /dev/loop0 [ 901.041894] erofs: options -> [ 901.052027] erofs: root inode @ nid 36 [ 901.057393] FAULT_INJECTION: forcing a failure. [ 901.057393] name failslab, interval 1, probability 0, space 0, times 0 [ 901.071598] CPU: 1 PID: 20484 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 901.079518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.088886] Call Trace: [ 901.091520] dump_stack+0x1fc/0x2ef [ 901.095180] should_fail.cold+0xa/0xf [ 901.099007] ? setup_fault_attr+0x200/0x200 [ 901.103368] ? lock_acquire+0x170/0x3c0 [ 901.107371] __should_failslab+0x115/0x180 [ 901.111636] should_failslab+0x5/0x10 [ 901.115467] kmem_cache_alloc+0x277/0x370 [ 901.119668] ? destroy_inode+0x20/0x20 [ 901.123578] alloc_inode+0x18/0x50 [ 901.127136] ? destroy_inode+0x20/0x20 [ 901.131059] alloc_inode+0x5d/0x180 [ 901.134733] new_inode+0x1d/0xf0 [ 901.138223] erofs_fill_super+0xde9/0x12cc [ 901.142513] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 901.147818] ? vsprintf+0x30/0x30 [ 901.151353] ? wait_for_completion_io+0x10/0x10 [ 901.156144] ? set_blocksize+0x163/0x3f0 [ 901.160345] mount_bdev+0x2fc/0x3b0 [ 901.164031] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 901.169398] erofs_mount+0x8c/0xc0 23:09:44 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc0ed0000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:44 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x63, 0x65, 0x34, 0x31, 0x36, 0x39, 0x30, 0x64, 0x32, 0x65, 0x64, 0x31, 0x38, 0x38, 0x64, 0x62]}, &(0x7f0000000140)={0x0, "25320c4e862694fcfb906367df4ae605e52ad10da1a4a7f4b345aea528abbb262a36826e242a2c98ba2848ec1c8f746635a80f016f2440273a1142a3746f4481", 0x24}, 0x48, 0xfffffffffffffffb) keyctl$link(0x8, r2, 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r3, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r4) r5 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x39, 0x0, 0x38, 0x53, 0x66, 0x30, 0x33, 0x38, 0x62, 0x62, 0x34, 0x64, 0x32, 0x34, 0x39, 0x62]}, &(0x7f00000003c0)={0x0, "3567c2ce45fcaa1eccf9d3f74854c8c55a70c80379f9115891b359a474ffe261fed097f2e917d060ea0c2659ee5120d571dfca4985c82ff873e718de7e608ec0", 0x14}, 0x48, r4) 23:09:44 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:44 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', r3) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:44 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x40c6, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.172958] ? erofs_kill_sb+0x20/0x20 [ 901.176878] ? alloc_pages_current+0x19b/0x2a0 [ 901.181476] ? __lockdep_init_map+0x100/0x5a0 [ 901.185999] mount_fs+0xa3/0x310 [ 901.189402] vfs_kern_mount.part.0+0x68/0x470 [ 901.193929] do_mount+0x113c/0x2f10 [ 901.197627] ? cmp_ex_sort+0xc0/0xc0 [ 901.201372] ? __do_page_fault+0x180/0xd60 [ 901.205645] ? copy_mount_string+0x40/0x40 [ 901.209910] ? memset+0x20/0x40 [ 901.213205] ? copy_mount_options+0x26f/0x380 [ 901.217727] ksys_mount+0xcf/0x130 [ 901.221285] __x64_sys_mount+0xba/0x150 [ 901.225259] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 901.229840] do_syscall_64+0xf9/0x620 [ 901.233646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.239195] RIP: 0033:0x467afa [ 901.242409] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.261416] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 23:09:44 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 901.269231] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 901.276609] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 901.283904] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 901.291197] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 901.298487] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 901.309593] erofs: unmounted for /dev/loop1 23:09:44 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="6ffb0bd311c9a6b1c5276153e8af7f952fef38bee7b05acffa0762a53a457466d12425d2fe53b5afb701e0dfd0bdbc17b17347890eb2ba8293d1df8ad7f7cdf44943196d57114c7d868af80f4b3614df2bc7db90e77fabe3cd", 0x59, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:44 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1c, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4100, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.377307] erofs: read_super, device -> /dev/loop4 [ 901.386109] erofs: options -> [ 901.403183] erofs: root inode @ nid 36 [ 901.424462] erofs: bogus i_mode (0) @ nid 36 [ 901.427538] erofs: read_super, device -> /dev/loop1 [ 901.449014] erofs: options -> [ 901.464903] erofs: root inode @ nid 36 23:09:45 executing program 0 (fault-call:0 fault-nth:53): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:45 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1d, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.494537] erofs: mounted on /dev/loop1 with opts: . 23:09:45 executing program 2: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7f4}, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000180)=0x10) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r0, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x3}}, [0x0, 0x6, 0x5, 0x1, 0x10001, 0x5, 0x200, 0x0, 0x7fff, 0x2, 0x6, 0x9, 0x8001, 0x10000, 0x7]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r2}, &(0x7f0000000340)=0x8) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r3, r4, r1}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:45 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf0ffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) [ 901.543712] erofs: read_super, device -> /dev/loop4 [ 901.553783] erofs: options -> [ 901.580639] erofs: root inode @ nid 36 23:09:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4200, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:45 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x1e, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:45 executing program 2: add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000004c0)="5567e6004bfb4387cff6f66ef6c5491442fd7c43f9cd0775863ddd18edd1d9affaf1446af1fdf000277a7a8f49e19c9769a6917bdfb8093795574ebef50adc3124dbdcd6d44d685ab4e4b7c8d5bb9650f40b4deede295cb183f7f666d0b8dd42cc638ff8169c4b052b4508a8f6870cd5905c34c7043e51c8dd7f6d152a54a9eeda59fa4931d949c89acc04483f14d551f721d43062e778093e1e4af9e43e7d65bc880d9f5490f2c4ab3388c0df967310e2ad4e983e204cb88c3e1e9d6217", 0xbe, 0xfffffffffffffff8) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f0000001600)={0x0, "a1b185257eabae62db27e5642e1a900d72b5f19e37ac11ea1d001927bf27342ba044c05be77ec309f6306a1d76f440a144f7d7318ccd9ac264599d9cc66fef06", 0x28}, 0x48, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001680)={r1, r0, r0}, &(0x7f00000016c0)=""/65, 0x41, &(0x7f0000001880)={&(0x7f0000001740)={'rmd160-generic\x00'}, &(0x7f0000001780)="35c628226190d553f6f2e48aad28bce0832ac0f849fa8e2fad5b268a33fb8e959726f0da34e74ed05f72d3cedd47f80907edc641844b6711d7a0c92b6720699413479fe3d8ec06922a6d6e97c29bec98a9cb66b5a091458474b9dbb4c6b5ab2b6fbb193080644f8f6e97a3f32382d90e65adbb50cf36f3321917a3e3057f4608cf46c557ebc99f18ab0b87932f761f804cf405843b20159025c3908794ac0aaaeef45b1bcbf38834bfcd2b850bd2a57130e5ca07f7cdb3030184bdfbdab7ff6d8c71a8958aa4c3646f5d5a60111d3be11877950fa708a880cffbd9321e072e93d5a3fc087605b376b1df59005854b2", 0xef}) add_key$user(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000600)="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", 0x1000, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x0}, &(0x7f0000001940)="c953c93a29ebcea331abcaa85f1b6527064eef990e4a38fea44dc3f6a07d3a1e955bf3adda79015d36a77bcb9feb508989c9ed98e7c265d73405a714b50b0d60b1103ae75b861ac8cb8815bbb4349a61d9753ea4faa144786ee61d83fcd196", 0x5f, r2) add_key$user(&(0x7f00000000c0), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)="1d452ffbea36c05c91a393a0a814d72261882447d5faf18cae63980b712cbcb02692b398f2e95fbe2757d69159cd06c7477c918daada461d5a5e9fd7f12edcc3c3bdbde57dfd18d04593f43c40cd4a246b90", 0x52, r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0xffffffffffffffff, r3) request_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='user\x00', 0xfffffffffffffff8) [ 901.595397] erofs: unmounted for /dev/loop1 [ 901.600841] erofs: bogus i_mode (0) @ nid 36 [ 901.665627] erofs: read_super, device -> /dev/loop0 23:09:45 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfa03000000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:45 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x21, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4300, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.688807] erofs: options -> [ 901.701022] erofs: root inode @ nid 36 [ 901.706331] FAULT_INJECTION: forcing a failure. [ 901.706331] name failslab, interval 1, probability 0, space 0, times 0 [ 901.765242] CPU: 0 PID: 20542 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 901.773277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.782870] Call Trace: [ 901.785482] dump_stack+0x1fc/0x2ef [ 901.789198] should_fail.cold+0xa/0xf [ 901.793375] ? setup_fault_attr+0x200/0x200 [ 901.797725] ? lock_acquire+0x170/0x3c0 [ 901.801718] __should_failslab+0x115/0x180 [ 901.806079] should_failslab+0x5/0x10 [ 901.809882] kmem_cache_alloc+0x277/0x370 [ 901.814025] ? destroy_inode+0x20/0x20 [ 901.817900] alloc_inode+0x18/0x50 [ 901.821446] ? destroy_inode+0x20/0x20 [ 901.825324] alloc_inode+0x5d/0x180 [ 901.828955] iget_locked+0x193/0x480 [ 901.832657] erofs_iget+0x27/0x2720 [ 901.836281] ? do_raw_spin_unlock+0x171/0x230 [ 901.840783] erofs_fill_super+0xf65/0x12cc [ 901.845009] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 901.850273] ? vsprintf+0x30/0x30 [ 901.853727] ? wait_for_completion_io+0x10/0x10 [ 901.858424] ? set_blocksize+0x163/0x3f0 [ 901.862508] mount_bdev+0x2fc/0x3b0 [ 901.866142] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 901.871538] erofs_mount+0x8c/0xc0 [ 901.875155] ? erofs_kill_sb+0x20/0x20 [ 901.879132] ? alloc_pages_current+0x19b/0x2a0 [ 901.883722] ? __lockdep_init_map+0x100/0x5a0 [ 901.888322] mount_fs+0xa3/0x310 [ 901.891695] vfs_kern_mount.part.0+0x68/0x470 [ 901.896333] do_mount+0x113c/0x2f10 [ 901.899987] ? cmp_ex_sort+0xc0/0xc0 [ 901.903862] ? __do_page_fault+0x180/0xd60 [ 901.908112] ? copy_mount_string+0x40/0x40 [ 901.912352] ? memset+0x20/0x40 [ 901.915625] ? copy_mount_options+0x26f/0x380 [ 901.920115] ksys_mount+0xcf/0x130 [ 901.923662] __x64_sys_mount+0xba/0x150 [ 901.927641] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 901.932242] do_syscall_64+0xf9/0x620 [ 901.936046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 901.941242] RIP: 0033:0x467afa [ 901.944424] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:45 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f0000000080)=""/124, 0x1a, 0x0) 23:09:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4400, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 901.963323] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 901.971027] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 901.978304] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 901.985578] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 901.992852] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 902.000122] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 902.088602] erofs: read_super, device -> /dev/loop1 [ 902.113103] erofs: read_super, device -> /dev/loop4 [ 902.121159] erofs: options -> [ 902.123983] erofs: options -> [ 902.124839] erofs: root inode @ nid 36 [ 902.132762] erofs: bogus i_mode (0) @ nid 36 [ 902.138472] erofs: root inode @ nid 36 23:09:45 executing program 0 (fault-call:0 fault-nth:54): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:45 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x22, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4500, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 902.185278] erofs: mounted on /dev/loop1 with opts: . [ 902.266075] erofs: read_super, device -> /dev/loop0 [ 902.271404] erofs: options -> [ 902.285707] erofs: root inode @ nid 36 [ 902.290774] FAULT_INJECTION: forcing a failure. [ 902.290774] name failslab, interval 1, probability 0, space 0, times 0 [ 902.304106] CPU: 0 PID: 20591 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 902.312026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.321402] Call Trace: [ 902.324022] dump_stack+0x1fc/0x2ef [ 902.327685] should_fail.cold+0xa/0xf [ 902.331639] ? setup_fault_attr+0x200/0x200 [ 902.335989] ? lock_acquire+0x170/0x3c0 [ 902.339992] __should_failslab+0x115/0x180 [ 902.344253] should_failslab+0x5/0x10 [ 902.348164] kmem_cache_alloc+0x277/0x370 [ 902.352348] __d_alloc+0x2b/0xa10 [ 902.355825] d_make_root+0x3e/0x90 [ 902.359391] erofs_fill_super+0x102f/0x12cc [ 902.363752] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 902.369060] ? vsprintf+0x30/0x30 [ 902.372532] ? wait_for_completion_io+0x10/0x10 [ 902.377221] ? set_blocksize+0x163/0x3f0 [ 902.381314] mount_bdev+0x2fc/0x3b0 [ 902.384966] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 902.390276] erofs_mount+0x8c/0xc0 [ 902.393837] ? erofs_kill_sb+0x20/0x20 [ 902.397747] ? alloc_pages_current+0x19b/0x2a0 [ 902.402365] ? __lockdep_init_map+0x100/0x5a0 [ 902.406952] mount_fs+0xa3/0x310 [ 902.410372] vfs_kern_mount.part.0+0x68/0x470 [ 902.414985] do_mount+0x113c/0x2f10 [ 902.418639] ? cmp_ex_sort+0xc0/0xc0 [ 902.422386] ? __do_page_fault+0x180/0xd60 [ 902.426653] ? copy_mount_string+0x40/0x40 [ 902.431001] ? memset+0x20/0x40 [ 902.434331] ? copy_mount_options+0x26f/0x380 [ 902.438970] ksys_mount+0xcf/0x130 [ 902.442545] __x64_sys_mount+0xba/0x150 [ 902.446553] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 902.451167] do_syscall_64+0xf9/0x620 [ 902.454997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.460207] RIP: 0033:0x467afa [ 902.463415] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.482582] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 902.490882] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 902.498183] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 902.505576] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 23:09:46 executing program 1: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf5ffffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05000000c041", 0x6, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:46 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff1f0000000000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="e2e1f5e0f2029981010000000c0024", 0xf, 0x400}, {&(0x7f0000010100)="05", 0x1, 0x480}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000010a00)=ANY=[]) 23:09:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'wg1\x00', {0x3}, 0x2}) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r1}, &(0x7f00000002c0)=""/118, 0x76, 0x0) 23:09:46 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4600, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 23:09:46 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x23, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 902.512867] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 902.520156] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 902.527655] erofs: unmounted for /dev/loop1 [ 902.597287] ------------[ cut here ]------------ [ 902.602243] kernel BUG at fs/inode.c:1571! [ 902.608617] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 902.614106] CPU: 0 PID: 20591 Comm: syz-executor.0 Not tainted 4.19.196-syzkaller #0 [ 902.622003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.631382] RIP: 0010:iput+0x727/0x860 23:09:46 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r2, r0}, &(0x7f00000002c0)=""/118, 0x76, 0x0) r3 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='keyring\x00', 0xfffffffffffffffc) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000003c0)="95b674cd5ed5088456a158918c286dfafafc250295c0daccc80a1cac9ed6459f82f0d6c67e2bc7237ab51cc9cbc287db8d5b31ee335a6931b6c2ad44f461bef42e5f37a0eb850c06cff7f80bd5683cb1bf789061d66105e937db766fdd7e73f26427636691864d1f5c6e04c769eee9148a97a09d61068b76986f61caa731248d761b3a1e817c5a895007ef1b4d7e9797e8fa4fbe85c3b3a0a0a2e1734011734520d1b6609c7a8932e4f1374cb2a43eb290cdbfa59d", 0xb5, r3) r4 = add_key$fscrypt_provisioning(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)={0x2, 0x0, @d}, 0x18, r3) r5 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "749ff16422646ccc6cb55d1215056084abd0e82ac891b9156e841797fa136b2be2ef0a8c8d8ed0ca8fdaa8788e440d0e627f5b09cf8a87e913762adcdfc2bda5", 0x25}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r4, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'aegis128\x00'}}}]}, 0x144}}, 0x0) r7 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r7) [ 902.635281] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 84 18 fd ff ff 48 8b 3c 24 e8 43 db ee ff e9 0a fd ff ff e8 f9 10 b9 ff <0f> 0b e8 f2 10 b9 ff 48 89 ef e8 1a f7 ff ff 4c 89 f7 e8 12 03 6f [ 902.654186] RSP: 0018:ffff888053d3fa80 EFLAGS: 00010246 [ 902.659554] RAX: 0000000000040000 RBX: 0000000000000040 RCX: ffffc90005c52000 [ 902.666838] RDX: 0000000000040000 RSI: ffffffff81a96e47 RDI: 0000000000000007 [ 902.674697] RBP: ffff88803fcf81e8 R08: 0000000000000000 R09: 0000000000000000 [ 902.681148] erofs: read_super, device -> /dev/loop4 [ 902.681976] R10: 0000000000000007 R11: 0000000000000000 R12: ffff888098b370c0 [ 902.694283] R13: ffff88803fcf81e8 R14: 0000000000000000 R15: 00000000fffffff4 [ 902.695960] erofs: read_super, device -> /dev/loop1 [ 902.701691] FS: 00007f8133c63700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 902.701699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 902.701706] CR2: 00007f0940a13718 CR3: 00000000b36d7000 CR4: 00000000001426f0 [ 902.701715] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 902.701721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 902.701726] Call Trace: [ 902.701754] erofs_fill_super+0x1205/0x12cc [ 902.701773] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 902.701790] ? vsprintf+0x30/0x30 [ 902.736681] erofs: options -> [ 902.742726] ? wait_for_completion_io+0x10/0x10 [ 902.742740] ? set_blocksize+0x163/0x3f0 [ 902.742754] mount_bdev+0x2fc/0x3b0 [ 902.742771] ? gb_gbphy_register_driver.cold+0x39/0x39 [ 902.742786] erofs_mount+0x8c/0xc0 [ 902.742797] ? erofs_kill_sb+0x20/0x20 [ 902.742813] ? alloc_pages_current+0x19b/0x2a0 [ 902.742827] ? __lockdep_init_map+0x100/0x5a0 [ 902.742844] mount_fs+0xa3/0x310 [ 902.758521] erofs: options -> [ 902.758663] vfs_kern_mount.part.0+0x68/0x470 [ 902.765404] erofs: root inode @ nid 36 [ 902.766514] do_mount+0x113c/0x2f10 [ 902.766535] ? cmp_ex_sort+0xc0/0xc0 [ 902.780838] erofs: root inode @ nid 36 [ 902.783004] ? __do_page_fault+0x180/0xd60 [ 902.783024] ? copy_mount_string+0x40/0x40 [ 902.793194] erofs: mounted on /dev/loop1 with opts: . [ 902.795984] ? memset+0x20/0x40 [ 902.796004] ? copy_mount_options+0x26f/0x380 [ 902.801001] erofs: bogus i_mode (0) @ nid 36 23:09:46 executing program 2: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r1, r0}, &(0x7f00000002c0)=""/118, 0x1, 0x0) [ 902.802547] ksys_mount+0xcf/0x130 [ 902.802565] __x64_sys_mount+0xba/0x150 [ 902.856096] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 902.860730] do_syscall_64+0xf9/0x620 [ 902.864557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 902.869761] RIP: 0033:0x467afa [ 902.873143] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:09:46 executing program 3: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) add_key$user(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x24, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 902.892141] RSP: 002b:00007f8133c62fa8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 902.899858] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000467afa [ 902.907144] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8133c63000 [ 902.914423] RBP: 00007f8133c63040 R08: 00007f8133c63040 R09: 0000000020000000 [ 902.921704] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 [ 902.928981] R13: 0000000020000100 R14: 00007f8133c63000 R15: 0000000020010a00 [ 902.936259] Modules linked in: [ 902.951800] ---[ end trace 81ad4bc47efa9334 ]--- [ 902.956708] RIP: 0010:iput+0x727/0x860 [ 902.961840] Code: b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 84 18 fd ff ff 48 8b 3c 24 e8 43 db ee ff e9 0a fd ff ff e8 f9 10 b9 ff <0f> 0b e8 f2 10 b9 ff 48 89 ef e8 1a f7 ff ff 4c 89 f7 e8 12 03 6f [ 902.994056] erofs: read_super, device -> /dev/loop4 23:09:46 executing program 5: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f0000000000)={'crc32c-intel\x00'}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000380)="a8", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x4700, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 903.003083] RSP: 0018:ffff888053d3fa80 EFLAGS: 00010246 [ 903.026729] RAX: 0000000000040000 RBX: 0000000000000040 RCX: ffffc90005c52000 [ 903.037745] erofs: options -> [ 903.046379] RDX: 0000000000040000 RSI: ffffffff81a96e47 RDI: 0000000000000007 [ 903.055142] erofs: unmounted for /dev/loop1 [ 903.071449] erofs: root inode @ nid 36 [ 903.079520] RBP: ffff88803fcf81e8 R08: 0000000000000000 R09: 0000000000000000 [ 903.102522] R10: 0000000000000007 R11: 0000000000000000 R12: ffff888098b370c0 [ 903.107783] erofs: bogus i_mode (0) @ nid 36 [ 903.111025] R13: ffff88803fcf81e8 R14: 0000000000000000 R15: 00000000fffffff4 [ 903.124302] FS: 00007f8133c63700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 [ 903.133181] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.141773] CR2: 0000000000568000 CR3: 00000000b36d7000 CR4: 00000000001426f0 [ 903.158535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 903.174835] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 903.199308] Kernel panic - not syncing: Fatal exception [ 903.206525] Kernel Offset: disabled [ 903.210152] Rebooting in 86400 seconds..