00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000010005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 496.618510][T15369] perf_event_alloc+0x7eb/0x14d0 [ 496.623486][T15369] __se_sys_perf_event_open+0x5c9/0x25c0 [ 496.629176][T15369] ? __fget_light+0x21b/0x260 [ 496.633842][T15369] __x64_sys_perf_event_open+0x63/0x70 [ 496.639309][T15369] do_syscall_64+0x34/0x50 [ 496.643731][T15369] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 496.649634][T15369] RIP: 0033:0x466459 [ 496.653588][T15369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 496.673185][T15369] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 496.681595][T15369] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 496.689629][T15369] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 496.697590][T15369] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 496.705558][T15369] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 10:34:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x10000) writev(r1, &(0x7f0000001500)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000000080)="0a506e92f455bb811e985e5c85aff2fcff7cdbdcebf5d505c1e8d2e045cc76837fc1fdeedaec1a95b3bde7f12965d3bebab09f3ccb280eee511d70e11756102c4ea72238010e1ace49fb12435887e71c7eab2897122a7090215d44057b7eeeafeb", 0x61}, {&(0x7f0000000100)="1cf6421eaf551e2b8490c1891211e10bef2fe6165f40018dac3af3be2819d8628fd0f4efdb4db41f8a7d84cc9f3794d97c8ef9f76f59ed880c88a1cbfda9ba6b5212337c2087562c8f035f12470f6751ab5bfe5d23a59070702486c763723b32c662d15a3aa7f695a2844dbd97", 0x6d}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000000180)="31e7e7ab46ffdb1a055aba66154dc3d3bec8c7b76eed752de79053962372c8c181c1e396126506cf21a56c209ffe16ae6e087878e13f0f8f412c7142063d469d79eb2f", 0x43}, {&(0x7f0000000200)="3509a9c190b57c78fbfe8d08bbd26424c6ee14fb295baec7b908fcec5ac0b9af84c5fd64509b67f80db52f18b9e147afc0d8ac4d7de77c298532f86e95154b311be0d8b66e7d931445c0bb44b32d26acbead26b16fde6395234e7a5dafedba096829fa525341eefaa05d5b57835e318a59fc6bd05e77762ab67e6c4fb7a420411223f588f0df5a174cc545f02e4bed6eba92f6da2c0b3e6833c18d64d64a82a235e51723eb15426d756766799a440f3296234659b2e3e11b20e3458147d2d0aba299", 0xc2}, {&(0x7f0000000300)="d0bb73555280afd07403e86f484022fe5c06d148c8e3343c50f5ff51003dd15ce69c6a0333346057977c22139843b9ff7e3553222b034d42c9a39476511ed0b617ac53be24189dc1887fb22ba7724cf72de0728b69fafbadb45ae4203ad8ee5f239361ef3c621d5c5a4e9fab8a028e9406586efd99e1970d5080de49ebcc0678696851f16c307fb476cb8b1dbe8173c8cb1d24aaf95347d06ad67e7f4db65edf55e7408e4b63d3cd5facaf5a1f8e41f7aa9fb4bc46c7726eb832bb0ba8546a86", 0xc0}, {&(0x7f00000003c0)="b6653cd09eb72ed5982414bf5dd865cce6d76230a71009ecf63ce12f6de8f24e459be2d04a82fd5782ede7513166ec8cb2e9b9e1253c83954a2f342f998d83a52d34ebe7f4f16183fa60be9e12fa54aeddcf3d2f31b710749b270fbe94", 0x5d}, {&(0x7f0000000440)="042e4158d37c781f976a579e8bc49d71905157ef2bd6592395d455d0a7a06c4bc4f68248c49cd5a015f035789a239a5497f00c004807885bcc31022cb20c7ba4464932c1b21ca2d01107cb2b8483965b2370fe46b36fbf556ecc306eae34056f1c", 0x61}], 0x1ac) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:14 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 496.713543][T15369] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 496.721598][T15369] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 496.758590][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:34:14 executing program 0 (fault-call:4 fault-nth:7): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:14 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2200, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000011005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:14 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 496.875225][T15414] FAULT_INJECTION: forcing a failure. [ 496.875225][T15414] name failslab, interval 1, probability 0, space 0, times 0 [ 496.881658][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 496.887926][T15414] CPU: 1 PID: 15414 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 496.907487][T15414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.917540][T15414] Call Trace: [ 496.920819][T15414] dump_stack+0x137/0x19d 10:34:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000012c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYRESDEC, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b0008000000000000074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f9e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e15179e8435815ff0fd89ad8e4342c79b161531cb1265a507536be8db7f3f5f5a9160f73f4e398a6d9124ba0601046b3e86acc21361d878e6571e9e04a45c29f36f02db5053b317c831eed0d97d8669da67e98acecb5cff9b219be9943a3fa223e8a66308c31da0ebaf1f7c9694bcf90738405808086e92012ad5268cecd8a4fcabeaa8a9e3899b8ebd04dee8f6c027b98e8d6ded5680c8f3f304ba1ffba8e13958fa14635aa1f0e148f76c71e5947e2b6a0c3a0c13eb5ea7b1093b689cd698e159504413068d04cb0143f702196774cef3e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="ba01000015e902e782662d8b1f78fdbb2fe03ef1323d85283ab82083271a850455e66e48f8ab6340ab7eb5be671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba98ff8199775863f84c471d71975672ce83830e109d40abfec1103cb9a1fdb1d41f552ecacdf08752840baf9b3248f853c3a0866b8c8db05c01d17468f1c5702d54280d0cb1cbe631c4f47acc100a4918d11e189dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96c8ce7e87e01d6d8fe54b2269bffb6fd8ffa67c6cdb3674521bb7b878c88a057ed2ce84e44be0b8084291ce1508037d953339f93a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3df122fefee05f71250da37f4fb33f14f504e1c46cb6a2cbf6fc70aca58b97e76ed440000008000000bfee8023f99be68e76782d479b9f7d26ddef0ea828e305b9aac8055180ccf555d429e58a7aba6df0291b88237fe41e711942095e8c02e26a22675bcc54300094a1af5ce11ffd1104db9f71eddad711c00c24e90f8f90866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0886f604d179149", @ANYRES16=r4, @ANYRESDEC=r2], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a40)={{}, 0x0, 0x1a, @inherit={0xc2, &(0x7f0000001a40)={0x1, 0x6, 0x2c7dbdc8, 0x1, {0x9, 0xffff, 0x2, 0xfff, 0xa2}, [0x3, 0x1, 0x3ff, 0x6, 0x95, 0xc0000]}}, @devid=r2}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x32, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0xc3, 0x8, {0x0, 0x4, 0x10000, 0xfffffffffffffff9, 0x8}, [0xffff, 0x4, 0x80000001, 0x6, 0x5d8000, 0x1ff]}}, @devid=r2}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x9, 0x0, {0x0, 0x7, 0x3ff, 0x27, 0x7be}, [0x2, 0x1, 0x80000001, 0x53c, 0x80000000]}}, @devid=r2}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={r2, "13144fac723c8b45b925ebd52917041b"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000380)={0x15, 0x0, {0x0, @usage=0x358a6ce1, 0x0, 0x6, 0x70000000000000, 0x2, 0x8001, 0x400, 0x4bc, @struct={0x7f980000, 0xf16}, 0x7, 0x6, [0x0, 0x100, 0x800, 0x5, 0x8001, 0x24]}, {0x7, @usage=0x1, 0x0, 0x8, 0x8, 0x4, 0x0, 0x6, 0xc, @usage=0xfff, 0x1, 0x6, [0x1000, 0x5, 0x7fff, 0x1f, 0x2, 0x4]}, {0x1, @struct={0x0, 0x3}, r2, 0x3, 0xfffffffffffffffe, 0x8001, 0x5, 0xc3dd, 0x10, @usage=0x100, 0x6, 0x1, [0xfffffffffffffff9, 0x6, 0x8, 0x546, 0x8, 0x667]}, {0x7, 0x8, 0xe6}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000100)={0x0, 0x6, {0x1, @usage=0x100000000, 0x0, 0x100000000, 0x200, 0x5, 0x0, 0xa5, 0x3c, @usage=0x1, 0x1ff, 0x174, [0x81, 0x3, 0x7d1, 0x7, 0x81, 0x3]}, {0x2a1fe550, @struct={0x63a5, 0xe1}, r2, 0x2, 0x6, 0x1, 0x7, 0x6, 0x400, @struct={0x3, 0x8214}, 0x3fc, 0x0, [0x3, 0x4, 0xab2, 0x4, 0x8, 0x80000000]}, {0x8b8, @struct={0x0, 0x3ff}, 0x0, 0x3, 0xa5, 0x40, 0xdb2, 0x1, 0x400, @usage=0xee, 0x7, 0x3f, [0x932, 0x1, 0x66a066b2, 0x9, 0x5, 0x63]}, {0x4, 0x9, 0x8}}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(0xffffffffffffffff, &(0x7f0000003000)="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", 0xfffffffffffffee9) fallocate(r5, 0x20, 0x0, 0x10000) fcntl$getflags(r5, 0x1) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000012005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 496.925207][T15414] should_fail+0x23c/0x250 [ 496.929658][T15414] __should_failslab+0x81/0x90 [ 496.934427][T15414] ? kzalloc+0x16/0x20 [ 496.938564][T15414] should_failslab+0x5/0x20 [ 496.943066][T15414] __kmalloc+0x66/0x360 [ 496.947223][T15414] kzalloc+0x16/0x20 [ 496.951118][T15414] trace_probe_init+0x41/0x250 [ 496.955886][T15414] create_local_trace_uprobe+0xd1/0x3c0 [ 496.961439][T15414] perf_uprobe_init+0xbe/0x140 [ 496.966208][T15414] perf_uprobe_event_init+0xde/0x140 [ 496.971497][T15414] perf_try_init_event+0x21a/0x400 [ 496.976663][T15414] perf_event_alloc+0x7eb/0x14d0 [ 496.981677][T15414] __se_sys_perf_event_open+0x5c9/0x25c0 [ 496.986961][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 496.987371][T15414] ? __fget_light+0x21b/0x260 [ 497.001204][T15414] __x64_sys_perf_event_open+0x63/0x70 [ 497.006680][T15414] do_syscall_64+0x34/0x50 [ 497.011081][T15414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.016989][T15414] RIP: 0033:0x466459 [ 497.020861][T15414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.040987][T15414] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 497.049679][T15414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 497.057639][T15414] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 497.065617][T15414] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 10:34:14 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 0 (fault-call:4 fault-nth:8): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:14 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 497.073655][T15414] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 497.081701][T15414] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 497.089715][T15414] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 497.096577][T15423] device lo entered promiscuous mode [ 497.110782][T15429] Y4`Ҙ: renamed from lo 10:34:14 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2e00, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000014005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.170182][T15441] EXT4-fs: 118 callbacks suppressed [ 497.170196][T15441] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 497.184060][T15444] FAULT_INJECTION: forcing a failure. [ 497.184060][T15444] name failslab, interval 1, probability 0, space 0, times 0 [ 497.196684][T15444] CPU: 1 PID: 15444 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 497.206833][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.216885][T15444] Call Trace: 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000015005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.220166][T15444] dump_stack+0x137/0x19d [ 497.224560][T15444] should_fail+0x23c/0x250 [ 497.228978][T15444] __should_failslab+0x81/0x90 [ 497.233741][T15444] ? trace_probe_init+0x1bd/0x250 [ 497.238777][T15444] should_failslab+0x5/0x20 [ 497.243376][T15444] __kmalloc_track_caller+0x64/0x360 [ 497.248668][T15444] ? __kmalloc+0x1e0/0x360 [ 497.253081][T15444] ? kzalloc+0x16/0x20 [ 497.257147][T15444] kstrdup+0x31/0x70 [ 497.261036][T15444] trace_probe_init+0x1bd/0x250 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000016005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.265885][T15444] create_local_trace_uprobe+0xd1/0x3c0 [ 497.271426][T15444] perf_uprobe_init+0xbe/0x140 [ 497.276193][T15444] perf_uprobe_event_init+0xde/0x140 [ 497.281506][T15444] perf_try_init_event+0x21a/0x400 [ 497.286621][T15444] perf_event_alloc+0x7eb/0x14d0 [ 497.291563][T15444] __se_sys_perf_event_open+0x5c9/0x25c0 [ 497.296846][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 497.297193][T15444] ? __fget_light+0x21b/0x260 [ 497.311125][T15444] __x64_sys_perf_event_open+0x63/0x70 [ 497.316601][T15444] do_syscall_64+0x34/0x50 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000019005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="2400000073005f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.321075][T15444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.326976][T15444] RIP: 0033:0x466459 [ 497.330863][T15444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.350540][T15444] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 497.358960][T15444] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 10:34:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b0, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x9c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4b6}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xff, 0xa, "c1230900556b0effdb22a1745c2df99e30cfa27acf0986e835f969733815248428d4e4500bf37223cb2a09dba63137483f2b0a7e754d269eefbf36e386d07731cf8074f747670ef1c34c52bc48f2320180bcdf4c277986b619d474b5212800efa6fca0a27b9301ad13adaac0de0d098a455fe01c3c1c21b7976ad698bc431a953f75ad856891e13fe40dfa87e2827ec9b2a04e6c39fbe086410a6352288321f5f41e5302bb0df7a708bc5b782552d447ba80c39f71ddb803b0a3adc6194737f407d811e5d30bd559c0299971d018b2d5841e84f66000cf9a32470149df66ffbc648acdff23e9527146fb813da7245c456d10c8c98536515b533608"}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4004}, 0x22004000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x8051) [ 497.366936][T15444] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 497.374999][T15444] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.382975][T15444] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 497.383697][T15471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=15471 comm=syz-executor.4 [ 497.390951][T15444] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 497.391014][T15444] trace_uprobe: Failed to allocate trace_uprobe.(-12) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a00110214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.429639][T15450] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 497.438427][T15465] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 497.458225][T15465] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 497.470453][T15441] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:14 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1c000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:14 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000003ac0)='efs\x00', 0x0) write$binfmt_misc(r1, &(0x7f0000003b00)={'syz1', "b05315ead6ece3256a18c2ad99a16e8ccb5d06bbd26f65507ca2496dfb3872fe3734dc"}, 0x27) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) close_range(r2, r0, 0x2) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='statm\x00') [ 497.482624][T15483] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:14 executing program 0 (fault-call:4 fault-nth:9): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:14 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x18000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a025f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 497.547188][T15494] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 497.580340][T15505] FAULT_INJECTION: forcing a failure. [ 497.580340][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 497.589359][T15511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=538 sclass=netlink_route_socket pid=15511 comm=syz-executor.4 [ 497.592995][T15505] CPU: 0 PID: 15505 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 497.616047][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.626111][T15505] Call Trace: [ 497.629385][T15505] dump_stack+0x137/0x19d [ 497.630629][T15494] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 497.633730][T15505] should_fail+0x23c/0x250 [ 497.633752][T15505] __should_failslab+0x81/0x90 [ 497.645046][T15510] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 497.647770][T15505] ? trace_probe_init+0x1e1/0x250 [ 497.665873][T15505] should_failslab+0x5/0x20 [ 497.670499][T15505] __kmalloc_track_caller+0x64/0x360 [ 497.671789][T15516] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 497.675797][T15505] ? trace_probe_init+0x1bd/0x250 [ 497.675823][T15505] kstrdup+0x31/0x70 [ 497.693080][T15505] trace_probe_init+0x1e1/0x250 [ 497.697958][T15505] create_local_trace_uprobe+0xd1/0x3c0 [ 497.703715][T15505] perf_uprobe_init+0xbe/0x140 [ 497.708502][T15505] perf_uprobe_event_init+0xde/0x140 [ 497.713849][T15505] perf_try_init_event+0x21a/0x400 [ 497.718968][T15505] perf_event_alloc+0x7eb/0x14d0 [ 497.724021][T15505] __se_sys_perf_event_open+0x5c9/0x25c0 [ 497.729718][T15505] ? __fget_light+0x21b/0x260 [ 497.734470][T15505] __x64_sys_perf_event_open+0x63/0x70 [ 497.740050][T15505] do_syscall_64+0x34/0x50 10:34:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a035f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:15 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 497.744569][T15505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 497.750623][T15505] RIP: 0033:0x466459 [ 497.754605][T15505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 497.774346][T15505] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 497.782820][T15505] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 497.790836][T15505] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 497.798822][T15505] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 497.806867][T15505] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 497.814844][T15505] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 497.822880][T15505] trace_uprobe: Failed to allocate trace_uprobe.(-12) 10:34:15 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x22000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:15 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x22000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 497.837278][T15525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=794 sclass=netlink_route_socket pid=15525 comm=syz-executor.4 10:34:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000012c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[@ANYRESHEX, @ANYRES16=r5, @ANYRESDEC=r1, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b0008000000000000074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f9e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e15179e8435815ff0fd89ad8e4342c79b161531cb1265a507536be8db7f3f5f5a9160f73f4e398a6d9124ba0601046b3e86acc21361d878e6571e9e04a45c29f36f02db5053b317c831eed0d97d8669da67e98acecb5cff9b219be9943a3fa223e8a66308c31da0ebaf1f7c9694bcf90738405808086e92012ad5268cecd8a4fcabeaa8a9e3899b8ebd04dee8f6c027b98e8d6ded5680c8f3f304ba1ffba8e13958fa14635aa1f0e148f76c71e5947e2b6a0c3a0c13eb5ea7b1093b689cd698e159504413068d04cb0143f702196774cef3e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRESDEC=r3], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a40)={{}, 0x0, 0x1a, @unused=[0x7fff, 0x7f, 0x7ff, 0x9], @devid=r3}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x32, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0xc3, 0x8, {0x0, 0x4, 0x10000, 0xfffffffffffffff9, 0x8}, [0xffff, 0x4, 0x80000001, 0x6, 0x5d8000, 0x1ff]}}, @devid=r3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x9, 0x0, {0x0, 0x7, 0x3ff, 0x27, 0x7be}, [0x2, 0x1, 0x80000001, 0x53c, 0x80000000]}}, @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={r3, "13144fac723c8b45b925ebd52917041b"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000380)={0x15, 0x0, {0x0, @usage=0x358a6ce1, 0x0, 0x6, 0x70000000000000, 0x2, 0x8001, 0x400, 0x4bc, @struct={0x7f980000, 0xf16}, 0x7, 0x6, [0x0, 0x100, 0x800, 0x5, 0x8001, 0x24]}, {0x7, @usage=0x1, 0x0, 0x8, 0x8, 0x4, 0x0, 0x6, 0xc, @usage=0xfff, 0x1, 0x6, [0x1000, 0x5, 0x7fff, 0x1f, 0x2, 0x4]}, {0x1, @struct={0x0, 0x3}, r3, 0x3, 0xfffffffffffffffe, 0x8001, 0x5, 0xc3dd, 0x10, @usage=0x100, 0x6, 0x1, [0xfffffffffffffff9, 0x6, 0x8, 0x546, 0x8, 0x667]}, {0x7, 0x8, 0xe6}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001740)={{r0}, 0x0, 0x1a, @unused=[0x7, 0x401, 0xfffffffffffffffe, 0x3], @devid=r3}) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a045f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:15 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:15 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2e000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 497.963771][T15553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1050 sclass=netlink_route_socket pid=15553 comm=syz-executor.4 10:34:15 executing program 0 (fault-call:4 fault-nth:10): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:15 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:15 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:15 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a055f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:15 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0xec) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 498.199530][T15593] FAULT_INJECTION: forcing a failure. [ 498.199530][T15593] name failslab, interval 1, probability 0, space 0, times 0 [ 498.202068][T15592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1306 sclass=netlink_route_socket pid=15592 comm=syz-executor.4 [ 498.212178][T15593] CPU: 0 PID: 15593 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 498.235316][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.245381][T15593] Call Trace: 10:34:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a065f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600)='ethtool\x00', 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000078773a6296709afe3e186723327720e718ce70f6830a56db224f503819bc7f5796757599ad377bb6c729718147a1477fb95390cf8784328edcea26c97a32a50eea2d543ca35a4fdb99fa040aa1ddfacfe79f08443909a01b9e14ed57d24a16a029ef663f117927affa7252ecd62605c33d8231aee3b8f38500000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000c0001800800030001000000"], 0x20}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r3}, 0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfb, {0x3, 0x1, 0x0, 0xffffffffffffffff, 0x5a, 0x80, 0x7, 0x3, 0x0, 0x1f}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 10:34:15 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:15 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3ff7f8, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 498.248657][T15593] dump_stack+0x137/0x19d [ 498.252995][T15593] should_fail+0x23c/0x250 [ 498.257537][T15593] __should_failslab+0x81/0x90 [ 498.262288][T15593] ? create_local_trace_uprobe+0x235/0x3c0 [ 498.268098][T15593] should_failslab+0x5/0x20 [ 498.272607][T15593] __kmalloc_track_caller+0x64/0x360 [ 498.278247][T15593] ? kstrdup+0x4c/0x70 [ 498.282497][T15593] kstrdup+0x31/0x70 [ 498.287094][T15593] create_local_trace_uprobe+0x235/0x3c0 [ 498.292726][T15593] perf_uprobe_init+0xbe/0x140 10:34:15 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 498.297491][T15593] perf_uprobe_event_init+0xde/0x140 [ 498.302781][T15593] perf_try_init_event+0x21a/0x400 [ 498.308312][T15593] perf_event_alloc+0x7eb/0x14d0 [ 498.313529][T15593] __se_sys_perf_event_open+0x5c9/0x25c0 [ 498.319170][T15593] ? __fget_light+0x21b/0x260 [ 498.323910][T15593] __x64_sys_perf_event_open+0x63/0x70 [ 498.329846][T15605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1562 sclass=netlink_route_socket pid=15605 comm=syz-executor.4 [ 498.330344][T15593] do_syscall_64+0x34/0x50 10:34:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a075f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 498.349608][T15593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.356472][T15593] RIP: 0033:0x466459 [ 498.360705][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.381643][T15593] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 498.388396][T15616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1818 sclass=netlink_route_socket pid=15616 comm=syz-executor.4 [ 498.390782][T15593] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 498.390796][T15593] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 498.390807][T15593] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 498.390818][T15593] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 498.437020][T15593] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:16 executing program 0 (fault-call:4 fault-nth:11): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/4094, 0xffe}], 0x1, 0x4, 0x7ffffffe) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a095f0214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3ff800, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:16 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf83f00, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 2: getsockopt(0xffffffffffffffff, 0x80, 0x10000, &(0x7f00000000c0)=""/136, &(0x7f0000000180)=0x88) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000001480)=""/112, 0x70}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x6, 0x4, 0x0) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) lseek(r1, 0x80, 0x4) [ 498.728282][T15646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2330 sclass=netlink_route_socket pid=15646 comm=syz-executor.4 [ 498.743668][T15652] FAULT_INJECTION: forcing a failure. [ 498.743668][T15652] name failslab, interval 1, probability 0, space 0, times 0 [ 498.756623][T15652] CPU: 0 PID: 15652 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 498.766778][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:34:16 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:16 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 498.777939][T15652] Call Trace: [ 498.781302][T15652] dump_stack+0x137/0x19d [ 498.785771][T15652] should_fail+0x23c/0x250 [ 498.790177][T15652] __should_failslab+0x81/0x90 [ 498.795204][T15652] ? traceprobe_set_print_fmt+0x45/0xa0 [ 498.800983][T15652] should_failslab+0x5/0x20 [ 498.805506][T15652] __kmalloc+0x66/0x360 [ 498.809891][T15652] traceprobe_set_print_fmt+0x45/0xa0 [ 498.815337][T15652] create_local_trace_uprobe+0x2eb/0x3c0 [ 498.821198][T15652] perf_uprobe_init+0xbe/0x140 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a00110214f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x201c2, 0x5) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) dup3(r0, r1, 0x0) [ 498.825964][T15652] perf_uprobe_event_init+0xde/0x140 [ 498.831381][T15652] perf_try_init_event+0x21a/0x400 [ 498.836489][T15652] perf_event_alloc+0x7eb/0x14d0 [ 498.841588][T15652] __se_sys_perf_event_open+0x5c9/0x25c0 [ 498.848778][T15652] ? __fget_light+0x21b/0x260 [ 498.854070][T15652] __x64_sys_perf_event_open+0x63/0x70 [ 498.859575][T15652] do_syscall_64+0x34/0x50 [ 498.863994][T15652] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 498.870057][T15652] RIP: 0033:0x466459 [ 498.874988][T15652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 498.895124][T15652] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 498.904149][T15652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 498.912130][T15652] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 498.920132][T15652] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 10:34:16 executing program 0 (fault-call:4 fault-nth:12): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000080)=""/4099, 0x1003}], 0x1, 0x0, 0x0) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f00000010c0)="845533dee6e5b19c00a561df1d168c1f4a896107017a614fe2d86238a7dfbd79d46cdeeed556c051de7ed76714e3b2cfbc74b86c45b4a8c36e75d20ce618ca18216231e699baefbde4f4fa1df43f9e8f44af39e38fc22845e4d0ccfa16fa4fba0f7bf83bd6f48c7d930959e8de14db985af4eed3c6a9ec0f8ba46722b1406446ca376899cce37735400ffc68361a8c0c891d2c82b22f1b27", 0x98}, {&(0x7f0000001180)="1747ebb31f041b86547faeaa1a82d782bf12c7e871e3acc3252c720560a41be8567f5c060bb0fb289b145cffec6027743f49dd22369a35f009661af46697c73ca90da752b389b89378739b715b5e9bc407704192f47de8bbd68a0441bbb09303fc0c7394706963b45ca159965660bf865fa844d0a5385523857536c4294172d27b9aef15902c49a87244052ec4c410eccf95237e21eabab5358fefde0cdf0a0c4462dcd7b771ca9e76cfbbee7a7ba8704f1443a9b9193a1999", 0xb9}, {&(0x7f0000001240)="d06f3c91c9f0c958e1d22782cddfec0a9c03be202424261dcfc8f2488b70de9d741ef54529c8ec98d63e5e1430d0b48f1baa3c6ec053eeed6632a585010104da7ab2554315f8ae7a95240e4503fe357f0545fdb32acbdf8f35389aea987c8de703f5fa05b837757dfc8dbb1f47bd6c7d4be1127def", 0x75}, {&(0x7f00000012c0)="fa47a07c0b17e6db22b0622b2e6472d8bcbcd003de5fb4b457a174b5ed445a46cb0fac957450ee37831e994798ca9c73568ad1bf06f7534ece8923329688b33f865d295cc61a5a044e4349", 0x4b}, {&(0x7f0000000000)="c631245585c2de2ad56063401569c1", 0xf}, {&(0x7f0000001340)="b16b5e4ba00b9efb3dd5b0396ee17526707ec85ed6365045e2cdb9f37cf0a55705e410173427eb26ad631fea25658cdc2d0f4c18ff7ea8be7676d11bafe07ce9a26a332e8348403ced7566f7c704e29ff13ba7e01de1302f7bf3f65c5a0c7bbc544bf7ca59e47877fe917d4854d81d060ec9648c1ebbf1c2be6fac733755963dbf445df1d4c6277a64d512f7c9251a999eb031d6c18c090a7b0d4fe3e4cc130dd8f17b8ee5f1a97b08f048352e2f029a1531b03a48ef8e1b1b32acca6149f17f61dae852b60d7bdc9b655a8cfdd8f77a4ae795011523fa08ba5aa1595a60b20e57034df7ec78fcb3f2e97179b1f38fbfef8286c5", 0xf4}, {&(0x7f0000001440)="466476b888871731fdcc5a458e28f81e3cf82b7dbf7668cea87e", 0x1a}, {&(0x7f0000001480)="bf3b7cfa5ad899b8a9b0746aa3583a9fe8da770bf575d1b600f08416c169986cb88ebd42866dea7f926a3531158232d18e3543d1ffe8484db59ef60d15ec12a57289760501fe61358cea820389acf0dc700dc03c0f85003abe36e4332d1fe96d9a14d3f3f3a602cd5d9882d71f48e2fd834031c231fb00766301ad7710e7c62bd1c1d1c47e23f5371cef42e96191f9bc479f2a7e28705379abd164e94c3705ac5e9980c426455e08891d1d69ccbbb7b23b4dca09cd7175c2c310c387a37020ec51eb8c802298198557dc682cb3e5d12d7ea20afefeb4", 0xd6}], 0x8, 0x0) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0314f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 498.928124][T15652] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 498.936205][T15652] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:16 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 499.009867][T15693] FAULT_INJECTION: forcing a failure. [ 499.009867][T15693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 499.026444][T15693] CPU: 1 PID: 15693 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 499.037540][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.048806][T15693] Call Trace: [ 499.052087][T15693] dump_stack+0x137/0x19d 10:34:16 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf8f73f00, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f1114f9f407000904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x80) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 499.056568][T15693] should_fail+0x23c/0x250 [ 499.061036][T15693] __alloc_pages_nodemask+0xe7/0x310 [ 499.066328][T15693] probe_event_enable+0x421/0x7d0 [ 499.071410][T15693] ? __uprobe_trace_func+0x420/0x420 [ 499.077044][T15693] trace_uprobe_register+0x88/0x410 [ 499.082597][T15693] ? find_next_bit+0xa7/0xf0 [ 499.087277][T15693] ? cpumask_next+0xc/0x30 [ 499.092440][T15693] perf_trace_event_init+0x34e/0x790 [ 499.098512][T15693] perf_uprobe_init+0xf5/0x140 [ 499.103284][T15693] perf_uprobe_event_init+0xde/0x140 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0211f9f407000904001f00000001000000000200000800040001000000", 0x24) [ 499.108688][T15693] perf_try_init_event+0x21a/0x400 [ 499.114402][T15693] perf_event_alloc+0x7eb/0x14d0 [ 499.119414][T15693] __se_sys_perf_event_open+0x5c9/0x25c0 [ 499.125056][T15693] ? __fget_light+0x21b/0x260 [ 499.129736][T15693] __x64_sys_perf_event_open+0x63/0x70 [ 499.135282][T15693] do_syscall_64+0x34/0x50 [ 499.139699][T15693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.145645][T15693] RIP: 0033:0x466459 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f021af9f407000904001f00000001000000000200000800040001000000", 0x24) [ 499.149530][T15693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.169135][T15693] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 499.177576][T15693] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 499.185546][T15693] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 499.193601][T15693] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.201572][T15693] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f411000904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 0 (fault-call:4 fault-nth:13): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001740)={{r2}, r3, 0x18, @inherit={0x50, &(0x7f0000000280)={0x1, 0x1, 0x8, 0x7, {0x30, 0xffffffff, 0x800, 0x4, 0xfffffffffffffffa}, [0x100]}}, @subvolid=0x3c7}) dup(r0) [ 499.209541][T15693] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:16 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f00, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407020904001f00000001000000000200000800040001000000", 0x24) [ 499.315171][T15750] FAULT_INJECTION: forcing a failure. [ 499.315171][T15750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 499.328548][T15750] CPU: 1 PID: 15750 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 499.338939][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.348991][T15750] Call Trace: [ 499.352279][T15750] dump_stack+0x137/0x19d [ 499.356695][T15750] should_fail+0x23c/0x250 10:34:16 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfeffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407030904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407040904001f00000001000000000200000800040001000000", 0x24) [ 499.361169][T15750] __alloc_pages_nodemask+0xe7/0x310 [ 499.366646][T15750] probe_event_enable+0x421/0x7d0 [ 499.371758][T15750] ? __uprobe_trace_func+0x420/0x420 [ 499.377170][T15750] trace_uprobe_register+0x88/0x410 [ 499.382371][T15750] ? find_next_bit+0xa7/0xf0 [ 499.386962][T15750] ? cpumask_next+0xc/0x30 [ 499.391523][T15750] perf_trace_event_init+0x34e/0x790 [ 499.396810][T15750] perf_uprobe_init+0xf5/0x140 [ 499.401771][T15750] perf_uprobe_event_init+0xde/0x140 [ 499.407193][T15750] perf_try_init_event+0x21a/0x400 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407050904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407060904001f00000001000000000200000800040001000000", 0x24) [ 499.412306][T15750] perf_event_alloc+0x7eb/0x14d0 [ 499.417249][T15750] __se_sys_perf_event_open+0x5c9/0x25c0 [ 499.423064][T15750] ? __fget_light+0x21b/0x260 [ 499.429299][T15750] __x64_sys_perf_event_open+0x63/0x70 [ 499.437196][T15750] do_syscall_64+0x34/0x50 [ 499.443003][T15750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.448996][T15750] RIP: 0033:0x466459 10:34:16 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek(r0, 0xffff, 0x1) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 499.453001][T15750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.472922][T15750] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 499.481476][T15750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 499.489626][T15750] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 499.497703][T15750] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.505675][T15750] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 499.513909][T15750] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:16 executing program 0 (fault-call:4 fault-nth:14): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407070904001f00000001000000000200000800040001000000", 0x24) 10:34:16 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:16 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffefffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:16 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x2200000a) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x1f) [ 499.610916][T15801] FAULT_INJECTION: forcing a failure. [ 499.610916][T15801] name failslab, interval 1, probability 0, space 0, times 0 [ 499.623807][T15801] CPU: 0 PID: 15801 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 499.634751][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.645688][T15801] Call Trace: [ 499.649082][T15801] dump_stack+0x137/0x19d [ 499.653498][T15801] should_fail+0x23c/0x250 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407090904001f00000001000000000200000800040001000000", 0x24) 10:34:17 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x7000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:17 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:17 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700), 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00', r0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407001104001f00000001000000000200000800040001000000", 0x24) [ 499.659702][T15801] __should_failslab+0x81/0x90 [ 499.669635][T15801] ? __uprobe_register+0xf8/0x8a0 [ 499.675366][T15801] should_failslab+0x5/0x20 [ 499.680574][T15801] kmem_cache_alloc_trace+0x49/0x320 [ 499.685864][T15801] ? get_page_from_freelist+0x4fe/0x7b0 [ 499.691420][T15801] __uprobe_register+0xf8/0x8a0 [ 499.696267][T15801] ? __alloc_pages_nodemask+0x17a/0x310 [ 499.701826][T15801] uprobe_register_refctr+0x29/0x40 [ 499.707148][T15801] probe_event_enable+0x2be/0x7d0 10:34:17 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffefff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 499.712236][T15801] ? __uprobe_trace_func+0x420/0x420 [ 499.717600][T15801] trace_uprobe_register+0x88/0x410 [ 499.722826][T15801] ? find_next_bit+0xa7/0xf0 [ 499.727931][T15801] ? cpumask_next+0xc/0x30 [ 499.732463][T15801] perf_trace_event_init+0x34e/0x790 [ 499.737750][T15801] perf_uprobe_init+0xf5/0x140 [ 499.742521][T15801] perf_uprobe_event_init+0xde/0x140 [ 499.747866][T15801] perf_try_init_event+0x21a/0x400 [ 499.752994][T15801] perf_event_alloc+0x7eb/0x14d0 [ 499.757942][T15801] __se_sys_perf_event_open+0x5c9/0x25c0 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407003d04001f00000001000000000200000800040001000000", 0x24) [ 499.763582][T15801] ? __fget_light+0x21b/0x260 [ 499.768267][T15801] __x64_sys_perf_event_open+0x63/0x70 [ 499.773756][T15801] do_syscall_64+0x34/0x50 [ 499.778172][T15801] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.784100][T15801] RIP: 0033:0x466459 [ 499.788037][T15801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:17 executing program 0 (fault-call:4 fault-nth:15): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000003940), 0x0, 0x4000, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/67, 0x43}, {&(0x7f0000001040)=""/193, 0xc1}], 0x2, &(0x7f0000001180)=""/87, 0x57}, 0x2}, {{&(0x7f0000001200)=@hci, 0x80, &(0x7f0000001500)=[{&(0x7f0000001280)=""/239, 0xef}, {&(0x7f0000004ac0)=""/102389, 0x18ff5}, {&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/52, 0x34}], 0x4, &(0x7f00000002c0)=""/215, 0xd7}, 0x2}, {{&(0x7f0000001640)=@nfc_llcp, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/187, 0xbb}, 0x8}], 0x4, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000003740)={0x1f0, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ce}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xff, @private1, 0x80000}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000041}, 0xc0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x9) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) open(&(0x7f0000000300)='./file0\x00', 0x80, 0x3) fallocate(r3, 0x20, 0x0, 0x10000) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r4 = syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)="1ba5853623f6470f6ac40c94a67671db5f038363bfaae1f5e7829f0fa08ba6d757a8a6ee817919b2ac6b10d10c6d19c26016b9da6567effbe89858ebb4d43e87d05849e27fcfae36831896b25cf1ba3ed18a4a623a54259a5731cdb2405f6be4f6f4e8e3734e7657358b6537e7fd591b2b16ad0e1d08661b95a3d1cdeb2f4dd8dbe1725394e6cf6616d1466fd9f30f1c09e6860fe42e9a4f6b62941a64f45b44b309a96be4ba", 0xa6, 0x100000000}, {&(0x7f00000001c0)="60657ec08ec51b55ab6648891beddf3774c84cbbd773e4b142", 0x19}, {&(0x7f0000001740)="cc3f91e92e2d099f3f5dc3c4961bbd269e3e7deafc21125412e725c1ce39ba20b6c52811763c51b8c7da4145262836343fd64b651a7edf186a1354c3a89ae87dd1a70a4afd6a985ab25687f957372853a6ab2f6beb8049e77d1377b540a12103c37c033e0abcfa432f65ac03d84fbc0da68b8d528196f798fae1c94932b2c0f6d75a4af4c6fcf6e8c47d554f4b7b2aca2b288af6599b5fb186102fed6f15f46d6733ded37fcda58b3bcecc0eab3d90cdeba0b14b85b4697ab6aba27c9acfb5cec8a615580d2ae3453c9807219c5881fef81763025b914b4904e1a9f8327857cf8dcc55356d1e19275c7fe7ee7ce6ce2374af456e188ad6e7a371c49471c9aa11dd8576053a94a36c3896c232d7c11fe8d46b436ac8ce345146ed6de1900a049a44440bec387d9ea4e92abfe78e91f1810d3f2cad5052b7de698243c7509d9daa496372ddfb90364b588c678cc17e7c8984d030cb734b5ae2c11c5f310ff0288eded3b7bdd9625627f170b8ed8bf554244d13f504a91ae20ec8055f23371403949996e9eab95ef399471370103ed9cd667c0e7e403cd567baf45924cbc127db2e4e8ee835d84f82e15195b1bb93466c9c1355b457ed3179119c0dda39276e9da686c506183a809c02d3a16076bb21a00d17aa25e50643aefbdceff4f8dbdb290b495a52b828f5e87c17b7210963176e4bb8703fa3abc553a58c9366e5489811e4d082cc4dd5331f7ab9715df4e14aa48c84301a5dd4a0aa75b3a770b542f3ca056fe34f7205183a97e66052623cd5bd0e44af29c5098f36bc10a1d45601eff76f419b054803fbb90068856f23ffc465e96621d6568f3dd397175140551a2ffa49c915ba5ff87cea993f85e0f54dcd16c7cc5bbdb4deebb6680e1632862646150ae976256b41fad3aae9094b854b6e49426ae4fc046999775ead9bd618aa27569e0e86587cabd43019107c527b02e97b81da7dfad4b5213700f5c94bf15cb44930191794be14e774a9764811b388e47b4431131887ae321897e39deb92297b187768629febe1fd2b7279313f407406a55434d351ab5388a76f8d46a4911e5784d67e9644bf7151508f7359a21222d865fc8581ce52023eaed6265bedf7c397186d3299882787b7e6e70dbac90c0dc3f2c21dd3e6aa0351613f788f5885da94a54bda99e496e322b6923cf78f513dcf126b1f860a1dd2dae25c722d19e1ecaad5426fdc2610eb33aa0c2eda8417163918cfb50c80832d2dce3087ad6670ff51675b0cd748f6317c8f9f93cdfec01817c7224a162475bef8d83d2c2cd19b22e81992a6ddc2f894a0e5cfea1428979727b0da6f3e51ccc806b7f13570ad616b2b775954913ad3360b482870adb7d6e7b0d997430e1c3dd9f7f63caed66b49c78c7814db1bfed2e6a1cb60aa54ad2a6bf7e29485e7a3dcc149b720cb9dfc00685034f3e31c0829fbd66af9043f0137d78bf4982c33ee31f0ea63ed9d4e92ca80bf7eebc28b9a08d29e41827886d2a81963a43018577e8f6b35b3c2d601b3a4e737ce3b1d6f8b0fa0eccd78f69a98bb9d49df5dbb1a3d905b37c74326a3dcd7e94fb4e3edecd4df50f2549ccdcf21fb2b90365a738a39fbb195a85eb39e8fc60be13f87b3047f869b67c5b490da0fa346bd60ac0b359d518567399f416724ffb00f8708be4f5f277077f941c29c4fd06088d27fb37d3452366837fd212a6942c7917079f0299e4a49b2a0f6771665fa2e82f244b5124519beec74573fa234de1dfcbbc30d697a5d38aca1df46f95cb7b711cfe3f9d81f676c5dff78fb806c5751c296f01bde644eb0f162c89d1d19ffeae3d20e71ddf1bd4b32d65fc250305eec21bb0eafc1f102196594da35ae011baefc04b0ffdb12483beb36251f6418fb2431db0d92b742608c97a72df4164228ab8d8c020f6f1bde97475b5bbf9a2bb613221f5ef400d9aee2acc73b9cc8b5feb04e4c3964bc3ed61dffc87af7bac7e59243fd68f3fcb1c1b3987db5197dab9d89fda45c5a99af82d7fca63d43e95fe937eb083a45f0cc80743cfa7697d0b862cec37aa78fc86c310153d36b6edc7d3c7a36ca415cda8d1f85e17466d7a642807cdf61268671accc7817e327a3dd86654c96defe1cfe0877954e8c08253d634cf6e41f05da31de385611e9ce0c17957fa0d0a475c1bbd0b408512cea8c2318037e029d052f6daa2c5568e398384b7e852a623d27a0abb027c9945a470c7a27170ec5b8ff1cccffcbfa10a243b0a1f8c9a72710dfcbfdaef8ea064be179cc8e84f206c661f5359304a944b873caf016aa79df806f1f179916b40140609ac1d2034107ba4b91e232ca99459964892f9336be2e3a0ec4ffc411755f814000c963e048377416bf718b1df6665b54b7cc2292d45839c2cbe5a94f6ea5759dd8dca4fc321748c455838128b83c7f201973a8a2b182a6689363a7bd2455efa03b8fd7a9ccb0903ecb95d53fb52d3f2804666c4d62bb67142a05f747343dcb7402b380cd23ac42e934b9508ddecfeecd6f4a3c135b7deddd5539594fb04f52ac6b5ce8f607725058f2f50d061c404f4e14f666df95ef7b8d2ecdb7f3def55e5aae9e46ad081da6f339e6c46f143dec99ea40584414c988c668962937779befe93d0d58b0da760a09b8ea651a55ea7f4762e524e04788f7e23f598444f60c0c5590e4ef018d4beef14d11d5e4498b6103b0cb1fbe24fd156a0c83e54c302d1fcf138b4a4132c3de39ead64700fcac84a0a419c58712244507cd02d117b49e934f6af9f5cd20615b4831e7c44097ca0035370493b71e52763cc52e3163d57f771ce9cf7259f0fdbb0b24d13ac5bdecd0e75b02746aedca19843a7d5788d732e358a5b004f64b0618c1aeda87cf44db7b0f5d629db8b82be788d9003ac5cad845859e28ac0bd6d6247da6c26b5aa384bbc088e898622cd2b4ad32801593e891a626f45776e3bef61501fedb99300bc21d023735039244e61bc2f2415d5abea14512d64d8d4f2933cf62f746cf7f48616afc00d28cf8817fecccc5889e6d6c82d40b6a7ae9a2e2e48e2650ea85d9acd9a545a10f691a63cb728f9dfe399e79a3d26d7dd7e32e83ddfc32360b4edf5cd371d0700b55f26943a3aa3698cf3206488dfd6d339eb88ed9853a3c61067b5b6c115e4081a36eada1d17b60cafe7942d72a9bf60907d5bfd99e081ff7f8cba96fe4014b7c0531872a0c800ae9e3af253e2dd1b1bee3bda161e0d8f5c59b4dee32869a25c743d94e84c9e4a7572af674ba7853eb015ed0cf01f03c0b5a29f3014af95ef947ca5d8d7d3eb8e14e808fb09324f6505f926513bd10804307bfcbc027b9ab8d61a4d99f250b4007f622cd6dd6361fb5b803263f86d0507c43cf3c2aac6eb55c1361e9cc1711259b509680cf9b0ed558e9c9946bd1d7dec2d38fbbadbbd1e902d1597e915d72bcf408de63cf0b3354e4e7bc72370abfac75626e4ddc653dbcaed61cf7f80ca364c96043c67b4cbcaeddc9bc2f69744c5b949cb2241c858fefe39113e54185bcc593c1a6fd8768c2a143308231ba9c931e8c35af4704a3dadb6616c82bd2d543aa8b054329f9c93ef88c96be38f46663f65651e9df5ca9dfd2eb7746f6e1e668aedbc7dd4feb8282f1931a95633aa9ccfacb6b98c1c075efb0577fb97d22453db66b3dbefe727966e22d6ca0bb5b4988638a1b143d7c817a80f9c4c97f2f2c414afe9a8f97fea4805f5b9157efdfb7e7b91b8ec567a8e8e693815270bb52270fa950b6089a156f320dde091e38bff194b8e707ab39048a5c96bef14cf566207e095ed766784c54e1c54079b41875a75f71978d38e926ec0e6b89e77a005852cdb1edd3bd2cee2278140a3c25452bc86e9bab98e08c28e648bd816ac23dae554011e4330a1ea7f191fa6acc34f6c9cfac0caf189b53d62cae64b1ac4ae5fd2c2b301dc5d428ead61157b349454b09ce077ab6dae4a0fc6a9aaf04e189277b97109a8e2584f027e9a74c06892fd5d06720a510e24339bcfde1c272378942040b242cc5c9e4db99eb11e6b95f547857c04e5dad6308676e577ab25f339d28e667ca924c6dcb397baa522c3edd826be11005371099e77eca853ea5279e6aa674a89b8e1146853a21213cd195e02240bd43631b047aa90ae40ece2b54a967acb5feaa760667965ccd2981acf650565fb377a0c1101ea3279f06ff6e26e552533e80e76667ba5ba5c05c0bc3238d0eba8728a249f5bd10e7d85dd8d5286c25f25c3ced0aec4119af2737bba1a64afe2d0e863402e574efb7d978db93cbc44bc5533b8ca0148e7c6a5f0a80924b6e1f81efbcd8a1938b13b18e2893c02ecf413d57ac32d0dbf9a160ecb8187879c011f29cc7f3a537404aa076b7d98ade196f715b8c2cb467b7dfcaa17f9f24f2f46843de972ab1627410e97e73c777fc828b264d9b6bd962f18c0231ad4f07481e6b928e495d20e4364d27e35b7c3da385d3635249bfe0ffeee9d3014c76d2c0bc02a44f40a367faaa0746b010d193514e5e4586fbf9ce58c2791c834bf1fc98f564c2f63e6134921ba412dd47a97b71c0cf868cf4c29e5ba0b6a1cb1f665aff7ed5310b253a02f52d22048ea6ef8d16944961e196d2f300fd5725570a6bb6de46a4e4e3f1f4d411977b1d3a83cd7993f240654e8d8f92da4bec3b0bbb3e1c0c80dcc16db3ac242e4c77a2566d750a7ac56f77d4bc6ec67450b702d3063d9dfc53156c06c647dd69bb85ca46357599e23bfdc048dcd9d7d9415ff19208b14357120f39410798dccc020bb5f74fe350d13cda657009c84776379dfbbf90cb7ac142cd94f5551521b44791896ccb5c53e9d245e62a9fe4ec46682675118aa882c7d35aa3cb73efd0c24227a5d0e20fe80949ff06b0746d6831df85a132c1f68bf3a5c7b505d458a7326129e774fefd512f361d4a29c0d0ada15e5420bc2f74e858f32bb197922cd238431e80270ac58df9692449daa7b44c487b684325ca78846e39d506a545b1d66eaa073c342536c06046f25ae28d67fb3ca8f34846bb30c3cae952f3dcee4fa0b17d738c410b2965015fd41a41541a14df8af237fe62319997897ff6a0770663848538905fabdb6509214572a9f3d1341f826aad0102d61be3e1690c467cdebf4cc8f8396a6d9c7d07a2d86375cda8ac6a486c6abf77e22fbff0bec92248ab5bd38ae82b245350f94a038025412826f11b56a77d418543d513fbc5e1ae1e441b2d90099c2cea15869c3645b52ff7275687a10dc825700601dd728cdd9edb26d0dd42c80415f939f30d7ecc155071aeba98bf635a94c305466f9bc8ac9487e1b4e4ef85377b396d176d2b577efa56732bc1211720cd9ddc854afc0e748a7e0eaff650c11954f65ec9d3cc7e5b019e140a98e7c68b872621cfb5c408e99944c2f916e1bad090ef36a1839a70dfe89e8dab40671f3faca86629e3d790df407c571042018f80deeef0482de0ea618d726b0660dbaa8f9bca62baabae0629639ec8e3cb9aa0a531cf7c6a0e2446b799d60fb90a380304f4a889a9fde363451722f2d7f9e2ebc3d735825cf42e689386900f20ac8b8cbc3262f04d4d606f86ec88068faca121eeb2b71e261111bb0dbe88f51d5d8c829ba5de2d6c99ac7086bdc8d4f4599257041808c1d73eb7d7fce766229d077a3e8894e074fb35da12c26a669363022a48d026f117ef18b581f34c7973271d0a6497c224bc35ebc8ce22f1ea26356ee8c6e702dd86e6ce4902bfe9f8e6408f7bf2f4db4a81516f9a8284305a46466cc2cf3b8984775105d30f32a969f164", 0x1000, 0xffffffffffffff4c}, {&(0x7f0000002740)="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", 0x1000, 0x480}], 0x8002, &(0x7f0000000280)={[{}], [{@uid_lt={'uid<'}}, {@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, '\'%'}}]}) sendfile(r4, r2, &(0x7f00000002c0)=0x767011ec, 0x3fd) 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407001104001f00000001000000000200000800040001000000", 0x24) [ 499.807644][T15801] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 499.816066][T15801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 499.824038][T15801] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 499.832010][T15801] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.839980][T15801] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 499.847952][T15801] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 499.898595][T15845] FAULT_INJECTION: forcing a failure. [ 499.898595][T15845] name failslab, interval 1, probability 0, space 0, times 0 [ 499.911300][T15845] CPU: 1 PID: 15845 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 499.921491][T15845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.931665][T15845] Call Trace: [ 499.934937][T15845] dump_stack+0x137/0x19d [ 499.939268][T15845] should_fail+0x23c/0x250 [ 499.943778][T15845] __should_failslab+0x81/0x90 [ 499.948876][T15845] ? register_for_each_vma+0x372/0x890 [ 499.954371][T15845] should_failslab+0x5/0x20 [ 499.958868][T15845] kmem_cache_alloc_trace+0x49/0x320 [ 499.964140][T15845] ? percpu_down_write+0x1e3/0x210 [ 499.969249][T15845] register_for_each_vma+0x372/0x890 [ 499.974522][T15845] __uprobe_register+0x3f4/0x8a0 [ 499.979459][T15845] uprobe_register_refctr+0x29/0x40 [ 499.984696][T15845] probe_event_enable+0x2be/0x7d0 [ 499.989762][T15845] ? __uprobe_trace_func+0x420/0x420 [ 499.995040][T15845] trace_uprobe_register+0x88/0x410 [ 500.000225][T15845] ? find_next_bit+0xa7/0xf0 [ 500.004801][T15845] ? cpumask_next+0xc/0x30 [ 500.009195][T15845] perf_trace_event_init+0x34e/0x790 [ 500.014473][T15845] perf_uprobe_init+0xf5/0x140 [ 500.019304][T15845] perf_uprobe_event_init+0xde/0x140 [ 500.024567][T15845] perf_try_init_event+0x21a/0x400 [ 500.029658][T15845] perf_event_alloc+0x7eb/0x14d0 [ 500.034609][T15845] __se_sys_perf_event_open+0x5c9/0x25c0 [ 500.040225][T15845] ? __fget_light+0x21b/0x260 [ 500.044916][T15845] __x64_sys_perf_event_open+0x63/0x70 [ 500.050470][T15845] do_syscall_64+0x34/0x50 [ 500.054928][T15845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.060815][T15845] RIP: 0033:0x466459 [ 500.064688][T15845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 500.084272][T15845] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:17 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffefff, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:17 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:17 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407003d04001f00000001000000000200000800040001000000", 0x24) [ 500.092673][T15845] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 500.100622][T15845] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 500.108572][T15845] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.116528][T15845] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 500.124499][T15845] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:17 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:17 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:17 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f40700090f001f00000001000000000200000800040001000000", 0x24) [ 500.381831][T15841] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 500.389928][T15841] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006219f52b 10:34:17 executing program 0 (fault-call:4 fault-nth:16): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:17 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 500.518567][T15902] FAULT_INJECTION: forcing a failure. [ 500.518567][T15902] name failslab, interval 1, probability 0, space 0, times 0 [ 500.531261][T15902] CPU: 1 PID: 15902 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 500.541411][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.551477][T15902] Call Trace: [ 500.554735][T15902] dump_stack+0x137/0x19d [ 500.559065][T15902] should_fail+0x23c/0x250 [ 500.563498][T15902] __should_failslab+0x81/0x90 [ 500.568253][T15902] ? register_for_each_vma+0x372/0x890 [ 500.573735][T15902] should_failslab+0x5/0x20 [ 500.578305][T15902] kmem_cache_alloc_trace+0x49/0x320 [ 500.583568][T15902] ? register_for_each_vma+0x372/0x890 [ 500.589020][T15902] ? vma_interval_tree_iter_next+0x24c/0x280 [ 500.594987][T15902] register_for_each_vma+0x372/0x890 [ 500.600300][T15902] __uprobe_register+0x3f4/0x8a0 [ 500.605275][T15902] uprobe_register_refctr+0x29/0x40 [ 500.610459][T15902] probe_event_enable+0x2be/0x7d0 [ 500.615491][T15902] ? __uprobe_trace_func+0x420/0x420 [ 500.620751][T15902] trace_uprobe_register+0x88/0x410 [ 500.626277][T15902] ? find_next_bit+0xa7/0xf0 [ 500.631782][T15902] ? cpumask_next+0xc/0x30 [ 500.636194][T15902] perf_trace_event_init+0x34e/0x790 [ 500.641549][T15902] perf_uprobe_init+0xf5/0x140 [ 500.646293][T15902] perf_uprobe_event_init+0xde/0x140 [ 500.651573][T15902] perf_try_init_event+0x21a/0x400 [ 500.656667][T15902] perf_event_alloc+0x7eb/0x14d0 [ 500.661625][T15902] __se_sys_perf_event_open+0x5c9/0x25c0 [ 500.667336][T15902] ? __fget_light+0x21b/0x260 [ 500.672004][T15902] __x64_sys_perf_event_open+0x63/0x70 [ 500.677523][T15902] do_syscall_64+0x34/0x50 [ 500.682028][T15902] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.687972][T15902] RIP: 0033:0x466459 [ 500.691925][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffd) ioctl$VT_WAITACTIVE(r0, 0x5607) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = signalfd(r0, &(0x7f0000000000)={[0x7]}, 0x8) r2 = accept$inet(r1, &(0x7f0000001100)={0x2, 0x0, @loopback}, &(0x7f0000001140)=0x10) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/proc/sysvipc/msg\x00'}, {0x20, '@%$*'}, {0x20, '/proc/sysvipc/msg\x00'}, {0x20, '/proc/sysvipc/msg\x00'}, {0x20, '})'}, {0x20, '/proc/sysvipc/msg\x00'}, {0x20, '/proc/sysvipc/msg\x00'}, {0x20, '#$\'}$'}], 0xa, "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"}, 0x1078) 10:34:18 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffe, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x18000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000910001f00000001000000000200000800040001000000", 0x24) 10:34:18 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 500.712555][T15902] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 500.720956][T15902] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 500.728913][T15902] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 500.736886][T15902] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 500.744853][T15902] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 500.752819][T15902] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:18 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x80000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x4000, 0x42) r2 = fcntl$dupfd(r1, 0x0, r1) socket$inet6(0xa, 0x3, 0x2) connect$unix(r2, &(0x7f0000001c00)=@abs={0x1}, 0x6e) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x22000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000911001f00000001000000000200000800040001000000", 0x24) [ 501.000969][T15896] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 501.009047][T15896] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006781bf77 10:34:18 executing program 0 (fault-call:4 fault-nth:17): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/89, 0x59}], 0x4, 0x0, 0x0) 10:34:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2e000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 501.121445][T15951] FAULT_INJECTION: forcing a failure. [ 501.121445][T15951] name failslab, interval 1, probability 0, space 0, times 0 [ 501.134094][T15951] CPU: 1 PID: 15951 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 501.144249][T15951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.154304][T15951] Call Trace: [ 501.157581][T15951] dump_stack+0x137/0x19d [ 501.161909][T15951] should_fail+0x23c/0x250 [ 501.166311][T15951] __should_failslab+0x81/0x90 [ 501.171098][T15951] ? register_for_each_vma+0x372/0x890 [ 501.176594][T15951] should_failslab+0x5/0x20 [ 501.181097][T15951] kmem_cache_alloc_trace+0x49/0x320 [ 501.186432][T15951] ? register_for_each_vma+0x372/0x890 [ 501.191869][T15951] ? vma_interval_tree_iter_next+0x263/0x280 [ 501.197856][T15951] register_for_each_vma+0x372/0x890 [ 501.203132][T15951] __uprobe_register+0x3f4/0x8a0 [ 501.208117][T15951] uprobe_register_refctr+0x29/0x40 [ 501.213292][T15951] probe_event_enable+0x2be/0x7d0 [ 501.218356][T15951] ? __uprobe_trace_func+0x420/0x420 [ 501.223648][T15951] trace_uprobe_register+0x88/0x410 [ 501.228824][T15951] ? find_next_bit+0xa7/0xf0 [ 501.233399][T15951] ? cpumask_next+0xc/0x30 [ 501.237790][T15951] perf_trace_event_init+0x34e/0x790 [ 501.243055][T15951] perf_uprobe_init+0xf5/0x140 [ 501.247809][T15951] perf_uprobe_event_init+0xde/0x140 [ 501.253071][T15951] perf_try_init_event+0x21a/0x400 [ 501.258176][T15951] perf_event_alloc+0x7eb/0x14d0 [ 501.263093][T15951] __se_sys_perf_event_open+0x5c9/0x25c0 [ 501.268778][T15951] ? __fget_light+0x21b/0x260 [ 501.273499][T15951] __x64_sys_perf_event_open+0x63/0x70 [ 501.278991][T15951] do_syscall_64+0x34/0x50 [ 501.283388][T15951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.289327][T15951] RIP: 0033:0x466459 [ 501.293209][T15951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 501.312813][T15951] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:18 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:18 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f40700091d001f00000001000000000200000800040001000000", 0x24) 10:34:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_eee={0x44, 0x5, 0xfffffc00, 0x0, 0x7, 0x2, 0x800, 0xff, [0x6, 0x9]}}) [ 501.321213][T15951] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 501.329168][T15951] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 501.337155][T15951] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 501.345106][T15951] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 501.353055][T15951] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:18 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x48000) write$sndseq(r1, &(0x7f00000000c0)=[{0xfa, 0x7, 0x3b, 0x6, @tick=0x100, {0x2, 0xff}, {0x80, 0x1}, @ext={0x1000, &(0x7f0000001740)="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"}}, {0x1d, 0xff, 0x1f, 0x4, @time={0x9, 0x9}, {0xf7, 0x3}, {0x80, 0xe0}, @queue={0x4, {0x7, 0x10000}}}, {0x7, 0x4, 0x5, 0x81, @time={0x4, 0x1}, {0x80, 0xe}, {0x15, 0x2}, @quote={{0x9, 0xb4}, 0x0, &(0x7f0000000080)={0xff, 0x7, 0x3, 0x8, @tick=0xa1, {0x8, 0xf1}, {0xfa, 0x2}, @raw32={[0x4, 0x6d, 0x7]}}}}, {0x1, 0x7, 0x1f, 0x0, @tick, {0x20, 0x8}, {0x0, 0x5}, @ext={0x1000, &(0x7f0000002740)="f3b835a40604afed2764f18bbf26787ad3bbbf569fd7df4736d94c3ccdd537c67d278c2eae4ceab8518ebb2bd510914a689bb48b5ec358cde9760d85eb54569a242d1b1105fc735f51b28c605915d42f1bf1cd0a7d7575fea1e47788d09e02c0134dd61dcb9be1e11e84a80f54ed64d66300153356763a73e9435e814853dc5e1ce0d0a5f869ea9523534a123bc6025f85d18b518e303dfa169850ee128371a45814fd3b2ce08d74ba6a68ae1448bef11e6205d5331ad3daf0191eae3794cf111e5bf0b68bc43e8e02e83587f2780edd05de393a90febf607c7b4d314fe840683d52c8bd3508466764923be193043e24a511bdfc139c70d64b4c45ffd0e1a72b1aafaa45649393a6d8fe79a4816711bf7168fd439a5e04bdbe3c38a0d6378bfb7b9e3dedc9c6ad2accedd0a10eb3523b04c12360dbf31b8d23e6b7a5e82577ff2f7bf97a47fa1f17de046c91f192677301d22b34d1d78f2c2bf721959b4387cfb9166a4fe5f3322cd1392cfaafb4fefc67466f2ac94f56dddd20d4ddc45968b370331013218f7ba62bc2818770d3a80fbdd0864d3c6822332be26bc38c9f8afc6aaef3b72990e2d6df6c9d0a239b120391b0f716d6d74e108bf1115be743a708dd6f0b9e094270c201105633a9345905b5ef71bbbe9586673307ff764aaf6c225e322b194bcd0acf8aac0b0c36e6491d881e4565c18b8c8a5ad6e00be838ae7d073d73d53ee2233599c72475fc0b164c06b05101cb3ca25552764446f1146c7787119dbdb8edc687e5a4ae7aadd05187c0133229768939a698a1de2d0c56852c7430dc7eb2734e2cf13480a274cb4789cb582f57753e6a6ca78c43298c368f5a2c3676313980c4b7911d83e1bb13be5b8b796c0a26c43b69061d75fad0e77a7c23f3751e77b307a86b984ca9ed55a4d04f24bf6fd77a5c641d39476cdcc66dcd3dd8e18b49afc873e5b842c5d960cea6ee37b8702c9e8f83bb56f56ea9255b255067cdc3b2b7b86d95340165494c190a08f2a3621444b55a065f919e87859276e586946925a92aa9ba7d1a3a3c4d0ef1f4ea83b94a89c82067da9b1d8fa88ba232865972454fff47f4c285f453a729ccdf0c13a7f011bc144fb8755b09cc1c34a7f666ddc50acba43e87fd36bf00f17156c04c2dbb774d420333d6fd63ed398eda89d06731bcf19e39d48271314a7b2a3d312cf01b224a9a78373450841cf66138759e94eb09e5436a2131c5909df501c22a79118f3d3e83f3c9bd5919460e39f9c96736d0d4ef0757d6bf83ad22227e3e4753501192412a8f233e34cf6454d34c489f0669f7923b698aca39ff433a6e9f680cb263d9dcf46b074ede09603088bc59869e645fcb61bce851a522a822c36cbf9296130895958d6911c5beb1008a3e1906c5f190eae11c87e7027130954f466bd3d0d247dc558b2641a6dac749799fe8a1ac4a2d60a78d05e5bfb9a2ab1d52299d2f49945f8b39051e6c37fbb0073bebab1ce960d4bd25a5ec1f9063d2d22319b225724b71ffac3efd47e62b2250a481da98fbc646d7ef0f3f0ce4ad0bc2ac20ee92f2be474b7519df6baae0c88268b1066bd23e58e4619dad305b9a68fd11897669d18e5f38b9af6823dafd157c125fe732fe56c52328a1446b296acece4d2cf2ddbf0a7b87a93504cbd9334e96af1ac506c460be325f0fc5b2ff16ed1f2b7ca01545d46339c8acb357708e9e67a51699453228906e11efe80af1c7bbbb022963ad629fc8d17e32e2218c9c2445b7e2de0a4a1ab1012ed913fe1a62824faffd88dd3f4ef4081a63f4c3c9dffdd22827f71d809bbbc10eceeb1a06a96e38b05858cd4bdab01cfe83738ee415c7fb8520ed4fe70201f5bf3a6b67b95105b9fadf4dc0609fbadb1db64473a422d9b858b883d8ce9cf52c7dc6793994f51c163a273b2422c3e6aeb28a2dcfb46f4f3d49069234e2f2053b0efa0d3313d4aca78e7b58f77d8e52a89cd7f8b6fd78cf10f478673c749c339dbfb6e52723cb6e6b3d5e8da3a94c99c956ff9fa75862f9a9581e93249ab0a8b45b2ba73616555d8bc7dc0ae1290ffb376a935f4acef6772694c9118c1e2b17cd5bf97244f5658f60911f27298370ab8437ce480251ff01b584695f348252a71fa83db59043ae1b638c0b33ef9c8b4540246c0ee2636f35cf984f04f2d5d1895e93e59df307044d9d3a34da5bf65c8f26c95cacf57b36312a9137f6bd2c163b6d044f28963606d834bb17b600587c988e5ed1002919b9db44d201a43e504b80d76304b9b5a33a7220242c88561fabf28153be6c5301de6ebcfedcd48551826a74b39849e671608ca267e636dcc8427e3f412c67442ec3dbe89339984157524c774e89f6891acf4bf229a79ed987e69bdfdbbdfecc52461c12ec17f78869f02488d8960b83546425a6c946b185e2e1fc1dce3b975116ded7c63cce48dc1f82f45dd417c4bbe437f389af0a33e21a7d63d07cc31d4c410ae2a2c0795126804994d4267c39726c1fcd4ee177471f3efdd95055ac098fc39145ca7d5211f7505bbea54fea1e0df8518f614c38644ac6380b520a473c0d81a56bf2b3d47a0d8387caa016b1669ebc37f13354f4e4595cf5e8b99fe671b4325b4c8f169922011b097dc66871d01b8c9c098a415bdfe48d45549a3a57c88394a10c9a481c4908f1da6d01503fd973fc6f161f1457a91f5f029e68f727262efb395b12c254361ddec9373d7aac942095347cd5c7e0f9f9e0122d692e92fd9babf488a4abad7f6d767d1318a655f792c26f5d573a273c194b509ed6130565c0f3a4a16eac5c7a9378e81d0b17db6eaa25c286654294c5c66b722a9134cdcec134b347e7021746a77e4d1b238662eb4018b0761f014d1dfa721912ead3c52392d566c9256d759be1d0e7b1357cfce21fe4211d0da787333a074b922839af34ed047077242b5dc48375dd06674b7d8b31721106fd12dbfefe7d2f0c026e5fb4b79dbded769db42966ab031590f75577b4634dbfd99a4a89be8c6049a1327653338bc26ba1d9464eb4b516a3e880d74bd087e23e47cf227740658001365efd3455a92d9aa8560a14d6369a70a3b81fbd5d35d46e162a79548e9a7658960f7ad6adda71794fd76c1f4a4460e9906de848a1d51d15acd033039e1969fe66d713a8f871312b5b330fad8d9bb6c5516e5decd72080460854e33843d5f6275e387e209d6e00ab199fdad61d18b7ea781a2a56e8917fa6718ea1f0ce8d1a2df7e0842f3e8635c36237f8d586ea96a1ea81df4978f6fa0c936c1ffb7ec3cd047f70134ef8fdbbe75adbef6353bcfba8663ffd6b1825f8fa272f5e3fde00d9ae822b68c9cd3c55b3c77763017e471103337ea8d120d76a0cceede4d4676485536a3d00e43a46a8183c2cac42d91a4b06998b50844c841a24b8d93e9015ecc169ae2fbce5cd75f3d5f21c492ffbc8302017e8c49bf08c9b61ee9c3b6471cb1f54108929d4efb9826485af4c7a6f98173cc007df956249e3fcbbaab650ac8f99fb24e8366bdd42e1b85dc8193cf479866a4ea5b186a46788503fb3dd2f0c903a1fbd79958ce7107c92085c8b01160c0d34a20acc9fb6d2ead673f999d3b7304620190b17c501dd1923511f0e0e674ca033d44cd717f1ade38cfd8a731121d7896db4f0e69f3c1d9868b9f0e7b27366e1d81c5bdfbe73bb832129efa1b5cfc6e78cdc330ebf9fcb6ce0fc3e7606be2c1cfc34e516a9e27db275b414945e74985afcd7f8a23ba787a1907a4489c6a44e16bad0671f20c85b64b6bfc360e74925ad733f48bf3e88bcfc3e4f159ec106f3f228b42bbaee58de7bf1e7cd1a48ad2ad4338f769c7c38ae7911ffa3c6a20f74e0b04c6500de373d785bffcf390a06d0e2b96f375b122125b584d601f96a06c332817cfc3306f2c0812987803f59a2747abdc94bda0630d20130a74ac8b365a700ddd7dc36f3c1bb7e92bc81b11a9c8d65a3431ce07a79274b3aaddf19e318181ad78e0154b89b1ff2c5f48523ac28d14a070ae7f4cf8922d93fc00d3800add79cdbdc12dcbec0bc63a0bd9c282a886a8e3f119b7b7d2c74679cc104c5bfcd86b060a7078af7511f72de6e9d2f4494d85913ddb9155430174015acacea1a490a39447db6421b31a29335fd993f078a7153962be3b5181d8442be92ae27b3a445cd14b33cb3d86380b6236dae557cc2e0a175531df5882bad9143684bcf9990bf2e07b23748bd54a3bb48ffe3772e0694c84bed4d493b25e055b588ab11122551d67b45c0bba8973b496d5d14920e56c72ce0b038e1007ce6967345d1b03a21d39591a58de6cb93cb34f0cde3ae397f85fb116701b126ad441f034208fb20b2b3ca26aa23b243c45c2406e46330c673b1133ebfc46d32fb7cd7508e0dc21725ae3c99adbc6e9937117319f39d3c4591e8f75954729ec3cf3c4e6cfd489e3f37959e304add3a324f174bda965bd77cef14a7c96cbecd8bd46b43c3fe7cac9691350c2d60b5d1060214a33ea01fbd0cf2d278ee3564567e38c90b4c25e44cb26e6b4a6ff10aa229d4a0a56cad3363f77a8bd2aa47c1fc53a3d060b361e3b413a9deddd65b69c7d705de224557fca94331eabc05005472f044f634358c88a91b7d1d4f98b20d6d129689961579e8925a37d2c515c404fe446494799883fbd6990149f0e10b6b2739dff8d77d405f195d65f6062408420a1f790ddc33939385beae5f35487668e0e96326a01fd37b1302f1946d395d0635d3697ae0fa08dece3789a533903bf3cb5ff27ca65fd0cd67648c9f6b05e487c39e6b38411a64bb51a2ec92c6cf368a65607f4dcf0aedae623acd9c38e24d2b58b35a9b51f8bab03ff0950aeb35cbc17768abc73137482129d567db3c171555855a29dc54634bd8206be38ead54001123163a9c6ac9e94d0fd41dfdaa5b0a6d88cf9d3b3d677073f3317d2aec79b2d1b84e7215afcf51902849ec02f2ba8f70bef7ee46f3cff24217f34d6b2f3abb4270a493d72b31cecc90338dd0b37a7c68268a96d94828c3a09c379f05e6785277dc62c51bb7e746d9789879a2be43ff01f353e7703b3fc90ff9a91d93fdb85b51ff5fc23455dc160ac18c5376aa2395bfa305cab9db28cae48e3854c710b2f919aecd0fb2e83e0f9aec25feb686e4c81df4474688efeb308008893822311193cb535669a0280efe12f5d027e8a32dd0e7b012a49f511113e9cf15ee97c3e305006f1c107ea1365cea76b2a2a948aafa38f372e58317bf450a394f83a374ead383eebc6b9cf64701871db153dbe701c69ed5f25389086711888d466abb2ef43945a0d7e6e816d4c247f0e34524f458387f5d8db9b6d9ad4cfe27b97ef83053706076c10c918594eeb04e09c5c55a649f12c0a86e9e2450161b7eff9ed840a5851e92fb2b3c45f55c279816c272b02e3a4ecb803326cf19cafbed2177567819adc6d8f9310ab6923b73522b94d999fe0dce414455f66ae265c0263ea9a20e5d3002d23a8e60ce54105d3ec60b19dcd4b7f85e1361884b6b3ae633ee6eef97924ff057d33f1d06304b49de6d7f3f463a539deacc6346d3bca283d1a3305d301996b0d1143844be258d26ecc0aa5bd121e93bd4d896f179a9142b210058d539849ec698e6ee8be2e78dac6fc5eeefa8597296215af4adb75a0352290a4319aa1e8c2bfe54402293f51674c35ae3a29e7c2091f9fa7338e1d084013885ed315abf19afe80954eaed22ce76d38e95bb0f45a8f5baa09e60f5d16d0e1b3297731a5a75c228fb44d8670e9e25ef9bfc49334b120ded303669a3b668"}}], 0x70) 10:34:18 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:18 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f40700091e001f00000001000000000200000800040001000000", 0x24) [ 501.634831][T15944] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 501.642921][T15944] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b66ee78a 10:34:19 executing program 0 (fault-call:4 fault-nth:18): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:19 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x40000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xfffffffc, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0x5a481e6, 0x3) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x102000, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 10:34:19 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:19 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf83f0000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001100000001000000000200000800040001000000", 0x24) 10:34:19 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 501.810534][T16015] FAULT_INJECTION: forcing a failure. [ 501.810534][T16015] name failslab, interval 1, probability 0, space 0, times 0 [ 501.823196][T16015] CPU: 0 PID: 16015 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 501.833344][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.843389][T16015] Call Trace: [ 501.846652][T16015] dump_stack+0x137/0x19d [ 501.850968][T16015] should_fail+0x23c/0x250 [ 501.855373][T16015] __should_failslab+0x81/0x90 [ 501.861042][T16015] ? register_for_each_vma+0x372/0x890 [ 501.866498][T16015] should_failslab+0x5/0x20 [ 501.871047][T16015] kmem_cache_alloc_trace+0x49/0x320 [ 501.876378][T16015] ? register_for_each_vma+0x372/0x890 [ 501.881847][T16015] ? vma_interval_tree_iter_next+0x24c/0x280 [ 501.887821][T16015] register_for_each_vma+0x372/0x890 [ 501.893099][T16015] __uprobe_register+0x3f4/0x8a0 [ 501.898035][T16015] uprobe_register_refctr+0x29/0x40 [ 501.903234][T16015] probe_event_enable+0x2be/0x7d0 [ 501.908254][T16015] ? __uprobe_trace_func+0x420/0x420 [ 501.913588][T16015] trace_uprobe_register+0x88/0x410 [ 501.918939][T16015] ? find_next_bit+0xa7/0xf0 [ 501.923544][T16015] ? cpumask_next+0xc/0x30 [ 501.927987][T16015] perf_trace_event_init+0x34e/0x790 [ 501.933252][T16015] perf_uprobe_init+0xf5/0x140 [ 501.938033][T16015] perf_uprobe_event_init+0xde/0x140 [ 501.943299][T16015] perf_try_init_event+0x21a/0x400 [ 501.948452][T16015] perf_event_alloc+0x7eb/0x14d0 [ 501.953400][T16015] __se_sys_perf_event_open+0x5c9/0x25c0 [ 501.959078][T16015] ? __fget_light+0x21b/0x260 [ 501.963753][T16015] __x64_sys_perf_event_open+0x63/0x70 [ 501.969252][T16015] do_syscall_64+0x34/0x50 [ 501.973648][T16015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.979557][T16015] RIP: 0033:0x466459 [ 501.983435][T16015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.003207][T16015] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x4, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, r0, 0x79f72000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, r1, 0x2) 10:34:19 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf83f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:19 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904021f00000001000000000200000800040001000000", 0x24) [ 502.011608][T16015] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 502.019656][T16015] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 502.027619][T16015] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.035595][T16015] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 502.043545][T16015] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:19 executing program 0 (fault-call:4 fault-nth:19): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:19 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) fcntl$getown(r1, 0x9) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:19 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:19 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904031f00000001000000000200000800040001000000", 0x24) 10:34:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904041f00000001000000000200000800040001000000", 0x24) [ 502.414677][T16060] EXT4-fs: 131 callbacks suppressed [ 502.414690][T16060] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 502.434879][T16060] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 502.445525][T16061] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 502.459429][T16067] FAULT_INJECTION: forcing a failure. [ 502.459429][T16067] name failslab, interval 1, probability 0, space 0, times 0 [ 502.472142][T16067] CPU: 0 PID: 16067 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 502.473583][T16073] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 502.482287][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.482301][T16067] Call Trace: [ 502.482309][T16067] dump_stack+0x137/0x19d [ 502.493914][T16073] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 502.502418][T16067] should_fail+0x23c/0x250 [ 502.502440][T16067] __should_failslab+0x81/0x90 [ 502.528638][T16067] ? register_for_each_vma+0x372/0x890 [ 502.534293][T16067] should_failslab+0x5/0x20 [ 502.538906][T16067] kmem_cache_alloc_trace+0x49/0x320 [ 502.544332][T16067] ? register_for_each_vma+0x372/0x890 [ 502.549816][T16067] ? vma_interval_tree_iter_next+0x24c/0x280 [ 502.555773][T16067] register_for_each_vma+0x372/0x890 [ 502.561090][T16067] __uprobe_register+0x3f4/0x8a0 [ 502.566007][T16067] uprobe_register_refctr+0x29/0x40 [ 502.571243][T16067] probe_event_enable+0x2be/0x7d0 [ 502.576325][T16067] ? __uprobe_trace_func+0x420/0x420 [ 502.581645][T16067] trace_uprobe_register+0x88/0x410 [ 502.586902][T16067] ? find_next_bit+0xa7/0xf0 [ 502.591481][T16067] ? cpumask_next+0xc/0x30 [ 502.595924][T16067] perf_trace_event_init+0x34e/0x790 [ 502.601252][T16067] perf_uprobe_init+0xf5/0x140 [ 502.605991][T16067] perf_uprobe_event_init+0xde/0x140 [ 502.611253][T16067] perf_try_init_event+0x21a/0x400 [ 502.616349][T16067] perf_event_alloc+0x7eb/0x14d0 [ 502.621266][T16067] __se_sys_perf_event_open+0x5c9/0x25c0 [ 502.626969][T16067] ? __fget_light+0x21b/0x260 [ 502.631645][T16067] __x64_sys_perf_event_open+0x63/0x70 [ 502.637187][T16067] do_syscall_64+0x34/0x50 [ 502.641584][T16067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 502.647464][T16067] RIP: 0033:0x466459 [ 502.651401][T16067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 502.671065][T16067] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 502.679799][T16067] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 502.687764][T16067] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 502.695729][T16067] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 502.703689][T16067] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 10:34:20 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:20 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:20 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x2, 0x0, 0x40, 0x5, r2}) close(r1) 10:34:20 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf8f73f00, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904051f00000001000000000200000800040001000000", 0x24) [ 502.711645][T16067] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 502.727947][T16066] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 502.774933][T16084] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 502.790584][T16084] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 502.801822][T16083] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 502.810327][T16086] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 10:34:20 executing program 0 (fault-call:4 fault-nth:20): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, @ax25={0x3, @null, 0x4}, @qipcrtr={0x2a, 0xfffffffffffffffe}, @rc={0x1f, @any, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x15e, &(0x7f0000000100)='ipvlan0\x00', 0x100000001, 0x2, 0x1}) r4 = signalfd4(r2, &(0x7f0000000080)={[0x9]}, 0x8, 0x0) sendfile(r1, r4, &(0x7f00000000c0)=0x9, 0xff) write$binfmt_elf64(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x5f, 0x7, 0x7f, 0x0, 0x1, 0x1, 0x3, 0xfff, 0x1e9, 0x40, 0x30b, 0x3a83, 0xfffb, 0x38, 0x1, 0x5, 0x1f, 0x4}, [{0x4, 0x6, 0x0, 0x952, 0x5, 0x4, 0x8000, 0x5}, {0x70000000, 0xffffffff, 0xff, 0x8001, 0x8000, 0xffffffff, 0x9, 0x1}], "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", [[], [], [], [], [], [], [], []]}, 0x18b0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:20 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:20 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x300000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:20 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfeffffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904061f00000001000000000200000800040001000000", 0x24) [ 503.020508][T16063] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 503.028699][T16063] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 [ 503.124961][T16118] FAULT_INJECTION: forcing a failure. [ 503.124961][T16118] name failslab, interval 1, probability 0, space 0, times 0 [ 503.137628][T16118] CPU: 0 PID: 16118 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 503.147774][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.157826][T16118] Call Trace: [ 503.161089][T16118] dump_stack+0x137/0x19d [ 503.165410][T16118] should_fail+0x23c/0x250 [ 503.169883][T16118] __should_failslab+0x81/0x90 [ 503.174638][T16118] ? register_for_each_vma+0x372/0x890 [ 503.180090][T16118] should_failslab+0x5/0x20 [ 503.184595][T16118] kmem_cache_alloc_trace+0x49/0x320 [ 503.189878][T16118] ? register_for_each_vma+0x372/0x890 [ 503.195330][T16118] ? vma_interval_tree_iter_next+0x263/0x280 [ 503.201392][T16118] register_for_each_vma+0x372/0x890 [ 503.206682][T16118] __uprobe_register+0x3f4/0x8a0 [ 503.211619][T16118] uprobe_register_refctr+0x29/0x40 [ 503.216818][T16118] probe_event_enable+0x2be/0x7d0 [ 503.221824][T16118] ? __uprobe_trace_func+0x420/0x420 [ 503.227185][T16118] trace_uprobe_register+0x88/0x410 [ 503.232361][T16118] ? find_next_bit+0xa7/0xf0 [ 503.236927][T16118] ? cpumask_next+0xc/0x30 [ 503.241335][T16118] perf_trace_event_init+0x34e/0x790 [ 503.246715][T16118] perf_uprobe_init+0xf5/0x140 [ 503.251458][T16118] perf_uprobe_event_init+0xde/0x140 [ 503.256739][T16118] perf_try_init_event+0x21a/0x400 [ 503.261932][T16118] perf_event_alloc+0x7eb/0x14d0 [ 503.266853][T16118] __se_sys_perf_event_open+0x5c9/0x25c0 [ 503.272468][T16118] ? __fget_light+0x21b/0x260 [ 503.277126][T16118] __x64_sys_perf_event_open+0x63/0x70 [ 503.282663][T16118] do_syscall_64+0x34/0x50 [ 503.287144][T16118] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.293044][T16118] RIP: 0033:0x466459 [ 503.296911][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 503.316571][T16118] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904071f00000001000000000200000800040001000000", 0x24) 10:34:20 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x9, 0x2, 0x8, 0x3b800000000, 0x7ff, 0x80}) 10:34:20 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:20 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:20 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffefffff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 503.324966][T16118] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 503.332936][T16118] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 503.340899][T16118] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.348854][T16118] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 503.356818][T16118] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:20 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1800000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 0 (fault-call:4 fault-nth:21): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904091f00000001000000000200000800040001000000", 0x24) 10:34:21 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:21 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2200000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x2593) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x121153, r0, 0xd9058000) fallocate(r1, 0x20, 0x0, 0x10000) ioctl$FIOCLEX(r1, 0x5451) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x1, 0x3, 0x3f, 0x92, 0x0, 0x100000001, 0x2080, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x86}, 0x40409, 0x2, 0x6, 0x6, 0x3, 0x9, 0x101}, 0x0, 0x3, r2, 0x9) poll(&(0x7f0000000100), 0x0, 0xffffffff) 10:34:21 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffefff, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 503.648648][T16108] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 503.656863][T16108] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006219f52b [ 503.746380][T16166] FAULT_INJECTION: forcing a failure. [ 503.746380][T16166] name failslab, interval 1, probability 0, space 0, times 0 [ 503.760808][T16166] CPU: 1 PID: 16166 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 503.770995][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.781039][T16166] Call Trace: [ 503.784302][T16166] dump_stack+0x137/0x19d [ 503.788665][T16166] should_fail+0x23c/0x250 [ 503.793071][T16166] __should_failslab+0x81/0x90 [ 503.797819][T16166] ? register_for_each_vma+0x372/0x890 [ 503.803266][T16166] should_failslab+0x5/0x20 [ 503.807780][T16166] kmem_cache_alloc_trace+0x49/0x320 [ 503.813111][T16166] ? register_for_each_vma+0x372/0x890 [ 503.818585][T16166] ? vma_interval_tree_iter_next+0x24c/0x280 [ 503.824555][T16166] register_for_each_vma+0x372/0x890 [ 503.830053][T16166] __uprobe_register+0x3f4/0x8a0 [ 503.834989][T16166] uprobe_register_refctr+0x29/0x40 [ 503.840171][T16166] probe_event_enable+0x2be/0x7d0 [ 503.845178][T16166] ? __uprobe_trace_func+0x420/0x420 [ 503.850568][T16166] trace_uprobe_register+0x88/0x410 [ 503.855758][T16166] ? find_next_bit+0xa7/0xf0 [ 503.860329][T16166] ? cpumask_next+0xc/0x30 [ 503.864754][T16166] perf_trace_event_init+0x34e/0x790 [ 503.870073][T16166] perf_uprobe_init+0xf5/0x140 [ 503.874892][T16166] perf_uprobe_event_init+0xde/0x140 [ 503.880170][T16166] perf_try_init_event+0x21a/0x400 [ 503.885263][T16166] perf_event_alloc+0x7eb/0x14d0 [ 503.890254][T16166] __se_sys_perf_event_open+0x5c9/0x25c0 [ 503.895891][T16166] ? __fget_light+0x21b/0x260 [ 503.900644][T16166] __x64_sys_perf_event_open+0x63/0x70 [ 503.906366][T16166] do_syscall_64+0x34/0x50 [ 503.910777][T16166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 503.916732][T16166] RIP: 0033:0x466459 [ 503.920609][T16166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:21 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:21 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2e00000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904002000000001000000000200000800040001000000", 0x24) [ 503.940296][T16166] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 503.948716][T16166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 503.956675][T16166] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 503.964646][T16166] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 503.972663][T16166] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 503.980627][T16166] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:21 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:21 executing program 0 (fault-call:4 fault-nth:22): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:21 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904002200000001000000000200000800040001000000", 0x24) [ 504.367939][T16213] FAULT_INJECTION: forcing a failure. [ 504.367939][T16213] name failslab, interval 1, probability 0, space 0, times 0 [ 504.380606][T16213] CPU: 1 PID: 16213 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 504.390756][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.400787][T16213] Call Trace: [ 504.404042][T16213] dump_stack+0x137/0x19d [ 504.408353][T16213] should_fail+0x23c/0x250 [ 504.412747][T16213] __should_failslab+0x81/0x90 [ 504.417559][T16213] ? register_for_each_vma+0x372/0x890 [ 504.423067][T16213] should_failslab+0x5/0x20 [ 504.427568][T16213] kmem_cache_alloc_trace+0x49/0x320 [ 504.432828][T16213] ? register_for_each_vma+0x372/0x890 [ 504.438281][T16213] ? vma_interval_tree_iter_next+0x263/0x280 [ 504.444244][T16213] register_for_each_vma+0x372/0x890 [ 504.449511][T16213] __uprobe_register+0x3f4/0x8a0 [ 504.454424][T16213] uprobe_register_refctr+0x29/0x40 [ 504.459674][T16213] probe_event_enable+0x2be/0x7d0 [ 504.464680][T16213] ? __uprobe_trace_func+0x420/0x420 [ 504.469943][T16213] trace_uprobe_register+0x88/0x410 [ 504.475132][T16213] ? find_next_bit+0xa7/0xf0 [ 504.479709][T16213] ? cpumask_next+0xc/0x30 [ 504.484192][T16213] perf_trace_event_init+0x34e/0x790 [ 504.489484][T16213] perf_uprobe_init+0xf5/0x140 [ 504.494305][T16213] perf_uprobe_event_init+0xde/0x140 [ 504.499578][T16213] perf_try_init_event+0x21a/0x400 [ 504.504686][T16213] perf_event_alloc+0x7eb/0x14d0 [ 504.509630][T16213] __se_sys_perf_event_open+0x5c9/0x25c0 [ 504.515276][T16213] ? __fget_light+0x21b/0x260 [ 504.519934][T16213] __x64_sys_perf_event_open+0x63/0x70 [ 504.525627][T16213] do_syscall_64+0x34/0x50 [ 504.530025][T16213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 504.535913][T16213] RIP: 0033:0x466459 [ 504.539791][T16213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 504.559391][T16213] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:21 executing program 2: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:21 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:21 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:22 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffe, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904002500000001000000000200000800040001000000", 0x24) [ 504.567818][T16213] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 504.575777][T16213] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 504.583723][T16213] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 504.591719][T16213] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 504.599687][T16213] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:22 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:22 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1c00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@newspdinfo={0x3c, 0x24, 0x400, 0x70bd28, 0x25dfdbfe, 0x9472, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4851}, 0x4080) 10:34:22 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 504.887634][T16208] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 504.895726][T16208] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 10:34:22 executing program 0 (fault-call:4 fault-nth:23): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904000200000001000000000200000800040001000000", 0x24) 10:34:22 executing program 2: prctl$PR_SET_TSC(0x1a, 0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:22 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:22 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 505.022792][T16265] FAULT_INJECTION: forcing a failure. [ 505.022792][T16265] name failslab, interval 1, probability 0, space 0, times 0 [ 505.035454][T16265] CPU: 1 PID: 16265 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 505.045608][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.055655][T16265] Call Trace: [ 505.058933][T16265] dump_stack+0x137/0x19d [ 505.063290][T16265] should_fail+0x23c/0x250 [ 505.067681][T16265] __should_failslab+0x81/0x90 [ 505.072424][T16265] ? register_for_each_vma+0x372/0x890 [ 505.077938][T16265] should_failslab+0x5/0x20 [ 505.082423][T16265] kmem_cache_alloc_trace+0x49/0x320 [ 505.087708][T16265] ? register_for_each_vma+0x372/0x890 [ 505.093161][T16265] ? vma_interval_tree_iter_next+0x24c/0x280 [ 505.099309][T16265] register_for_each_vma+0x372/0x890 [ 505.104579][T16265] __uprobe_register+0x3f4/0x8a0 [ 505.109720][T16265] uprobe_register_refctr+0x29/0x40 [ 505.114912][T16265] probe_event_enable+0x2be/0x7d0 [ 505.119931][T16265] ? __uprobe_trace_func+0x420/0x420 [ 505.125191][T16265] trace_uprobe_register+0x88/0x410 [ 505.130393][T16265] ? find_next_bit+0xa7/0xf0 [ 505.135029][T16265] ? cpumask_next+0xc/0x30 [ 505.139437][T16265] perf_trace_event_init+0x34e/0x790 [ 505.144709][T16265] perf_uprobe_init+0xf5/0x140 [ 505.149452][T16265] perf_uprobe_event_init+0xde/0x140 [ 505.154713][T16265] perf_try_init_event+0x21a/0x400 [ 505.159804][T16265] perf_event_alloc+0x7eb/0x14d0 [ 505.164754][T16265] __se_sys_perf_event_open+0x5c9/0x25c0 [ 505.170407][T16265] ? __fget_light+0x21b/0x260 [ 505.175061][T16265] __x64_sys_perf_event_open+0x63/0x70 [ 505.180549][T16265] do_syscall_64+0x34/0x50 [ 505.184967][T16265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.190841][T16265] RIP: 0033:0x466459 [ 505.194716][T16265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.214304][T16265] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) 10:34:22 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904000800000001000000000200000800040001000000", 0x24) 10:34:22 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 505.222699][T16265] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 505.230754][T16265] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 505.238873][T16265] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.248832][T16265] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 505.256792][T16265] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:22 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf8f73f0000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:22 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/4097, 0x1001}], 0x1, 0x0, 0x0) 10:34:22 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfeffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 505.576929][T16259] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 505.585015][T16259] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000bb7f042f 10:34:23 executing program 0 (fault-call:4 fault-nth:24): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:23 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, r0, 0xf9b26000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x3, 0xfff, 0x1}) r1 = openat$cgroup_int(r0, &(0x7f00000004c0)='memory.swap.max\x00', 0x2, 0x0) poll(&(0x7f0000002200)=[{r1, 0x4041}, {r0, 0x1010}], 0x2, 0x101) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) close(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x240, 0x6) preadv(r3, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:23 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001100000001000000000200000800040001000000", 0x24) 10:34:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffefffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904002200000001000000000200000800040001000000", 0x24) [ 505.713570][T16318] FAULT_INJECTION: forcing a failure. [ 505.713570][T16318] name failslab, interval 1, probability 0, space 0, times 0 [ 505.726220][T16318] CPU: 1 PID: 16318 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 505.736371][T16318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.746830][T16318] Call Trace: [ 505.750104][T16318] dump_stack+0x137/0x19d [ 505.754520][T16318] should_fail+0x23c/0x250 [ 505.758939][T16318] __should_failslab+0x81/0x90 [ 505.763702][T16318] ? register_for_each_vma+0x372/0x890 [ 505.769177][T16318] should_failslab+0x5/0x20 [ 505.773664][T16318] kmem_cache_alloc_trace+0x49/0x320 [ 505.778938][T16318] ? register_for_each_vma+0x372/0x890 [ 505.784393][T16318] ? vma_interval_tree_iter_next+0x263/0x280 [ 505.790356][T16318] register_for_each_vma+0x372/0x890 [ 505.795647][T16318] __uprobe_register+0x3f4/0x8a0 [ 505.800570][T16318] uprobe_register_refctr+0x29/0x40 [ 505.805745][T16318] probe_event_enable+0x2be/0x7d0 [ 505.810762][T16318] ? __uprobe_trace_func+0x420/0x420 [ 505.816026][T16318] trace_uprobe_register+0x88/0x410 [ 505.821262][T16318] ? find_next_bit+0xa7/0xf0 [ 505.825834][T16318] ? cpumask_next+0xc/0x30 [ 505.830307][T16318] perf_trace_event_init+0x34e/0x790 [ 505.835587][T16318] perf_uprobe_init+0xf5/0x140 [ 505.840331][T16318] perf_uprobe_event_init+0xde/0x140 [ 505.845630][T16318] perf_try_init_event+0x21a/0x400 [ 505.850732][T16318] perf_event_alloc+0x7eb/0x14d0 [ 505.855754][T16318] __se_sys_perf_event_open+0x5c9/0x25c0 [ 505.861369][T16318] ? __fget_light+0x21b/0x260 [ 505.866024][T16318] __x64_sys_perf_event_open+0x63/0x70 [ 505.871531][T16318] do_syscall_64+0x34/0x50 [ 505.875929][T16318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 505.881808][T16318] RIP: 0033:0x466459 [ 505.885713][T16318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 505.905355][T16318] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:23 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf83f0000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904002500000001000000000200000800040001000000", 0x24) [ 505.913756][T16318] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 505.921705][T16318] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 505.929721][T16318] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 505.937673][T16318] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 505.945632][T16318] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:23 executing program 2: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:23 executing program 0 (fault-call:4 fault-nth:25): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:23 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x101) fcntl$setflags(r2, 0x2, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x202, 0x0) preadv(r3, &(0x7f00000002c0), 0x0, 0xfa, 0x7) 10:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f4070009040081ffffff01000000000200000800040001000000", 0x24) [ 506.306310][T16377] FAULT_INJECTION: forcing a failure. [ 506.306310][T16377] name failslab, interval 1, probability 0, space 0, times 0 [ 506.318997][T16377] CPU: 1 PID: 16377 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 506.329147][T16377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.339204][T16377] Call Trace: [ 506.342525][T16377] dump_stack+0x137/0x19d [ 506.346851][T16377] should_fail+0x23c/0x250 [ 506.351257][T16377] __should_failslab+0x81/0x90 [ 506.356008][T16377] ? register_for_each_vma+0x372/0x890 [ 506.361562][T16377] should_failslab+0x5/0x20 [ 506.366075][T16377] kmem_cache_alloc_trace+0x49/0x320 [ 506.371351][T16377] ? register_for_each_vma+0x372/0x890 [ 506.376802][T16377] ? vma_interval_tree_iter_next+0x24c/0x280 [ 506.382760][T16377] register_for_each_vma+0x372/0x890 [ 506.388097][T16377] __uprobe_register+0x3f4/0x8a0 [ 506.393033][T16377] uprobe_register_refctr+0x29/0x40 [ 506.398209][T16377] probe_event_enable+0x2be/0x7d0 [ 506.403274][T16377] ? __uprobe_trace_func+0x420/0x420 [ 506.408567][T16377] trace_uprobe_register+0x88/0x410 [ 506.413803][T16377] ? find_next_bit+0xa7/0xf0 [ 506.418484][T16377] ? cpumask_next+0xc/0x30 [ 506.422942][T16377] perf_trace_event_init+0x34e/0x790 [ 506.428209][T16377] perf_uprobe_init+0xf5/0x140 [ 506.432972][T16377] perf_uprobe_event_init+0xde/0x140 [ 506.438253][T16377] perf_try_init_event+0x21a/0x400 [ 506.443347][T16377] perf_event_alloc+0x7eb/0x14d0 [ 506.448571][T16377] __se_sys_perf_event_open+0x5c9/0x25c0 [ 506.454240][T16377] ? __fget_light+0x21b/0x260 [ 506.458907][T16377] __x64_sys_perf_event_open+0x63/0x70 [ 506.464350][T16377] do_syscall_64+0x34/0x50 [ 506.468815][T16377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.474768][T16377] RIP: 0033:0x466459 [ 506.478649][T16377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f02000001000000000200000800040001000000", 0x24) 10:34:23 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:23 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 506.503819][T16377] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 506.512211][T16377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 506.520160][T16377] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 506.528187][T16377] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.536145][T16377] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 506.544116][T16377] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:23 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) 10:34:24 executing program 0 (fault-call:4 fault-nth:26): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f03000001000000000200000800040001000000", 0x24) 10:34:24 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:24 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7) ioctl$FIONCLEX(r0, 0x5450) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x301000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0x0, r3, 0x10000, 0x1f, 0x9, 0x800}) r4 = socket$inet(0x2, 0x6, 0x9) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) statx(r1, &(0x7f0000002480)='./file0\x00', 0x0, 0x4, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000002680)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)="1f8b92f4e42824ea2e3e7490ba021b71269c6f522b3a4d5f424be50331cb7f7e54ea6bd354b733276ec6a8068c503f5bfed0", 0x32}, {&(0x7f0000000240)="302d733d1bddfc2827c034d50f63d1689b", 0x11}, {&(0x7f0000000280)="fcd017765d137d7da3c3dc8fb2a91c62901aa2706ae5605f6863068386239f17c6581e0098c95aa959ea30b08d97376e3079b42d8844cc95b0fa03b8d666545de453534f9383a1dfd53082bc3c2e86b2d0689ee7815618a56917cd6240097bc5d5644b15a19f80315e998220c587d25864a7fa2547154b1787d70de13bbde1aa610ec77234e933f179ec6b23076de99c78edf3502bf28359c4afc30e83fd614d1c63ee79fde340c11c481dc5da8d3e878948d3881a9804b19b534ffd21218b704260881622a5c0d904a27e473c5dfad12f79", 0xd2}, {&(0x7f0000000380)="e36189884ddc3658274eb027d45d3fe6eb33331e28f871ef329ad9fd1f993065ba1fe98507d7a923b041a92ca3910b0afaa464077a1af15a8d925c560ff8e487bea6a4c543f14432f62eb8e0e6dae7fee41e9d7483aae87c2d85d90f338678b782ad5cbb48037b69d296324dcafcb99e07945e52f68375f46299a360b05a1ec618ae5b824a1f58289d5917dc0b5bfa6f41d93eea42b5c6b9af96d419b3befdb9da1b1c19f5f32740a0d568e4cf1d62d603a578bb8e", 0xb5}, {&(0x7f0000000440)="dc670242859d602cf8eae2e28da2577d", 0x10}], 0x5, &(0x7f00000025c0)=[@rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r5}}}], 0xb8, 0x800}, 0x810) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r6, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r6, 0x20, 0x0, 0x10000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r4, &(0x7f0000000080)={0x10000000}) 10:34:24 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f04000001000000000200000800040001000000", 0x24) 10:34:24 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10, 0x0, 0x884a0, &(0x7f00000002c0)) [ 506.941661][T16432] FAULT_INJECTION: forcing a failure. [ 506.941661][T16432] name failslab, interval 1, probability 0, space 0, times 0 [ 506.954428][T16432] CPU: 1 PID: 16432 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 506.964602][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.964617][T16432] Call Trace: 10:34:24 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:24 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 506.964625][T16432] dump_stack+0x137/0x19d [ 506.964648][T16432] should_fail+0x23c/0x250 [ 506.964666][T16432] __should_failslab+0x81/0x90 [ 506.964686][T16432] ? register_for_each_vma+0x372/0x890 [ 506.964704][T16432] should_failslab+0x5/0x20 [ 506.964778][T16432] kmem_cache_alloc_trace+0x49/0x320 [ 506.964798][T16432] ? register_for_each_vma+0x372/0x890 [ 506.964830][T16432] ? vma_interval_tree_iter_next+0x263/0x280 [ 506.964848][T16432] register_for_each_vma+0x372/0x890 [ 506.964871][T16432] __uprobe_register+0x3f4/0x8a0 [ 506.964891][T16432] uprobe_register_refctr+0x29/0x40 [ 506.964909][T16432] probe_event_enable+0x2be/0x7d0 [ 506.964925][T16432] ? __uprobe_trace_func+0x420/0x420 [ 506.964941][T16432] trace_uprobe_register+0x88/0x410 10:34:24 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:24 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 506.964956][T16432] ? find_next_bit+0xa7/0xf0 [ 506.964968][T16432] ? cpumask_next+0xc/0x30 [ 506.965058][T16432] perf_trace_event_init+0x34e/0x790 [ 506.965078][T16432] perf_uprobe_init+0xf5/0x140 [ 506.965097][T16432] perf_uprobe_event_init+0xde/0x140 [ 506.965114][T16432] perf_try_init_event+0x21a/0x400 [ 506.965163][T16432] perf_event_alloc+0x7eb/0x14d0 [ 506.965187][T16432] __se_sys_perf_event_open+0x5c9/0x25c0 [ 506.965212][T16432] ? __fget_light+0x21b/0x260 [ 506.965232][T16432] __x64_sys_perf_event_open+0x63/0x70 [ 506.965303][T16432] do_syscall_64+0x34/0x50 [ 506.965321][T16432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 506.965419][T16432] RIP: 0033:0x466459 [ 506.965432][T16432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 506.965445][T16432] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 506.965461][T16432] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 506.965471][T16432] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 506.965482][T16432] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 506.965492][T16432] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 506.965504][T16432] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 507.312249][T16424] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 507.322616][T16424] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c9bcb7cd 10:34:24 executing program 0 (fault-call:4 fault-nth:27): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f05000001000000000200000800040001000000", 0x24) 10:34:24 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:24 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000080)={'syz0', "40a4246d18cf914791315d3ba817bcc4af93b2f31eec4dbed54ecf5f2dab7da07663d30ce28497befa37dc0905f570de05cd4901b77cbf3cce2f8a8b776051fb9a2b65ab2c3b716d19eb04efb1342637e21b8d11958c2907f5f978cc8e92660f8c213c85dd4f0810d90b78425ff744b9303ac5bc3e1ddb8a932d2f498cae668228ccbcd0d3678ee4d62ecc13b508aa50cccb0d8bf2838d06b86ec32fb58655305c5660d01188739c3df23ff4bcc01e4e616b77c7e0581d35f621674f7b87eb90c32fc6854e1c564ba7897253132633e84e231ad1de66cb4c1b29114f875c5941bf37dd47"}, 0xe8) getsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000001740)=""/4096, &(0x7f0000000340)=0x1000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r1, &(0x7f0000000300)=0x8, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x0, 0x3f, 0x0, 0x6a9}, {0x9, 0x6, 0x79, 0x8}, {0xfff, 0x0, 0x8, 0x7}, {0x80, 0x2, 0x5, 0xffff}, {0x0, 0x8, 0x2, 0x8}, {0x6, 0x0, 0x3f, 0xb8df}, {0x1, 0x3, 0x0, 0xc4b}, {0x0, 0x20, 0x4}, {0x8, 0x20, 0x7, 0xff}]}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1500088}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3b, 0x100, 0x70bd29, 0x25dfdbfb, {0x9}, [@nested={0xc, 0x2f, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @fd=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x20000840) 10:34:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f06000001000000000200000800040001000000", 0x24) 10:34:24 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x22, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:24 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x1c}]}) [ 507.448040][T16485] EXT4-fs: 113 callbacks suppressed [ 507.448052][T16485] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 507.471877][T16488] FAULT_INJECTION: forcing a failure. [ 507.471877][T16488] name failslab, interval 1, probability 0, space 0, times 0 [ 507.484519][T16488] CPU: 1 PID: 16488 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 507.494661][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.504714][T16488] Call Trace: [ 507.507990][T16488] dump_stack+0x137/0x19d [ 507.511356][T16500] EXT4-fs (sda1): Unrecognized mount option "data=journal" or missing value [ 507.512312][T16488] should_fail+0x23c/0x250 [ 507.512331][T16488] __should_failslab+0x81/0x90 [ 507.512360][T16488] ? register_for_each_vma+0x372/0x890 [ 507.512378][T16488] should_failslab+0x5/0x20 [ 507.540194][T16488] kmem_cache_alloc_trace+0x49/0x320 [ 507.545470][T16488] ? register_for_each_vma+0x372/0x890 [ 507.550929][T16488] ? vma_interval_tree_iter_next+0x263/0x280 [ 507.556901][T16488] register_for_each_vma+0x372/0x890 [ 507.562165][T16488] __uprobe_register+0x3f4/0x8a0 [ 507.567082][T16488] uprobe_register_refctr+0x29/0x40 [ 507.572258][T16488] probe_event_enable+0x2be/0x7d0 [ 507.577389][T16488] ? __uprobe_trace_func+0x420/0x420 [ 507.582656][T16488] trace_uprobe_register+0x88/0x410 [ 507.588786][T16488] ? find_next_bit+0xa7/0xf0 [ 507.593719][T16488] ? cpumask_next+0xc/0x30 [ 507.598113][T16488] perf_trace_event_init+0x34e/0x790 [ 507.603381][T16488] perf_uprobe_init+0xf5/0x140 [ 507.608123][T16488] perf_uprobe_event_init+0xde/0x140 [ 507.613402][T16488] perf_try_init_event+0x21a/0x400 [ 507.618511][T16488] perf_event_alloc+0x7eb/0x14d0 [ 507.623433][T16488] __se_sys_perf_event_open+0x5c9/0x25c0 [ 507.629155][T16488] ? __fget_light+0x21b/0x260 [ 507.633825][T16488] __x64_sys_perf_event_open+0x63/0x70 [ 507.639363][T16488] do_syscall_64+0x34/0x50 [ 507.643766][T16488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 507.649652][T16488] RIP: 0033:0x466459 [ 507.653566][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 507.673165][T16488] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 507.681569][T16488] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 507.689517][T16488] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 10:34:25 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private1, @in6=@empty}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/177, 0xe1}], 0x4, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000002200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="03092dbd7000fddbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="06003600009000000a00ffffffffffff00000a0006004dfe31723b7800002d4bcffc3194adade595d5d9a17126002a0082204200010000000008021100000000000000cda183f93e84da38172aacca0700000000000004000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r3, 0x20, 0x0, 0x10000) dup2(r1, r3) [ 507.697468][T16488] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 507.705430][T16488] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 507.713415][T16488] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 507.729887][T16498] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 507.740376][T16497] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:25 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f07000001000000000200000800040001000000", 0x24) 10:34:25 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x22}]}) [ 507.750739][T16504] EXT4-fs (sda1): Unrecognized mount option "data=journal" or missing value [ 507.826018][T16515] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 507.869507][T16521] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 507.880647][T16525] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 507.889077][T16524] EXT4-fs (sda1): Unrecognized mount option "data=journal"" or missing value [ 507.899863][T16526] EXT4-fs (sda1): Unrecognized mount option "data=journal"" or missing value 10:34:25 executing program 0 (fault-call:4 fault-nth:28): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:25 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = dup(r0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/91, 0x5b}], 0x1, &(0x7f00000001c0)=""/101, 0x65}, 0x142) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000013c0)="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") r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001700)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x2000, 0x0) r4 = socket$inet6(0xa, 0x0, 0x9) readv(r4, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/23, 0x17}, {&(0x7f00000012c0)=""/139, 0x8b}], 0x3) ioctl(r3, 0x3, &(0x7f0000000000)="0c2f8a60") 10:34:25 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f09000001000000000200000800040001000000", 0x24) 10:34:25 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1800000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 508.040425][T16476] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 508.048535][T16476] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 [ 508.147997][T16544] FAULT_INJECTION: forcing a failure. [ 508.147997][T16544] name failslab, interval 1, probability 0, space 0, times 0 [ 508.160645][T16544] CPU: 0 PID: 16544 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 508.170791][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.180845][T16544] Call Trace: [ 508.184171][T16544] dump_stack+0x137/0x19d [ 508.188480][T16544] should_fail+0x23c/0x250 [ 508.192877][T16544] __should_failslab+0x81/0x90 [ 508.197750][T16544] ? register_for_each_vma+0x372/0x890 [ 508.203289][T16544] should_failslab+0x5/0x20 [ 508.207861][T16544] kmem_cache_alloc_trace+0x49/0x320 [ 508.213128][T16544] ? register_for_each_vma+0x372/0x890 [ 508.218647][T16544] ? vma_interval_tree_iter_next+0x24c/0x280 [ 508.224665][T16544] register_for_each_vma+0x372/0x890 [ 508.229931][T16544] __uprobe_register+0x3f4/0x8a0 [ 508.234902][T16544] uprobe_register_refctr+0x29/0x40 [ 508.240112][T16544] probe_event_enable+0x2be/0x7d0 [ 508.245124][T16544] ? __uprobe_trace_func+0x420/0x420 [ 508.250449][T16544] trace_uprobe_register+0x88/0x410 [ 508.255647][T16544] ? find_next_bit+0xa7/0xf0 [ 508.260219][T16544] ? cpumask_next+0xc/0x30 [ 508.264624][T16544] perf_trace_event_init+0x34e/0x790 [ 508.269911][T16544] perf_uprobe_init+0xf5/0x140 [ 508.274660][T16544] perf_uprobe_event_init+0xde/0x140 [ 508.279949][T16544] perf_try_init_event+0x21a/0x400 [ 508.285037][T16544] perf_event_alloc+0x7eb/0x14d0 [ 508.289954][T16544] __se_sys_perf_event_open+0x5c9/0x25c0 [ 508.295589][T16544] ? __fget_light+0x21b/0x260 [ 508.300246][T16544] __x64_sys_perf_event_open+0x63/0x70 [ 508.305778][T16544] do_syscall_64+0x34/0x50 [ 508.310187][T16544] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 508.316193][T16544] RIP: 0033:0x466459 [ 508.320083][T16544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 508.339679][T16544] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:25 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:25 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2200000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1800, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00030001000000000200000800040001000000", 0x24) [ 508.348095][T16544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 508.356056][T16544] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 508.364032][T16544] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 508.372087][T16544] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 508.380110][T16544] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:25 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x40080, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0xedc3, {{0xa, 0x4e23, 0xfffffff8, @private2={0xfc, 0x2, [], 0x1}, 0x1}}}, 0x88) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) r3 = fsmount(r2, 0x1, 0x3) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 10:34:25 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200, 0x0, 0x884a0, &(0x7f00000002c0)) [ 508.692480][T16538] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 508.700728][T16538] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000006781bf77 10:34:26 executing program 0 (fault-call:4 fault-nth:29): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:26 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2e00000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:26 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x2}) 10:34:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00050001000000000200000800040001000000", 0x24) 10:34:26 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001500)=0x8, 0x4) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/194, 0xc2}], 0x8, 0x7fff, 0xa000000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001540)={0x8, 0x100000000, 0x6}) 10:34:26 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e00, 0x0, 0x884a0, &(0x7f00000002c0)) [ 508.844986][T16608] FAULT_INJECTION: forcing a failure. [ 508.844986][T16608] name failslab, interval 1, probability 0, space 0, times 0 [ 508.857714][T16608] CPU: 0 PID: 16608 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 508.867865][T16608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.877918][T16608] Call Trace: [ 508.881213][T16608] dump_stack+0x137/0x19d [ 508.885544][T16608] should_fail+0x23c/0x250 [ 508.890016][T16608] __should_failslab+0x81/0x90 [ 508.894760][T16608] ? register_for_each_vma+0x372/0x890 [ 508.900202][T16608] should_failslab+0x5/0x20 [ 508.904743][T16608] kmem_cache_alloc_trace+0x49/0x320 [ 508.910032][T16608] ? register_for_each_vma+0x372/0x890 [ 508.915528][T16608] ? vma_interval_tree_iter_next+0x263/0x280 [ 508.921490][T16608] register_for_each_vma+0x372/0x890 [ 508.926874][T16608] __uprobe_register+0x3f4/0x8a0 [ 508.931803][T16608] uprobe_register_refctr+0x29/0x40 [ 508.936988][T16608] probe_event_enable+0x2be/0x7d0 [ 508.941999][T16608] ? __uprobe_trace_func+0x420/0x420 [ 508.947267][T16608] trace_uprobe_register+0x88/0x410 [ 508.952610][T16608] ? find_next_bit+0xa7/0xf0 [ 508.957183][T16608] ? cpumask_next+0xc/0x30 [ 508.961595][T16608] perf_trace_event_init+0x34e/0x790 [ 508.966870][T16608] perf_uprobe_init+0xf5/0x140 [ 508.971650][T16608] perf_uprobe_event_init+0xde/0x140 [ 508.976932][T16608] perf_try_init_event+0x21a/0x400 [ 508.982082][T16608] perf_event_alloc+0x7eb/0x14d0 [ 508.987006][T16608] __se_sys_perf_event_open+0x5c9/0x25c0 [ 508.992692][T16608] ? __fget_light+0x21b/0x260 [ 508.997387][T16608] __x64_sys_perf_event_open+0x63/0x70 [ 509.002911][T16608] do_syscall_64+0x34/0x50 [ 509.007309][T16608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 509.013190][T16608] RIP: 0033:0x466459 [ 509.017068][T16608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.036657][T16608] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:26 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:26 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:26 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x3}) 10:34:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00060001000000000200000800040001000000", 0x24) 10:34:26 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/180, 0xb4}, {&(0x7f0000000240)=""/218, 0xda}], 0x5, 0x5, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 509.045065][T16608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 509.053014][T16608] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 509.061038][T16608] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 509.069018][T16608] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 509.076967][T16608] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00070001000000000200000800040001000000", 0x24) [ 509.363237][T16596] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 509.371465][T16596] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 10:34:26 executing program 0 (fault-call:4 fault-nth:30): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:26 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:26 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4074, 0xfea}], 0x1, 0x2000000, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) pidfd_getfd(r0, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 10:34:26 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:26 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x4}) 10:34:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00090001000000000200000800040001000000", 0x24) [ 509.448192][T16650] FAULT_INJECTION: forcing a failure. [ 509.448192][T16650] name failslab, interval 1, probability 0, space 0, times 0 [ 509.460897][T16650] CPU: 0 PID: 16650 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 509.471138][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.481254][T16650] Call Trace: [ 509.484531][T16650] dump_stack+0x137/0x19d [ 509.488862][T16650] should_fail+0x23c/0x250 [ 509.493286][T16650] __should_failslab+0x81/0x90 [ 509.498091][T16650] ? register_for_each_vma+0x372/0x890 [ 509.503553][T16650] should_failslab+0x5/0x20 [ 509.508225][T16650] kmem_cache_alloc_trace+0x49/0x320 [ 509.513508][T16650] ? register_for_each_vma+0x372/0x890 [ 509.518989][T16650] ? vma_interval_tree_iter_next+0x263/0x280 [ 509.524945][T16650] register_for_each_vma+0x372/0x890 [ 509.530216][T16650] __uprobe_register+0x3f4/0x8a0 [ 509.535296][T16650] uprobe_register_refctr+0x29/0x40 [ 509.540472][T16650] probe_event_enable+0x2be/0x7d0 [ 509.545607][T16650] ? __uprobe_trace_func+0x420/0x420 [ 509.550889][T16650] trace_uprobe_register+0x88/0x410 [ 509.556065][T16650] ? find_next_bit+0xa7/0xf0 [ 509.560657][T16650] ? cpumask_next+0xc/0x30 [ 509.565101][T16650] perf_trace_event_init+0x34e/0x790 [ 509.570372][T16650] perf_uprobe_init+0xf5/0x140 [ 509.575215][T16650] perf_uprobe_event_init+0xde/0x140 [ 509.580477][T16650] perf_try_init_event+0x21a/0x400 [ 509.585578][T16650] perf_event_alloc+0x7eb/0x14d0 [ 509.590557][T16650] __se_sys_perf_event_open+0x5c9/0x25c0 [ 509.596196][T16650] ? __fget_light+0x21b/0x260 [ 509.600858][T16650] __x64_sys_perf_event_open+0x63/0x70 [ 509.606400][T16650] do_syscall_64+0x34/0x50 [ 509.610825][T16650] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 509.616701][T16650] RIP: 0033:0x466459 [ 509.620585][T16650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 509.640242][T16650] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:27 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x200, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{}, 0x8, 0x2, 0x6}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000000)=""/64, 0x40}], 0x2, 0x0, 0x0) socket(0x3, 0x2, 0x39ab) 10:34:27 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x7}) 10:34:27 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:27 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f1a0d0001000000000200000800040001000000", 0x24) [ 509.648633][T16650] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 509.656597][T16650] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 509.664563][T16650] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 509.672513][T16650] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 509.680498][T16650] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/22, 0x16}, {&(0x7f0000000080)=""/39, 0x27}], 0x2, 0x1, 0x4e0, 0x0) [ 509.986656][T16646] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 509.997085][T16646] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000002492a823 10:34:27 executing program 0 (fault-call:4 fault-nth:31): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:27 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:27 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:27 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x8}) 10:34:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001fc00e0001000000000200000800040001000000", 0x24) 10:34:27 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r2, 0x986861e43ed3f1b1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r4, 0x986861e43ed3f1b1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x14, 0x13, [{0x4}, {0x60, 0x1}, {0x4}, {0x4, 0x1}, {0x36}, {0xc}, {0x6}, {0x12}, {0x9}, {0x16}, {0x12}, {0x1b}, {0x18, 0x1}, {0x9, 0x1}, {0x9}, {0x48, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x80000000}}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 510.117684][T16715] FAULT_INJECTION: forcing a failure. [ 510.117684][T16715] name failslab, interval 1, probability 0, space 0, times 0 [ 510.130425][T16715] CPU: 1 PID: 16715 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 510.140589][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.150637][T16715] Call Trace: [ 510.153966][T16715] dump_stack+0x137/0x19d [ 510.158322][T16715] should_fail+0x23c/0x250 [ 510.162736][T16715] __should_failslab+0x81/0x90 [ 510.167478][T16715] ? register_for_each_vma+0x372/0x890 [ 510.172917][T16715] should_failslab+0x5/0x20 [ 510.177441][T16715] kmem_cache_alloc_trace+0x49/0x320 [ 510.182707][T16715] ? register_for_each_vma+0x372/0x890 [ 510.188213][T16715] ? vma_interval_tree_iter_next+0x24c/0x280 [ 510.194246][T16715] register_for_each_vma+0x372/0x890 [ 510.199656][T16715] __uprobe_register+0x3f4/0x8a0 [ 510.204602][T16715] uprobe_register_refctr+0x29/0x40 [ 510.209924][T16715] probe_event_enable+0x2be/0x7d0 [ 510.215007][T16715] ? __uprobe_trace_func+0x420/0x420 [ 510.220385][T16715] trace_uprobe_register+0x88/0x410 [ 510.225683][T16715] ? find_next_bit+0xa7/0xf0 [ 510.230267][T16715] ? cpumask_next+0xc/0x30 [ 510.234673][T16715] perf_trace_event_init+0x34e/0x790 [ 510.239961][T16715] perf_uprobe_init+0xf5/0x140 [ 510.244879][T16715] perf_uprobe_event_init+0xde/0x140 [ 510.250152][T16715] perf_try_init_event+0x21a/0x400 [ 510.255273][T16715] perf_event_alloc+0x7eb/0x14d0 [ 510.260195][T16715] __se_sys_perf_event_open+0x5c9/0x25c0 [ 510.265895][T16715] ? __fget_light+0x21b/0x260 [ 510.270612][T16715] __x64_sys_perf_event_open+0x63/0x70 [ 510.276117][T16715] do_syscall_64+0x34/0x50 [ 510.280540][T16715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 510.286427][T16715] RIP: 0033:0x466459 [ 510.290300][T16715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 510.309972][T16715] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000000)=""/1, 0x1}], 0x2, 0x8080006, 0x0) 10:34:27 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3ff7f8, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0d1a0001000000000200000800040001000000", 0x24) 10:34:27 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xf8f73f0000000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 510.318364][T16715] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 510.326323][T16715] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 510.334284][T16715] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 510.342313][T16715] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 510.350308][T16715] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:27 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x10}) 10:34:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x208001) preadv(r1, &(0x7f0000003740)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000001500)=""/214, 0xd6}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000001600)=""/69, 0x45}], 0xa, 0x9, 0x7) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/4096, 0x1061}], 0x1, 0xffffffff, 0x0) 10:34:28 executing program 0 (fault-call:4 fault-nth:32): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:28 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfeffffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3ff800, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0ec00001000000000200000800040001000000", 0x24) 10:34:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00', r0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000280)="257d23a3abc21f3b135c6aa9b49800f18aab624fe9de3ff17eb1ae25c9141f5eea7610fe373d65089f7eee9e5c91bdf377307e802881b8a0c476534758aa32bdc0de45afad50b4758efaab77dd09eb6ad08ca2f671a485fc7693a1fe7bd851d060a68bf151598b", 0x67}, {&(0x7f0000000300)}], 0x2, 0x4) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x2000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x4010, r1, 0x6f0df000) 10:34:28 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x18}) [ 510.750559][T16756] FAULT_INJECTION: forcing a failure. [ 510.750559][T16756] name failslab, interval 1, probability 0, space 0, times 0 [ 510.763234][T16756] CPU: 1 PID: 16756 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 510.773419][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.783491][T16756] Call Trace: [ 510.786750][T16756] dump_stack+0x137/0x19d [ 510.791095][T16756] should_fail+0x23c/0x250 [ 510.795516][T16756] __should_failslab+0x81/0x90 [ 510.800303][T16756] ? register_for_each_vma+0x372/0x890 [ 510.805779][T16756] should_failslab+0x5/0x20 [ 510.810279][T16756] kmem_cache_alloc_trace+0x49/0x320 [ 510.815541][T16756] ? register_for_each_vma+0x372/0x890 [ 510.821059][T16756] ? vma_interval_tree_iter_next+0x263/0x280 [ 510.827014][T16756] register_for_each_vma+0x372/0x890 [ 510.832466][T16756] __uprobe_register+0x3f4/0x8a0 [ 510.837535][T16756] uprobe_register_refctr+0x29/0x40 [ 510.842725][T16756] probe_event_enable+0x2be/0x7d0 [ 510.847782][T16756] ? __uprobe_trace_func+0x420/0x420 [ 510.853044][T16756] trace_uprobe_register+0x88/0x410 [ 510.858225][T16756] ? find_next_bit+0xa7/0xf0 [ 510.862813][T16756] ? cpumask_next+0xc/0x30 [ 510.867473][T16756] perf_trace_event_init+0x34e/0x790 [ 510.873686][T16756] perf_uprobe_init+0xf5/0x140 [ 510.878440][T16756] perf_uprobe_event_init+0xde/0x140 [ 510.883799][T16756] perf_try_init_event+0x21a/0x400 [ 510.888947][T16756] perf_event_alloc+0x7eb/0x14d0 [ 510.893868][T16756] __se_sys_perf_event_open+0x5c9/0x25c0 [ 510.899510][T16756] ? __fget_light+0x21b/0x260 [ 510.904179][T16756] __x64_sys_perf_event_open+0x63/0x70 [ 510.909621][T16756] do_syscall_64+0x34/0x50 [ 510.914028][T16756] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 510.919998][T16756] RIP: 0033:0x466459 [ 510.923870][T16756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000002000000000200000800040001000000", 0x24) 10:34:28 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x1c}) 10:34:28 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf83f00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 510.943546][T16756] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 510.951988][T16756] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 510.960010][T16756] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 510.968121][T16756] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 510.976196][T16756] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 510.984166][T16756] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:28 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffefffff00000000, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000003000000000200000800040001000000", 0x24) 10:34:28 executing program 0 (fault-call:4 fault-nth:33): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:28 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x22}) 10:34:28 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x3a21, 0x28) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="d0", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="51b3e6b1327b53d9c45fee2ab6ef6a56831e7b406612f8ad7c2d8cc2da565656aeeb4679f71ea485a5eac689dc80468b28c0bf65d0f543f2cfe2f5e4d06ddc6dd5b4e9a4ee4efec4b8070b3c443bc2301fea9c580d7641661271d6b1680dd57e88e313d6697ba0898da4d0581e6ac56959a47c4e0a5bfc8428b4ab79fab61ca9", 0x80, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000080)=""/192, 0xc0}, {&(0x7f0000000240)=""/255, 0xff}], 0x3, 0xffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000001500)={'syz1', "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"}, 0x1004) 10:34:28 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000004000000000200000800040001000000", 0x24) [ 511.297658][T16747] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 511.305757][T16747] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000008a9f3831 [ 511.411753][T16798] FAULT_INJECTION: forcing a failure. [ 511.411753][T16798] name failslab, interval 1, probability 0, space 0, times 0 [ 511.424425][T16798] CPU: 1 PID: 16798 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 511.434707][T16798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.444906][T16798] Call Trace: [ 511.448169][T16798] dump_stack+0x137/0x19d [ 511.452481][T16798] should_fail+0x23c/0x250 [ 511.456875][T16798] __should_failslab+0x81/0x90 [ 511.461686][T16798] ? register_for_each_vma+0x372/0x890 [ 511.467124][T16798] should_failslab+0x5/0x20 [ 511.471609][T16798] kmem_cache_alloc_trace+0x49/0x320 [ 511.476908][T16798] ? register_for_each_vma+0x372/0x890 [ 511.482353][T16798] ? vma_interval_tree_iter_next+0x24c/0x280 [ 511.488318][T16798] register_for_each_vma+0x372/0x890 [ 511.493648][T16798] __uprobe_register+0x3f4/0x8a0 [ 511.498620][T16798] uprobe_register_refctr+0x29/0x40 [ 511.503808][T16798] probe_event_enable+0x2be/0x7d0 [ 511.508836][T16798] ? __uprobe_trace_func+0x420/0x420 [ 511.514150][T16798] trace_uprobe_register+0x88/0x410 [ 511.519329][T16798] ? find_next_bit+0xa7/0xf0 [ 511.523901][T16798] ? cpumask_next+0xc/0x30 [ 511.528294][T16798] perf_trace_event_init+0x34e/0x790 [ 511.533637][T16798] perf_uprobe_init+0xf5/0x140 [ 511.538398][T16798] perf_uprobe_event_init+0xde/0x140 [ 511.543669][T16798] perf_try_init_event+0x21a/0x400 [ 511.548823][T16798] perf_event_alloc+0x7eb/0x14d0 [ 511.553872][T16798] __se_sys_perf_event_open+0x5c9/0x25c0 [ 511.559588][T16798] ? __fget_light+0x21b/0x260 [ 511.564262][T16798] __x64_sys_perf_event_open+0x63/0x70 [ 511.569750][T16798] do_syscall_64+0x34/0x50 [ 511.574181][T16798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 511.580092][T16798] RIP: 0033:0x466459 [ 511.583974][T16798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 511.603695][T16798] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000005000000000200000800040001000000", 0x24) 10:34:29 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:29 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}], [], 0x2e}) 10:34:29 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 511.612142][T16798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 511.620099][T16798] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 511.628066][T16798] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 511.636117][T16798] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 511.644072][T16798] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000006000000000200000800040001000000", 0x24) 10:34:29 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7, 0x0, 0x884a0, &(0x7f00000002c0)) [ 511.938674][T16792] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 511.946938][T16792] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 10:34:29 executing program 0 (fault-call:4 fault-nth:34): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:29 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 512.035558][T16844] FAULT_INJECTION: forcing a failure. [ 512.035558][T16844] name failslab, interval 1, probability 0, space 0, times 0 [ 512.048201][T16844] CPU: 1 PID: 16844 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 512.058433][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.068485][T16844] Call Trace: [ 512.071746][T16844] dump_stack+0x137/0x19d [ 512.076124][T16844] should_fail+0x23c/0x250 [ 512.080515][T16844] __should_failslab+0x81/0x90 [ 512.085367][T16844] ? register_for_each_vma+0x372/0x890 [ 512.090843][T16844] should_failslab+0x5/0x20 [ 512.095327][T16844] kmem_cache_alloc_trace+0x49/0x320 [ 512.100588][T16844] ? register_for_each_vma+0x372/0x890 [ 512.106025][T16844] ? vma_interval_tree_iter_next+0x263/0x280 [ 512.111981][T16844] register_for_each_vma+0x372/0x890 [ 512.117259][T16844] __uprobe_register+0x3f4/0x8a0 [ 512.122196][T16844] uprobe_register_refctr+0x29/0x40 [ 512.127431][T16844] probe_event_enable+0x2be/0x7d0 [ 512.132434][T16844] ? __uprobe_trace_func+0x420/0x420 [ 512.137710][T16844] trace_uprobe_register+0x88/0x410 [ 512.142891][T16844] ? find_next_bit+0xa7/0xf0 [ 512.147457][T16844] ? cpumask_next+0xc/0x30 [ 512.151850][T16844] perf_trace_event_init+0x34e/0x790 [ 512.157461][T16844] perf_uprobe_init+0xf5/0x140 [ 512.162262][T16844] perf_uprobe_event_init+0xde/0x140 [ 512.167543][T16844] perf_try_init_event+0x21a/0x400 [ 512.172633][T16844] perf_event_alloc+0x7eb/0x14d0 [ 512.177639][T16844] __se_sys_perf_event_open+0x5c9/0x25c0 [ 512.183260][T16844] ? __fget_light+0x21b/0x260 [ 512.187943][T16844] __x64_sys_perf_event_open+0x63/0x70 [ 512.193382][T16844] do_syscall_64+0x34/0x50 [ 512.197832][T16844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.203766][T16844] RIP: 0033:0x466459 [ 512.207647][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.227368][T16844] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) listen(r0, 0x401) 10:34:29 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000007000000000200000800040001000000", 0x24) 10:34:29 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:29 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 512.235794][T16844] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 512.243759][T16844] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 512.251736][T16844] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.259772][T16844] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 512.267720][T16844] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:29 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x1010, r1, 0xbb82c000) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000000)="9d1be1808d1640b4498641649c982c277195166aa13604e90030356efc", 0x1d}, {&(0x7f0000000080)="4a768ac1b2ba01fd4078eacde819a97920525f2cefd40728ef34d1b26bc8f6c4e6598449e52d8093d12328a88fc6287ccbfb46709da6564b7d9c810642181036b60fc4a20e1c2cc7e71fb352007e1d152144e5dcde56a01b1c9e51e16ee12ac03f", 0x61}, {&(0x7f0000000100)="b082df13dbe1e482ea0670ad28048ed5c8cdcc5a58eaf3fd3d27ec56098e1f6f9d7354a3c38ca710dc386db760b25113e8e69cfdcc3f7120cb5803b138e20a113404e967366aa1117359338840fbcfc81356df0cb976a1f58364c2c6d85868aebc85bfa8869d95816bd7973f10b91d13dd7f1990b8c8d646ae22cfd7e69478ff1763536ef6fee806fe00e0695951a1b28f0e1e459e9e6bcf16dc049986cf32996fb0b483f4153e4fc518a941518a6037959625d2aac4d8c4dea60076cee8da68c2b7b5016cc5874a60b36d6398ea5856ad7968e670d2eb0bee299f390481b6552ff4548a06ac732e6e5c54fac7340a1a1344d065c7", 0xf5}, {&(0x7f0000000200)="746054d7040c4babcb0f3268d7a321958c9941dc7615f0fdeb32023747ad5ebdba14a9b006ebcdef18bd047e0f6485512d90524aaecd9563f4821a8a4e9d6b938f958bb4008fb25f5adec11a1cc796c8a3916defb1ffbd046d1aadef2e5acab6c7822f824b5fe6b83bd9e543e8bce93eb2a6fda197f4f173302e1eceb6d1a6b3f5187a0ad587907af939e24bb656064ae06fcb892faacebc528ab229215cbbfbf1024e7c081aaaa4138f4dd7bf277812604c96db27cda8e80025e7a2fa74d5", 0xbf}, {&(0x7f0000001500)="ab878dd194981eff0197f7bfb9b221e3b3aff20e0baeb53670cd46566d79bc1ed00b7e796be56cee2db26cb23687a31a5111ce1aeb57", 0x36}, {&(0x7f0000000300)="55ba3b1b70ab3fbe9e7152f5bcd4144210deb209bbd91dda742a63393b80d238229da9558c5e825e2736fa5fd62b6bc5d35a6f55ee84e39074ab4c5c6a956e09821b906ac86a3ec609597370a480204902aa01f06b12adaaacf8e66c90b6fbf9deb86da905a9cd51acd53bf46d874d2e89d012ddb4bc37305786d934ae8608343e2edcb927669ffc072fb7638fe684d1e25b5ee183eb62d0dbbd279a79609636ae8b2877d1a3e321046b3abb02c13cf1e894c36e2e54258b8f77d7e3bdfbf29c064e601dfc7622136f33907b646dbfce6e408ff54017b876bc40aae47217", 0xde}, {&(0x7f0000000400)="60cd0567d4f1bb9a436a0d231208a467cb2f5d6b7a9d872a5c1f2cfbf48b33cc50d7814d64a7b4d7e000b45b0840b8d36af88be08954811029d18a8b53f9e7edd4b776e862d994a85d05cbfbf235d4a4e724f4b640cce5f6118e500d4f945136a5467b4417231c94f661a18b5eeaf80f2e8fbfd824be398e3d648d83e95186113e7dc064cc6784aeb8449237a0e864d182da03369feba9c7c2c639e09f898575362fd097c965e8364353c94c6b8a8743a2b32de7b7b8eaabd4c5", 0xba}, {&(0x7f00000004c0)="010f1f80c6f270187717d06a6f87f45722", 0x11}, {&(0x7f0000001640)="22f01a6210d3d303283e291d6f2c1f435e7935b183a7d6ee5d901f96e03684c3379fd0a274c4ab632504ab938c8d853fe743eb7a11c24b43d024deabfa8346106618e6d7a07aeb44122760aec432c6c3862a4e6ec43f8a4162f3f3c9e9e199fa82dca489e9b480efe3b2474038ac1735dc", 0x71}], 0x9) 10:34:29 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file1/file0\x00', 0x744, 0x21) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e7f61636c2bf545183d3a8eab246135a4ae2ca9bab033c300487e9486c6aa1e28f06a42566253c018c2182ab0913d74b8064d623dd661788cfe97326bf934b6c44dfbb0e419fe3b61381e84e5f1b9acaddc8f04dd664de212c54e3d0abf91f5566ebfe1ef840706ed4bbce278dd1c620b4cb07dcb01"]) 10:34:29 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000008000000000200000800040001000000", 0x24) 10:34:30 executing program 0 (fault-call:4 fault-nth:35): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:30 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000000080)=0x3) open(&(0x7f0000000140)='./file0\x00', 0x202c0, 0xc4) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) renameat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x4) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000180)=""/184, 0xb8}], 0x2, 0x200, 0x0) [ 512.624732][T16881] EXT4-fs: 93 callbacks suppressed [ 512.624745][T16881] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 512.641383][T16884] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:30 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000009000000000200000800040001000000", 0x24) 10:34:30 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r0 = inotify_init1(0x800) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x10000094) [ 512.716446][T16898] FAULT_INJECTION: forcing a failure. [ 512.716446][T16898] name failslab, interval 1, probability 0, space 0, times 0 [ 512.729090][T16898] CPU: 1 PID: 16898 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 512.739298][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.749375][T16898] Call Trace: [ 512.752651][T16898] dump_stack+0x137/0x19d [ 512.757074][T16898] should_fail+0x23c/0x250 [ 512.761479][T16898] __should_failslab+0x81/0x90 [ 512.766230][T16898] ? register_for_each_vma+0x372/0x890 [ 512.771673][T16898] should_failslab+0x5/0x20 [ 512.776195][T16898] kmem_cache_alloc_trace+0x49/0x320 [ 512.781631][T16898] ? register_for_each_vma+0x372/0x890 [ 512.787089][T16898] ? vma_interval_tree_iter_next+0x24c/0x280 [ 512.793129][T16898] register_for_each_vma+0x372/0x890 [ 512.798455][T16898] __uprobe_register+0x3f4/0x8a0 [ 512.803371][T16898] uprobe_register_refctr+0x29/0x40 [ 512.808609][T16898] probe_event_enable+0x2be/0x7d0 [ 512.813616][T16898] ? __uprobe_trace_func+0x420/0x420 [ 512.818899][T16898] trace_uprobe_register+0x88/0x410 [ 512.824084][T16898] ? find_next_bit+0xa7/0xf0 [ 512.828662][T16898] ? cpumask_next+0xc/0x30 [ 512.833225][T16898] perf_trace_event_init+0x34e/0x790 [ 512.838497][T16898] perf_uprobe_init+0xf5/0x140 [ 512.843337][T16898] perf_uprobe_event_init+0xde/0x140 [ 512.848630][T16898] perf_try_init_event+0x21a/0x400 [ 512.853805][T16898] perf_event_alloc+0x7eb/0x14d0 [ 512.858735][T16898] __se_sys_perf_event_open+0x5c9/0x25c0 [ 512.864378][T16898] ? __fget_light+0x21b/0x260 [ 512.869051][T16898] __x64_sys_perf_event_open+0x63/0x70 [ 512.874573][T16898] do_syscall_64+0x34/0x50 [ 512.879001][T16898] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 512.884880][T16898] RIP: 0033:0x466459 [ 512.888791][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.908555][T16898] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:30 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x11, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x610080, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x39) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/ip_vs_stats\x00') 10:34:30 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:30 executing program 2: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, 0x453, 0x1, 0x70bd25, 0x25dfdbff, "67beffea9e7e2bc3c728102f909ca42e2ace7b69140f32eccb6725e797c0d45adcf6056dcca3f478ef327aea6f39963dfe07dd676baa63cab68bca56d701ae3a3bcf77df3d48c4dac3c0d2c5e65649d3f04ec559117d2a26a8737daf028fb3cbd9c5059a3343018c06d93d3f8e6667cb7b0d38d3aac192a9808f8c9a27f98630c11f3f080bacba1418c561ef78be6429ba26394bc63ee77359129b", ["", ""]}, 0xac}}, 0x48000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) lseek(r0, 0xfffffffffffffff7, 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0xe, 0x4}) [ 512.916951][T16898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 512.925063][T16898] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 512.933015][T16898] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.941050][T16898] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 512.949180][T16898] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000a000000000200000800040001000000", 0x24) 10:34:30 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 512.999496][T16902] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 513.038867][T16914] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 513.058431][T16922] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 10:34:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000b000000000200000800040001000000", 0x24) 10:34:30 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x22, 0x0, 0x884a0, &(0x7f00000002c0)) [ 513.099510][T16922] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. [ 513.110321][T16924] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 513.132940][T16931] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 513.352698][T16890] ref_ctr going negative. vaddr: 0x20000004, curr val: 0, delta: -1 [ 513.360755][T16890] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000009ed4bcf9 10:34:30 executing program 0 (fault-call:4 fault-nth:36): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:30 executing program 3: getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)=""/103, &(0x7f0000000180)=0x67) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e2f66696c65300075b101fddd9c25d2c305094ecbd308c9934c9cddeaea01000000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x110) 10:34:30 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x22000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000c000000000200000800040001000000", 0x24) [ 513.464910][T16940] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 513.495932][T16947] FAULT_INJECTION: forcing a failure. [ 513.495932][T16947] name failslab, interval 1, probability 0, space 0, times 0 [ 513.508568][T16947] CPU: 0 PID: 16947 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 513.518790][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.528842][T16947] Call Trace: [ 513.532174][T16947] dump_stack+0x137/0x19d [ 513.536505][T16947] should_fail+0x23c/0x250 [ 513.540916][T16947] __should_failslab+0x81/0x90 [ 513.545708][T16947] ? register_for_each_vma+0x372/0x890 [ 513.551272][T16947] should_failslab+0x5/0x20 [ 513.555778][T16947] kmem_cache_alloc_trace+0x49/0x320 [ 513.561083][T16947] ? register_for_each_vma+0x372/0x890 [ 513.566540][T16947] ? vma_interval_tree_iter_next+0x263/0x280 [ 513.572515][T16947] register_for_each_vma+0x372/0x890 [ 513.577824][T16947] __uprobe_register+0x3f4/0x8a0 [ 513.582840][T16947] uprobe_register_refctr+0x29/0x40 [ 513.588041][T16947] probe_event_enable+0x2be/0x7d0 [ 513.593066][T16947] ? __uprobe_trace_func+0x420/0x420 [ 513.598427][T16947] trace_uprobe_register+0x88/0x410 [ 513.603628][T16947] ? find_next_bit+0xa7/0xf0 [ 513.608212][T16947] ? cpumask_next+0xc/0x30 [ 513.612629][T16947] perf_trace_event_init+0x34e/0x790 [ 513.618426][T16947] perf_uprobe_init+0xf5/0x140 [ 513.623187][T16947] perf_uprobe_event_init+0xde/0x140 [ 513.628469][T16947] perf_try_init_event+0x21a/0x400 [ 513.633665][T16947] perf_event_alloc+0x7eb/0x14d0 [ 513.638644][T16947] __se_sys_perf_event_open+0x5c9/0x25c0 [ 513.644351][T16947] ? __fget_light+0x21b/0x260 [ 513.649033][T16947] __x64_sys_perf_event_open+0x63/0x70 [ 513.654499][T16947] do_syscall_64+0x34/0x50 [ 513.658919][T16947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 513.664899][T16947] RIP: 0033:0x466459 [ 513.668786][T16947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 513.688391][T16947] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 513.696881][T16947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 513.704854][T16947] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 10:34:31 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000d000000000200000800040001000000", 0x24) [ 513.712835][T16947] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 513.721084][T16947] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 513.729093][T16947] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 513.733899][T16948] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 10:34:31 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 3: mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x119, &(0x7f0000000300)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96aeeb2aa4c486af9b6df76eb2f08914555acd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646174023d6a6f75010000002c00"]) 10:34:31 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x880000, 0x0) 10:34:31 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000e000000000200000800040001000000", 0x24) [ 514.057206][T16943] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 514.065349][T16943] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000eee54f9f 10:34:31 executing program 0 (fault-call:4 fault-nth:37): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:31 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80c4200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x10, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f000065d000/0x2000)=nil, 0x2000, 0x8, 0x30, r4, 0xea02c000) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r3, 0x20, 0x0, 0x10000) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="01fa11d1f8e760350863b974c66c394c4aa03f84596a00ac7b65915a30e2eb8be69077186234dd89243cddd16e4ed78a60703427d7eee1936c1fa659b3999b9f24104c5c318afdbbeef5ecc85ebb5f49bd4146f8eec871400bd68dd7ad3a0b8c2d1f0fe944", 0x65}, {&(0x7f0000000380)="d4c7caad467161193b8b397d5c37ff34c1fb99b300eba46033a2f49efd84e0e205ccd8e50013f9a3eed3c01549a0e6a58dc9a71b3d69510c8b07c4cbbe1ca43d41fce7d26e1de6bf815be03107943c083395ccd0c977e7262bf0a3dc8399a33bd8dac94e48c315a379454bf6913298f16bcd44072c20f20956912dd386372ffad6", 0x81}], 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r5, 0x10, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcd6a}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb12}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x94) 10:34:31 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 514.179254][T17004] FAULT_INJECTION: forcing a failure. [ 514.179254][T17004] name failslab, interval 1, probability 0, space 0, times 0 [ 514.192030][T17004] CPU: 1 PID: 17004 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 514.202807][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.212960][T17004] Call Trace: [ 514.216340][T17004] dump_stack+0x137/0x19d [ 514.220654][T17004] should_fail+0x23c/0x250 [ 514.225052][T17004] __should_failslab+0x81/0x90 [ 514.229817][T17004] ? register_for_each_vma+0x372/0x890 [ 514.235298][T17004] should_failslab+0x5/0x20 [ 514.239812][T17004] kmem_cache_alloc_trace+0x49/0x320 [ 514.245092][T17004] ? register_for_each_vma+0x372/0x890 [ 514.250537][T17004] ? vma_interval_tree_iter_next+0x263/0x280 [ 514.257300][T17004] register_for_each_vma+0x372/0x890 [ 514.262589][T17004] __uprobe_register+0x3f4/0x8a0 [ 514.267666][T17004] uprobe_register_refctr+0x29/0x40 [ 514.272859][T17004] probe_event_enable+0x2be/0x7d0 [ 514.277978][T17004] ? __uprobe_trace_func+0x420/0x420 [ 514.283260][T17004] trace_uprobe_register+0x88/0x410 [ 514.288451][T17004] ? find_next_bit+0xa7/0xf0 [ 514.293094][T17004] ? cpumask_next+0xc/0x30 [ 514.297493][T17004] perf_trace_event_init+0x34e/0x790 [ 514.302768][T17004] perf_uprobe_init+0xf5/0x140 [ 514.307637][T17004] perf_uprobe_event_init+0xde/0x140 [ 514.312902][T17004] perf_try_init_event+0x21a/0x400 [ 514.318039][T17004] perf_event_alloc+0x7eb/0x14d0 [ 514.322969][T17004] __se_sys_perf_event_open+0x5c9/0x25c0 [ 514.328587][T17004] ? __fget_light+0x21b/0x260 [ 514.333266][T17004] __x64_sys_perf_event_open+0x63/0x70 [ 514.338713][T17004] do_syscall_64+0x34/0x50 [ 514.343110][T17004] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 514.348987][T17004] RIP: 0033:0x466459 [ 514.352861][T17004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:31 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1800, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000000f000000000200000800040001000000", 0x24) 10:34:31 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r1) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0xd, 0x0, r1, &(0x7f0000000040)}]) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='limits\x00') r5 = syz_open_pts(0xffffffffffffffff, 0xc0200) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) io_submit(r2, 0x5, &(0x7f0000000680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xacc, r3, &(0x7f0000000180)="02967f18de478e2b62633e8b2c123cea8cc2a0d8daf8985778ce2df35d555c425daf1581ca1e716780395d4ceb8aa3033ce4dbe0d3845c9d4aba04cf8dbfa12a538b25777f459d77f629f63badfbbd7c9ba8126c5be04165b34e44d57c4f0a4cee156643e2ea8deaf787f49e6a9a4fc4792931a1ee03210a889e5ff7f941709a644e6ad89e57b48997ee692aa5beab9789f3ca9a9dbda52cf9b757d53dc930155dd35dcaa79d41c57a5454bf099ab0b45b42b9df88e798d3e8f3f2f40f095710fca67250cda60b0f3bb1b0ff5c42bbb48adc972935c480f46d28a13e77e1dbe11ae04944187708c9627f26a3", 0xec, 0x7f, 0x0, 0x3, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000300)="d817d67c0d9925fbc88c5cb5af59d3fbd177534bbf9bbf063b5dbd970624d8040e6d2010e32ce28d363f06d9c509f9129cd7186bb4e9ed0883a9484e27d799899acb89bd867e5183b68f63d608728ced9527d55acf40f61b29ca817dde594378429e8085224918307b8a6a32f300374e069eb37b81ce2f5a81c90d27100f87c9", 0x80, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f00000003c0)="ecc5d5689c35cd19c0e03539026a286d4f3353bf0b652f2e8e93ed59bea99d59168a05c1f44bc1756ed9e60ca3b2140b5f728c650f9b9d08c30869fb7a90bbd47fcd9bdc8be8e69791c1fa2e", 0x4c, 0xffffffffffffff42, 0x0, 0x2, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f00000004c0)="abde0db612789f322e1a2116e5a16110fbf5863fc767051f28b4fd2fc749b2908d6e425103afe26b25440df6034e2c95525d877a97fea977b4e0c3d8ddd10dd3bb34b86e4613c68593ec5058b74a0e8ed084d455339f8f552440c63deb61d780aadc463172a6b72b04981c743b3a71e259839269ccebb6e7100da05346e202c608844a029550bf7a48f7f918fd9d706f7c39bc86e81f9f16b8e57163b5166b931434bfc0e35a7df2df2e63dfc524711df021c2028b583b8b9a8323f1aed6939f71a8a6032e4e61cda5779a07fd548296bc2097437b13d50f0789cb6c847e", 0xde, 0x7f}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000600)="7ac3f0275c78a7e7a3b7eb336c409becd9340495d99d055457bcc0518ca927fc803812b13e43", 0x26, 0x25, 0x0, 0x3}]) chdir(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file1\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000000000000, 0x0, 0x0, 0x884a0, &(0x7f00000006c0)={[{@data_journal='data=journal'}]}) [ 514.372481][T17004] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 514.380899][T17004] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 514.388924][T17004] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 514.397045][T17004] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 514.404993][T17004] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 514.412963][T17004] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:31 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000010000000000200000800040001000000", 0x24) 10:34:31 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:31 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x45) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'system.', 'data=journal'}, &(0x7f00000000c0)=',\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x101000, 0x24) 10:34:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000011000000000200000800040001000000", 0x24) 10:34:31 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x800) pipe2(&(0x7f0000001a40)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00', 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000001700)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYRESDEC=r0, @ANYBLOB="e4b3fcdfaf28d2f54df080980ecba931899b0008000000000000074dae8564120ea7471c8734c4922298574f4a6257e44b155e19c37e446191e681261f836eaf0cef84dce214261ca313fcce6833276cb1e4ba13668bbfeb3b5024ed222970f9e1ddabb042e3695f67e387c26fa634b4d9bfda45b262ff431c6d56785cf7fed495c7f6bc172da0e3349c47edadc95de0995d0500000049c46e0d364800bdfa1bac1bbd842f1dbd4cf73f2a5311fa106c0c61b59bfa82276f2a1aadff1ad04e31a1ad41059976b940f5452f93e868863e967bd1ffb3e15179e8435815ff0fd89ad8e4342c79b161531cb1265a507536be8db7f3f5f5a9160f73f4e398a6d9124ba0601046b3e86acc21361d878e6571e9e04a45c29f36f02db5053b317c831eed0d97d8669da67e98acecb5cff9b219be9943a3fa223e8a66308c31da0ebaf1f7c9694bcf90738405808086e92012ad5268cecd8a4fcabeaa8a9e3899b8ebd04dee8f6c027b98e8d6ded5680c8f3f304ba1ffba8e13958fa14635aa1f0e148f76c71e5947e2b6a0c3a0c13eb5ea7b1093b689cd698e159504413068d04cb0143f702196774cef3e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="ba01000015e902e73ab82083271a850455e66e48f8ab6340ab7eb5be671d74010000000000000021964771a5daf364daf34a7bc1bdf18c4ba98ff8199775863f84c471d71975672ce83830e109d40abfec1103cb9a1fdb1d41f552ecacdf08752840baf9b3248f853c3a0866b8c8db05c01d17468f1c5702d54280d0cb1cbe631c4f47acc100a4918d11e189dd08d527ffcb2f6588d51a8e89ad3e61a114bd7bd354865812ad283fc8eee46cb7fd999c5bed57fa62b96c8ce7e87e01d6d8fe54b2269bffb6fd8ffa67c6cdb3674521bb7b878c88a057ed2ce84e44be0b8084291ce1508037d953339f93a1b4d455511b70647dd7e8142f71bdfc69552f0883880ff0dccd51b95504d22279135b3df122fefee05f71250da37f4f3f14f504e1c46cb6a2cbf6fc70aca58b97e76ed440000008000000bfee8023f99be68e76782d479b9f7d26ddef0ea828e305b9aac8055180ccf555d429e58a7aba6df0291b8aee1a56c45388237fe41e711942095e8c02e26a22675bcc54300094a1af5ce11ffd1104db9f71eddad711c00c24e90f8f90866300f81ca06d66f4b17915fef24a7a6b8e7c1e80d3b8dffff2c96c77a578875c793445ffb3ec7ca8696d288552e6df1039c48e4ceb77f51b14127fcc001cc3248744d462b43d48cba20ccc3d40be923594a7b65b737fb9983a45164b8f701996c7d1d0886f604d179149c2deb908000000e3006173372860f0c5186fee45bd69ee648e6b23643f61b98f31827a9b0c37b06cee7278e56ecc6b26f93c60938553f82d9ac61d79609deba81afa72e4c54a86699681d2b1f447bb159a22eaf6e54ef848be4ad5b8f4d8f7a049e7a55c0091e4b4", @ANYRES16=r4, @ANYRESDEC=r2], 0x1d4}, 0x1, 0x0, 0x0, 0x24048000}, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000a40)={{}, 0x0, 0x1a, @unused=[0x7fff, 0x7f, 0x7ff, 0x9], @devid=r2}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000440)={{}, 0x0, 0x32, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0xc3, 0x8, {0x0, 0x4, 0x10000, 0xfffffffffffffff9, 0x8}, [0xffff, 0x4, 0x80000001, 0x6, 0x5d8000, 0x1ff]}}, @devid=r2}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x9, 0x0, {0x0, 0x7, 0x3ff, 0x27, 0x7be}, [0x2, 0x1, 0x80000001, 0x53c, 0x80000000]}}, @devid=r2}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000480)={r2, "13144fac723c8b45b925ebd52917041b"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000380)={0x15, 0x0, {0x0, @usage=0x358a6ce1, 0x0, 0x6, 0x70000000000000, 0x2, 0x8001, 0x400, 0x4bc, @struct={0x7f980000, 0xf16}, 0x7, 0x6, [0x0, 0x100, 0x800, 0x5, 0x8001, 0x24]}, {0x7, @usage=0x1, 0x0, 0x8, 0x8, 0x4, 0x0, 0x6, 0xc, @usage=0xfff, 0x1, 0x6, [0x1000, 0x5, 0x7fff, 0x1f, 0x2, 0x4]}, {0x1, @struct={0x0, 0x3}, r2, 0x3, 0xfffffffffffffffe, 0x8001, 0x5, 0xc3dd, 0x10, @usage=0x100, 0x6, 0x1, [0xfffffffffffffff9, 0x6, 0x8, 0x546, 0x8, 0x667]}, {0x7, 0x8, 0xe6}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000080)={r2, 0x3, 0x9}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 514.825340][T16999] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 514.833434][T16999] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000044c28b8e 10:34:32 executing program 0 (fault-call:4 fault-nth:38): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:32 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000012000000000200000800040001000000", 0x24) 10:34:32 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f00, 0x0, 0x884a0, &(0x7f00000002c0)) [ 514.983991][T17069] FAULT_INJECTION: forcing a failure. [ 514.983991][T17069] name failslab, interval 1, probability 0, space 0, times 0 [ 514.996856][T17069] CPU: 1 PID: 17069 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 515.007006][T17069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.017179][T17069] Call Trace: [ 515.020459][T17069] dump_stack+0x137/0x19d [ 515.024808][T17069] should_fail+0x23c/0x250 [ 515.029229][T17069] __should_failslab+0x81/0x90 [ 515.033998][T17069] ? register_for_each_vma+0x372/0x890 [ 515.039460][T17069] should_failslab+0x5/0x20 [ 515.043970][T17069] kmem_cache_alloc_trace+0x49/0x320 [ 515.049251][T17069] ? register_for_each_vma+0x372/0x890 [ 515.054710][T17069] ? vma_interval_tree_iter_next+0x263/0x280 [ 515.060679][T17069] register_for_each_vma+0x372/0x890 [ 515.066077][T17069] __uprobe_register+0x3f4/0x8a0 [ 515.071058][T17069] uprobe_register_refctr+0x29/0x40 [ 515.076252][T17069] probe_event_enable+0x2be/0x7d0 [ 515.081334][T17069] ? __uprobe_trace_func+0x420/0x420 [ 515.086614][T17069] trace_uprobe_register+0x88/0x410 [ 515.091856][T17069] ? find_next_bit+0xa7/0xf0 [ 515.096435][T17069] ? cpumask_next+0xc/0x30 [ 515.100841][T17069] perf_trace_event_init+0x34e/0x790 [ 515.106106][T17069] perf_uprobe_init+0xf5/0x140 [ 515.110885][T17069] perf_uprobe_event_init+0xde/0x140 [ 515.116153][T17069] perf_try_init_event+0x21a/0x400 [ 515.121241][T17069] perf_event_alloc+0x7eb/0x14d0 [ 515.126161][T17069] __se_sys_perf_event_open+0x5c9/0x25c0 [ 515.132271][T17069] ? __fget_light+0x21b/0x260 [ 515.136955][T17069] __x64_sys_perf_event_open+0x63/0x70 [ 515.142438][T17069] do_syscall_64+0x34/0x50 [ 515.146883][T17069] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.152858][T17069] RIP: 0033:0x466459 [ 515.156746][T17069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.176391][T17069] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:32 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x42) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) name_to_handle_at(r0, &(0x7f00000000c0)='.\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1400fcff05000000020000000001000001000000004000e4fc9ed1126bf38792ae9c0c5c425942645b9febd164c980dccff8fd9e6ffb4760b5b68025e46f48b3bc146dad41351474e11c0e5c3d3f04dab9630acfe7514517b9f8be1d1ab6ae24ff37c4cd219da8b8df88a0650e86a7dddc2c59eca0289d8459650fea16b7183e7721e655c1f36d186d84d50f2e962c6a6339c47d3f224ce9443d9578c81bb957d9426b04"], &(0x7f0000000180), 0x1000) 10:34:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000013000000000200000800040001000000", 0x24) 10:34:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)=@generic={0x28, "1d77f4cf936e7acdbf37539a2ae1e6fb1ae5e20856a50512137168e8d12252455592e0d66900cbf23e50168b5f6f1020b28084a34191b21631fa217eb9416e985c63aa7f9f42557277d78933196aa5aa77dc5fa87bdfee71fdc8546fd718132ab363e1621ca94138d2a50881bbd72922117f1dcf1069fb90de4e2c16e124"}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000000)="97fce82856e2ef86c386b9eebb7814b8496d493adb037c17ae69fdd9a534af6d008f5ffd4f38e35f105a5a8a6798320be5fe0fdb1818c0309740651851", 0x3d}, {&(0x7f0000000100)="8bfdb79f56dec83676098f47003e19e191ca5a07a96ae098e88be70001d37427560fa2b9f8494cacaa8feab62928bb1d763935529719d7bbebe9fcc2d528d43c022e0318c07fb6324127c717a4c3ab", 0x4f}], 0x2, &(0x7f00000001c0)=[{0xd8, 0x3a, 0x6, "4ebd0f2fb5a8a27dced2fdf33cf4c8b4c3f7f420daab7f79538438fabfdbd33bb340c6d5f1a99bc552075d5747f20e91a14077faa1fc82561dac6d28ac434b48901dcf5e72eaf01df9f4e0f13c188c8a1fd906f747fa079025fce5f72cbdf49b5fd5e54359d4213041c59da07e01ce935aa0ca705bf2e8ed9fc57e2dcffec138615b663e533492f0a1ad78f4cc8ebd8dd3bb902a4b49bc6a4aef65a8d1aef431d8d24b7686e26c27526f84fbcc34be731f6004b9ef862a79e18eca30e54ca445661a34c6"}, {0xa8, 0x30, 0x3, "1c540581fd189802639c97f426436f7695e51d6dd0e885b01a3b36c6c0e41c2976fc85ca3c9cd7a899c9980b66c493d8368f13884310c1f4a27d429506d0ff8f48d9cf64e2a729391da74de50e769ffee01731a819a55c20c0ff7c265dfc13c1fc34b0cef85557e360ae1835468d1077501655ff08528e2a47637500d7b417ef02306a5cc8c35e6bd2e0b2b9dc6047c5f9cf"}, {0x98, 0x29, 0x17, "eb8737623be61b5ac06f67f0be4b49109d475a65774fb2463aa36baf3eba0fba322304ed6902e7cbe4a1e740369df347f48af53deff8e664a8d8174258f01a86efddfc05a09c9bddf107d07fd49e9bb6d8ae815cd1158eb79f3a60be7ad27e331de4154cc87f8339f9519d3f14ae35be1685e15538649157732369fbcea3da25534b8eada6"}], 0x218}, 0x4040) 10:34:32 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:32 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x884a0, &(0x7f00000002c0)) [ 515.184794][T17069] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 515.192756][T17069] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 515.200704][T17069] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 515.208657][T17069] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 515.216633][T17069] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000014000000000200000800040001000000", 0x24) 10:34:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$getflags(r1, 0x408) 10:34:32 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:32 executing program 0 (fault-call:4 fault-nth:39): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) lseek(0xffffffffffffffff, 0x7f, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000002200)=""/4080, 0xff0}], 0x1, 0x1, 0xffffffff) r2 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000080)={{0x20, 0x75}, {0x3, 0x65}, 0x9ca5598, 0x1}) 10:34:32 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:32 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000015000000000200000800040001000000", 0x24) 10:34:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000001c0)={[{@utf8no='utf8=0'}]}) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r1}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4, 0xee01}, {0x2, 0x3, r3}, {0x2, 0x1, r5}, {0x2, 0x4, r6}], {0x4, 0x2}, [{0x8, 0x5, r7}, {0x8, 0x6, r9}, {0x8, 0x2, r10}], {0x10, 0x1}}, 0x6c, 0x0) [ 515.636963][T17133] FAULT_INJECTION: forcing a failure. [ 515.636963][T17133] name failslab, interval 1, probability 0, space 0, times 0 [ 515.649600][T17133] CPU: 0 PID: 17133 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 515.659843][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.669891][T17133] Call Trace: [ 515.673168][T17133] dump_stack+0x137/0x19d [ 515.677536][T17133] should_fail+0x23c/0x250 [ 515.681946][T17133] __should_failslab+0x81/0x90 [ 515.686705][T17133] ? register_for_each_vma+0x372/0x890 [ 515.692144][T17133] should_failslab+0x5/0x20 [ 515.696679][T17133] kmem_cache_alloc_trace+0x49/0x320 [ 515.701951][T17133] ? register_for_each_vma+0x372/0x890 [ 515.707464][T17133] ? vma_interval_tree_iter_next+0x24c/0x280 [ 515.713420][T17133] register_for_each_vma+0x372/0x890 [ 515.718716][T17133] __uprobe_register+0x3f4/0x8a0 [ 515.723633][T17133] uprobe_register_refctr+0x29/0x40 [ 515.728807][T17133] probe_event_enable+0x2be/0x7d0 [ 515.733885][T17133] ? __uprobe_trace_func+0x420/0x420 [ 515.739146][T17133] trace_uprobe_register+0x88/0x410 [ 515.744320][T17133] ? find_next_bit+0xa7/0xf0 [ 515.748890][T17133] ? cpumask_next+0xc/0x30 [ 515.753342][T17133] perf_trace_event_init+0x34e/0x790 [ 515.758608][T17133] perf_uprobe_init+0xf5/0x140 [ 515.763349][T17133] perf_uprobe_event_init+0xde/0x140 [ 515.768625][T17133] perf_try_init_event+0x21a/0x400 [ 515.773713][T17133] perf_event_alloc+0x7eb/0x14d0 [ 515.778660][T17133] __se_sys_perf_event_open+0x5c9/0x25c0 [ 515.784281][T17133] ? __fget_light+0x21b/0x260 [ 515.788945][T17133] __x64_sys_perf_event_open+0x63/0x70 [ 515.794384][T17133] do_syscall_64+0x34/0x50 [ 515.798780][T17133] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 515.804653][T17133] RIP: 0033:0x466459 [ 515.808539][T17133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 515.828166][T17133] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x40) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000001740)=""/263, 0x107}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001500)=""/140, 0x8c}, {&(0x7f00000015c0)=""/195, 0xc3}], 0x4, 0x80000001, 0x2) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/221, 0xdd}, {&(0x7f0000000180)=""/248, 0xf8}], 0x2, 0xffffffe0, 0x4) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:33 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffefff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:33 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000016000000000200000800040001000000", 0x24) [ 515.836606][T17133] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 515.844556][T17133] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 515.852511][T17133] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 515.860457][T17133] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 515.868406][T17133] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:33 executing program 2: arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) sendfile(r0, r0, &(0x7f0000000080)=0x7, 0x1f) 10:34:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x80000, 0xfffffffffffffe22, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2ee48389"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:33 executing program 0 (fault-call:4 fault-nth:40): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)=')*\\#(.\x00', 0x6) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:33 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000017000000000200000800040001000000", 0x24) 10:34:33 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000001c0)=ANY=[@ANYBLOB="442c650a10aa29f6489ed7f1000041a1a901003c5e3500"]) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x64, 0x2200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0xa, @desc2='\xe3U\xa7j\x11\xa1\xbe\x18'}) 10:34:33 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 516.199664][T17129] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 516.207750][T17129] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000044c28b8e [ 516.330361][T17193] FAULT_INJECTION: forcing a failure. [ 516.330361][T17193] name failslab, interval 1, probability 0, space 0, times 0 [ 516.343018][T17193] CPU: 1 PID: 17193 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 516.353248][T17193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.363293][T17193] Call Trace: [ 516.366566][T17193] dump_stack+0x137/0x19d [ 516.370923][T17193] should_fail+0x23c/0x250 [ 516.375326][T17193] __should_failslab+0x81/0x90 [ 516.380116][T17193] ? register_for_each_vma+0x372/0x890 [ 516.385640][T17193] should_failslab+0x5/0x20 [ 516.390126][T17193] kmem_cache_alloc_trace+0x49/0x320 [ 516.395411][T17193] ? register_for_each_vma+0x372/0x890 [ 516.400867][T17193] ? vma_interval_tree_iter_next+0x263/0x280 [ 516.406842][T17193] register_for_each_vma+0x372/0x890 [ 516.412105][T17193] __uprobe_register+0x3f4/0x8a0 [ 516.417184][T17193] uprobe_register_refctr+0x29/0x40 [ 516.422373][T17193] probe_event_enable+0x2be/0x7d0 [ 516.427385][T17193] ? __uprobe_trace_func+0x420/0x420 [ 516.432704][T17193] trace_uprobe_register+0x88/0x410 [ 516.437905][T17193] ? find_next_bit+0xa7/0xf0 [ 516.442560][T17193] ? cpumask_next+0xc/0x30 [ 516.446978][T17193] perf_trace_event_init+0x34e/0x790 [ 516.452253][T17193] perf_uprobe_init+0xf5/0x140 [ 516.456997][T17193] perf_uprobe_event_init+0xde/0x140 [ 516.462331][T17193] perf_try_init_event+0x21a/0x400 [ 516.467488][T17193] perf_event_alloc+0x7eb/0x14d0 [ 516.472468][T17193] __se_sys_perf_event_open+0x5c9/0x25c0 [ 516.478113][T17193] ? rb_erase+0x4bb/0x750 [ 516.482442][T17193] ? copy_fpregs_to_fpstate+0xd8/0x110 [ 516.487932][T17193] __x64_sys_perf_event_open+0x63/0x70 [ 516.493406][T17193] do_syscall_64+0x34/0x50 [ 516.497845][T17193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 516.503720][T17193] RIP: 0033:0x466459 [ 516.507594][T17193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:33 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x680c0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000018000000000200000800040001000000", 0x24) 10:34:33 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:33 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:33 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000800000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 516.527218][T17193] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 516.535622][T17193] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 516.543573][T17193] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 516.551528][T17193] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 516.559536][T17193] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 516.567482][T17193] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:34 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000040)) [ 516.856143][T17178] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 516.864319][T17178] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cc54ad04 10:34:34 executing program 0 (fault-call:4 fault-nth:41): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000019000000000200000800040001000000", 0x24) 10:34:34 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000001740)=""/4100, 0x1004}], 0x1, 0x0, 0x4) 10:34:34 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3ff7f8, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:34 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)=ANY=[@ANYBLOB="6461743f3d6a6f7561b68c5e3c6c2c00c77c39bc92ef57e7744df737afb1e2d180a081ffcd6549748c090da9cf24557a9d266bfea92b0320a0a0f0be5c97c759537d392b3cc13cf70e14178f5f4984160a6dd46ba10df4da0bb2456330"]) 10:34:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001a000000000200000800040001000000", 0x24) [ 516.990721][T17242] FAULT_INJECTION: forcing a failure. [ 516.990721][T17242] name failslab, interval 1, probability 0, space 0, times 0 [ 517.003372][T17242] CPU: 0 PID: 17242 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 517.014531][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.024587][T17242] Call Trace: [ 517.024596][T17242] dump_stack+0x137/0x19d 10:34:34 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:34 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:34 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3ff800, 0x0, 0x884a0, &(0x7f00000002c0)) [ 517.024617][T17242] should_fail+0x23c/0x250 [ 517.024634][T17242] __should_failslab+0x81/0x90 [ 517.024654][T17242] ? register_for_each_vma+0x372/0x890 [ 517.024676][T17242] should_failslab+0x5/0x20 [ 517.024754][T17242] kmem_cache_alloc_trace+0x49/0x320 [ 517.024777][T17242] ? register_for_each_vma+0x372/0x890 [ 517.024798][T17242] ? vma_interval_tree_iter_next+0x24c/0x280 [ 517.024813][T17242] register_for_each_vma+0x372/0x890 [ 517.024830][T17242] __uprobe_register+0x3f4/0x8a0 [ 517.024902][T17242] uprobe_register_refctr+0x29/0x40 [ 517.024921][T17242] probe_event_enable+0x2be/0x7d0 [ 517.024939][T17242] ? __uprobe_trace_func+0x420/0x420 [ 517.024954][T17242] trace_uprobe_register+0x88/0x410 [ 517.024969][T17242] ? find_next_bit+0xa7/0xf0 [ 517.024981][T17242] ? cpumask_next+0xc/0x30 [ 517.025016][T17242] perf_trace_event_init+0x34e/0x790 10:34:34 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) [ 517.025147][T17242] perf_uprobe_init+0xf5/0x140 10:34:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001b000000000200000800040001000000", 0x24) [ 517.025223][T17242] perf_uprobe_event_init+0xde/0x140 [ 517.025241][T17242] perf_try_init_event+0x21a/0x400 [ 517.025260][T17242] perf_event_alloc+0x7eb/0x14d0 [ 517.025322][T17242] __se_sys_perf_event_open+0x5c9/0x25c0 [ 517.025382][T17242] ? __fget_light+0x21b/0x260 [ 517.025418][T17242] __x64_sys_perf_event_open+0x63/0x70 [ 517.025440][T17242] do_syscall_64+0x34/0x50 [ 517.025462][T17242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.025486][T17242] RIP: 0033:0x466459 [ 517.025499][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 517.025565][T17242] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 517.025581][T17242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 517.025594][T17242] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 517.025606][T17242] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 517.025618][T17242] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 517.025630][T17242] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 517.359620][T17235] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 517.367692][T17235] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000048bbde79 10:34:34 executing program 0 (fault-call:4 fault-nth:42): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:34 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:34 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf83f00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:34 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r1, 0xbfc52000) [ 517.480595][T17284] FAULT_INJECTION: forcing a failure. [ 517.480595][T17284] name failslab, interval 1, probability 0, space 0, times 0 [ 517.493224][T17284] CPU: 0 PID: 17284 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 517.503372][T17284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 517.513423][T17284] Call Trace: [ 517.516685][T17284] dump_stack+0x137/0x19d [ 517.521090][T17284] should_fail+0x23c/0x250 [ 517.525495][T17284] __should_failslab+0x81/0x90 [ 517.530334][T17284] ? register_for_each_vma+0x372/0x890 [ 517.535839][T17284] should_failslab+0x5/0x20 [ 517.540398][T17284] kmem_cache_alloc_trace+0x49/0x320 [ 517.545733][T17284] ? register_for_each_vma+0x372/0x890 [ 517.551185][T17284] ? vma_interval_tree_iter_next+0x263/0x280 [ 517.557156][T17284] register_for_each_vma+0x372/0x890 [ 517.562489][T17284] __uprobe_register+0x3f4/0x8a0 [ 517.567477][T17284] uprobe_register_refctr+0x29/0x40 [ 517.572738][T17284] probe_event_enable+0x2be/0x7d0 [ 517.577748][T17284] ? __uprobe_trace_func+0x420/0x420 [ 517.583107][T17284] trace_uprobe_register+0x88/0x410 [ 517.588286][T17284] ? find_next_bit+0xa7/0xf0 [ 517.592932][T17284] ? cpumask_next+0xc/0x30 [ 517.597335][T17284] perf_trace_event_init+0x34e/0x790 [ 517.602598][T17284] perf_uprobe_init+0xf5/0x140 [ 517.607487][T17284] perf_uprobe_event_init+0xde/0x140 [ 517.612763][T17284] perf_try_init_event+0x21a/0x400 [ 517.617851][T17284] perf_event_alloc+0x7eb/0x14d0 [ 517.622771][T17284] __se_sys_perf_event_open+0x5c9/0x25c0 [ 517.628414][T17284] ? __fget_light+0x21b/0x260 [ 517.633084][T17284] __x64_sys_perf_event_open+0x63/0x70 [ 517.638561][T17284] do_syscall_64+0x34/0x50 [ 517.642986][T17284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 517.648859][T17284] RIP: 0033:0x466459 [ 517.652796][T17284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 517.672422][T17284] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:35 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, r2, 0x986861e43ed3f1b1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x18}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) preadv(r0, &(0x7f0000001700)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 10:34:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001c000000000200000800040001000000", 0x24) 10:34:35 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', 0x802, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)={[{@nodelalloc='nodelalloc'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'ext4\x00'}}]}) [ 517.680865][T17284] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 517.688828][T17284] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 517.696793][T17284] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 517.704765][T17284] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 517.712721][T17284] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:35 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 517.741191][T17291] EXT4-fs: 61 callbacks suppressed [ 517.741205][T17291] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:35 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001d000000000200000800040001000000", 0x24) [ 517.835284][T17307] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 517.856511][T17312] EXT4-fs (sda1): Unrecognized mount option "smackfstransmute=ext4" or missing value [ 517.869993][T17311] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 517.892604][T17311] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:35 executing program 0 (fault-call:4 fault-nth:43): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:35 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x1) 10:34:35 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf83f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001e000000000200000800040001000000", 0x24) [ 518.127310][T17337] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 518.139072][T17333] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 518.151068][T17344] FAULT_INJECTION: forcing a failure. [ 518.151068][T17344] name failslab, interval 1, probability 0, space 0, times 0 [ 518.163700][T17344] CPU: 1 PID: 17344 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 518.167270][T17347] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 518.173855][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.193995][T17344] Call Trace: [ 518.197269][T17344] dump_stack+0x137/0x19d [ 518.201625][T17344] should_fail+0x23c/0x250 [ 518.206038][T17344] __should_failslab+0x81/0x90 [ 518.210806][T17344] ? register_for_each_vma+0x372/0x890 [ 518.216352][T17344] should_failslab+0x5/0x20 [ 518.220851][T17344] kmem_cache_alloc_trace+0x49/0x320 [ 518.226189][T17344] ? register_for_each_vma+0x372/0x890 [ 518.231702][T17344] ? vma_interval_tree_iter_next+0x24c/0x280 [ 518.237663][T17344] register_for_each_vma+0x372/0x890 [ 518.243093][T17344] __uprobe_register+0x3f4/0x8a0 [ 518.248034][T17344] uprobe_register_refctr+0x29/0x40 [ 518.253270][T17344] probe_event_enable+0x2be/0x7d0 [ 518.258537][T17344] ? __uprobe_trace_func+0x420/0x420 [ 518.263945][T17344] trace_uprobe_register+0x88/0x410 [ 518.269142][T17344] ? find_next_bit+0xa7/0xf0 [ 518.274588][T17344] ? cpumask_next+0xc/0x30 [ 518.279029][T17344] perf_trace_event_init+0x34e/0x790 [ 518.284383][T17344] perf_uprobe_init+0xf5/0x140 [ 518.289131][T17344] perf_uprobe_event_init+0xde/0x140 [ 518.294404][T17344] perf_try_init_event+0x21a/0x400 [ 518.299527][T17344] perf_event_alloc+0x7eb/0x14d0 [ 518.304509][T17344] __se_sys_perf_event_open+0x5c9/0x25c0 [ 518.310121][T17344] ? __fget_light+0x21b/0x260 [ 518.314776][T17344] __x64_sys_perf_event_open+0x63/0x70 [ 518.320318][T17344] do_syscall_64+0x34/0x50 [ 518.324729][T17344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 518.330619][T17344] RIP: 0033:0x466459 [ 518.334497][T17344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 518.354089][T17344] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 518.362489][T17344] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 518.370476][T17344] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 10:34:35 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 518.378435][T17344] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 518.386403][T17344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 518.394355][T17344] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 518.407572][T17347] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: none. 10:34:35 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:35 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000001f000000000200000800040001000000", 0x24) 10:34:35 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3ff800, 0x0, 0x884a0, &(0x7f00000002c0)) [ 518.438283][T17350] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:35 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5712, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0]) open(&(0x7f0000000000)='./file0\x00', 0xac900, 0x42) 10:34:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000020000000000200000800040001000000", 0x24) 10:34:36 executing program 0 (fault-call:4 fault-nth:44): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:36 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x7000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:36 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 518.848226][T17401] FAULT_INJECTION: forcing a failure. [ 518.848226][T17401] name failslab, interval 1, probability 0, space 0, times 0 [ 518.860878][T17401] CPU: 0 PID: 17401 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 518.871030][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 518.881150][T17401] Call Trace: [ 518.884416][T17401] dump_stack+0x137/0x19d [ 518.888740][T17401] should_fail+0x23c/0x250 [ 518.893134][T17401] __should_failslab+0x81/0x90 [ 518.897897][T17401] ? register_for_each_vma+0x372/0x890 [ 518.903464][T17401] should_failslab+0x5/0x20 [ 518.907974][T17401] kmem_cache_alloc_trace+0x49/0x320 [ 518.913240][T17401] ? register_for_each_vma+0x372/0x890 [ 518.918735][T17401] ? vma_interval_tree_iter_next+0x263/0x280 [ 518.924694][T17401] register_for_each_vma+0x372/0x890 [ 518.929990][T17401] __uprobe_register+0x3f4/0x8a0 [ 518.934922][T17401] uprobe_register_refctr+0x29/0x40 [ 518.940126][T17401] probe_event_enable+0x2be/0x7d0 [ 518.945313][T17401] ? __uprobe_trace_func+0x420/0x420 [ 518.950650][T17401] trace_uprobe_register+0x88/0x410 [ 518.955871][T17401] ? find_next_bit+0xa7/0xf0 [ 518.960476][T17401] ? cpumask_next+0xc/0x30 [ 518.964879][T17401] perf_trace_event_init+0x34e/0x790 [ 518.970151][T17401] perf_uprobe_init+0xf5/0x140 [ 518.974971][T17401] perf_uprobe_event_init+0xde/0x140 [ 518.980238][T17401] perf_try_init_event+0x21a/0x400 [ 518.985383][T17401] perf_event_alloc+0x7eb/0x14d0 [ 518.990407][T17401] __se_sys_perf_event_open+0x5c9/0x25c0 [ 518.996047][T17401] ? __fget_light+0x21b/0x260 [ 519.000943][T17401] __x64_sys_perf_event_open+0x63/0x70 [ 519.006436][T17401] do_syscall_64+0x34/0x50 [ 519.010866][T17401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.016818][T17401] RIP: 0033:0x466459 [ 519.020706][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.040331][T17401] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000021000000000200000800040001000000", 0x24) 10:34:36 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:36 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0xffff, 0x3, &(0x7f0000000480)=[{&(0x7f0000000180)="d7f31cf3bc6c7e966d4e7eafbbb26a1a4982dc7f950652ea279f03a1f111721ac2768ce30eda5b2c0dd4be427b81f54727d2c0fe7ca3f0dd2a311a54dd551279d57a11d754cc08651dfac9acccb09415583bd7cad1740aa4877f8c89718a0ce0e726be45ba18bda98f45b7e16ca4991c780fb21d5692163183fe5b3e2f62445d9f86528416fb718c3f3a9e90a52c9b32e317726af055bd86e8172f2c322814cbe25b1762066945f6d27ac7ab8e4a25024a401451311c40b3279f3cbe52356e5678774799950db4bb857ade8f7dbbb33a60b0238e992726adb566074e756435fa6c48f520b649", 0xe6, 0x200}, {&(0x7f0000000300)="dcf39bb73308ed964a7acc20e93e5eff0f56d7cbb5b2f75972deab2c2e46e30448c6ae8a3b4e372be9d3f144b67623865322e6bc6115716de722b37e3ff471965bbb6637e49059cfaaa948feb8297b771d53ebd263b93e8a7935be321a453c1102666ea33337a5b52d1150c23437eb05aeb810844c86669d65b414219905b295f7c450cd74d3096c2d5d3be1e5d277d8d76906fbf6c54d4b3f982121d3ecaa8f6eb3e094e6c9b9a2dc9e300c4e85b6f2f9939c7ec23b25ef8bc452df75a682", 0xbf, 0x3}, {&(0x7f00000003c0)="0a63060f2325bd1d68a11cdb62ade11807b560f9e9cf940c43395ca9016d9d14f2ced336804b0415a0a93b1099b9102cb28dd70a87ae4c2b36fcd91e7388dd256bf5bf6b4d3df35aa195f1a9d3518ee3275a1f993a958b2d093ea6c6b2bb2c3f8aa325811c57b5d1ddc60336df8d149680490f9bdac3c543af3fa996edf1156e1028d72d7ae920b0a3db5b35bebd8d468dc8ad50a5e30bd1658925eb0ad30649c35143ac1d70bc", 0xa7, 0xfffffffffffffffb}], 0x890c00, &(0x7f0000000500)={[{@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid'}}, {@huge_advise='huge=advise'}], [{@obj_type={'obj_type', 0x3d, '[\''}}, {@pcr={'pcr'}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x80002, 0x80) 10:34:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 519.048823][T17401] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 519.056888][T17401] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 519.064842][T17401] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.072796][T17401] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 519.080793][T17401] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:36 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:36 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000022000000000200000800040001000000", 0x24) 10:34:36 executing program 0 (fault-call:4 fault-nth:45): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:36 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:36 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:36 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 10:34:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000023000000000200000800040001000000", 0x24) 10:34:36 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x10000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 519.508370][T17455] FAULT_INJECTION: forcing a failure. [ 519.508370][T17455] name failslab, interval 1, probability 0, space 0, times 0 [ 519.521073][T17455] CPU: 0 PID: 17455 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 519.531218][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.541362][T17455] Call Trace: [ 519.544636][T17455] dump_stack+0x137/0x19d [ 519.548990][T17455] should_fail+0x23c/0x250 [ 519.553388][T17455] __should_failslab+0x81/0x90 [ 519.558131][T17455] ? register_for_each_vma+0x372/0x890 [ 519.563586][T17455] should_failslab+0x5/0x20 [ 519.568176][T17455] kmem_cache_alloc_trace+0x49/0x320 [ 519.573448][T17455] ? register_for_each_vma+0x372/0x890 [ 519.578890][T17455] ? vma_interval_tree_iter_next+0x263/0x280 [ 519.584866][T17455] register_for_each_vma+0x372/0x890 [ 519.590152][T17455] __uprobe_register+0x3f4/0x8a0 [ 519.595091][T17455] uprobe_register_refctr+0x29/0x40 [ 519.600297][T17455] probe_event_enable+0x2be/0x7d0 [ 519.605317][T17455] ? __uprobe_trace_func+0x420/0x420 [ 519.610661][T17455] trace_uprobe_register+0x88/0x410 [ 519.615864][T17455] ? find_next_bit+0xa7/0xf0 [ 519.620491][T17455] ? cpumask_next+0xc/0x30 [ 519.624903][T17455] perf_trace_event_init+0x34e/0x790 [ 519.630182][T17455] perf_uprobe_init+0xf5/0x140 [ 519.634954][T17455] perf_uprobe_event_init+0xde/0x140 [ 519.640237][T17455] perf_try_init_event+0x21a/0x400 [ 519.645364][T17455] perf_event_alloc+0x7eb/0x14d0 [ 519.650287][T17455] __se_sys_perf_event_open+0x5c9/0x25c0 [ 519.655904][T17455] ? __fget_light+0x21b/0x260 [ 519.660563][T17455] __x64_sys_perf_event_open+0x63/0x70 [ 519.666049][T17455] do_syscall_64+0x34/0x50 [ 519.670542][T17455] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 519.676415][T17455] RIP: 0033:0x466459 [ 519.680286][T17455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 519.699872][T17455] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:37 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:37 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000024000000000200000800040001000000", 0x24) 10:34:37 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000500)={[{@data_journal='data=journal'}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x81, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="cecb29f4e1940e1a0353a388453bd216207c74658a2c9f72bbc3163b0a046003aa47163b8bc8d637a5d7de51f1543c0b54e95ce0fdc9022c2960241da1a832d79b8bbcd3380efca8fbd3fdbba561c6f78e9bc51f8e440da5a36d7345681615584eb5ebab2446a2115c60ae867a64a1f12255969183abc679053085ced78a75c2dfbae163c94ec3c5838fe9052ceca4cc3b20fa5aadb1247ba1d4b0c8d490dbb189df6899ffcf447556c267e0b945ee9fc6bf99daef727cbb4398c1c7465c29c6f21781ddb77625cd487d7faacdfe000ef8a104cba24888a71dca3d79e2a837586b61cc288477ed907e47860cf0efd56614a1fcee5258", 0xf6, 0x7fff}, {&(0x7f00000007c0)="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", 0x1000, 0x1000}, {&(0x7f0000000300)="674b96c47c419c602ddef8ae5d93efc442894223e6d20e960f5e20ed3f5eed4d84f5b5f2ca150173db282643f76a2154fb8d81097fad82", 0x37, 0x8}, {&(0x7f0000000340)="455a867fd6d48a5edd424008d4a830fe1204cdfcbacf62550748f0d7ad9a17e7f5bb243341d06c5a3fa0c54a73bf71857c00bb631cbd75890790a2dd03956ea5bd0331a55acfe4c64583c4fb76a5230e1008449abb90227b0daf02c8ebb085fc81503c9092c592695e1867273e4dc765ce80d92f05770bb3a1", 0x79, 0xffff}], 0x3, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x8}}, {@nr_blocks={'nr_blocks', 0x3d, [0x37, 0x78, 0x36, 0x38]}}, {@huge_advise='huge=advise'}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x73, 0x32, 0x70, 0x74, 0x25, 0x78]}}], [{@measure='measure'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<', 0xee00}}]}) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x7) 10:34:37 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 519.708330][T17455] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 519.716385][T17455] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 519.724427][T17455] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 519.732415][T17455] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 519.740369][T17455] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:37 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:37 executing program 0 (fault-call:4 fault-nth:46): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000025000000000200000800040001000000", 0x24) 10:34:37 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:37 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x22000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:37 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:37 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2204c0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xcd2) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) openat(r1, &(0x7f0000000040)='./file0\x00', 0xa00, 0x20) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 520.122047][T17503] FAULT_INJECTION: forcing a failure. [ 520.122047][T17503] name failslab, interval 1, probability 0, space 0, times 0 [ 520.134701][T17503] CPU: 1 PID: 17503 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 520.144845][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.154980][T17503] Call Trace: [ 520.158279][T17503] dump_stack+0x137/0x19d [ 520.162602][T17503] should_fail+0x23c/0x250 [ 520.167009][T17503] __should_failslab+0x81/0x90 [ 520.171775][T17503] ? register_for_each_vma+0x372/0x890 [ 520.177241][T17503] should_failslab+0x5/0x20 [ 520.181764][T17503] kmem_cache_alloc_trace+0x49/0x320 [ 520.187044][T17503] ? register_for_each_vma+0x372/0x890 [ 520.192530][T17503] ? vma_interval_tree_iter_next+0x24c/0x280 [ 520.198551][T17503] register_for_each_vma+0x372/0x890 [ 520.203837][T17503] __uprobe_register+0x3f4/0x8a0 [ 520.208775][T17503] uprobe_register_refctr+0x29/0x40 [ 520.214007][T17503] probe_event_enable+0x2be/0x7d0 [ 520.219032][T17503] ? __uprobe_trace_func+0x420/0x420 [ 520.224300][T17503] trace_uprobe_register+0x88/0x410 [ 520.229482][T17503] ? find_next_bit+0xa7/0xf0 [ 520.234050][T17503] ? cpumask_next+0xc/0x30 [ 520.238467][T17503] perf_trace_event_init+0x34e/0x790 [ 520.243801][T17503] perf_uprobe_init+0xf5/0x140 [ 520.248550][T17503] perf_uprobe_event_init+0xde/0x140 [ 520.253816][T17503] perf_try_init_event+0x21a/0x400 [ 520.258915][T17503] perf_event_alloc+0x7eb/0x14d0 [ 520.263834][T17503] __se_sys_perf_event_open+0x5c9/0x25c0 [ 520.269452][T17503] ? __fget_light+0x21b/0x260 [ 520.274124][T17503] __x64_sys_perf_event_open+0x63/0x70 [ 520.279679][T17503] do_syscall_64+0x34/0x50 [ 520.284139][T17503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.290035][T17503] RIP: 0033:0x466459 [ 520.293949][T17503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.313680][T17503] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:37 executing program 2: mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000026000000000200000800040001000000", 0x24) 10:34:37 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 520.322098][T17503] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 520.330164][T17503] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 520.338120][T17503] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 520.346083][T17503] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 520.354049][T17503] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:37 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:37 executing program 2: mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:37 executing program 3: setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@loopback, @remote}, 0x8) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:38 executing program 0 (fault-call:4 fault-nth:47): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000027000000000200000800040001000000", 0x24) 10:34:38 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:38 executing program 2: mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:38 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:38 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='data=jourdal,\x00']) [ 520.674590][T17500] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 520.682696][T17500] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000921a94cd [ 520.780914][T17558] FAULT_INJECTION: forcing a failure. [ 520.780914][T17558] name failslab, interval 1, probability 0, space 0, times 0 [ 520.793654][T17558] CPU: 1 PID: 17558 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 520.803985][T17558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.814030][T17558] Call Trace: [ 520.817323][T17558] dump_stack+0x137/0x19d [ 520.821654][T17558] should_fail+0x23c/0x250 [ 520.826050][T17558] __should_failslab+0x81/0x90 [ 520.830808][T17558] ? register_for_each_vma+0x372/0x890 [ 520.836279][T17558] should_failslab+0x5/0x20 [ 520.840791][T17558] kmem_cache_alloc_trace+0x49/0x320 [ 520.846058][T17558] ? register_for_each_vma+0x372/0x890 [ 520.851620][T17558] ? vma_interval_tree_iter_next+0x263/0x280 [ 520.857664][T17558] register_for_each_vma+0x372/0x890 [ 520.862940][T17558] __uprobe_register+0x3f4/0x8a0 [ 520.867878][T17558] uprobe_register_refctr+0x29/0x40 [ 520.873075][T17558] probe_event_enable+0x2be/0x7d0 [ 520.878149][T17558] ? __uprobe_trace_func+0x420/0x420 [ 520.883429][T17558] trace_uprobe_register+0x88/0x410 [ 520.888683][T17558] ? find_next_bit+0xa7/0xf0 [ 520.893263][T17558] ? cpumask_next+0xc/0x30 [ 520.897732][T17558] perf_trace_event_init+0x34e/0x790 [ 520.903036][T17558] perf_uprobe_init+0xf5/0x140 [ 520.907792][T17558] perf_uprobe_event_init+0xde/0x140 [ 520.913091][T17558] perf_try_init_event+0x21a/0x400 [ 520.918226][T17558] perf_event_alloc+0x7eb/0x14d0 [ 520.923147][T17558] __se_sys_perf_event_open+0x5c9/0x25c0 [ 520.928837][T17558] ? __fget_light+0x21b/0x260 [ 520.933582][T17558] __x64_sys_perf_event_open+0x63/0x70 [ 520.939042][T17558] do_syscall_64+0x34/0x50 [ 520.943462][T17558] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 520.949338][T17558] RIP: 0033:0x466459 [ 520.953215][T17558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 520.972808][T17558] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000028000000000200000800040001000000", 0x24) 10:34:38 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:38 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 520.981220][T17558] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 520.989184][T17558] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 520.997137][T17558] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.005088][T17558] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 521.013055][T17558] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:38 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(&(0x7f0000000200)='logon\x00', &(0x7f0000000440)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000000480)={0x0, "369c85c242aa5eca22f5d411dcda2f80e5c9c45e2e39d80bab760db738244c9827a409aae0cf6c518bac9095a83effd5eeae4116286503c27648eda2e527085a"}, 0x48, r1) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r3, 0x1000, 0xaf}, 0x0, &(0x7f00000007c0)="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", &(0x7f0000000300)=""/175) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000000)={@id={0x2, 0x0, @c}, 0x10, r2, [], @d='abcdefghijklmnop'}) 10:34:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000029000000000200000800040001000000", 0x24) [ 521.271187][T17547] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 521.279438][T17547] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004ddf6d25 10:34:38 executing program 0 (fault-call:4 fault-nth:48): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:38 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:38 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:38 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002a000000000200000800040001000000", 0x24) 10:34:38 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="b596d625c9bb93bc372ce0c32a112384bcda7f19ba1a45d8e1dba334d3c870464492f1e668d625da", 0x28, 0x7}], 0x80000, &(0x7f00000001c0)={[{@dots='dots'}, {@dots='dots'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_measure='dont_measure'}, {@uid_lt={'uid<', r1}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) [ 521.403511][T17602] FAULT_INJECTION: forcing a failure. [ 521.403511][T17602] name failslab, interval 1, probability 0, space 0, times 0 [ 521.416158][T17602] CPU: 0 PID: 17602 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 521.426391][T17602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.436529][T17602] Call Trace: [ 521.439801][T17602] dump_stack+0x137/0x19d [ 521.444162][T17602] should_fail+0x23c/0x250 [ 521.448572][T17602] __should_failslab+0x81/0x90 [ 521.453427][T17602] ? register_for_each_vma+0x372/0x890 [ 521.458882][T17602] should_failslab+0x5/0x20 [ 521.463397][T17602] kmem_cache_alloc_trace+0x49/0x320 [ 521.468688][T17602] ? register_for_each_vma+0x372/0x890 [ 521.474150][T17602] ? vma_interval_tree_iter_next+0x24c/0x280 [ 521.480139][T17602] register_for_each_vma+0x372/0x890 [ 521.485407][T17602] __uprobe_register+0x3f4/0x8a0 [ 521.490452][T17602] uprobe_register_refctr+0x29/0x40 [ 521.495753][T17602] probe_event_enable+0x2be/0x7d0 [ 521.500825][T17602] ? __uprobe_trace_func+0x420/0x420 [ 521.506092][T17602] trace_uprobe_register+0x88/0x410 [ 521.511298][T17602] ? find_next_bit+0xa7/0xf0 [ 521.515866][T17602] ? cpumask_next+0xc/0x30 [ 521.520260][T17602] perf_trace_event_init+0x34e/0x790 [ 521.525538][T17602] perf_uprobe_init+0xf5/0x140 [ 521.530296][T17602] perf_uprobe_event_init+0xde/0x140 [ 521.535566][T17602] perf_try_init_event+0x21a/0x400 [ 521.540662][T17602] perf_event_alloc+0x7eb/0x14d0 [ 521.545638][T17602] __se_sys_perf_event_open+0x5c9/0x25c0 [ 521.551267][T17602] ? __fget_light+0x21b/0x260 [ 521.555924][T17602] __x64_sys_perf_event_open+0x63/0x70 [ 521.561386][T17602] do_syscall_64+0x34/0x50 [ 521.565827][T17602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 521.571838][T17602] RIP: 0033:0x466459 [ 521.575857][T17602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 521.595495][T17602] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:39 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:39 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:39 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x202000, 0x82) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x9) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='dat\x00'/14]) [ 521.603887][T17602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 521.611855][T17602] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 521.619811][T17602] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 521.627763][T17602] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 521.635712][T17602] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:39 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002b000000000200000800040001000000", 0x24) 10:34:39 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 521.954979][T17594] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 521.963076][T17594] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000089ed84cd 10:34:39 executing program 0 (fault-call:4 fault-nth:49): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:39 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:39 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6530004929adad2034d322e5e757f6922a03eb75800baf167a7e6ca2f4511f62ecab668b3c37842c6a4d8da3ffd291c6904dfe7cd28be0f61419c94cf49af4673c7b4a83c0219596e34242cfe04a29efa665bcf6905c34d83e8124f7ba357e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="24b67753ba6f551647768c06268a72ad8b4f9f8d031bda77998df253e24288df6342f5e85c93186cb31ef6d1ea8aa7feef00e3fabbe73e0061d644816e8fe2c2187d153ec36a8535b8979ae44aed3eade9fba058771ed6e1d71b1a340c222493198261d59a8f5e299639191df7ddbb23985bf5f81156303494515ed1c76807c8379c5c5c2be0c6c61c6e317cb51df1e8b7aa42cad00356f233b2063e8b0a98"]) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) chdir(&(0x7f0000000200)='./file0\x00') write(r0, &(0x7f0000001400)="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"/3584, 0xe00) acct(&(0x7f0000000240)='./file0\x00') fallocate(r0, 0x20, 0x0, 0x10000) connect(r0, &(0x7f0000000000)=@caif, 0x80) 10:34:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002c000000000200000800040001000000", 0x24) 10:34:39 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:39 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f00, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:39 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 522.082891][T17660] FAULT_INJECTION: forcing a failure. [ 522.082891][T17660] name failslab, interval 1, probability 0, space 0, times 0 [ 522.095545][T17660] CPU: 0 PID: 17660 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 522.105688][T17660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.115738][T17660] Call Trace: [ 522.119017][T17660] dump_stack+0x137/0x19d [ 522.123328][T17660] should_fail+0x23c/0x250 [ 522.127724][T17660] __should_failslab+0x81/0x90 [ 522.132523][T17660] ? register_for_each_vma+0x372/0x890 [ 522.138139][T17660] should_failslab+0x5/0x20 [ 522.142634][T17660] kmem_cache_alloc_trace+0x49/0x320 [ 522.147934][T17660] ? register_for_each_vma+0x372/0x890 [ 522.153378][T17660] ? vma_interval_tree_iter_next+0x263/0x280 [ 522.159341][T17660] register_for_each_vma+0x372/0x890 [ 522.164616][T17660] __uprobe_register+0x3f4/0x8a0 [ 522.169607][T17660] uprobe_register_refctr+0x29/0x40 [ 522.174788][T17660] probe_event_enable+0x2be/0x7d0 [ 522.179793][T17660] ? __uprobe_trace_func+0x420/0x420 [ 522.185068][T17660] trace_uprobe_register+0x88/0x410 [ 522.190249][T17660] ? find_next_bit+0xa7/0xf0 [ 522.194827][T17660] ? cpumask_next+0xc/0x30 [ 522.199296][T17660] perf_trace_event_init+0x34e/0x790 [ 522.204563][T17660] perf_uprobe_init+0xf5/0x140 [ 522.209356][T17660] perf_uprobe_event_init+0xde/0x140 [ 522.214626][T17660] perf_try_init_event+0x21a/0x400 [ 522.219754][T17660] perf_event_alloc+0x7eb/0x14d0 [ 522.224681][T17660] __se_sys_perf_event_open+0x5c9/0x25c0 [ 522.230294][T17660] ? __fget_light+0x21b/0x260 [ 522.234952][T17660] __x64_sys_perf_event_open+0x63/0x70 [ 522.240400][T17660] do_syscall_64+0x34/0x50 [ 522.244815][T17660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 522.250785][T17660] RIP: 0033:0x466459 [ 522.254673][T17660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.274271][T17660] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:39 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:39 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:39 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="08002000000000007717c2e7989f949896b9e6f6cd31ea3488b470afe1db385d58c43d456309772855a23816a0579742b9d9db724f24a7b392440ef75569c3bcba1a06ec23d0e492855fe9399810cfe44ddea1f3aab600241eeb7ccab13cfa5cf430b8e1754de1738709644fcedbe0d050ff27584643511ff8a2577e1ea4290b3ce27318db1fc33c0c4aca0c3c02de34b1b5c35ee16e9162df4b0ed0ca73bcb9262a2347c2e868174a8471790a0cc8cddc4504f7316d99a74e2890cfe7"], &(0x7f0000000780)='./file0\x00', 0x0, 0x19822, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) quotactl(0x5, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000300)="4793cf77c8895bb7f830373d8fee5881a5c49cbe9a828d7b4e264cabcb18c1bb2b740cb934c2c09c678adb07e0908f73cc872f07f547e02c452f556ffac897b24c68780f141b245a5243a3556f197669162140104045b0d2445e6410796a164416799c67e7c69776dfa21f99b23bd97c3c07cb23892e55f56259e03be46709e6149ea64d6d8455b8f17611855a997edda9026cd5888d49aa91d0f3eddb11d9f9db27b48079af2fb9363aac2379bb95e66c2b651a4cd48a21f03841a6091be241353f875a30eca6a408d74c4d27e70658abc4cd3e974f25f24e20e694e3078269ea023c0d7078f4") chdir(&(0x7f0000000000)='./file0\x00') [ 522.282671][T17660] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 522.290685][T17660] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 522.299925][T17660] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.307896][T17660] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 522.315853][T17660] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002d000000000200000800040001000000", 0x24) 10:34:39 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:40 executing program 0 (fault-call:4 fault-nth:50): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:40 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:40 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="218128bbc6b0f18a9778fbb26bd7759f4a197c62f7bf3a2d7b5f48a6949a591a6a049e78c697f9687620c890ddaa9d6c7ae574c60f637935f5a98f5d873e2159f63d33a4f8b992b1fb7e5484766c16da78fee765159f3078f40a809f543bb84f4413ae201ac83b47e17b7cea5edfc842bf5d355c08cf030034d336d181e7fe29014c170c2bb094f9000424cb8e8b01a8178ccbcc2c4dd13e717950cea919f54d8a9f1cd44536f407f3cd3aaa9ef42de145a3e5fed8aa05d5f5ffa6cf8865abc11d24ecd100"/212], &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8801, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3f, 0x0, 0x0, 0x8aa4d2, &(0x7f00000002c0)={[{@init_itable='init_itable'}], [{@obj_user={'obj_user', 0x3d, 'init_itable'}}, {@fowner_gt={'fowner>'}}, {@audit='audit'}, {@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 10:34:40 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002e000000000200000800040001000000", 0x24) [ 522.713130][T17705] FAULT_INJECTION: forcing a failure. [ 522.713130][T17705] name failslab, interval 1, probability 0, space 0, times 0 [ 522.725923][T17705] CPU: 0 PID: 17705 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 522.736079][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.746284][T17705] Call Trace: [ 522.749602][T17705] dump_stack+0x137/0x19d [ 522.754005][T17705] should_fail+0x23c/0x250 [ 522.758449][T17705] __should_failslab+0x81/0x90 [ 522.763205][T17705] ? register_for_each_vma+0x372/0x890 [ 522.768843][T17705] should_failslab+0x5/0x20 [ 522.773373][T17705] kmem_cache_alloc_trace+0x49/0x320 [ 522.778726][T17705] ? register_for_each_vma+0x372/0x890 [ 522.784229][T17705] ? vma_interval_tree_iter_next+0x24c/0x280 [ 522.790238][T17705] register_for_each_vma+0x372/0x890 [ 522.795516][T17705] __uprobe_register+0x3f4/0x8a0 [ 522.800448][T17705] uprobe_register_refctr+0x29/0x40 [ 522.805632][T17705] probe_event_enable+0x2be/0x7d0 [ 522.810641][T17705] ? __uprobe_trace_func+0x420/0x420 [ 522.815918][T17705] trace_uprobe_register+0x88/0x410 [ 522.821095][T17705] ? find_next_bit+0xa7/0xf0 [ 522.825667][T17705] ? cpumask_next+0xc/0x30 [ 522.830137][T17705] perf_trace_event_init+0x34e/0x790 [ 522.835478][T17705] perf_uprobe_init+0xf5/0x140 [ 522.840241][T17705] perf_uprobe_event_init+0xde/0x140 [ 522.845521][T17705] perf_try_init_event+0x21a/0x400 [ 522.850654][T17705] perf_event_alloc+0x7eb/0x14d0 [ 522.855667][T17705] __se_sys_perf_event_open+0x5c9/0x25c0 [ 522.861294][T17705] ? __fget_light+0x21b/0x260 [ 522.866088][T17705] __x64_sys_perf_event_open+0x63/0x70 [ 522.871692][T17705] do_syscall_64+0x34/0x50 [ 522.876092][T17705] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 522.881968][T17705] RIP: 0033:0x466459 [ 522.885842][T17705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 522.905437][T17705] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000002f000000000200000800040001000000", 0x24) 10:34:40 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 522.913831][T17705] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 522.921782][T17705] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 522.929820][T17705] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 522.937827][T17705] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 522.945987][T17705] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@quota='quota'}]}) 10:34:40 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x2}) 10:34:40 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffefff, 0x0, 0x884a0, &(0x7f00000002c0)) [ 522.964914][T17712] EXT4-fs: 84 callbacks suppressed [ 522.964925][T17712] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 522.980349][T17706] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. 10:34:40 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 523.077312][T17730] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: none. [ 523.093886][T17732] EXT4-fs (sda1): Unrecognized mount option "C" or missing value [ 523.119360][T17734] EXT4-fs (sda1): re-mounted. Opts: quota,,errors=continue. Quota mode: writeback. [ 523.134510][T17736] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 523.144487][T17739] EXT4-fs (sda1): re-mounted. Opts: quota,,errors=continue. Quota mode: writeback. [ 523.288689][T17696] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 523.296920][T17696] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cf488f07 10:34:40 executing program 0 (fault-call:4 fault-nth:51): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000030000000000200000800040001000000", 0x24) 10:34:40 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:40 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x4}) 10:34:40 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:40 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x10ce4b0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 523.395209][T17754] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 523.420165][T17758] FAULT_INJECTION: forcing a failure. [ 523.420165][T17758] name failslab, interval 1, probability 0, space 0, times 0 [ 523.432897][T17758] CPU: 0 PID: 17758 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 523.435504][T17754] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 523.443309][T17758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.443321][T17758] Call Trace: [ 523.443328][T17758] dump_stack+0x137/0x19d [ 523.443349][T17758] should_fail+0x23c/0x250 [ 523.443362][T17758] __should_failslab+0x81/0x90 [ 523.443381][T17758] ? register_for_each_vma+0x372/0x890 [ 523.462193][T17756] EXT4-fs (sda1): Unrecognized mount option "C" or missing value [ 523.463406][T17758] should_failslab+0x5/0x20 [ 523.497949][T17758] kmem_cache_alloc_trace+0x49/0x320 [ 523.503231][T17758] ? register_for_each_vma+0x372/0x890 [ 523.508732][T17758] ? vma_interval_tree_iter_next+0x263/0x280 [ 523.514786][T17758] register_for_each_vma+0x372/0x890 [ 523.520084][T17758] __uprobe_register+0x3f4/0x8a0 [ 523.525002][T17758] uprobe_register_refctr+0x29/0x40 [ 523.530235][T17758] probe_event_enable+0x2be/0x7d0 [ 523.535367][T17758] ? __uprobe_trace_func+0x420/0x420 [ 523.540676][T17758] trace_uprobe_register+0x88/0x410 [ 523.545970][T17758] ? find_next_bit+0xa7/0xf0 [ 523.550601][T17758] ? cpumask_next+0xc/0x30 [ 523.555041][T17758] perf_trace_event_init+0x34e/0x790 [ 523.560330][T17758] perf_uprobe_init+0xf5/0x140 [ 523.565083][T17758] perf_uprobe_event_init+0xde/0x140 [ 523.570366][T17758] perf_try_init_event+0x21a/0x400 [ 523.575524][T17758] perf_event_alloc+0x7eb/0x14d0 [ 523.580458][T17758] __se_sys_perf_event_open+0x5c9/0x25c0 [ 523.586299][T17758] ? __fget_light+0x21b/0x260 [ 523.590969][T17758] __x64_sys_perf_event_open+0x63/0x70 [ 523.596433][T17758] do_syscall_64+0x34/0x50 [ 523.600836][T17758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 523.606725][T17758] RIP: 0033:0x466459 [ 523.610595][T17758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 523.630356][T17758] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 523.638766][T17758] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 10:34:41 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000031000000000200000800040001000000", 0x24) 10:34:41 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x7}) 10:34:41 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x20, 0x1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:41 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffff6, 0x0, 0x884a0, &(0x7f00000002c0)) [ 523.646868][T17758] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 523.654816][T17758] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 523.663045][T17758] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 523.671330][T17758] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:41 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 523.961435][T17752] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 523.969527][T17752] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000001872b4c 10:34:41 executing program 0 (fault-call:4 fault-nth:52): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:41 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x8}) 10:34:41 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x0, 0x0, 0x88480, &(0x7f0000000140)={[{@mblk_io_submit='mblk_io_submit'}], [{@pcr={'pcr', 0x3d, 0x18}}, {@uid_lt={'uid<', r1}}]}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8c) openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0x36080, 0x2) 10:34:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000032000000000200000800040001000000", 0x24) 10:34:41 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffe, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:41 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) [ 524.082056][T17803] FAULT_INJECTION: forcing a failure. [ 524.082056][T17803] name failslab, interval 1, probability 0, space 0, times 0 [ 524.094761][T17803] CPU: 0 PID: 17803 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 524.104910][T17803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.115008][T17803] Call Trace: [ 524.118282][T17803] dump_stack+0x137/0x19d [ 524.122604][T17803] should_fail+0x23c/0x250 [ 524.127012][T17803] __should_failslab+0x81/0x90 [ 524.131790][T17803] ? register_for_each_vma+0x372/0x890 [ 524.137427][T17803] should_failslab+0x5/0x20 [ 524.141921][T17803] kmem_cache_alloc_trace+0x49/0x320 [ 524.147202][T17803] ? register_for_each_vma+0x372/0x890 [ 524.152681][T17803] ? vma_interval_tree_iter_next+0x24c/0x280 [ 524.158657][T17803] register_for_each_vma+0x372/0x890 [ 524.164112][T17803] __uprobe_register+0x3f4/0x8a0 [ 524.169035][T17803] uprobe_register_refctr+0x29/0x40 [ 524.174350][T17803] probe_event_enable+0x2be/0x7d0 [ 524.179371][T17803] ? __uprobe_trace_func+0x420/0x420 [ 524.188940][T17803] trace_uprobe_register+0x88/0x410 [ 524.194141][T17803] ? find_next_bit+0xa7/0xf0 [ 524.198729][T17803] ? cpumask_next+0xc/0x30 [ 524.203150][T17803] perf_trace_event_init+0x34e/0x790 [ 524.208414][T17803] perf_uprobe_init+0xf5/0x140 [ 524.213203][T17803] perf_uprobe_event_init+0xde/0x140 [ 524.218467][T17803] perf_try_init_event+0x21a/0x400 [ 524.223795][T17803] perf_event_alloc+0x7eb/0x14d0 [ 524.228811][T17803] __se_sys_perf_event_open+0x5c9/0x25c0 [ 524.234439][T17803] ? __fget_light+0x21b/0x260 [ 524.239151][T17803] __x64_sys_perf_event_open+0x63/0x70 [ 524.244677][T17803] do_syscall_64+0x34/0x50 [ 524.249094][T17803] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 524.254994][T17803] RIP: 0033:0x466459 [ 524.258985][T17803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:41 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000033000000000200000800040001000000", 0x24) 10:34:41 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x10}) [ 524.278671][T17803] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 524.287087][T17803] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 524.295136][T17803] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 524.303275][T17803] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.311225][T17803] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 524.319206][T17803] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:41 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:41 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000034000000000200000800040001000000", 0x24) 10:34:42 executing program 0 (fault-call:4 fault-nth:53): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x18}) 10:34:42 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x90001, 0x40) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='iata=jLurnal,\x00']) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) setuid(0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = getgid() socketpair(0x18, 0x80000, 0x7, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)={0x254, 0x1a, 0x100, 0x70bd26, 0x25dfdbfb, "", [@nested={0x12a, 0x49, 0x0, 0x1, [@typed={0x5, 0x54, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2c, 0x0, 0x0, @u32=0x80000001}, @typed={0xc, 0x39, 0x0, 0x0, @u64=0xfff}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @typed={0x8, 0x70, 0x0, 0x0, @uid=0xee00}, @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@loopback}, @generic="c5650ca1a375af128bf3e9b92750063c3c90ae295b58e0c78f3837b6581fa900f16ea9e3757ec886d4d7fba5aba6b5cd0584c4de15c2d15927744d25cac1470cfb1235f1e0d90956f5fb73e6f87592101732aaec28e2d074d23ed19488ac83af86a73b1ecded23cf29aa9e0e7abbc027bef22449bbb09b1d91c35145286cbbc3bd076eaa881842a626938d13274b2fd98ea0acc5be907bcdb57836fa99ba295228c0cd4423f8f2299267f06960cf76d386f141fe6399ad147cdbecc2208f307243c839274d38bcf62bca2935184454ee5a3f"]}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @nested={0x105, 0x2b, 0x0, 0x1, [@typed={0x14, 0x76, 0x0, 0x0, @ipv6=@remote}, @generic="85f1f928e5392e7cbe354c2cc1e8392af44f8afe04320b5725a46478eb5c0a7eebff8cbb28138664f25f3d34510f97a1ccbe78d989e712b2752de06806e515cc81a0207547df0d0bf608dabf18263abdc510b9d88414f615e6c72b7d850100055cfe116fb213b7ec3ed410a270413f7e9edc56f1b90a0c93638a3d3029c362da3d62cd71b81ef4243ee8f20c64fdf1d047eba6e344b3db7dc0e5f8e1026be8ee30ac76b56086a47020840eacf2939dc7acf4f329444a76dc4b5b5e1e04e384142affda398f0687b61ccbf9bc4a86cb7b31b57f2e2b05cc011bab7300379aacfe6be8bb757b9b6163a22689bb49"]}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0xfffffffd}]}, 0x254}, {&(0x7f0000002200)={0x22a0, 0x3e, 0x300, 0x70bd28, 0x25dfdbfc, "", [@generic="577c9ed3773d322eb5a62e5475cbe6ae55684e3d36719cab1697d95aa59be05aa87f16c33d0fc59b6610943a6df8be84e279d6d394bbd9a3191b13b20c2a9f00a10993ae7bb74452b691266e3e4f797a76e43918fc4c0bfa77ee0c9872c6c3136292b5a5c79e51c80fe80e230eff71dc04921b394d7a6f727e9751abbdd8b9b52f32689d4533c7529a264efbc41ec30b40730afbd5ceb71f69db2e9fcaa3483c87a0d261b330a762a1845f8f58cc18b39051a1fb7452f085dbb1210a673d982cd7ac8daf9626d278df140494e626b063515df8e80a0b18cdd5f3fa3338a9af08a5fe792d33e7b14b936c11156b4f71f7364bcbb0b4a6d6e1", @generic="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", @nested={0x111c, 0x66, 0x0, 0x1, [@typed={0x1004, 0x25, 0x0, 0x0, @binary="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"}, @generic="49270e7fb49f3116b238c5a7c95025aefb19bfcaa1a37a1fec11", @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x8d36}, @generic="0199d41fa280b52f41c1e147c3a4a82388c2a3c79dbe5629341221e400e2e5126ed86c7e40958889b2f573a0a156dd8cb2dfa17387b126000f19f2cb287d7e059b5c99694af655c27b14db7801863a76e8c083ff5666898d683d32cce094224c4bff771ccede4f2e9d4455f0c10ba85370fd63e5d89ebbbda6ac39b03fdfc75e275d43c9829684aa9d0d45d485daa6284c1f8295b6f88f8e22039c286614b28b3eedb0fc279fa2bbe77faa6304af7ffdd0574da482659cdf039c72f599d79df85d0291e9790f33662408763e9a9b3453a8cddda64660c6fce467547abd47260dc4482efb6b57", @typed={0x8, 0x75, 0x0, 0x0, @pid}]}, @generic="908b1dea422f4582c3736f705bf0df3b27a2c45e2b807675025d0b5992b5a198fd4f5bfefa72a11da2ea0f9b1ef790fed4e1f05ef2044c6cfc889d6d5e99475756dbc5d191d051a776b076c3b66c7d2109400153a2ca16647c4656ef3170e346e5f77e6ed16d3d96d16263043e97c179b790adf158e4a0d0a1ee31"]}, 0x22a0}, {&(0x7f00000044c0)={0x25f8, 0x11, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@generic="77471a3f5a6cbdffbe997a38b734a47ddc2d425fda5b4591321d4f65571b1e02ffd676", @nested={0x3b9, 0xf, 0x0, 0x1, [@generic="1ee2bb9986b8508339f42b4ba9e29a13dece5b06178e3cf43261328ac2f9fdcdde34bc9424008d5bee8c143992eb9e2f5608a7ce1fe7e5757ed05ae57fa12952646e1a99943f878fb7895da54caca72d12995d4cd596131eaf4d81fcb83b14acfec8a67d03fb301125d9e349b35fc0cdf2a9be9e8293d811f15d5a", @generic="9d55b4619f7c5cd880e5da351677dc3c9ccf206323a21421f5227f46a53d279eb2d61807cfa79b460c90c366cbe4844705217cd3e890fc2c32ed6c29839661d2bd4311cde3f972978628be35926352f09d30f6d1d61b38b38d8f06295190a6bb1e8725530c38ca1a96c0f54b68fccb47194b57f1c9dca45e2eb9aa742e7672402663c47173fd395cf4", @typed={0x8, 0x73, 0x0, 0x0, @fd}, @generic="5031347014593c6c849f53e45de69901a2634b7306296f04673cd8f3701dd1a7ef92bfc868765a498895232dfc36a4280dd84546d687f4ec082027c7aacf18d8e364595cb5554707f33caa64bc9c9609417e8c0771b4d823897ddd30a958f1eab3b05d5b1369524002d1f9a51a6522538b3546c89d60da811f03f794d0c47f171dcc6dc21eea37497d5999a4439fa7872a5147ef7422cfaffc7b002bf02eacfa98ee77ac1b8d96fff60f34fd6f3802b5942d0ff58558ef69a3ed0db9b573cd03c24b78fbadd5f4", @typed={0x73, 0x2e, 0x0, 0x0, @binary="98de5236d4d1b9c57259c59b2b90d078f85e1250fd55687fc87bf41a266d49b17377877f853d091063a36045cec509c4a55080b2530c8c9b86aca6c271c642b1219882aa9a77e99cdb2456b3348b82ef60b6b8af94716d986c06448292f616feae878cfcb6274db3823bbccd52002f"}, @generic="764c2f01461b917655bb58dd3f7b3845fcd7aa15185310193e5b2cbeddba5c6594be7d2fa78a6b4eebb8f3d5c0480a2659250668c2296bbc9dd60990a9657b8f1daa58f2c2ba6141f5302469c9fab865b99659fae4ada071344de9893a44c04c1d6302ea38816dac87a870710a25b9060a1e627df94cf3cca6d43a00b2ba070f04b75a", @generic="c013d74f75230014f75ec648e24782385d65add2433bbc87d1b58fda763e892ba0b421a46268c4aa2d753e9b3c4753d04c5d97c3116f349e607603be437b06cfc32382f941b390b342020c35a52f59cc9055d34e41fae7abea7b9f61ab254712b30ad19fe15fd9f325ec6126636000aada9cc55c66c01e340229d42f20701bdbf9a01164d950d5e74d1adfb622b9beace3e1a7892c6d367be8bce450bb07fbb154b27c89cf33e84cbfc3a26db1ee4d79315be0aa815b4b1a9192bb7c52029f66517995e31ce0189d5183b0447203c2db9344a54e8cdabe1102aba2", @generic, @typed={0x8, 0x82, 0x0, 0x0, @uid}, @typed={0x8, 0x55, 0x0, 0x0, @fd}]}, @generic="2613fc4c2a8ac9f2dddf4511930e375e75b85fed25e629bf87b6f4c2b85e8b36ce318f06676c362538a399507df55baa24857398ab7f5686e08ba6b9", @typed={0x8, 0x5b, 0x0, 0x0, @uid}, @typed={0x8, 0x3a, 0x0, 0x0, @fd=r4}, @generic="8904219af87c876eb5844dce0b3e0df63f28bba3f2447fefaa9aa1ff4a1153eba011866e24039b9d510e89b2f1b3fb000e74b8967fdc0bd033045b236c1d5541b4d13940ee040d7e09a94ba669185a7ba8384caf3bc676e0135dda04befd5856f10733077584c66b0ef75451a91d9063bccca34355fcdcce6b693b116d67301078ba6b3a6fcd9c331e34c33b6f5d8d8bb09eb0a9fc9b774860be71926a009f94b2b778ebad27158ab24eee633724557d2c4a9e34855aa8f8ab1503574c3f5ec475fe834c22a7a7183769d78f947785d1a0312f1e6a54bb2b4010b44a5e", @generic="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", @nested={0x1023, 0x7, 0x0, 0x1, [@generic="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", @typed={0x8, 0x5b, 0x0, 0x0, @fd=r0}, @generic="68609d88f70eda82583ce7c2a02f189d064932789db276"]}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x8}, @generic="011ae7edcc9beb9b6ffcc405f7622ddcbae7ffc96a738a59bc3c072c925db080e8163dc03cb042572fe11e2f7ba05b64a8a3502f38b9d18d098a6440fe2fd4a2daa428b8bcec1eac34afb20038f41798aebdeb6466e96ec297e12cb290f074c0f9527e7a54c3e9ae964578194d316a6464eb391056c456d26670e434ff64aee67d9f89f843cd3e52f5236f166b2703e127c4fdacb3421c9b0a2b326423bd4a33e1640331cce1899bc4098c5f369b0f871bbee6"]}, 0x25f8}], 0x3, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [r2, r8, r2, r1, r0]}}], 0x48}, 0x200000c1) fallocate(r3, 0x20, 0x0, 0x10000) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x7) acct(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='befs\x00', 0x20a4000, &(0x7f0000000240)='{\x00') 10:34:42 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:42 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000035000000000200000800040001000000", 0x24) [ 524.630086][T17795] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 524.638165][T17795] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c9bcb7cd [ 524.742866][T17855] FAULT_INJECTION: forcing a failure. [ 524.742866][T17855] name failslab, interval 1, probability 0, space 0, times 0 [ 524.757032][T17855] CPU: 0 PID: 17855 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 524.767557][T17855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.781060][T17855] Call Trace: [ 524.784331][T17855] dump_stack+0x137/0x19d [ 524.789162][T17855] should_fail+0x23c/0x250 [ 524.793557][T17855] __should_failslab+0x81/0x90 [ 524.798326][T17855] ? register_for_each_vma+0x372/0x890 [ 524.803872][T17855] should_failslab+0x5/0x20 [ 524.808370][T17855] kmem_cache_alloc_trace+0x49/0x320 [ 524.813656][T17855] ? register_for_each_vma+0x372/0x890 [ 524.819497][T17855] ? vma_interval_tree_iter_next+0x24c/0x280 [ 524.825458][T17855] register_for_each_vma+0x372/0x890 [ 524.831907][T17855] __uprobe_register+0x3f4/0x8a0 [ 524.837028][T17855] uprobe_register_refctr+0x29/0x40 [ 524.842377][T17855] probe_event_enable+0x2be/0x7d0 [ 524.849280][T17855] ? __uprobe_trace_func+0x420/0x420 [ 524.854601][T17855] trace_uprobe_register+0x88/0x410 [ 524.859811][T17855] ? find_next_bit+0xa7/0xf0 [ 524.864529][T17855] ? cpumask_next+0xc/0x30 [ 524.869072][T17855] perf_trace_event_init+0x34e/0x790 [ 524.874353][T17855] perf_uprobe_init+0xf5/0x140 [ 524.879098][T17855] perf_uprobe_event_init+0xde/0x140 [ 524.884379][T17855] perf_try_init_event+0x21a/0x400 [ 524.889479][T17855] perf_event_alloc+0x7eb/0x14d0 [ 524.894458][T17855] __se_sys_perf_event_open+0x5c9/0x25c0 [ 524.900411][T17855] ? __fget_light+0x21b/0x260 [ 524.905084][T17855] __x64_sys_perf_event_open+0x63/0x70 [ 524.910695][T17855] do_syscall_64+0x34/0x50 [ 524.915194][T17855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 524.921629][T17855] RIP: 0033:0x466459 10:34:42 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x22}) 10:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000036000000000200000800040001000000", 0x24) 10:34:42 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 524.925602][T17855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 524.945360][T17855] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 524.954162][T17855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 524.962780][T17855] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 524.970971][T17855] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 524.978980][T17855] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 524.986935][T17855] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:42 executing program 3: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000003c0002"], 0x50}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000037000000000200000800040001000000", 0x24) [ 525.081851][T17876] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.118233][T17876] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.294071][T17846] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 525.302259][T17846] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000048bbde79 10:34:42 executing program 0 (fault-call:4 fault-nth:54): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:42 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:42 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8c4e0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:42 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf83f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000038000000000200000800040001000000", 0x24) 10:34:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x2e}) 10:34:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xc84a2, &(0x7f00000002c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@user_xattr='user_xattr'}, {@prjquota='prjquota'}, {@dioread_lock='dioread_lock'}, {@journal_async_commit='journal_async_commit'}, {@nodelalloc='nodelalloc'}, {@test_dummy_encryption='test_dummy_encryption'}, {@acl='acl'}, {@noload='noload'}]}) [ 525.432463][T17907] FAULT_INJECTION: forcing a failure. [ 525.432463][T17907] name failslab, interval 1, probability 0, space 0, times 0 [ 525.445291][T17907] CPU: 0 PID: 17907 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 525.460125][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.470179][T17907] Call Trace: [ 525.473463][T17907] dump_stack+0x137/0x19d [ 525.477775][T17907] should_fail+0x23c/0x250 [ 525.482326][T17907] __should_failslab+0x81/0x90 [ 525.487085][T17907] ? register_for_each_vma+0x372/0x890 [ 525.492535][T17907] should_failslab+0x5/0x20 [ 525.497019][T17907] kmem_cache_alloc_trace+0x49/0x320 [ 525.502296][T17907] ? register_for_each_vma+0x372/0x890 [ 525.507738][T17907] ? vma_interval_tree_iter_next+0x24c/0x280 [ 525.513750][T17907] register_for_each_vma+0x372/0x890 [ 525.519013][T17907] __uprobe_register+0x3f4/0x8a0 [ 525.523956][T17907] uprobe_register_refctr+0x29/0x40 [ 525.529139][T17907] probe_event_enable+0x2be/0x7d0 [ 525.534182][T17907] ? __uprobe_trace_func+0x420/0x420 [ 525.539448][T17907] trace_uprobe_register+0x88/0x410 [ 525.544641][T17907] ? find_next_bit+0xa7/0xf0 [ 525.549249][T17907] ? cpumask_next+0xc/0x30 [ 525.553702][T17907] perf_trace_event_init+0x34e/0x790 [ 525.558997][T17907] perf_uprobe_init+0xf5/0x140 [ 525.563761][T17907] perf_uprobe_event_init+0xde/0x140 [ 525.569041][T17907] perf_try_init_event+0x21a/0x400 [ 525.574208][T17907] perf_event_alloc+0x7eb/0x14d0 [ 525.579160][T17907] __se_sys_perf_event_open+0x5c9/0x25c0 [ 525.584868][T17907] ? __fget_light+0x21b/0x260 [ 525.589531][T17907] __x64_sys_perf_event_open+0x63/0x70 [ 525.594991][T17907] do_syscall_64+0x34/0x50 [ 525.599397][T17907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 525.605282][T17907] RIP: 0033:0x466459 [ 525.609267][T17907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:43 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:43 executing program 1: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x10000, 0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) open(&(0x7f0000000040)='./file0\x00', 0x30041, 0x8) 10:34:43 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)=ANY=[@ANYBLOB='auto_da_alloc=0x00020000000000\x00\x00\x00\x00']) 10:34:43 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x100000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 525.629036][T17907] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 525.637470][T17907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 525.645434][T17907] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 525.653408][T17907] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.661622][T17907] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 525.669659][T17907] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000039000000000200000800040001000000", 0x24) 10:34:43 executing program 0 (fault-call:4 fault-nth:55): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:43 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="da9207265ccfcf0c2b1f2dffffffffc318c9ec6dde739441988df5503e73c31ac64f47af1cfde1f0ac3bcdbcc79c3a7ed74ffa8b1c22459ff85033222a32a8aa570c84a5525c88f8ce742be61fa81ae874b57e5a5dc6bf82ba8aa7768d8cfabb84727e187f3b4d3f53e792709efca7f3b201b9b0b1a1ad24bd852e5804418141b6c4639b330d86b791907b80f1c86cc24b9ec71cab19f39f2fa7260b11a90de1a1"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x610000, 0x8) open$dir(&(0x7f0000000040)='./file0\x00', 0x101100, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) openat(r1, &(0x7f0000000080)='./file0\x00', 0x18a80, 0x0) 10:34:43 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:43 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x901004, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'data=journal'}}, {@debug={'debug', 0x3d, 0x9}}, {@loose='loose'}, {@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@access_uid={'access', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@access_user='access=user'}], [{@subj_role={'subj_role', 0x3d, 'data=journal'}}]}}) 10:34:43 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) [ 525.965678][T17896] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 525.973782][T17896] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007fecb3e8 preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003a000000000200000800040001000000", 0x24) 10:34:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003b000000000200000800040001000000", 0x24) [ 526.085478][T17965] FAULT_INJECTION: forcing a failure. [ 526.085478][T17965] name failslab, interval 1, probability 0, space 0, times 0 [ 526.098217][T17965] CPU: 1 PID: 17965 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 526.108377][T17965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.119042][T17965] Call Trace: [ 526.122320][T17965] dump_stack+0x137/0x19d [ 526.126703][T17965] should_fail+0x23c/0x250 [ 526.131175][T17965] __should_failslab+0x81/0x90 [ 526.135954][T17965] ? register_for_each_vma+0x372/0x890 [ 526.141415][T17965] should_failslab+0x5/0x20 [ 526.146006][T17965] kmem_cache_alloc_trace+0x49/0x320 [ 526.151363][T17965] ? register_for_each_vma+0x372/0x890 [ 526.156811][T17965] ? vma_interval_tree_iter_next+0x24c/0x280 [ 526.162782][T17965] register_for_each_vma+0x372/0x890 [ 526.168080][T17965] __uprobe_register+0x3f4/0x8a0 [ 526.173188][T17965] uprobe_register_refctr+0x29/0x40 [ 526.178471][T17965] probe_event_enable+0x2be/0x7d0 [ 526.183663][T17965] ? __uprobe_trace_func+0x420/0x420 [ 526.188935][T17965] trace_uprobe_register+0x88/0x410 [ 526.194311][T17965] ? find_next_bit+0xa7/0xf0 [ 526.198900][T17965] ? cpumask_next+0xc/0x30 [ 526.203425][T17965] perf_trace_event_init+0x34e/0x790 [ 526.208752][T17965] perf_uprobe_init+0xf5/0x140 [ 526.213495][T17965] perf_uprobe_event_init+0xde/0x140 [ 526.218903][T17965] perf_try_init_event+0x21a/0x400 [ 526.223997][T17965] perf_event_alloc+0x7eb/0x14d0 [ 526.228996][T17965] __se_sys_perf_event_open+0x5c9/0x25c0 [ 526.234616][T17965] ? __fget_light+0x21b/0x260 [ 526.239339][T17965] __x64_sys_perf_event_open+0x63/0x70 [ 526.244887][T17965] do_syscall_64+0x34/0x50 [ 526.249290][T17965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 526.255310][T17965] RIP: 0033:0x466459 [ 526.259191][T17965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:43 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x400000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:43 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:43 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696cff300010e9b7f8b8f881d7eb9d69a441d53f8eeae01653f9f3e169d5216e4393e527355e5a3f82d6ffca51fe894e42a643479a0e5a67aa3ce7a358fed54d80b35873798c4dc485588d72cd7d7990f52bc434952b71d99c5fcdc81d58ef702922446def83"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:43 executing program 3: mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003c000000000200000800040001000000", 0x24) [ 526.279129][T17965] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 526.287524][T17965] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 526.295486][T17965] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 526.303448][T17965] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.311399][T17965] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 526.319418][T17965] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:44 executing program 0 (fault-call:4 fault-nth:56): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x700000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@data_journal='data=journal', 0x2e}]}) 10:34:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003d000000000200000800040001000000", 0x24) 10:34:44 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) fspick(r0, &(0x7f00000001c0)='./file0\x00', 0x1) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='data=journal') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:44 executing program 1: mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2e2f47696c6530a66e5e2660e206aeab767c0d763d64c6ac051eba819e76c96df942b8b1732fe13a00e1f7a3c1ac9977117ddcb44af7e46deb4fe7341b9ca252c190e6f64b1b774c036a974257bc31874cf54a4ca726b58a12e3dd806325b5bb89eef0ee642d60c7ddbe5dcf0c6928423179f053e8000000001f0ec6be0f418c93805074350f9d70a8e724ed6b4f1a6469f607d16bdab4ce713ae4b50201791aecbb85787646e5e7d311ded3518e612cea7f408833778dec37c5ec8b0d2051cdf5c076a3c41edb7843e7fbde1a76d8448e1dd8c7329f05775b0194569af0402680d7a0e506cf1e8ac07535c800c5aa93a8"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x82, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x264d80, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x51d0c000) [ 526.696660][T18009] FAULT_INJECTION: forcing a failure. [ 526.696660][T18009] name failslab, interval 1, probability 0, space 0, times 0 [ 526.709399][T18009] CPU: 1 PID: 18009 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 526.723719][T18009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.733995][T18009] Call Trace: [ 526.737302][T18009] dump_stack+0x137/0x19d [ 526.741751][T18009] should_fail+0x23c/0x250 [ 526.746239][T18009] __should_failslab+0x81/0x90 [ 526.750985][T18009] ? register_for_each_vma+0x372/0x890 [ 526.756424][T18009] should_failslab+0x5/0x20 [ 526.760927][T18009] kmem_cache_alloc_trace+0x49/0x320 [ 526.766223][T18009] ? register_for_each_vma+0x372/0x890 [ 526.771673][T18009] ? vma_interval_tree_iter_next+0x263/0x280 [ 526.777646][T18009] register_for_each_vma+0x372/0x890 [ 526.782932][T18009] __uprobe_register+0x3f4/0x8a0 [ 526.787856][T18009] uprobe_register_refctr+0x29/0x40 [ 526.793103][T18009] probe_event_enable+0x2be/0x7d0 [ 526.798121][T18009] ? __uprobe_trace_func+0x420/0x420 [ 526.803575][T18009] trace_uprobe_register+0x88/0x410 [ 526.808819][T18009] ? find_next_bit+0xa7/0xf0 [ 526.813401][T18009] ? cpumask_next+0xc/0x30 [ 526.817862][T18009] perf_trace_event_init+0x34e/0x790 [ 526.823158][T18009] perf_uprobe_init+0xf5/0x140 [ 526.827909][T18009] perf_uprobe_event_init+0xde/0x140 [ 526.833185][T18009] perf_try_init_event+0x21a/0x400 [ 526.838490][T18009] perf_event_alloc+0x7eb/0x14d0 [ 526.843436][T18009] __se_sys_perf_event_open+0x5c9/0x25c0 [ 526.849133][T18009] ? __fget_light+0x21b/0x260 [ 526.853787][T18009] __x64_sys_perf_event_open+0x63/0x70 [ 526.859248][T18009] do_syscall_64+0x34/0x50 [ 526.863649][T18009] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 526.869542][T18009] RIP: 0033:0x466459 [ 526.873487][T18009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:44 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x8084a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, 0x0) 10:34:44 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x40102, 0x18) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 526.893206][T18009] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 526.901635][T18009] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 526.909586][T18009] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 526.917552][T18009] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 526.925515][T18009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 526.933485][T18009] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003e000000000200000800040001000000", 0x24) 10:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, 0x0) 10:34:44 executing program 0 (fault-call:4 fault-nth:57): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:44 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000180)=ANY=[@ANYBLOB="00a1582a550083ef75f17b00bf40bb9d32661ac070e0b9d67adee3ac9561322229cb6a3f4985bce284e75a8e62ef0d1824f8c5ba06b2136efac324ba4770008fcaac932be4dd3c8d14ad4354380e78a5802cd70db9967e8e912bb4cddf7967d9753a1719f07e2a93924ec86701a75bbb085ce8b2480a6257128f01956193aedb5c3e7f92cabde490c9a9c038"]) [ 527.238280][T17999] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 527.246559][T17999] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000044c28b8e 10:34:44 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='data=jour~al,\x00']) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:34:44 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, 0x0) 10:34:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000003f000000000200000800040001000000", 0x24) 10:34:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000040000000000200000800040001000000", 0x24) [ 527.367784][T18065] FAULT_INJECTION: forcing a failure. [ 527.367784][T18065] name failslab, interval 1, probability 0, space 0, times 0 [ 527.380436][T18065] CPU: 0 PID: 18065 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 527.390588][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.400635][T18065] Call Trace: [ 527.403894][T18065] dump_stack+0x137/0x19d [ 527.408205][T18065] should_fail+0x23c/0x250 [ 527.412667][T18065] __should_failslab+0x81/0x90 [ 527.417408][T18065] ? register_for_each_vma+0x372/0x890 [ 527.422848][T18065] should_failslab+0x5/0x20 [ 527.427359][T18065] kmem_cache_alloc_trace+0x49/0x320 [ 527.432625][T18065] ? register_for_each_vma+0x372/0x890 [ 527.438079][T18065] ? vma_interval_tree_iter_next+0x263/0x280 [ 527.444099][T18065] register_for_each_vma+0x372/0x890 [ 527.449365][T18065] __uprobe_register+0x3f4/0x8a0 [ 527.454356][T18065] uprobe_register_refctr+0x29/0x40 [ 527.459589][T18065] probe_event_enable+0x2be/0x7d0 [ 527.464681][T18065] ? __uprobe_trace_func+0x420/0x420 [ 527.469970][T18065] trace_uprobe_register+0x88/0x410 [ 527.475205][T18065] ? find_next_bit+0xa7/0xf0 [ 527.479771][T18065] ? cpumask_next+0xc/0x30 [ 527.484165][T18065] perf_trace_event_init+0x34e/0x790 [ 527.489499][T18065] perf_uprobe_init+0xf5/0x140 [ 527.494252][T18065] perf_uprobe_event_init+0xde/0x140 [ 527.499512][T18065] perf_try_init_event+0x21a/0x400 [ 527.504607][T18065] perf_event_alloc+0x7eb/0x14d0 [ 527.509553][T18065] __se_sys_perf_event_open+0x5c9/0x25c0 [ 527.515244][T18065] ? __fget_light+0x21b/0x260 [ 527.519914][T18065] __x64_sys_perf_event_open+0x63/0x70 [ 527.525366][T18065] do_syscall_64+0x34/0x50 [ 527.529776][T18065] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 527.535681][T18065] RIP: 0033:0x466459 [ 527.539609][T18065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 527.559192][T18065] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:44 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:44 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x12) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 527.567598][T18065] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 527.575560][T18065] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 527.583516][T18065] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 527.591464][T18065] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 527.599412][T18065] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1800000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:45 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) statx(r0, &(0x7f0000000740)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x7, &(0x7f0000000680)=[{&(0x7f0000000180)="180cd0966e8af153226d052d83f2e4885f6a97a5ba35b019d6b107e018880745a8e5b4fb5bb3924b5656d1e9d42fc0214c6d4e241d5ea8320ec8db80a51f2e55ccef5af439fe8741dbca817f8e3ba4d0143257e86846b90f4e9c5ba2e65a1952fae6c1704fc9bc5b78fe5638db4ad4bee8c47d025bfa566c7b0e", 0x7a, 0x5}, {&(0x7f0000000300)="e7e32f79e8de64ff4b53ce6f78f4110704637343b77e96da38cd6251048d85fa35ef9629d75e353d890d7bbb1e3c8561c6450b6f69c26956741969a7d6565c3cf2cc546677a4a34138b505a77aa4a81927413bb7828a1ec022c17b206ea62cb80dab381ac2a0051a664618d51ab226c351db6d74295b0c7a47b5aeeb3191e7e8626ecbad6ff393697a4f39762a632cfb688106a60cfa9e3a475a717c9e564e7e673b037f6e042253bb670ae191a2f4012e5d2b42409a665d342a2378355caaa18d", 0xc1, 0x2}, {&(0x7f0000000400)="fb53e8a1f6ec241543931f121476cb29d6a99cf6677f32edecfa89876dbe1510e2f3f592268199299acbc83f6d547cd0adc756fe86dd7de42d1ee8982492af6d6f3bbe6473fdc66c26f6766272211fa7ea95437afdca3c74098e1f895a169292a2616c9ff35db7dafbb8df0b1a535ff57e44aaad2138fcf642801c864e4d6efeb7a63c93724096a6c1afaed94ed232053145ce299f405faecc3ab0357ba6456530225145cc01d110964a384dc806f43d28dfeb9802f2c0df59d069fea0dd28ecf4af8e242548aad8668c025efc375b9411d50a42d313167505cbd819350d90ffcdf636cdbb1de8193c4ccccc292f3cbbd0d195fd36f390", 0xf7, 0x5}, {&(0x7f0000000200)="c55c0d32490607e2eb42b5e1ba9e5ff4b76972623cbf3b710430e6da01a9046799392e032c8edbefdf9c8491b4bf388694c617c30b7d9a", 0x37, 0x5}, {&(0x7f0000000240), 0x0, 0x58}, {&(0x7f0000000500)="a72aeb33523b464056a17848efe0de93c8cab5c61a2f74eab4fcea2969237e1fcdde6fcbf1f6664269642eed4447c6b946579d9c6b07a9c875cb5e4bb620f581e020c17345dc16dcbac97d17dcd3150ccd027d89f12996b7b3d27e5800b5471eb0486411407d67b411807e33927455d352fc06002d7310acfe447e4ba39a0ad4875387256540d3c009339d065e56647b81859da4baf37a029f79934a167c85e77b2d3db640835aa453ceb2c14916a573e7d6f5c574678f6c2f4aa202e8a7b0", 0xbf, 0x1}, {&(0x7f00000005c0)="62b20d11bc1d7b97efcb4db1818f2991f25e31b8acd96723676c6db1ec800da3a2a2e1949f80cbe5296d46d8871123c35ada502e21a49d208f6d58dc0ad767163815dffdc510d1e26a48b8e0b6eee691204e9dcb3091d7cab7de0e48e52d44ebb5ded393c65f8afe51baca6955796324587a4722e3d76e475370f16964ab75fd44467925a2b5a6d2ffc44ee05cdd00a98c2738b8d6414612d23a2873ff549cb8d75abc139c", 0xa5, 0x8}], 0x81440, &(0x7f00000008c0)={[{@noquota='noquota'}, {@nouid32='nouid32'}, {@usrjquota='usrjquota='}, {@resuid={'resuid', 0x3d, r1}}, {@data_journal='data=journal'}, {@usrquota='usrquota'}, {@mblk_io_submit='mblk_io_submit'}], [{@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@context={'context', 0x3d, 'root'}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute'}}, {@subj_role={'subj_role', 0x3d, ')]*}+]%[,.{'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) 10:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 528.019556][T18054] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 528.027679][T18054] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000044c28b8e 10:34:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000041000000000200000800040001000000", 0x24) 10:34:45 executing program 0 (fault-call:4 fault-nth:58): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:45 executing program 3: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file1\x00', 0xfffffffeffffffff, 0x7, &(0x7f0000000600)=[{&(0x7f00000000c0)="7ee18b986ad9312aea2b6acb941e744b618d686038531332395f8b64e3c7b8a7a0b7f4ee74abe06e61dc0ca46a", 0x2d, 0x7}, {&(0x7f0000000180)="9eb2f9a9a02db42179c9a64d71ba0f6285f765cc0c3e9a7e6c4f1851e71bf332face4cb1c583589bff827174a29845ed180cf03c41fc10d65e0920f7194dfa3a107753fdcdeb60876d89b989d2805a7fb22539aef61f4e2093bd7e522ebcaf5ed298164113c0c53a8fdf2b7dc0b2b8efd8fa8bd408784a71f9fc75fab9ede5e775a7393f8bda10f82b6ec21e2c92d76f0ca9f363c00cbd7849537562da64801de536f4ed1622b362c72c260ad58a6b3166a803a31994e563fa7d592b93edbd42eb3a48106481552142debf7bc26bedc1", 0xd0}, {&(0x7f0000000300)="fbe3461e9ab6a7b05597c7280f988fa9a64456e7dcd175da6902f63890369299893657f93a06c3f91be2a46018baf20b1a2e909e4f0fc1c2b5f58cd5cff49576d807517f3705272638949d37912cea4f281f156254024c8b7009f580495e", 0x5e, 0x401}, {&(0x7f0000000380)="ceb88df15e3c2b712b5079b2a4fad91322779a771f32445c316f1b50cb9495282c5fafc670", 0x25, 0x5}, {&(0x7f00000003c0)="9ff0b3c90e01103e0f9144323b3483e6b632eba1e81067f86ed474e429aa39345bad5db447bb661fa0814b03b426dc2347a9da6c10500b8990ac0ecf7578dde166f73ab7dd2f0df8dfaf6310aad4821372c074035495d04bba61faf8b34e76ac2c621090ba23ab4faa131d5cb2198fbb32dba1599375c945b6957382", 0x7c, 0x100}, {&(0x7f0000000440)="ad01321c7331772033f2483e76f8263705920fe73dacfc3f588f9bfc09e5bd056a0f118a562ffc8799b97d8c19b575056faba5edad44cd89a416807ffd1990bf9111c5c721bc97b6e3479361c3e16badc3c31c28baa8e915ba517903da05dc1443646e5fbf19371595e39f3ea7c1a4e3c0299421bf5ff97eab39c29d3d4ea48ab15614937cbf194c890cc5cd870ca7fc09cf5cefd5159ccd3bb6f55a58cb318f011c5834b0d084bb87b3592c75fb57ef5833b91c6d6dac8a22b096ac1a2a35ecc2764437", 0xc4, 0x40}, {&(0x7f0000000540)="b4e916afc72439f26f284b39b4ad9132722df32c905c20c2d9456aad4aeba7e550f67830cae58e35ed2d55dd8852da5e6e78c89f1fbca877a230fb0d4cb6ecf2223165aae3f5203395e4dae7601952140163589ead96b201d1926039d6e9c68ff7a200f1a45822eed7851eca7779f94f85a23612529d87ec53a3c96dea351b35a5c9e6575839d55fb1663dfb3a2e6f3238bcd5af", 0x94, 0x1}], 0x100000, &(0x7f00000006c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@debug='debug'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@quiet='quiet'}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r5}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000007c0)={r5, 0x0, "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", "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"}) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:45 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="cd4c", 0x2, 0x6}, {&(0x7f00000001c0)="1bec619b0bd8d340727a229ba2ae67d93b27af8dffa4618116dbf0baaf97f7dcaa6eed902dbf81117b17cf8658eac7a00f1b51a0eefb28bae693c3e8bc7647d116261c2c0206e12aca22d81023071373174076574649c53fc8c7dff8a646c17386a5ceb1f61160b427d2c8a882055b85ea4c12267624b71f736676be3e4d1a937407a791b76c1ba995d8226e2b11d38a5c336d35ec1fae8c97d44a679a5c783847d98a964f6603dddd7dc666e7d99187b84f74", 0xb3, 0x81}, {&(0x7f0000000300)="6016a0bf3bf6db7b17535b6f3774834e34c4d7b0701f116e83220f8d6a2f5d33ba510ba2d7bbbc5a518ef1d63b4c59e04afeabdd6d4859d214a526", 0x3b}, {&(0x7f0000000340)="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", 0xfc}], 0x20080c2, &(0x7f00000004c0)={[{@block_validity='block_validity'}, {@dioread_lock='dioread_lock'}], [{@pcr={'pcr', 0x3d, 0x31}}]}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000042000000000200000800040001000000", 0x24) [ 528.116528][T18103] EXT4-fs: 68 callbacks suppressed [ 528.116567][T18103] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 528.131980][T18107] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 528.144362][T18111] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 528.153995][T18113] FAULT_INJECTION: forcing a failure. [ 528.153995][T18113] name failslab, interval 1, probability 0, space 0, times 0 [ 528.166680][T18113] CPU: 1 PID: 18113 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 528.176901][T18113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.186961][T18113] Call Trace: [ 528.190226][T18113] dump_stack+0x137/0x19d [ 528.194690][T18113] should_fail+0x23c/0x250 [ 528.199084][T18113] __should_failslab+0x81/0x90 [ 528.203852][T18113] ? register_for_each_vma+0x372/0x890 [ 528.209291][T18113] should_failslab+0x5/0x20 [ 528.213822][T18113] kmem_cache_alloc_trace+0x49/0x320 [ 528.219093][T18113] ? register_for_each_vma+0x372/0x890 [ 528.224530][T18113] ? vma_interval_tree_iter_next+0x24c/0x280 [ 528.230597][T18113] register_for_each_vma+0x372/0x890 [ 528.235894][T18113] __uprobe_register+0x3f4/0x8a0 [ 528.240823][T18113] uprobe_register_refctr+0x29/0x40 [ 528.246080][T18113] probe_event_enable+0x2be/0x7d0 [ 528.251087][T18113] ? __uprobe_trace_func+0x420/0x420 [ 528.256351][T18113] trace_uprobe_register+0x88/0x410 [ 528.261529][T18113] ? find_next_bit+0xa7/0xf0 [ 528.266112][T18113] ? cpumask_next+0xc/0x30 [ 528.270518][T18113] perf_trace_event_init+0x34e/0x790 [ 528.275870][T18113] perf_uprobe_init+0xf5/0x140 [ 528.280612][T18113] perf_uprobe_event_init+0xde/0x140 [ 528.285891][T18113] perf_try_init_event+0x21a/0x400 [ 528.291456][T18113] perf_event_alloc+0x7eb/0x14d0 [ 528.296378][T18113] __se_sys_perf_event_open+0x5c9/0x25c0 [ 528.302031][T18113] ? __fget_light+0x21b/0x260 [ 528.306701][T18113] __x64_sys_perf_event_open+0x63/0x70 [ 528.312178][T18113] do_syscall_64+0x34/0x50 [ 528.316577][T18113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.322556][T18113] RIP: 0033:0x466459 [ 528.326428][T18113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.346051][T18113] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 528.354521][T18113] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 10:34:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000043000000000200000800040001000000", 0x24) [ 528.362482][T18113] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 528.370434][T18113] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.378384][T18113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 528.386343][T18113] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 528.398733][T18114] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. 10:34:45 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, 0x0) 10:34:45 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) write(r0, &(0x7f0000000180)="c4d3bb8284f20d04a83303460c1a8d0a31166b7012bbf79e250f43377d3444ecc73eb099762e285cde1423a36f0c1fe889852682bdbd844cb2536fcb9e252d934d70f2cad4d4da28bae872c58ca389511535d84ce4ec08f74e5ceab875a35babcc80c8ca7b5b5c049faaac5abb6c0435efc270c8a8bcc973f93c2648aad225f922b23f5ac3a686a03cd477acbfa8159b22e2f57d30909eb9ff3469dcc1da2da046ddb4f533ff21e24b2ac379841e9495", 0xb0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:45 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2e00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:45 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000010, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x41, 0x0) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000200)) open(&(0x7f0000000180)='./file0\x00', 0x105a00, 0x20) [ 528.413182][T18120] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. 10:34:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000044000000000200000800040001000000", 0x24) [ 528.512634][T18139] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 528.550120][T18139] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 528.562705][T18140] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 528.574786][T18148] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 528.700348][T18105] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 528.708442][T18105] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cc54ad04 10:34:46 executing program 0 (fault-call:4 fault-nth:59): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000043000000000200000800040001000000", 0x24) 10:34:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2008, &(0x7f0000000140)={[{@barrier='barrier'}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@sysvgroups='sysvgroups'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@journal_dev={'journal_dev', 0x3d, 0x7ff}}, {@oldalloc='oldalloc'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nojournal_checksum='nojournal_checksum'}, {@delalloc='delalloc'}]}) 10:34:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000045000000000200000800040001000000", 0x24) 10:34:46 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3f00000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 528.788651][T18158] FAULT_INJECTION: forcing a failure. [ 528.788651][T18158] name failslab, interval 1, probability 0, space 0, times 0 [ 528.799183][T18163] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 528.801378][T18158] CPU: 1 PID: 18158 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 528.821631][T18158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.832085][T18158] Call Trace: [ 528.835359][T18158] dump_stack+0x137/0x19d [ 528.839683][T18158] should_fail+0x23c/0x250 [ 528.844140][T18158] __should_failslab+0x81/0x90 [ 528.848900][T18158] ? register_for_each_vma+0x372/0x890 [ 528.854471][T18158] should_failslab+0x5/0x20 [ 528.858956][T18158] kmem_cache_alloc_trace+0x49/0x320 [ 528.864220][T18158] ? register_for_each_vma+0x372/0x890 [ 528.869675][T18158] ? vma_interval_tree_iter_next+0x263/0x280 [ 528.875635][T18158] register_for_each_vma+0x372/0x890 [ 528.880923][T18158] __uprobe_register+0x3f4/0x8a0 [ 528.885913][T18158] uprobe_register_refctr+0x29/0x40 [ 528.891092][T18158] probe_event_enable+0x2be/0x7d0 [ 528.896112][T18158] ? __uprobe_trace_func+0x420/0x420 [ 528.901377][T18158] trace_uprobe_register+0x88/0x410 [ 528.906555][T18158] ? find_next_bit+0xa7/0xf0 [ 528.911211][T18158] ? cpumask_next+0xc/0x30 [ 528.915624][T18158] perf_trace_event_init+0x34e/0x790 [ 528.920888][T18158] perf_uprobe_init+0xf5/0x140 [ 528.926358][T18158] perf_uprobe_event_init+0xde/0x140 [ 528.931622][T18158] perf_try_init_event+0x21a/0x400 [ 528.936784][T18158] perf_event_alloc+0x7eb/0x14d0 [ 528.941725][T18158] __se_sys_perf_event_open+0x5c9/0x25c0 [ 528.947358][T18158] ? __fget_light+0x21b/0x260 [ 528.952028][T18158] __x64_sys_perf_event_open+0x63/0x70 [ 528.957574][T18158] do_syscall_64+0x34/0x50 [ 528.961976][T18158] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 528.967910][T18158] RIP: 0033:0x466459 [ 528.971786][T18158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 528.991402][T18158] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 528.999807][T18158] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 529.007829][T18158] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 529.015828][T18158] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 529.023845][T18158] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 529.031865][T18158] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2200000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockname$unix(r1, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000046000000000200000800040001000000", 0x24) 10:34:46 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) unlink(&(0x7f0000000000)='./file0\x00') 10:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x901004, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'data=journal'}}, {@debug={'debug', 0x3d, 0x9}}, {@loose='loose'}, {@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@access_uid={'access', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@access_user='access=user'}], [{@subj_role={'subj_role', 0x3d, 'data=journal'}}]}}) 10:34:46 executing program 0 (fault-call:4 fault-nth:60): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:46 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x8cffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x4) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) lseek(r0, 0x9, 0x2) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r1, 0x20, 0x0, 0x10000) ioctl$KDDELIO(r1, 0x4b35, 0xf93) mount(&(0x7f0000000200)=@sr0='/dev/sr0\x00', &(0x7f0000000780)='./file1\x00', 0x0, 0x2094c4, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000180)=ANY=[@ANYBLOB="00ec095e6705c3fac06ad7b9743ecf136e7c00cecaeda59dc49f2389745171b612dfcd1cb594962460a2b35e373534c0afa5c0d046520ecdc0d3c349908ef7002a3e00d6ccbc41d5bfaca105ac83730848fc367c2bca28ea75146670947ae778"]) 10:34:46 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20800, &(0x7f0000000000)={[{@data_journal='data=journal'}]}) 10:34:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000047000000000200000800040001000000", 0x24) 10:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x901004, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'data=journal'}}, {@debug={'debug', 0x3d, 0x9}}, {@loose='loose'}, {@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@access_uid={'access', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@access_user='access=user'}], [{@subj_role={'subj_role', 0x3d, 'data=journal'}}]}}) 10:34:46 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x901004, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'data=journal'}}, {@debug={'debug', 0x3d, 0x9}}, {@loose='loose'}, {@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@access_uid={'access', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@access_user='access=user'}], [{@subj_role={'subj_role', 0x3d, 'data=journal'}}]}}) 10:34:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000048000000000200000800040001000000", 0x24) 10:34:46 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="337ecbb00abe5cc6"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x80) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x49) r1 = syz_io_uring_setup(0x6081, &(0x7f0000000240)={0x0, 0xe2ad, 0x0, 0x3, 0x3da}, &(0x7f00001aa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r3, 0x10000000) syz_io_uring_submit(0x0, r4, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7) syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x6, 0x2004, @fd=r0, 0xfff, 0x0, 0x4, 0x12, 0x1, {0x1, r5}}, 0x87) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0xbc, 0x6, 0x1, 0x9, 0x0, 0x9, 0x12080, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x85, 0x6, 0x5, 0x1, 0x2, 0x2, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xbc0c0, 0x158) mmap(&(0x7f0000113000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x48393000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r7, &(0x7f0000000200)='./file0\x00', 0x4100, 0xab) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 529.435827][T18206] FAULT_INJECTION: forcing a failure. [ 529.435827][T18206] name failslab, interval 1, probability 0, space 0, times 0 [ 529.448513][T18206] CPU: 1 PID: 18206 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 529.459270][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.469329][T18206] Call Trace: [ 529.472603][T18206] dump_stack+0x137/0x19d [ 529.476927][T18206] should_fail+0x23c/0x250 [ 529.481334][T18206] __should_failslab+0x81/0x90 [ 529.486085][T18206] ? register_for_each_vma+0x372/0x890 [ 529.491581][T18206] should_failslab+0x5/0x20 [ 529.496112][T18206] kmem_cache_alloc_trace+0x49/0x320 [ 529.501385][T18206] ? register_for_each_vma+0x372/0x890 [ 529.506866][T18206] ? vma_interval_tree_iter_next+0x263/0x280 [ 529.512824][T18206] register_for_each_vma+0x372/0x890 [ 529.518093][T18206] __uprobe_register+0x3f4/0x8a0 [ 529.523114][T18206] uprobe_register_refctr+0x29/0x40 [ 529.528408][T18206] probe_event_enable+0x2be/0x7d0 [ 529.533477][T18206] ? __uprobe_trace_func+0x420/0x420 [ 529.538811][T18206] trace_uprobe_register+0x88/0x410 [ 529.544036][T18206] ? find_next_bit+0xa7/0xf0 [ 529.548602][T18206] ? cpumask_next+0xc/0x30 [ 529.552992][T18206] perf_trace_event_init+0x34e/0x790 [ 529.558256][T18206] perf_uprobe_init+0xf5/0x140 [ 529.563024][T18206] perf_uprobe_event_init+0xde/0x140 [ 529.568332][T18206] perf_try_init_event+0x21a/0x400 [ 529.573427][T18206] perf_event_alloc+0x7eb/0x14d0 [ 529.578387][T18206] __se_sys_perf_event_open+0x5c9/0x25c0 [ 529.584069][T18206] ? __fget_light+0x21b/0x260 [ 529.588724][T18206] __x64_sys_perf_event_open+0x63/0x70 [ 529.594258][T18206] do_syscall_64+0x34/0x50 [ 529.598734][T18206] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 529.604684][T18206] RIP: 0033:0x466459 [ 529.608565][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 529.628163][T18206] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)) 10:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:47 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='data=journalJ\x00']) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x44000) accept4$unix(r0, &(0x7f0000000180), &(0x7f0000000040)=0x6e, 0x0) [ 529.636572][T18206] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 529.644531][T18206] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 529.652496][T18206] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 529.660463][T18206] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 529.668412][T18206] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:47 executing program 0 (fault-call:4 fault-nth:61): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) 10:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xf8f73f0000000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:47 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="691f1c0b3f4ac0f39be405a613e52e2f66696c657000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000049000000000200000800040001000000", 0x24) 10:34:47 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x884a0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESHEX=r0]) [ 529.995394][T18258] FAULT_INJECTION: forcing a failure. [ 529.995394][T18258] name failslab, interval 1, probability 0, space 0, times 0 [ 530.008049][T18258] CPU: 1 PID: 18258 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 530.018202][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.028253][T18258] Call Trace: [ 530.031512][T18258] dump_stack+0x137/0x19d [ 530.035821][T18258] should_fail+0x23c/0x250 [ 530.040271][T18258] __should_failslab+0x81/0x90 [ 530.045081][T18258] ? register_for_each_vma+0x372/0x890 [ 530.051088][T18258] should_failslab+0x5/0x20 [ 530.055585][T18258] kmem_cache_alloc_trace+0x49/0x320 [ 530.060921][T18258] ? register_for_each_vma+0x372/0x890 [ 530.066394][T18258] ? vma_interval_tree_iter_next+0x263/0x280 [ 530.072352][T18258] register_for_each_vma+0x372/0x890 [ 530.077618][T18258] __uprobe_register+0x3f4/0x8a0 [ 530.082533][T18258] uprobe_register_refctr+0x29/0x40 [ 530.087713][T18258] probe_event_enable+0x2be/0x7d0 [ 530.092732][T18258] ? __uprobe_trace_func+0x420/0x420 [ 530.098118][T18258] trace_uprobe_register+0x88/0x410 [ 530.103293][T18258] ? find_next_bit+0xa7/0xf0 [ 530.107857][T18258] ? cpumask_next+0xc/0x30 [ 530.112297][T18258] perf_trace_event_init+0x34e/0x790 [ 530.117622][T18258] perf_uprobe_init+0xf5/0x140 [ 530.122383][T18258] perf_uprobe_event_init+0xde/0x140 [ 530.127656][T18258] perf_try_init_event+0x21a/0x400 [ 530.132753][T18258] perf_event_alloc+0x7eb/0x14d0 [ 530.137713][T18258] __se_sys_perf_event_open+0x5c9/0x25c0 [ 530.143359][T18258] ? __fget_light+0x21b/0x260 [ 530.148019][T18258] __x64_sys_perf_event_open+0x63/0x70 [ 530.153457][T18258] do_syscall_64+0x34/0x50 [ 530.157854][T18258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 530.163813][T18258] RIP: 0033:0x466459 [ 530.167700][T18258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.187287][T18258] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) r0 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}, 0x0) 10:34:47 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="39e9c0733dcf074bd0e38e2e2f66696c653000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000180)=""/115, 0x73) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20004ae, &(0x7f00000002c0)=ANY=[@ANYBLOB="007099303eaab246c28d15f42ee04cfe2a7ebc5f030889af614636e93168779d8bd287bbd7507fd9f36c996dd5718cc03550d6540c450d4b5d918e588b4da028295803da999a6b812a9ee4ca647b456755b1a68e09895c597c39d7323468f22e5fb8eb6f3c2df25fdcafe213804659a186936eb0ec0400bb3510addf7d97942c9e1c193cc5d642fb94a47646d9c26712fd13e06eda3b3734803e584ec2881debd19b260000000000000000"]) 10:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xfeffffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) [ 530.195678][T18258] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 530.203666][T18258] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 530.211623][T18258] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.219610][T18258] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 530.227559][T18258] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:47 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000180)=ANY=[@ANYBLOB="0071508dfc8451cb1205dba1de72810eecd960e6418155165dd18bc430e40753edcb3523e8b9c5a4a341d48532731cb50dffc2af9856ad8a17d24f288114ea3f20ece632618760d8a64c10bc730e300a5592b959933617e0777047e56d3c81260ab7593e98a3f2903a5f89dd39798cad12afa10f298f3b7ff0194d75260e79e8602adc7c14c2f5672dbb48cc9d849719671a251bab6c31b527b53e0000ffffa204cf4b46d2414d497645f5b9ca59522570e650d7f545f6d6fab9d5"]) 10:34:47 executing program 3: sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x100, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x20000802) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004a000000000200000800040001000000", 0x24) [ 530.537469][T18255] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 530.545568][T18255] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000001872b4c 10:34:47 executing program 0 (fault-call:4 fault-nth:62): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:47 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x20000, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:47 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xffefffff00000000, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004b000000000200000800040001000000", 0x24) 10:34:47 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000005540f4f9106497dcb98bd887011665859a79364789a37ac3ea100a58fee2c65fba47fac2819ad8aa31a6e07a512d55883dcd6d81940b1b477622a913bdecbc62e78b3152c894e4472ec12439f7a5bf2ee406c3232b9d17ecb1433a1069a023f1769b85609e4e958ab062e2cd307859dc90531e9f"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x44) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:47 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8cc01, 0x100) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 530.622338][T18309] FAULT_INJECTION: forcing a failure. [ 530.622338][T18309] name failslab, interval 1, probability 0, space 0, times 0 [ 530.635054][T18309] CPU: 1 PID: 18309 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 530.645388][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.655457][T18309] Call Trace: [ 530.658734][T18309] dump_stack+0x137/0x19d [ 530.663069][T18309] should_fail+0x23c/0x250 [ 530.667483][T18309] __should_failslab+0x81/0x90 [ 530.672246][T18309] ? register_for_each_vma+0x372/0x890 [ 530.677705][T18309] should_failslab+0x5/0x20 [ 530.682196][T18309] kmem_cache_alloc_trace+0x49/0x320 [ 530.687474][T18309] ? register_for_each_vma+0x372/0x890 [ 530.692925][T18309] ? vma_interval_tree_iter_next+0x24c/0x280 [ 530.698903][T18309] register_for_each_vma+0x372/0x890 [ 530.704167][T18309] __uprobe_register+0x3f4/0x8a0 [ 530.709112][T18309] uprobe_register_refctr+0x29/0x40 [ 530.714317][T18309] probe_event_enable+0x2be/0x7d0 [ 530.719435][T18309] ? __uprobe_trace_func+0x420/0x420 [ 530.724702][T18309] trace_uprobe_register+0x88/0x410 [ 530.729947][T18309] ? find_next_bit+0xa7/0xf0 [ 530.734566][T18309] ? cpumask_next+0xc/0x30 [ 530.738958][T18309] perf_trace_event_init+0x34e/0x790 [ 530.744254][T18309] perf_uprobe_init+0xf5/0x140 [ 530.749018][T18309] perf_uprobe_event_init+0xde/0x140 [ 530.754305][T18309] perf_try_init_event+0x21a/0x400 [ 530.759403][T18309] perf_event_alloc+0x7eb/0x14d0 [ 530.764342][T18309] __se_sys_perf_event_open+0x5c9/0x25c0 [ 530.769980][T18309] ? __fget_light+0x21b/0x260 [ 530.774647][T18309] __x64_sys_perf_event_open+0x63/0x70 [ 530.780173][T18309] do_syscall_64+0x34/0x50 [ 530.784582][T18309] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 530.790480][T18309] RIP: 0033:0x466459 [ 530.794411][T18309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 530.814038][T18309] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000020000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) [ 530.822430][T18309] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 530.830398][T18309] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 530.838369][T18309] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 530.846336][T18309] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 530.854301][T18309] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:48 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffe3, 0x0, 0x0, 0x884a0, &(0x7f0000000180)={[], [{@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}, {@appraise_type='appraise_type=imasig'}, {@fowner_gt={'fowner>'}}]}) 10:34:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004c000000000200000800040001000000", 0x24) 10:34:48 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x50000, 0x80) r2 = accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) connect(r2, &(0x7f00000002c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80}, 0x80) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x100) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x9d4a1, &(0x7f0000000180)=ANY=[@ANYRES16=r1]) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r3, 0x20, 0x0, 0x10000) mkdirat(r3, &(0x7f0000000240)='./file0\x00', 0x20) 10:34:48 executing program 0 (fault-call:4 fault-nth:63): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:48 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x2}) 10:34:48 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000000000, 0x0, 0x0, 0x884a0, &(0x7f0000000180)=ANY=[@ANYBLOB='D']) 10:34:48 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x800, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x10) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x1000080, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000f4dddfd33ffc29a1ee5ad8238246173dbf25ac4bdb3a1a3fd06b93accbd27f42e8d43b31442c2267e389f8d4e5fa8fdf7f688d1ea19a1c701c8e"]) 10:34:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004d000000000200000800040001000000", 0x24) [ 531.142566][T18302] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 531.150679][T18302] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c9bcb7cd [ 531.236991][T18361] FAULT_INJECTION: forcing a failure. [ 531.236991][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 531.249658][T18361] CPU: 1 PID: 18361 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 531.259811][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.269856][T18361] Call Trace: [ 531.273120][T18361] dump_stack+0x137/0x19d [ 531.277444][T18361] should_fail+0x23c/0x250 [ 531.281943][T18361] __should_failslab+0x81/0x90 [ 531.286758][T18361] ? register_for_each_vma+0x372/0x890 [ 531.292218][T18361] should_failslab+0x5/0x20 [ 531.296765][T18361] kmem_cache_alloc_trace+0x49/0x320 [ 531.302047][T18361] ? register_for_each_vma+0x372/0x890 [ 531.307552][T18361] ? vma_interval_tree_iter_next+0x263/0x280 [ 531.313512][T18361] register_for_each_vma+0x372/0x890 [ 531.318795][T18361] __uprobe_register+0x3f4/0x8a0 [ 531.323726][T18361] uprobe_register_refctr+0x29/0x40 [ 531.328994][T18361] probe_event_enable+0x2be/0x7d0 [ 531.334016][T18361] ? __uprobe_trace_func+0x420/0x420 [ 531.339319][T18361] trace_uprobe_register+0x88/0x410 [ 531.344632][T18361] ? find_next_bit+0xa7/0xf0 [ 531.349365][T18361] ? cpumask_next+0xc/0x30 [ 531.354734][T18361] perf_trace_event_init+0x34e/0x790 [ 531.360017][T18361] perf_uprobe_init+0xf5/0x140 [ 531.364761][T18361] perf_uprobe_event_init+0xde/0x140 [ 531.370026][T18361] perf_try_init_event+0x21a/0x400 [ 531.375212][T18361] perf_event_alloc+0x7eb/0x14d0 [ 531.380141][T18361] __se_sys_perf_event_open+0x5c9/0x25c0 [ 531.385768][T18361] ? __fget_light+0x21b/0x260 [ 531.390524][T18361] __x64_sys_perf_event_open+0x63/0x70 [ 531.395984][T18361] do_syscall_64+0x34/0x50 [ 531.400685][T18361] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 531.407416][T18361] RIP: 0033:0x466459 [ 531.411481][T18361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004e000000000200000800040001000000", 0x24) 10:34:48 executing program 2: creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:48 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20) 10:34:48 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x4}) 10:34:48 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x40) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 531.431420][T18361] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 531.440337][T18361] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 531.449217][T18361] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 531.460397][T18361] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 531.468351][T18361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 531.476405][T18361] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:48 executing program 2: creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:49 executing program 0 (fault-call:4 fault-nth:64): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000004f000000000200000800040001000000", 0x24) 10:34:49 executing program 2: creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:49 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x30) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000002c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000) r4 = getuid() setuid(r4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xe88b0, &(0x7f0000000180)={[{@data_journal='data=journal'}], [{@euid_lt={'euid<', 0xee01}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@fowner_lt={'fowner<', r1}}, {@uid_eq={'uid', 0x3d, r3}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) 10:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x7}) 10:34:49 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB='./~\x00'], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 531.772952][T18353] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 531.781173][T18353] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000003693393 10:34:49 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x82080, 0x128) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x20) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x2, 0x0, 0x1ff, 0x2}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2484a5, &(0x7f00000002c0)) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hostfs\x00', 0x1000010, &(0x7f0000000180)='ext4\x00') [ 531.874500][T18413] FAULT_INJECTION: forcing a failure. [ 531.874500][T18413] name failslab, interval 1, probability 0, space 0, times 0 [ 531.887150][T18413] CPU: 1 PID: 18413 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 531.897337][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.907410][T18413] Call Trace: [ 531.911029][T18413] dump_stack+0x137/0x19d [ 531.915402][T18413] should_fail+0x23c/0x250 [ 531.919887][T18413] __should_failslab+0x81/0x90 [ 531.924630][T18413] ? register_for_each_vma+0x372/0x890 [ 531.930067][T18413] should_failslab+0x5/0x20 [ 531.934572][T18413] kmem_cache_alloc_trace+0x49/0x320 [ 531.939903][T18413] ? register_for_each_vma+0x372/0x890 [ 531.945343][T18413] ? vma_interval_tree_iter_next+0x263/0x280 [ 531.951304][T18413] register_for_each_vma+0x372/0x890 [ 531.956577][T18413] __uprobe_register+0x3f4/0x8a0 [ 531.961499][T18413] uprobe_register_refctr+0x29/0x40 [ 531.966755][T18413] probe_event_enable+0x2be/0x7d0 [ 531.971770][T18413] ? __uprobe_trace_func+0x420/0x420 [ 531.977092][T18413] trace_uprobe_register+0x88/0x410 [ 531.982266][T18413] ? find_next_bit+0xa7/0xf0 [ 531.986886][T18413] ? cpumask_next+0xc/0x30 [ 531.991286][T18413] perf_trace_event_init+0x34e/0x790 [ 531.996554][T18413] perf_uprobe_init+0xf5/0x140 [ 532.001332][T18413] perf_uprobe_event_init+0xde/0x140 [ 532.006685][T18413] perf_try_init_event+0x21a/0x400 [ 532.011793][T18413] perf_event_alloc+0x7eb/0x14d0 [ 532.016850][T18413] __se_sys_perf_event_open+0x5c9/0x25c0 [ 532.022463][T18413] ? __fget_light+0x21b/0x260 [ 532.027241][T18413] __x64_sys_perf_event_open+0x63/0x70 [ 532.032683][T18413] do_syscall_64+0x34/0x50 [ 532.037095][T18413] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 532.042974][T18413] RIP: 0033:0x466459 [ 532.046845][T18413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.066488][T18413] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:49 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) 10:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x8}) 10:34:49 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 10:34:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000050000000000200000800040001000000", 0x24) [ 532.074961][T18413] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 532.083116][T18413] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 532.091260][T18413] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.099228][T18413] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 532.107176][T18413] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:49 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) [ 532.197752][T18430] "struct vt_consize"->v_vlin is ignored. Please report if you need this. [ 532.206548][T18430] "struct vt_consize"->v_clin is ignored. Please report if you need this. 10:34:49 executing program 0 (fault-call:4 fault-nth:65): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000051000000000200000800040001000000", 0x24) 10:34:49 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x10}) 10:34:49 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x13, 0x0, 0x2000000, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="2e2f66696c65300014fa7a988a328acbb72cdeb1842d465c48e750f7201f6ea06f0fb219844d6b38f381394bf4bb2604af6421c5eeeea60b9cb6db83fb92aee66ab17c810016f3264fea8bbef9b67ac28b01eb771709763d98090b386fb7256901831092a64c82afbc88248f4caab95242029321653abf21ec7b80e06d830aa32352f234365391b12a262d1b049fc3d11bf1416ba31f85a5fccbc40a1d980d82840fb409c8f1ab75bd315b2f0321d9e210a3b009a91cd83bdb9a281acc724aa323fa286593847847ef36ef937a63a39f2809bfd8251a15c2c98cc5ffc6a14a70ca9cd0a680c03f63215e9332bcb93477872c01f87c5b520cdb"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='data=jOurnal,\x00']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd, 0x12, 0xffffffffffffffff, 0x1000000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) r2 = pidfd_open(0x0, 0x0) r3 = epoll_create1(0x0) r4 = dup3(r2, r3, 0x0) r5 = getpid() r6 = pidfd_open(r5, 0x0) r7 = epoll_create1(0x0) r8 = dup3(r6, r7, 0x0) setns(r8, 0x28020000) setns(r4, 0x10000000) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fbc90403166030388a11b4adb00ebbf8b00dfc2a019a68fc7ce96876ab92747adeaec5e3b7d684ff08ec4a2a056faacdf5b66de061d627f84f46ed658beb8e10d9eb99df90bd6b0c0c6430271661d203d134df44cffe9d77d83ca9b16fe47947d96fec5891ac3b3ff7a608f35b0a63e236dc7a77c6fe931c912fb18b10d0c746df16012f29f2bc3547dca577a8f0eb50b2ecf91e6955d6384432fb51520f5cdc81626ca921e48690bec42e64a4b86286ecb77c5d6b52c7d41c6c0e6cd54a56fe160f0040d80600cd"], 0xc9, 0x0) 10:34:49 executing program 2: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x128) [ 532.474102][T18459] FAULT_INJECTION: forcing a failure. [ 532.474102][T18459] name failslab, interval 1, probability 0, space 0, times 0 [ 532.487093][T18459] CPU: 0 PID: 18459 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 532.497364][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.507763][T18459] Call Trace: [ 532.511058][T18459] dump_stack+0x137/0x19d [ 532.515548][T18459] should_fail+0x23c/0x250 [ 532.519965][T18459] __should_failslab+0x81/0x90 [ 532.524730][T18459] ? register_for_each_vma+0x372/0x890 [ 532.530196][T18459] should_failslab+0x5/0x20 [ 532.534788][T18459] kmem_cache_alloc_trace+0x49/0x320 [ 532.540198][T18459] ? register_for_each_vma+0x372/0x890 [ 532.545666][T18459] ? vma_interval_tree_iter_next+0x263/0x280 [ 532.551800][T18459] register_for_each_vma+0x372/0x890 [ 532.557261][T18459] __uprobe_register+0x3f4/0x8a0 [ 532.562759][T18459] uprobe_register_refctr+0x29/0x40 [ 532.567995][T18459] probe_event_enable+0x2be/0x7d0 [ 532.573006][T18459] ? __uprobe_trace_func+0x420/0x420 [ 532.578904][T18459] trace_uprobe_register+0x88/0x410 [ 532.584556][T18459] ? find_next_bit+0xa7/0xf0 [ 532.589176][T18459] ? cpumask_next+0xc/0x30 [ 532.593647][T18459] perf_trace_event_init+0x34e/0x790 [ 532.598922][T18459] perf_uprobe_init+0xf5/0x140 [ 532.603754][T18459] perf_uprobe_event_init+0xde/0x140 [ 532.610159][T18459] perf_try_init_event+0x21a/0x400 [ 532.615435][T18459] perf_event_alloc+0x7eb/0x14d0 [ 532.621951][T18459] __se_sys_perf_event_open+0x5c9/0x25c0 [ 532.627790][T18459] ? __fget_light+0x21b/0x260 [ 532.632559][T18459] __x64_sys_perf_event_open+0x63/0x70 [ 532.638195][T18459] do_syscall_64+0x34/0x50 [ 532.642717][T18459] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 532.648777][T18459] RIP: 0033:0x466459 [ 532.652797][T18459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 532.673441][T18459] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 532.683276][T18459] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 532.691617][T18459] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 532.699735][T18459] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.707802][T18459] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 10:34:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(0x0, 0x128) 10:34:50 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) mount(&(0x7f0000000000)=@sr0='/dev/sr0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hfsplus\x00', 0x4008, 0x0) 10:34:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000052000000000200000800040001000000", 0x24) 10:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x18}) [ 532.715778][T18459] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 533.037318][T18453] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 533.045793][T18453] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000004b0b97d9 10:34:50 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0/../file0\x00', 0x80, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(0x0, 0x128) 10:34:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000053000000000200000800040001000000", 0x24) 10:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x22}) 10:34:50 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x10010, r0, 0x78fd1000) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "04d295525dae9f7f349884dccd6d6b41"}, 0x11, 0x3) 10:34:50 executing program 0 (fault-call:4 fault-nth:66): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 533.157339][T18504] FAULT_INJECTION: forcing a failure. [ 533.157339][T18504] name failslab, interval 1, probability 0, space 0, times 0 [ 533.163885][T18503] EXT4-fs: 52 callbacks suppressed [ 533.163896][T18503] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 533.169986][T18504] CPU: 0 PID: 18504 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 533.170009][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.184520][T18503] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 533.185132][T18504] Call Trace: [ 533.185141][T18504] dump_stack+0x137/0x19d [ 533.213040][T18508] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 533.215265][T18504] should_fail+0x23c/0x250 [ 533.215286][T18504] __should_failslab+0x81/0x90 [ 533.226960][T18508] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 533.232994][T18504] ? register_for_each_vma+0x372/0x890 [ 533.257616][T18504] should_failslab+0x5/0x20 [ 533.262156][T18504] kmem_cache_alloc_trace+0x49/0x320 [ 533.267467][T18504] ? register_for_each_vma+0x372/0x890 [ 533.272915][T18504] ? vma_interval_tree_iter_next+0x263/0x280 [ 533.278925][T18504] register_for_each_vma+0x372/0x890 [ 533.284208][T18504] __uprobe_register+0x3f4/0x8a0 [ 533.289156][T18504] uprobe_register_refctr+0x29/0x40 [ 533.294350][T18504] probe_event_enable+0x2be/0x7d0 [ 533.299357][T18504] ? __uprobe_trace_func+0x420/0x420 [ 533.304655][T18504] trace_uprobe_register+0x88/0x410 [ 533.310001][T18504] ? find_next_bit+0xa7/0xf0 [ 533.314598][T18504] ? cpumask_next+0xc/0x30 [ 533.319090][T18504] perf_trace_event_init+0x34e/0x790 [ 533.324485][T18504] perf_uprobe_init+0xf5/0x140 [ 533.329913][T18504] perf_uprobe_event_init+0xde/0x140 [ 533.335834][T18504] perf_try_init_event+0x21a/0x400 [ 533.341053][T18504] perf_event_alloc+0x7eb/0x14d0 [ 533.345996][T18504] __se_sys_perf_event_open+0x5c9/0x25c0 [ 533.351889][T18504] ? __fget_light+0x21b/0x260 [ 533.356674][T18504] __x64_sys_perf_event_open+0x63/0x70 [ 533.362231][T18504] do_syscall_64+0x34/0x50 [ 533.366631][T18504] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 533.372586][T18504] RIP: 0033:0x466459 [ 533.376518][T18504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.398240][T18504] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(0x0, 0x128) 10:34:50 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000040)=ANY=[@ANYBLOB="044460295475e834dc285b9d403b49f26a9e"]) open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x11) [ 533.407501][T18504] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 533.415631][T18504] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 533.424051][T18504] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.436296][T18504] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 533.446091][T18504] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[], [], 0x2e}) 10:34:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000054000000000200000800040001000000", 0x24) 10:34:50 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x201008, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="ebdb350900695c00"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000040)=ANY=[@ANYBLOB="37f589f52d00"]) [ 533.475780][T18502] EXT4-fs (sda1): Unrecognized mount option ""C" or missing value [ 533.485607][T18510] EXT4-fs (sda1): Unrecognized mount option ""C" or missing value [ 533.510793][T18515] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. 10:34:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000055000000000200000800040001000000", 0x24) 10:34:50 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) 10:34:50 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40010, r1, 0x10000000) syz_io_uring_submit(0x0, r2, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) creat(&(0x7f0000000040)='./file0\x00', 0x8a) 10:34:50 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) 10:34:51 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) chdir(&(0x7f0000000040)='./file0\x00') [ 533.559712][T18525] EXT4-fs (sda1): Unrecognized mount option "D`)Tu4([@;Ij" or missing value [ 533.581035][T18527] EXT4-fs (sda1): Unrecognized mount option ".C" or missing value [ 533.591962][T18525] EXT4-fs (sda1): Unrecognized mount option "D`)Tu4([@;Ij" or missing value [ 533.761932][T18501] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 533.770032][T18501] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x000000007587ae81 10:34:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000056000000000200000800040001000000", 0x24) 10:34:51 executing program 0 (fault-call:4 fault-nth:67): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:51 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r0, 0x20, 0x0, 0x10000) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x4, 0x1) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="00274752cc75901301aa0251c94fc90145e9e05bbfa882b08ac35c55038c3482ed2af6ed16af21c2f4949601a5ca208be63f46b1e22b3153f5b4e30ffc2c1fe94da481c555647363e0aa5d805bad04d5e25da2fcf029b16b0f78c800fd46812ed9b17d770b1ba726b943f1e84c0b47c1937bb2e1f9e4b49afa3ddb9f1efcb5eff1d05ab91721b7fe693bbdfb152125f9686901a204101451d0ab5b125d4e95a6f9d552fa43c837634a65fe236b8235022053c1c0c99694c442c0f65721c23eec1c2bda6d4c63c6e399dba4c8daf4c14dab2d"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 533.920080][T18562] FAULT_INJECTION: forcing a failure. [ 533.920080][T18562] name failslab, interval 1, probability 0, space 0, times 0 [ 533.932902][T18562] CPU: 1 PID: 18562 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 533.943058][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.953130][T18562] Call Trace: [ 533.956475][T18562] dump_stack+0x137/0x19d [ 533.960805][T18562] should_fail+0x23c/0x250 [ 533.965270][T18562] __should_failslab+0x81/0x90 [ 533.970039][T18562] ? register_for_each_vma+0x372/0x890 [ 533.975574][T18562] should_failslab+0x5/0x20 [ 533.980084][T18562] kmem_cache_alloc_trace+0x49/0x320 [ 533.985416][T18562] ? register_for_each_vma+0x372/0x890 [ 533.990917][T18562] ? vma_interval_tree_iter_next+0x263/0x280 [ 533.996991][T18562] register_for_each_vma+0x372/0x890 [ 534.002749][T18562] __uprobe_register+0x3f4/0x8a0 [ 534.007710][T18562] uprobe_register_refctr+0x29/0x40 [ 534.012899][T18562] probe_event_enable+0x2be/0x7d0 [ 534.017913][T18562] ? __uprobe_trace_func+0x420/0x420 [ 534.023198][T18562] trace_uprobe_register+0x88/0x410 [ 534.028476][T18562] ? find_next_bit+0xa7/0xf0 [ 534.033060][T18562] ? cpumask_next+0xc/0x30 [ 534.037456][T18562] perf_trace_event_init+0x34e/0x790 [ 534.042731][T18562] perf_uprobe_init+0xf5/0x140 [ 534.047476][T18562] perf_uprobe_event_init+0xde/0x140 [ 534.052745][T18562] perf_try_init_event+0x21a/0x400 [ 534.057836][T18562] perf_event_alloc+0x7eb/0x14d0 [ 534.062757][T18562] __se_sys_perf_event_open+0x5c9/0x25c0 [ 534.068476][T18562] ? __fget_light+0x21b/0x260 [ 534.073133][T18562] __x64_sys_perf_event_open+0x63/0x70 [ 534.078572][T18562] do_syscall_64+0x34/0x50 [ 534.083004][T18562] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 534.088876][T18562] RIP: 0033:0x466459 [ 534.092744][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.112326][T18562] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:51 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 10:34:51 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 10:34:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = epoll_create1(0x80000) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1, 0xda1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:51 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ba099a0cb6e15b8d84cb1a3fd277ca8a5c641ff5c0b243e1415247b5ca472218f263efadb5ab33134e665569ff209c0506a72275c306443f8c99e4cd82518fae08a0c69b675dce193f0d9d446db47e484b94e268a524dc6b25e2d9d54aaabed91e1a67895aa05594bc3c1d70db930cc7dbdb7c700b7b7d438a09c3c570248ea5705ed7ead92cb0038d9e0b5f0fb90b2842dd2ef30a6534439da03cf4af50a336a2c8477e6d75502a8ea5a89a1aa67decc02c1894ced14cf25f10649a4b324db242fd09ad215598bb40b903668e71e341c6c81eaa600b10a61566a06d54c41c3b7efd7c5667a4c"]) 10:34:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000057000000000200000800040001000000", 0x24) [ 534.120717][T18562] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 534.128682][T18562] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 534.136657][T18562] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.144607][T18562] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 534.152570][T18562] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:51 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x967392f688ed35e2, 0xb) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000180)={[], [{@euid_gt={'euid>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xc}}, {@obj_role={'obj_role', 0x3d, ':'}}, {@audit='audit'}, {@subj_role={'subj_role'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 10:34:51 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x0, 0x24008, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:51 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffff, 0x33}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000800) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000300)={@id={0x2, 0x0, @b}, 0x21, 0x0, [], @c='abcdefghijklmnopqrstuvwxyz0123456'}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYBLOB="b1f100000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="060004abeb156b35df748480491f4739360b0fd921212d9b4a182d39ba5f74dd863a405ce91491b1be3e2bec1b389c4539c4a2e03a13ec2020f632536edeb162713d94199f5f41d7b4c8064bdd468b85e10b9f909634cd"], 0x24}}, 0x40010) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r4, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 10:34:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000058000000000200000800040001000000", 0x24) [ 534.466180][T18558] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 534.474299][T18558] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000089ed84cd 10:34:51 executing program 0 (fault-call:4 fault-nth:68): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:51 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000140)=ANY=[@ANYBLOB="71756f745e82b8fed953d3612c00"]) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/195, 0xc3) 10:34:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000059000000000200000800040001000000", 0x24) [ 534.563983][T18607] SELinux: security_context_str_to_sid(user_u) failed for (dev sda1, type ext4) errno=-22 [ 534.583875][T18609] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.611332][T18613] SELinux: security_context_str_to_sid(user_u) failed for (dev sda1, type ext4) errno=-22 [ 534.662103][T18609] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.697443][T18629] FAULT_INJECTION: forcing a failure. [ 534.697443][T18629] name failslab, interval 1, probability 0, space 0, times 0 [ 534.710124][T18629] CPU: 1 PID: 18629 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 534.720275][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.730407][T18629] Call Trace: [ 534.734124][T18629] dump_stack+0x137/0x19d [ 534.738442][T18629] should_fail+0x23c/0x250 [ 534.742911][T18629] __should_failslab+0x81/0x90 [ 534.747662][T18629] ? register_for_each_vma+0x372/0x890 [ 534.753362][T18629] should_failslab+0x5/0x20 [ 534.757862][T18629] kmem_cache_alloc_trace+0x49/0x320 [ 534.763134][T18629] ? register_for_each_vma+0x372/0x890 [ 534.768629][T18629] ? vma_interval_tree_iter_next+0x24c/0x280 [ 534.774587][T18629] register_for_each_vma+0x372/0x890 [ 534.779853][T18629] __uprobe_register+0x3f4/0x8a0 [ 534.784772][T18629] uprobe_register_refctr+0x29/0x40 [ 534.789967][T18629] probe_event_enable+0x2be/0x7d0 [ 534.794983][T18629] ? __uprobe_trace_func+0x420/0x420 [ 534.800312][T18629] trace_uprobe_register+0x88/0x410 [ 534.805506][T18629] ? find_next_bit+0xa7/0xf0 [ 534.810140][T18629] ? cpumask_next+0xc/0x30 [ 534.814591][T18629] perf_trace_event_init+0x34e/0x790 [ 534.819858][T18629] perf_uprobe_init+0xf5/0x140 [ 534.824600][T18629] perf_uprobe_event_init+0xde/0x140 [ 534.829871][T18629] perf_try_init_event+0x21a/0x400 [ 534.835078][T18629] perf_event_alloc+0x7eb/0x14d0 [ 534.839999][T18629] __se_sys_perf_event_open+0x5c9/0x25c0 [ 534.846222][T18629] ? __fget_light+0x21b/0x260 [ 534.850932][T18629] __x64_sys_perf_event_open+0x63/0x70 [ 534.856376][T18629] do_syscall_64+0x34/0x50 [ 534.860795][T18629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 534.866819][T18629] RIP: 0033:0x466459 [ 534.870699][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 534.890285][T18629] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 534.898681][T18629] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 534.906725][T18629] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 534.914680][T18629] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.922635][T18629] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 534.930819][T18629] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:52 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 10:34:52 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2efcd581922f66696c653000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7d146efa0e62466ebde9af8c969002b1c4a138096e3366a08b8d0a276c835535afde267eafcacf73adc9362a80e2f6b4b8c5b3f59115b75285140ada67bdc0261e459d143b63bd85e7100d80ecc4ae2eed369893713927a661bf219f9805f6e2eb96e17462940d50099d48d55915e8c49d371c9ef56438d848c7694a6c60356d9da339d782048545"]) 10:34:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005a000000000200000800040001000000", 0x24) 10:34:52 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0xb, 0x0, 0x2042028, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e2f66696c653000a05de53d4c8269535fb29f4178c540e52f9973e064d3f51e0eded69dbaadc98d366fbd03"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:52 executing program 1: r0 = semget$private(0x0, 0x0, 0x410) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000040)=""/22) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xd9f, 0x1) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:52 executing program 0 (fault-call:4 fault-nth:69): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005b000000000200000800040001000000", 0x24) 10:34:52 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9801, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:34:52 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000037c0)={'team0\x00'}) r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$incfs(r0, &(0x7f0000003800)='.pending_reads\x00', 0x4040, 0x18) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="12", 0x1, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000003900)='keyring\x00', &(0x7f0000003940)={'syz', 0x3}, 0x0, 0x0, r3) add_key(&(0x7f0000003840)='cifs.idmap\x00', &(0x7f0000003880)={'syz', 0x1}, &(0x7f00000038c0)="a17830f79b6238911d0bc72e6c87f28baa3bb6562aa43937ecbe854ed5ac4d0f102224faa98e862e", 0x28, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r2}) setuid(0x0) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0xa, &(0x7f0000000640)=[{&(0x7f0000000180)="294f7a0601109a21a7fd1e7bd58a0681dbe7ef1419b48acd2f12eae8c1d9e277be63bef5b723ad235e16239352c1cd4f7c9c45a129c41e101bf6832e3a6ab675ec5d9ac6b5da5f521587c361c4bfe844e7f4c0a3d175f91162f0dfd25da44753d3bfdae792d81d03c9894ef300e083424e107e753cee759fcf2c4925a331da2bb8c8c2915164f31dcbef180f9189572ada8a763a8410e16a71c8101f6648da95f56ea5fd7c9f457461c37ab99f948d8cf220f129d686649a409b8fce1ad318b4787df75b622038", 0xc7, 0x7}, {&(0x7f00000007c0)="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", 0x1000, 0x9}, {&(0x7f00000000c0)="6011f33b88cf19e67bf7ea80ee447758d463ae3c45e8112c316f8d207d0616a444eff3213ef4810301011c9c70", 0x2d, 0x3}, {&(0x7f00000017c0)="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", 0x1000, 0x7fff}, {&(0x7f00000027c0)="08fc514569443f8809f7c958431e3e733e0eff990967ef5f0ede06b1329ec2ea3908f9cf3665a6e38888abf40d16bf90d2d02a3b09bf7af2c263cc25a4d4142e946fbf4a48ab6b2db63a75fe301b6d6dee50bdbac42b77b10edf0fea62c4a2a120e7065654cf28bba862c56a433cef997483a7b2471719bf16d4cf38cb3ef967ee345123a185699d361f21833b91ea0ad34a4e78aaba95ab3946e273eff681f7757e3abd6278d99f6abc8048f02845d828491a94817fc4d0631ad106be81ab17628f079bb8d5a5eb8503210c8f8d1a1a9c2012cf3869c0ab634de6f529e46ca97257bc32e393d2d6fe06cd6fa2ffe38879110306062a926a6094bafd111e330b466fe1c103f5b67b2260b2f825fb13ed54d5ea9c3ace3ffe565857eadc3db1a7ce44d59a177a8076b9073b7f6f7501d4e84c46d0514df9eaeba8045ab92b68b99e8dd8d0ee812d633426434c85135ce64acadbe5b1535926395b0247123d33353fa7b7fa955d7fa21ce84330e5f23fc349455a51c419a6d8081fbd60c9eaf1edca1bf7d3834bd05d3b98d062820a38451d62b6300e9960e1dca2081e82f9b50b0b5172c912e1add80876b9907bed04900edd82b4cef933d1ffb78f35eb5d31e997cd622d11295a45f91ed66374111a39e4dd2f73890bc3c19af4b65d0b9f98771e731928a0540eb707d191db8eac0b32a9c3aea116783e130ab1ec94d904911bdad47abf1e149337dda627f5042b2fd379e0a928206c764544dc7a016bac02bd7dfac54e899d272111866cf01ab58687f7ddc15809373f59e50dceb87bee1b5f5b084c150607bad74ec0e7802a205e48e08bdb065beae467a613dc3f4e1b9b65e39c0f452af1dc631e02b3456650b072433e40c06185bd8d81229a76cea8dc78cc431491b76bfc2e60b314cb76887ac3bdf4560092fd3e93c008bd74369738ccb5ddadfedc79c7161b51a13839ef67a35bc80c36f58993bbb817601b551d8f25781434d783f7b4db34c522d371daf7a66d3e7faa452ae97019c856a1a26e78096e3600d1f9f3a8fae0bc77f1eef5a96cc26cecc4e2360047fde94481d20fa481b1e480101aef18a9d08af9ddbd1eddb965f468fb3ee3e4f651aeade577af429262807c61fec658fb4866e9098e86c69fdd8fcafeb74a488a6ef87b96d4875ff8deb30fa5ebdc0e3e60b37c70b85e7795705e0f524099711a6c08bef89e5d2ca4b7c14cdefb116506c7590b013a6208f03acd384a136af033bb75ec8f8317f77eb719d9583be1fc7794bca209eccf7cc5c5121366dfb156e8d6640ecdf6df41195196c54482c06172ba04554388937d839790c35f5235a000711e98b3766d25a64b12c2a194742bb0a4fc47460d95e1d86ad266f8f02ad0bcfbf126ecbd63c8c1c1641203f516882508ea2ad9abdab4966c24660f6a59d5859ce8dafaeba401b5be3436fea58f0f08bdb77abf6ed7a0b25e34984f0a4dc017615fbfe53aee087487c82179259828dd14281222f792e9276f92f3066cc187f3f0ffc3f5a927fee412f6b76a52c6014f5bffd40942dfba08bb8d55251d29f018ef4c485674497a5169eb1d2e66d3d04fc093fec223ce30a58561ea6d4b7256aae3415a77ad3d1f86ea001bc2e73a8b02b927650745099eee5b7971e38f7a3be18463741ef8072fd7cd11281a6e9989a4a9bde538ee552821a42d9c202f662707859643a45e23f86120a6d5ed512e98be032563fe0326df68e58bd324265101acd33e7216eee90ead1b7e631e64ed5830700fbd9c74382785b61765a50033a9482dc65f6170e4a7697319234288326ff1d73d2114ea52485c7dca6b2b87394bc71f1ed2cfddfefc18c7920c1b47bf29f4dd833231bf329575b3067267a40e0842a56bcab490709b575d7063edf915bb67af68f1b2eb5393c050feba9aa1530efe399f81a719e7616ced3c9d6f1535d3c0a3e92905745203e045d1e75c114bc922fe6e7975726660922502c3e833a36e9f10cd4be9fd74dcfc16b4fed30c30c5fafa34bd3a8fa5027da16b1e5cc09eb99b9401d32d7d709da036dd6468b3dfb3f5ad67b683951bfadfe3f10c9832946def6090977e066714332e58f1e95841615434f0b5e716faa59682bfe40e0522c9966976485fe66bafd3c02fe443d0bad52f957eddb47cb651781b7c5ce76561a6644d8309e7f5ee683efa377975782933e10f6ff197810ff8936f406bff9fb3e9efc36765e064bed666eb2e8bfc46177b25e6036ff09488f457dac609677d2c34112cd045758e4407077bc480ce46ce9b57508a62dc56ec0851f586fc602ab05bccb6b35fef7eb999bfa0858ca8bdd54d341f63ce64f47dc68aa8674b0cf43928de4a119070085b8dd02519082faaba975e9ed4c2f510fc58eff3cd1f51990d7f20face3e001a49adbe0af6913c86b0b6a8e8dd574876f7c1068b540bcb3b842f7489ab2ad951c5c18041ce5e570a883f5131bb0845bb25eefe334a1bd924e4431a7b99f8faf1b4e9010ff3a2748941044ef9de94406715427ce5e84952dc595f7eed7ab7cc0aa4d8f6a5b89c8b4e8d692bfa9027680bee4f88e5cf25caa311e73607736ef4be6078dd1f43649251a160bc2d367e53ca726cf1e54f4defea9e48ec35a49fe428bb0daa6e406b0a9b267561d88b31b55a36ae7b219e070801b6bf7295719e4c2f9f49861c60b2849a75787bea88833cee7ad16151aca1d367e7ca2ab752948e9789f37a911aceef1bfd7bce4a14c521e1a3b2eb4088060145652246c68f86ae48a3bca9edae68c0a4a80cb9c07b7557e77bb69afba865a67159715a9112e2cc9a79d807d872b01d1605a62ee202219c3fb258e78204b692fb7827501e7ca505b9972204b3321e2809e9de3d4f39d4879ff4328b6d2e50631242dc994fcd0b11b004b6795a4a50fc32904f0ce6a3fe4ce70584bce7b250ce20bc7ccabc920e2dd01f217ee1d6b87d0b04651b26bc5a84ef64f7fa9d03526ab41a38c932769564be79462c20ca921daac0cedd6a13591c9b7a342926cb28d06c418bc2e5e27226a3c374a8b29a137f323497cfe287081f5b2732b9c6875f513883653ce25069e8fbc4e1bc8fdca9e7ebe30cb12d264229168be0ce409b824b1b4f0ea89e8f8a5466e8ab2eb0c0574dd0e0bd72d0286cdd9a50f5b230ea0f9371ff74c26d1f6bf310813a56208750227cbe8d90be6076d64a6104806f237fa4563ee4f03f737329f8cd827e008a34614d93d6c624e171b501128716d2d283b835890ad80c8d39eed14db23d81ff6ad614c9ebc476a7158209720a41cd66158c806204d8b7117c5012a985c58a46095b575f0dad86c4d7ca53be1e55c9fdafdd614f1fe1b51fb64c39d96507ed4077dbabb96832a8c6b7fc7a01f62c15691d6e77093fbb5821df63c07470dae2c356765dd66c85520c4a7e14f34c5978d764b791196b9e42507cc67fd30551fc2b1ab1f29840937261a3335b67b5c60bddcc948533cf4155cd0b6be524354f0eaba51d7290b1e733cf45e58b1463cccdb7c95803905353e36e759b7ce4d71112e26fa908e97a5f4bf05c596ee2e28c03c15bb80947e945e352ef0e5f3ddb959a3d129ba1d20c2e05059554ccaab9c306078c79c66fd99d56ab8fba59bebc74c53a9328604242ca5382e4216987e8aee5e7a5db3085237cd75874affbe179e2b47e832b922791e7dad9aebc026b9008c941d805d37faf2b2a2bca916176c2d187e725b9c6408d6f1a89a656406b64d3353ea38a1e8752b8ffb3d86801307a5076666650fec615265e566ec7684430578c32927732d9a02918613a1a9d36712d30305470bcf635915a9dd56b2a77cda2554e95cecc2b62720908c662aca194d6919efa765454113a55aee9a6e5194e5c1a367c125ffd5296c9a6f5e8a8ffbc1667e137fb8c9b5f35daec8ed0c3af9e9d997234a72c6e255dafb4d8571d4f9f7268ada8479b16f8166c257c0599400b1c301d892deab07baabe8f5afb3d78d869845d545d5a84e2aac6c2892a0b4e70ed5fd4cd0427d404afeabe76f5a2a4de0836360a229abd16e1dd4e2ebe100061e8053323da6a7618d05b4d02a68a84e99193fea22598aa45d40d9be1cca4e88d94a40ba05b42d01899fd537777a3f2a9e5d2a014b753094cc8601435e1da0c7248b68bf2e7b2039ecd37dba68170ee09bb9d968ee9d6408727edf02b8dd8bb8b3a2be00eb6bfdcd7eab111e90e45907ebbe2cc2a4188345d0a39c1054064a3ceaa40ae0c717f940f6a5c3412a91a56f4302071add9e8cb83a5a313240adbf45934edcb98c815f739a28556b30da4c9019ac9b32327406d0198bf53e733bfd316ab5035412e7b6a584de47791622acf8f1ac8d53afcbe9c97ae7a0374e50fa144a6214eb558edadd7c6193b5e060fe26083cfcf7dd6eea23450a04717e4d78530e1ca91ee14698303f934cc5c8efcec95fc2618cec5ad77a51dd6f0a2cf504348f0991f78699472489c7f9d563a8b605d52ce3733009d859b6c1ce274e1ff8ca18fcd787c443c77862320d4c431c354ee26c63ab7840e44ea79a6e598a9ec01f6d3fc769b6268866cb152b8818d049b8d13215099d4f64c4bf2745767297aa963b4f9865648c8daed5cbe12290671dff44410a7ff0b3795ba6dc0cafc7aee4bae8063b2e8e0b389f59b07dd2ec2404d228965423c54bf4a89943f5bc2de85726c56e95e82ef52a3df0ba085b694d554a9a7494aab96828da4adfccd1d777b782baa5144e899fa1133615570ec1ce5ccb7ab87584942f34de2b2b2a70c21b5ad80f9f50476aa441300e304799f353477f8998f72d9892a619a6f1fb1d2f5cf0808c519b046b975282263ac31ebdf4729adcc4dee7dd3ed771d0e5f09c86189fb4dbd269c3c5bd5a235862b92d71785dd95d7c5d79a1702525963714f93d531243df459e91421fb261445c6a98c222ed59289d29f9b340cae5a794d33842576912f311ec2abdca50fe64945eccf0b1c248f35550e3eaa5115a24d71f3f40312e327abd0038eb20fd662f149674c6d68f8064c17f19cbf203ab0e28b336a077dcb874d6974f8fb3196353aa6296a076e042e4e2313a00a24afae19cca5c51a38a3fee95656bc2a2a91f700e20e7737cd70a94c1cff1ed0657eb6d674797ac8113e01a5771f215f392df0680966b5b0ebb64849ad182bb71746abbf36ecad5f084b2248ced1a154f482af7ee6b013fcc45e22d09b54ad04560dd69c672016fb818bcfce1a03466a80c53d3649bd0fd743e97f1d8ca3722afd09f2d5cd4277af9cb6bf5f69b4eb049a054c8e2fcdde8fc1c621630d28aec198a043eb356978dd6676c52ba94a0830a6544bda16a36e0f86d4e3fe6851c24861417b022bbacece97beb35caed1537b21d739c2223625b7580109eee587889df6f94f09d7e110386e5fcb03c2b25305458ceb039b0dc06fa20adfa99e0248ef487d89aa920e53e5b1d2b927d57a5c68e4110c6c2bf6ac37f92ce80f905562f4bfe5ffb8cbdf8966827bf00cfe04dfd15a5a19beb3a33bbb1534c767e7b374e0aac3c130c3cb443b23570d31a82f087e5bf7524c44ec8182b3b1f26b92796823e29930ac4c04278f75f009741583eea715896e2b0c533dfbc838375727644639b86378f0de55dfc484c3e37422034eb73efdecf64f6d77ab26944f4ed1423e156635756b3f02c3ad97ca8c3b1453e224e9ba04f01c2149bf0614421319261df6a7c362aae4de04f80bd491099aa5ad98eb97c8a69402d253ac2c95783348e856cd7a3bab12b60b56dc95f663", 0x1000, 0x100000000}, {&(0x7f0000000300)="63043e0e01e89ea25ee760b3a006383720333700d23bfd6b49deeefe2ec6ce966119700940080e361324ae7e865f7e601ffabe1a21d7b8121f0771ca22d74820174cf25e89c808fe9ac4000c0a3da5f11eaab9879d8230dbe0afa577e0fe68592ed3b33f51a63045483a2c2d09101ff10a07b926b29b49c14fa492b5d99913bbc43bf5ff1e3c257333545425cc5fe3a5871c4f3ac9ddae7649c38066a8cc81569406cb7bcd0d918d4dba65fee9bd23e3fccc80", 0xb3, 0x4}, {&(0x7f00000003c0)="339816b45b1b53fe870cba9b288fc1573832c0566b11331cca4bd6e25d175f919ebce5faac68f3b648e28af11ead0dcfaaa1dd6d96e90cb26e096b8cfe2d1f4d835c1a096b79f045cd1dfdf8038c87bb412408f6747f2b406bb5d42c91e8ab8e8db5ff7b1ddca52fb90ce4d0a44f2e9240307a30f1896430b12ebc9cb6df898e4686b74982b485d752c0240fbc3f9bbdfd6a192cae2a30", 0x97, 0x4}, {&(0x7f0000000480)="519f0a8df80ed9b3b28d4cc36646203324d0f723008a9076ad138486f8787baba2b11e3e3a753c159d4101e50fc22c9e24436378b59265f2442abe71f02b3b2a5304aeaf3f8a1386e04232840131c562eb2a6e4328d8904d9ad0292289feb5c095cb155d51350110647f8031e9b46f96889679ccc9c2015f43e27477152fb0ac7e686cc2a1ec63bf4e2fe402832e0ac15d99490234d5d90148b83a0cc5ff1321fcc50da88ed4bc0361b8d80359ba5d406c34b3b8d185486d3c9d", 0xba, 0x6}, {&(0x7f0000000540)="aba5fb28f81296c8eb477ff7e746b705a1365118a95ffbe19d3b8d9dee6b4afcc67dd7f821c5f45bb8dcdec335d0ffc8df5cc0c1625c38bfdcb3e7b687e7b6e81e8108a930df122e6f5ebc3ac82ee8a1b253aa943145f9e6ea8e1eff64b26a1212ce25e9cf21f1901d1cc48e06af", 0x6e, 0x40}, {&(0x7f00000005c0)="0f5c5c22bcc7d54ca5950d864ffeb27d3f36884839f829d6ee5411b9ece57c31319acacf06320ca61191a14e419032be204e0f7ac8b944fdfac2f91f6e70270c181da533cd3376be3a1b4c5266dc7dc59b39e293b43aa2e300d28e39", 0x5c, 0xed62}], 0x8000, &(0x7f0000000740)={[{'#'}, {'ext4\x00'}, {'*:'}], [{@subj_type={'subj_type', 0x3d, '::-]^&[-'}}, {@euid_eq={'euid'}}]}) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="066704003d6a00fcffffffffffff"]) 10:34:52 executing program 5: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 535.304334][T18662] FAULT_INJECTION: forcing a failure. [ 535.304334][T18662] name failslab, interval 1, probability 0, space 0, times 0 [ 535.317030][T18662] CPU: 1 PID: 18662 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 535.327177][T18662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.337213][T18662] Call Trace: [ 535.340490][T18662] dump_stack+0x137/0x19d [ 535.344807][T18662] should_fail+0x23c/0x250 [ 535.349212][T18662] __should_failslab+0x81/0x90 [ 535.353968][T18662] ? register_for_each_vma+0x372/0x890 [ 535.359425][T18662] should_failslab+0x5/0x20 [ 535.363918][T18662] kmem_cache_alloc_trace+0x49/0x320 [ 535.369236][T18662] ? register_for_each_vma+0x372/0x890 [ 535.374762][T18662] ? vma_interval_tree_iter_next+0x263/0x280 [ 535.380721][T18662] register_for_each_vma+0x372/0x890 [ 535.386008][T18662] __uprobe_register+0x3f4/0x8a0 [ 535.390925][T18662] uprobe_register_refctr+0x29/0x40 [ 535.396172][T18662] probe_event_enable+0x2be/0x7d0 [ 535.401210][T18662] ? __uprobe_trace_func+0x420/0x420 [ 535.406479][T18662] trace_uprobe_register+0x88/0x410 [ 535.411731][T18662] ? find_next_bit+0xa7/0xf0 [ 535.416297][T18662] ? cpumask_next+0xc/0x30 [ 535.420692][T18662] perf_trace_event_init+0x34e/0x790 [ 535.425970][T18662] perf_uprobe_init+0xf5/0x140 [ 535.430722][T18662] perf_uprobe_event_init+0xde/0x140 [ 535.435997][T18662] perf_try_init_event+0x21a/0x400 [ 535.441353][T18662] perf_event_alloc+0x7eb/0x14d0 [ 535.446430][T18662] __se_sys_perf_event_open+0x5c9/0x25c0 [ 535.452056][T18662] ? __fget_light+0x21b/0x260 [ 535.456713][T18662] __x64_sys_perf_event_open+0x63/0x70 [ 535.462231][T18662] do_syscall_64+0x34/0x50 [ 535.466634][T18662] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 535.472578][T18662] RIP: 0033:0x466459 [ 535.476490][T18662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 535.496082][T18662] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 535.504592][T18662] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 535.512584][T18662] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 535.520535][T18662] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 535.528496][T18662] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 535.536459][T18662] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 535.559075][T18670] ================================================================== [ 535.567167][T18670] BUG: KCSAN: data-race in link_path_walk / shrink_dentry_list [ 535.574721][T18670] [ 535.577040][T18670] write to 0xffff888102e98600 of 4 bytes by task 18674 on cpu 1: [ 535.584746][T18670] shrink_dentry_list+0x127/0x580 [ 535.589765][T18670] shrink_dcache_sb+0x10d/0x1c0 [ 535.594603][T18670] reconfigure_super+0x2aa/0x4f0 [ 535.599531][T18670] path_mount+0x1444/0x1ce0 [ 535.604032][T18670] __se_sys_mount+0x23d/0x2e0 [ 535.608715][T18670] __x64_sys_mount+0x63/0x70 [ 535.613304][T18670] do_syscall_64+0x34/0x50 [ 535.617707][T18670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 535.623594][T18670] [ 535.625906][T18670] read to 0xffff888102e98600 of 4 bytes by task 18670 on cpu 0: [ 535.633514][T18670] link_path_walk+0x37d/0x780 [ 535.638169][T18670] filename_parentat+0x104/0x950 [ 535.643102][T18670] filename_create+0x58/0x3c0 [ 535.647775][T18670] do_mkdirat+0x59/0x200 [ 535.651996][T18670] __x64_sys_mkdir+0x32/0x40 10:34:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000040)=ANY=[@ANYBLOB="d36e03b502a44dd1a0b0fafc0fa6cafe29122e1e5dbaedd2e638df29268ccf46c82ac797dbe8"]) 10:34:53 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 535.656566][T18670] do_syscall_64+0x34/0x50 [ 535.660968][T18670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 535.666841][T18670] [ 535.669139][T18670] Reported by Kernel Concurrency Sanitizer on: [ 535.675262][T18670] CPU: 0 PID: 18670 Comm: syz-executor.1 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 535.685388][T18670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.695434][T18670] ================================================================== [ 535.926347][T18657] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 535.934651][T18657] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000b3a3d157 10:34:53 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) r8 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 10:34:53 executing program 5: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x3, 0x1, 0x1d, 0x0, 0x1b8, &(0x7f0000000300)}) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005c000000000200000800040001000000", 0x24) 10:34:53 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x81, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="01900b47fc53154fea88100cb1ce0df7d00429aa8d9f18c596613350560b1c9b31f30d80649d", 0x26, 0x3}, {&(0x7f00000001c0)="9ffc3e01", 0x4, 0x7}], 0x180001, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x5}}, {@huge_always='huge=always'}], [{@pcr={'pcr', 0x3d, 0x16}}, {@uid_lt={'uid<', 0xee00}}, {@subj_role={'subj_role'}}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, '%'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, 'ext4\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:53 executing program 0 (fault-call:4 fault-nth:70): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:53 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="9599b718929afad8af14f8c4e88bc6b7f53e66c36a908d", 0x17}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000001c0)="a38eb7d8deab6f6085f6c8903764f70beac73a3ba9a3c12785d1bc8e6cd6adf234eea72026f8402d822592c322240365153de9accd007092db9d1ad78e7d5407b8ed3705e3955ac60582df1648c949c69082ccb5937074ec0f0ace66f6aa3b68a44eccaf36a036e3205a8daf5f21bb3d08511839e91b5b6c6fe78d897278bc0997906d462f135a4ce37d2712f71f9037501a8dab6a231e184d2e5132f3797a36949db01293ba6c7bb7b42d215c169365", 0xb0}, {&(0x7f0000000300)="925dcb53285fc7e1b64f88f4205502f8ebe5c080f3e72a215e242b7509c148b6083aa26f84d2e204011906f7e03ea3fcafdb3f4375455ef332654c9a64c36d018b783ac66d8e41dd66bbed8de8d724020d55f30c5d1dc81691fcd4605cd6b0beb83a6c77c92ef2331accce5dd644776804db88f3f910397502d49441e39c4f346cf8812ac9fb24caa9417dd114333b9d6c", 0x91}], 0x4, 0x101, 0x3) openat(r0, &(0x7f0000000000)='./file1\x00', 0x30002, 0x80) 10:34:53 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="cf2e8b6218e92e2f0700"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='b']) [ 536.213303][T18711] FAULT_INJECTION: forcing a failure. [ 536.213303][T18711] name failslab, interval 1, probability 0, space 0, times 0 [ 536.225951][T18711] CPU: 0 PID: 18711 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 536.236107][T18711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.246167][T18711] Call Trace: [ 536.249452][T18711] dump_stack+0x137/0x19d [ 536.253773][T18711] should_fail+0x23c/0x250 [ 536.258277][T18711] __should_failslab+0x81/0x90 [ 536.263043][T18711] ? register_for_each_vma+0x372/0x890 [ 536.268604][T18711] should_failslab+0x5/0x20 [ 536.273252][T18711] kmem_cache_alloc_trace+0x49/0x320 [ 536.278543][T18711] ? register_for_each_vma+0x372/0x890 [ 536.284021][T18711] ? vma_interval_tree_iter_next+0x263/0x280 [ 536.289986][T18711] register_for_each_vma+0x372/0x890 [ 536.295272][T18711] __uprobe_register+0x3f4/0x8a0 [ 536.300210][T18711] uprobe_register_refctr+0x29/0x40 [ 536.305447][T18711] probe_event_enable+0x2be/0x7d0 [ 536.310479][T18711] ? __uprobe_trace_func+0x420/0x420 [ 536.315809][T18711] trace_uprobe_register+0x88/0x410 [ 536.321022][T18711] ? find_next_bit+0xa7/0xf0 [ 536.325603][T18711] ? cpumask_next+0xc/0x30 [ 536.330032][T18711] perf_trace_event_init+0x34e/0x790 [ 536.335442][T18711] perf_uprobe_init+0xf5/0x140 [ 536.340211][T18711] perf_uprobe_event_init+0xde/0x140 [ 536.345482][T18711] perf_try_init_event+0x21a/0x400 [ 536.350660][T18711] perf_event_alloc+0x7eb/0x14d0 [ 536.355626][T18711] __se_sys_perf_event_open+0x5c9/0x25c0 [ 536.361251][T18711] ? __fget_light+0x21b/0x260 [ 536.365926][T18711] __x64_sys_perf_event_open+0x63/0x70 [ 536.371453][T18711] do_syscall_64+0x34/0x50 [ 536.375906][T18711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 536.381955][T18711] RIP: 0033:0x466459 [ 536.385829][T18711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000980)='./file0\x00', 0x3f, 0x5, &(0x7f0000001c00)=[{&(0x7f00000009c0)="31938815b56161d4444526dec28ef68ced7e", 0x12, 0x9}, {&(0x7f0000000a00)="ff0fc5d092d0757f855409ae18c7", 0xe, 0x9}, {&(0x7f0000000a40)="6c9af7f6cc0c18595f59208f143d84336771ea3970fb6ddc4f30268a946a36bc87c762827c471c588e6d6ece33fb373ec893245f124ff48f9cf31d82884bde95e6f9bc192ce139be4534b9badfda4f1a198964b5600101ae1c478acd3fefefc051e6a119a517ebf8c42ca93f12096adf8870d333270494219602470c737fde0416c97b3faa28576e93245f7651dbb91a514ad1ea75463e6440d804f7ff9b0aaa44eb6fb91e00312540870e405b2e1ce1bddbd30e", 0xb4, 0x9}, {&(0x7f0000000b00)="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", 0x1000, 0xfff}, {&(0x7f0000001b00)="59932eaef916a78b73c81556d4d3fe8ea285edc80914f26415bd2e16e20b0ea0172157bdc27911a7dec597ae9b9f8a4eae66462c3486614d0b08e1a5716a9b3714262c564f65709547d693bacd3e33b24d71cf620e419933b5195ded07325b0d63f7bb07a468e3700995e01c1a0a4aa4ddbbc47240f2695632d82ab95f8a3b9e6e220260105e1903df2476286cf64da5fc05f0c96c3d8f23cf80e1572a69c7543b4431cd597cd3cb7fce2916dfee77faf702a483eb21a06d19009d06e191e187c553448df901be2f29955c0240c58325815110d61c540a", 0xd7, 0x9}], 0x1224080, &(0x7f0000001c80)={[{@commit={'commit', 0x3d, 0x2bf3}}, {@noload='noload'}, {@dax='dax'}], [{@subj_type={'subj_type', 0x3d, 'subj_type'}}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, 'subj_type'}}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x7, &(0x7f0000000680)=[{&(0x7f0000000180)="3bf92d97b160d6009e33458b26e44b8d2e2066690e9817554dae009ca139bf24551767149ca6cadbdf835f5df2d79720e9a12aeeb15749a44565409cac971848191e6dce7c8338f289fb42f55a2baeed7d923ddc38a26a5f5529506455b911b39d119783946d8d4864e3a3a72bc75e33b0ba7eef31b38306bb641810d50b8187da2f9cb5829a7e7014d198635895", 0x8e, 0x7}, {&(0x7f0000000300)="c0124364472d29ccf0cbd836adb2d2915cbfb52fbb272384f6e2d205800cb0f7348d8b6497effb9314bfcee373fc3c38e38d41fe27434cba2db418846d025e394dea155c26a57e36ffbcf83e24eca464d279af5735455b41af6bf120e3228eb2167525c1661bf3d7f47a10cc37416bbc26ade09b34554b9f58d1df1a014dc3bc2c9ecb15c32a5e765212c9a19c1a75cc5407d43ffc3a962da3ea83c58d21d64703465568e9aacce0470d46ff1020dab981cbf66e7c90c07fa24cd10dcc14fee434d6bd0793d6a9b31a51cc321ba7793ff527517062", 0xd5, 0x6}, {&(0x7f0000000400)="35a509bdbb13ee0785823cac21a949c9922ee0843e03f5f004397225bdcf1fbff7ce921abb724dcce1af428835a2621d2fa0675baa41a42732bc35e07cc28f200a4cb315de54bb0daf7d70ebee414e323aedaa54300b0f8feadc8cfc46830805aefe6c32f296b590e246a60da7882f1cee2f857a4df72a3711c747326a12e354487769fce92a8183c539fb5de5fc3d92d0dd1f9e58e0734fd3953a5191e14cf704176a9149f5f3a9c5fcec2688dcffc638a94e73c947737523a33385913bf3a1ec9f80b81179631c91e7536641ded18f49748f6b93191c71f4b37fc05ac666c09df1d92b82b7291de8", 0xe9, 0x80000001}, {&(0x7f0000000500)="c65eba3574f14c1ffc8effa880ec9984b511564b740070ff4b77e8283c17514941af8797f27266e37414444293ebf380df38cde2495b30a1e60a3e06e93d2cc54b1552adfb490fd70a6d362220f55b0bd809c50996ce789712eef23060a1b88ee020a326", 0x64, 0x6}, {&(0x7f0000000580)="21f108b12a1e5dd737c773a8fab2987ece5d37a2648106b062aa8628459e3c43916fcc7a4e05468c915c71643b9337fd434890071a09c5bb9e5a3cabe9bdf13fb802bd9f81d4532be445", 0x4a, 0x6}, {&(0x7f0000000600)="c5c0f3414f4e1e8af41aec11b61adaa0616cc997e39b5ddea39a1aa1d933428979178d90035331c1d09961ed2802d133ffb4b1d726a5e0b9db838de88a733b6b939d0108ae00d963535d723398b214764b8919fe20f2fc864a381baa954fa1c9", 0x60, 0x3}, {&(0x7f0000000240)="2b8a713b072cef626ceeca39279145f5dd00dc1c32c3bc22", 0x18, 0x4ce2}], 0x1000800, &(0x7f0000000840)={[{@huge_within_size='huge=within_size'}, {@size={'size', 0x3d, [0x78, 0x6b, 0x67, 0x78, 0x93525ab5c817ab81, 0x31]}}, {@mode={'mode', 0x3d, 0x7ff}}], [{@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_hash='dont_hash'}, {@fowner_eq={'fowner', 0x3d, r1}}, {@audit='audit'}, {@audit='audit'}, {@subj_type={'subj_type', 0x3d, '!}\x8e,--:}(!='}}, {@euid_eq={'euid', 0x3d, r2}}, {@dont_measure='dont_measure'}]}) 10:34:53 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = io_uring_setup(0x52a6, &(0x7f0000000300)={0x0, 0x6954, 0x8, 0x3, 0x2a, 0x0, r0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r2, &(0x7f0000000840)=[{&(0x7f0000001cc0)=""/125, 0x7d}], 0x1, 0x8, 0x400) mmap(&(0x7f00006fc000/0xd000)=nil, 0xd000, 0x0, 0x110, r1, 0x894f2000) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='gfs2meta\x00', 0x2a, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/snd/seq\x00', 0x115000) write(r3, &(0x7f0000001d80)="c780107cb2c328f9e6be2681fd05dbf3ac88839d000aee6f287dc1c24ee46333ea9b91f7ddf9bfdaeeef32b95b824aa2d0775a69a6bf3a3c0630350bbf1aa2fe6ba6fe2e2ca27975efd15c4aaa35b2b4de6e3a402c886039f950c4edbd5761e3df820e411026cfae20aff4ed131868793b3fa2eedb97b2277348940f507a72c0b14794ef154aa1ddcc75258cd811ad3b1ce018abe86bbbb8e309", 0x9a) mount(&(0x7f0000000040)=@filename='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='cgroup\x00', 0x10000, 0x0) syz_mount_image$vfat(&(0x7f0000001ec0)='vfat\x00', &(0x7f0000001f00)='./file0/file0\x00', 0x1, 0x8, &(0x7f0000002300)=[{&(0x7f0000001f40)="7d65d5bee5e4bcc320717e4c3c78cef3e6ecd3f42c77ac534bb6cd0ee38399c82c9a98395793ca842b504522440e3806cc4fd2bee96454d0ab696d81bf6b3f90038e003b991527e1cd961f5419a21b0ed28cf9e3bc7fbc4df4a61deae47e6202731a248e6f070d2ab3a436d2c69ab482b8ea29237905db3350f5e5f8e0a03ed2efcd7678603711b558a79b507b2d2ad0969264d621a73cc956a046a6adf072bc8901594ea9929ab900f915fdf4138e63869b1f", 0xb3, 0x1}, {&(0x7f0000002000)="bc55ed195c93", 0x6, 0x2}, {&(0x7f0000002040)="d3577cd737f8c7737201929f7c4c55390f054c1936d461024b3e270963a192b8607e778e22da652474649ba945da2898fb9d0eb4520161759c07cba22d930db43ed7407334ac7c7590c31205358538cb274e833cefe5956080d9e47f0753737c2134266323ef09d202b13f292fc1ea6418427554ea1e77ceecd6cd7ed59f05ee56537cbb", 0x84, 0x52d7}, {&(0x7f0000002100)="1cc28065152aade60c168de1021804390a48f7", 0x13, 0xfffffffffffffc00}, {&(0x7f0000002140)="7b030dcaba0b39591eb3621bf8d9472bb92b3bde1ab3e7681162ce3b0652ff49293c8931f7747f2998565621d759192f65e0101765471863948a10235c581af83748686d89a833b3707f3fb65fdbe104c52fce3f2f5add127b708f18c839b30101c1f38173a4b4c7816caa7c51e03bd3cc05ad", 0x73, 0x1}, {&(0x7f00000021c0)="3544e2ce4c691a8a7141d8107265a13b42df60b4068a85dd8d4f0c43321d05cd732227e39bbbb87835ea80b3fccc4c4559b79171dbbeeda041f0ae30f5d90214c74fc014bf5566026e68cb3073aad688d0b1ceceecaca91861525610bd34ff65c9fa5d5a53e189cab2555bc18441e6e8cd0e23c4b3f9623f2dd73d33feb252a37cdaf20360d52e8fb08c55ffc467", 0x8e, 0x6}, {&(0x7f0000002280)="9dcb0fcd92f50a515c", 0x9, 0x401}, {&(0x7f00000022c0)="1e800b89832168287ca15e3e94533be23f636bfe8d", 0x15, 0x3f}], 0x860, &(0x7f00000023c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x463}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@audit='audit'}]}) r4 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r4, &(0x7f0000001c00)=[{{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x80, 0x1, 0x9, 0xf8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)="40c24f787bb6441f25861dc230a6c316f50f16dfc963f22c031300a82586f443bd1a57ae2948910c744055905f8e303cdb4476bf5e2bf1e1488021c366e66680e13d2c5732724bfa8bfdc8488c9d0baec6b9680d33aaf880707c302fd5606408157ce2d8e21f4ebd66430e15257a2fa1638c2a705f07c6b417104630651dee4da065fef04137d5fb1398f6cedcc3c7b8fd42e4697d", 0x95}, {&(0x7f00000004c0)="f323a66c4bedf0be21fa9630", 0xc}, {&(0x7f0000000500)="3d5fdd06cead5d14645b3af5df51c39a240998d3be33913502b7cf1edb6b6c2362b46578501c2afbe9e85a103d11ab6099a472fd45f35649354da5698ae64ce98bd24c546316478858e83a5870cfac952e40aa688c8f4cd723ef26deca87456839bc266d0a8a156477f298ab159ab8bae31b63878eb0d720f2b158c0dddaa53e88c0fe1c3c0c405c98da4466273730481d5b034bbc60a567d8c3aab75e0472affc7b61f2aec74814bd8ec4b9076c9d7fefc330c59006e79bb11de2a86b827481991b2963dd237792e1b207b7fd0f94e99aa7bc460b141c6507e473a84979c279", 0xe0}, {&(0x7f0000000600)="172baa8a2abd29d2b40431556f", 0xd}, {&(0x7f0000000640)="5cba36b0f4337bb90627a03ba4d7a62100555f542e95863bf2865d0cc7b06cea3f1fb853d96d45fe4e0c2dd2d8e6e23732fedcc6cfe6a312c1b9dd646054ac9d870f103cc1e3772f84564cf7ae28db3efce2c7f66d26fe737304e60e4d9e3317c813a4d23f0c208e9db97e74b37ff218e7004ab44a95e0dd8577dc9543ff8a2bd56490244bafe180052c62bacaeeda25df4cdb299e875814e5c1de544f64dc93091cc811134605c203060a9662", 0xad}], 0x5}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)="3e847365e1a7fccc3a6d7fe9a068f1", 0xf}], 0x1, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0xfff}}], 0x18}}, {{&(0x7f00000008c0)=@ethernet={0x1}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="f67944a15a7c4e09c6f2951575b8b4784b5ac3358985090c9d17ef80b59fe19a472346c57caa73ca6e24bfcc2afc7783adc8e24802198a799ba99e02626a6bc5943411877bace64fff8c457fc4ed60f294a42f0bb65410b2e09822db0d499db8d00ec6e9bf360816470bf566fb9e1cf3fab4496077e2007253c5bbad4a9a5ca8c60e0081ad63525af15118d520aabe74a7d5ad50cdb9ac12ddf23233e369aff3d8b67e1843458786f78a854919d6dfb4bd6e75267cf154e4b6588ad6c02a23aad50d19b4e6442949fd3c55e668a2649c8e26586a4b0a7b2fa8d44c0ed22aedea", 0xe0}, {&(0x7f0000001a40)="a168c6802a1c6363b9d3b0602d97a41633dedf70601e7eb25f847da02822307e9f402f89fd782a146bd8b547a00d3f31371619b1c9105f1cf813eeb5c2d4e12330f061d07a320b6f3ce2b8caf43083f51ee2b3f59be07bb4691ca7f6e2bf331a5ba521d640678274e952d96508060076fb0c5fdfcca5279177809373c0dec9e220f4218e8b89f53a317ab062116cef62c4c676be64a16dce534c690f8f7e9bdd6984c7757d31acbd4589287fe456f2bf93bc9fdc0a6ca8af5a341cbcd642b5faf2833d34b17f01be2b87d30802e7515caa0f95a05f", 0xd5}], 0x3, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x2dc}}, @timestamping={{0x14, 0x1, 0x25, 0x86a2}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}}], 0x3, 0x40080) 10:34:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005d000000000200000800040001000000", 0x24) [ 536.406537][T18711] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 536.414994][T18711] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 536.422967][T18711] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 536.430927][T18711] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 536.438895][T18711] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 536.446869][T18711] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:53 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) 10:34:53 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:54 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 10:34:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005e000000000200000800040001000000", 0x24) 10:34:54 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x62) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="97", 0x1}], 0x1}}], 0x1, 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x9800, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 10:34:54 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="e55cc3c2c7b80ad9a6b7c40260f1efd3e991754377d81c3a0f88c4320fa6aff35bfc1847d2ff647f7d710e6e79632c49ef57db3441e87967acd9e7257c4cce489aa6517e75cfdb643fd75074025eba557399ce11009f7acc382c25eb1e7b3bba78eb1fcb97b543", 0x67, 0x4}], 0xa0000, &(0x7f0000000300)={[{@noauto_da_alloc='noauto_da_alloc'}, {@nodelalloc='nodelalloc'}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}], [{@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '.$'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '['}}]}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:54 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c000000340008002dbd7000ffdbdf251e0000005f0087800c00370000000000000000004d19d71450f4cf23e2bfdd0286156e8f85e774bd9c354fa31dbb3787a270dd336187fa734ebaea045830cf766769765d062bb7048cf6591ce86114061c02f78705d6f3fe80dfa54ba0a2f6de37b65d0008005d00", @ANYRES32=r1, @ANYBLOB="dff67586484a2e768542fd74f284c1793d2a48728d8c7ee4ee5ec4edb2c71503e7c0ae4090ac821d34f01b0d87ffdec86b40a2a1923c622b4ce7ec903e4cbd51df7b4dc4eea7ebc5ec167503e9ff65341fcefb2f3fbabb245f27f0aa5c03e83a0e54108b9c8aac499b2060bb73c3114b4c61240155e09b71caac745d6f6928a6869c88b94451797e9e3972eb22"], 0x7c}}, 0x800) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x108) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00', r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB="dd"]) 10:34:54 executing program 0 (fault-call:4 fault-nth:71): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 537.169062][T18767] FAULT_INJECTION: forcing a failure. [ 537.169062][T18767] name failslab, interval 1, probability 0, space 0, times 0 [ 537.181715][T18767] CPU: 0 PID: 18767 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 537.191913][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.201965][T18767] Call Trace: [ 537.205239][T18767] dump_stack+0x137/0x19d [ 537.209554][T18767] should_fail+0x23c/0x250 [ 537.213971][T18767] __should_failslab+0x81/0x90 [ 537.218717][T18767] ? register_for_each_vma+0x372/0x890 [ 537.224160][T18767] should_failslab+0x5/0x20 [ 537.228647][T18767] kmem_cache_alloc_trace+0x49/0x320 [ 537.233912][T18767] ? register_for_each_vma+0x372/0x890 [ 537.239350][T18767] ? vma_interval_tree_iter_next+0x263/0x280 [ 537.245311][T18767] register_for_each_vma+0x372/0x890 [ 537.250615][T18767] __uprobe_register+0x3f4/0x8a0 [ 537.255536][T18767] uprobe_register_refctr+0x29/0x40 [ 537.260714][T18767] probe_event_enable+0x2be/0x7d0 [ 537.265769][T18767] ? __uprobe_trace_func+0x420/0x420 [ 537.271033][T18767] trace_uprobe_register+0x88/0x410 [ 537.276210][T18767] ? find_next_bit+0xa7/0xf0 [ 537.280786][T18767] ? cpumask_next+0xc/0x30 [ 537.285181][T18767] perf_trace_event_init+0x34e/0x790 [ 537.290445][T18767] perf_uprobe_init+0xf5/0x140 [ 537.295245][T18767] perf_uprobe_event_init+0xde/0x140 [ 537.300519][T18767] perf_try_init_event+0x21a/0x400 [ 537.305608][T18767] perf_event_alloc+0x7eb/0x14d0 [ 537.310571][T18767] __se_sys_perf_event_open+0x5c9/0x25c0 [ 537.316189][T18767] ? __fget_light+0x21b/0x260 [ 537.320845][T18767] __x64_sys_perf_event_open+0x63/0x70 [ 537.326287][T18767] do_syscall_64+0x34/0x50 [ 537.330684][T18767] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 537.336572][T18767] RIP: 0033:0x466459 [ 537.340491][T18767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 537.360078][T18767] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 10:34:54 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x0, &(0x7f00000000c0), 0x80010, &(0x7f0000000200)={[{@nodots='nodots'}], [{@euid_lt={'euid<', r0}}]}) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:54 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/176, 0xb0}], 0x3, 0x1, 0xfffffffe) 10:34:54 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e2f66696c6530105edc84050ca458cff051d409df2435f127f6a8083203f25d7afa7328a964ee416798605a5b9a10f800e5aa50dc95601e2e31e76fe5c7a9f914f6513371b4fba6b1f9cdb00530e21681960cb678a88d1506e7dc8935c5ea43cacaea796d4f8b089c84610669357ee50c60372025fbd26a461c3f4a5c118c569dae90518ce71a1ea7137578865723b84804d3bb8a4f09f19205224881578d63c944eb64dcd42e46b00b9129c7433181071ebc6329737a83babf463ab2d5f89633a72ea4b1b31084738e5edfd6a34ea7e0b5b422ff5408825d9421e24f3325aeb01aa9da375500000000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 537.368491][T18767] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 537.376515][T18767] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 537.384465][T18767] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 537.392468][T18767] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 537.400418][T18767] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f0000005f000000000200000800040001000000", 0x24) 10:34:54 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xdf, 0x0, 0x0, 0x173c08, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x84) r1 = epoll_create1(0x80000) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/109, 0xffffffffffffff46}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000200)=""/78, 0x4e}], 0x3, 0xfffffffa, 0x8000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004ca01169a6d8109cd93128515cb19d1a0a98eea07b15afd03591978f5b3c4fc315c2c95b813d312df0500fb631181b5cf4748d61873c4ad2f9723e22466f21ac1caaa751d6c69204c9263f5041df82fbba2d6c07ca9128230140be7cc4a9c03cc9d3489357d637a8fd9f30df82ff35ac9d7addd65fbb6110fbad337078373bf480221f9f57674f773c7f76a7c60dc697a2c313a277e85c33cca61a5e9872338e9c6313aefda5c105bb7efb774f243cdfa6fafb15b55ef9a37932a247d76b9fb731a6ebe258d8f7fbcbf3ebba74aac9663b135dbc851f591e9457c370cd6a3"]) 10:34:54 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) preadv(r0, &(0x7f0000000000), 0x0, 0x5, 0x811) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:55 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) r6 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) move_mount(r7, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00', 0x36) 10:34:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000060000000000200000800040001000000", 0x24) 10:34:55 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = accept(r0, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000040)=0x80) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="c80b65d8313d62ff920e27d1ed2d4c2e9415e90a83b0e428ebc7858d62c3c267e656e65212b4e5882f26d918b95b2e7eee377cf4abfeb1fcfda312c80082bc933af433699ed4f2684ed3f541820e2680d7de6031a30d8cf5ce3cc8df6cf602a7bb79190392b1f885fc4c37", 0x6b}], 0x1, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00']) creat(&(0x7f0000000300)='./file0\x00', 0x10) 10:34:55 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:55 executing program 0 (fault-call:4 fault-nth:72): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:55 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 538.313179][T18827] EXT4-fs: 52 callbacks suppressed [ 538.313191][T18827] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 538.330252][T18827] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 538.345094][T18830] FAULT_INJECTION: forcing a failure. [ 538.345094][T18830] name failslab, interval 1, probability 0, space 0, times 0 [ 538.357739][T18830] CPU: 1 PID: 18830 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 538.367885][T18830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.377988][T18830] Call Trace: [ 538.381251][T18830] dump_stack+0x137/0x19d [ 538.385574][T18830] should_fail+0x23c/0x250 [ 538.389969][T18830] __should_failslab+0x81/0x90 [ 538.394716][T18830] ? register_for_each_vma+0x372/0x890 [ 538.400166][T18830] should_failslab+0x5/0x20 [ 538.404693][T18830] kmem_cache_alloc_trace+0x49/0x320 [ 538.410011][T18830] ? register_for_each_vma+0x372/0x890 [ 538.415575][T18830] ? vma_interval_tree_iter_next+0x24c/0x280 [ 538.421632][T18830] register_for_each_vma+0x372/0x890 [ 538.426976][T18830] __uprobe_register+0x3f4/0x8a0 [ 538.431907][T18830] uprobe_register_refctr+0x29/0x40 [ 538.437096][T18830] probe_event_enable+0x2be/0x7d0 [ 538.442121][T18830] ? __uprobe_trace_func+0x420/0x420 [ 538.447572][T18830] trace_uprobe_register+0x88/0x410 [ 538.452748][T18830] ? find_next_bit+0xa7/0xf0 [ 538.457425][T18830] ? cpumask_next+0xc/0x30 [ 538.461866][T18830] perf_trace_event_init+0x34e/0x790 [ 538.467138][T18830] perf_uprobe_init+0xf5/0x140 [ 538.471955][T18830] perf_uprobe_event_init+0xde/0x140 [ 538.477243][T18830] perf_try_init_event+0x21a/0x400 [ 538.482346][T18830] perf_event_alloc+0x7eb/0x14d0 [ 538.487279][T18830] __se_sys_perf_event_open+0x5c9/0x25c0 [ 538.492914][T18830] ? __fget_light+0x21b/0x260 [ 538.497586][T18830] __x64_sys_perf_event_open+0x63/0x70 [ 538.503102][T18830] do_syscall_64+0x34/0x50 [ 538.507516][T18830] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 538.513457][T18830] RIP: 0033:0x466459 [ 538.517340][T18830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.536967][T18830] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 538.545371][T18830] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 538.553320][T18830] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 10:34:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000061000000000200000800040001000000", 0x24) [ 538.561299][T18830] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.569263][T18830] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 538.577242][T18830] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 [ 538.588183][T18829] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 538.600811][T18832] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 10:34:56 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000300)=""/145, 0x91}], 0x2, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x84a0, &(0x7f00000002c0)) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') write(r1, &(0x7f0000000180)="efb716922b15d217205fb86a5ade008167f2eb9aba9982c4efc80a6738ff4d4bdeeef71ba02922f9f1e6fabed742bc6660bac03efd9c26c2c0c90abc62b9ce6fc241ebf0022c", 0x46) 10:34:56 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x90300) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/55, 0x37}], 0x6, 0x5, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:56 executing program 3: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, 0x6, 0x15d) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) [ 538.612718][T18832] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 538.625525][T18831] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 538.636781][T18834] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. 10:34:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000062000000000200000800040001000000", 0x24) 10:34:56 executing program 3: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000400)=@unlock_all='unlock all\x00', 0xb) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x110) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='9p\x00', 0x800001, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d78656e2c706f73697861636c2c616e616d653d03295b24405d2c6163636573733d", @ANYRESDEC=0xee00, @ANYBLOB=',dfltuid=', @ANYRESHEX=r0, @ANYBLOB=',posixacl,nodevmap,version=9p2000.L,cachetag=(-,msize=0x0000000000000008,dfltuid=', @ANYRESHEX, @ANYBLOB=',audit,seclabel,appraise,mask=^MAY_EXEC,pcr=00000000000000000012,context=sysadm_u,fowner>', @ANYRESDEC, @ANYBLOB="5e32b31b59b733b7eee425000000afa14d"]) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="000000e600000000a8873242295ade40"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) [ 538.729737][T18853] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 538.745083][T18853] EXT4-fs (sda1): re-mounted. Opts: data=journal,,errors=continue. Quota mode: writeback. [ 538.756870][T18849] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue. Quota mode: writeback. [ 538.925622][T18825] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 538.933729][T18825] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x0000000044c3fd97 [ 539.013871][T18867] 9pnet: Could not find request transport: xen [ 539.022135][T18869] 9pnet: Could not find request transport: xen 10:34:56 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x90) 10:34:56 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x2, 0x0, 0x0, 0x20080, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x101000, 0x100}, 0x18) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2e2f6669ec653000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x24d9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x121201, 0x4) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000040)=ANY=[@ANYBLOB="005bd744ce4f138460216e73a3638c2596c7b96706b16106ad331782b89d349c8026e4bd81d3e93224221f353a491f634b"]) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r2, 0x20, 0x0, 0x10000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@id={0x2, 0x0, @d='~\xb8\n\xf3\xf2N\xf0\x86rjL\xea:\x15L\xe0'}}) fcntl$setlease(r2, 0x400, 0x1) 10:34:56 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x1200400, &(0x7f00000004c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x36, 0x25, 0x34, 0x74, 0x31, 0x30, 0x31]}}, {@huge_never='huge=never'}, {@huge_advise='huge=advise'}, {@huge_always='huge=always'}], [{@permit_directio='permit_directio'}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_gt={'fowner>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_hash='dont_hash'}, {@pcr={'pcr', 0x3d, 0x7}}, {@obj_role={'obj_role', 0x3d, ':$(&-:):%+\':'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)=@known='user.incfs.size\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) utime(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x4, 0xd2be}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:56 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000063000000000200000800040001000000", 0x24) 10:34:56 executing program 0 (fault-call:4 fault-nth:73): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 10:34:56 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x1000, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000180)={[{@fat=@gid={'gid', 0x3d, r1}}]}) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0xd84d, 0x5, &(0x7f00000003c0)=[{&(0x7f00000007c0)="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", 0x1000, 0x80000000}, {&(0x7f0000000180)="0521c31bfddc1cd02e63974933761504604d1cbd54cdf8c3f7b5c6c8e991475fe12c94826674a907765aada19cabd1961d3339151eb6d8bf35eaaba869a302ac2fc504270a43db8fdd3ddb66b1865e7381afbc7b480aeea256fcef6d80391aa3ee18bf8b0f4e14044c05385a1bc140b5e5528042e7143bd51eeeeb83c90c3dc1624a2c2474dc4541dddfce23ef902d9bbff859c73af23ad7a7ec439b7ffb767ff8b70b1abaeb", 0xa6}, {&(0x7f00000017c0)="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", 0x1000, 0xe4f}, {&(0x7f0000000300)="cc874b694471af9e1d5331171f34f9e40ba99b7a172e61aa78c900766bbf9b96873902ce01879ec899437483e582b294409a7696889e23a59eb77ce1fb15c44edb972d1e9a99e8a7e260baa2a6115301b9cef5ed1a9ca9dff798e630cbed3d2172f90d4ef0fec2b9c9fe57202d6fe60190780582fe64ed5a8d2c89804567e6315d5f7fe0e6dd31d9998803b6111768ae281125d694175905b994083f7eba0e", 0x9f, 0x6a}, {&(0x7f00000000c0)="f1050c3866802faccd5c677621d91dc2d14806a9b80c92b2480d73", 0x1b, 0x6b54520a}], 0x4004, &(0x7f0000000440)=ANY=[@ANYBLOB="dd41ad11", @ANYRESHEX=r1, @ANYBLOB=',huge=advise,huge=within_size,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',subj_user=data=journal,measure,audit,uid>', @ANYRESDEC, @ANYBLOB=',measure,\x00']) [ 539.562228][T18887] FAULT_INJECTION: forcing a failure. [ 539.562228][T18887] name failslab, interval 1, probability 0, space 0, times 0 [ 539.574870][T18887] CPU: 1 PID: 18887 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 539.585260][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.595299][T18887] Call Trace: [ 539.598661][T18887] dump_stack+0x137/0x19d [ 539.603041][T18887] should_fail+0x23c/0x250 [ 539.607432][T18887] __should_failslab+0x81/0x90 [ 539.612177][T18887] ? register_for_each_vma+0x372/0x890 [ 539.617642][T18887] should_failslab+0x5/0x20 [ 539.622733][T18887] kmem_cache_alloc_trace+0x49/0x320 [ 539.628013][T18887] ? register_for_each_vma+0x372/0x890 [ 539.633476][T18887] ? vma_interval_tree_iter_next+0x263/0x280 [ 539.639465][T18887] register_for_each_vma+0x372/0x890 [ 539.644802][T18887] __uprobe_register+0x3f4/0x8a0 [ 539.649791][T18887] uprobe_register_refctr+0x29/0x40 [ 539.654988][T18887] probe_event_enable+0x2be/0x7d0 [ 539.660013][T18887] ? __uprobe_trace_func+0x420/0x420 [ 539.665296][T18887] trace_uprobe_register+0x88/0x410 [ 539.670522][T18887] ? find_next_bit+0xa7/0xf0 [ 539.675118][T18887] ? cpumask_next+0xc/0x30 [ 539.679510][T18887] perf_trace_event_init+0x34e/0x790 [ 539.684800][T18887] perf_uprobe_init+0xf5/0x140 [ 539.689542][T18887] perf_uprobe_event_init+0xde/0x140 [ 539.694855][T18887] perf_try_init_event+0x21a/0x400 [ 539.699998][T18887] perf_event_alloc+0x7eb/0x14d0 [ 539.704933][T18887] __se_sys_perf_event_open+0x5c9/0x25c0 [ 539.710627][T18887] ? __fget_light+0x21b/0x260 [ 539.715284][T18887] __x64_sys_perf_event_open+0x63/0x70 [ 539.720739][T18887] do_syscall_64+0x34/0x50 [ 539.725145][T18887] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 539.731020][T18887] RIP: 0033:0x466459 [ 539.734915][T18887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000064000000000200000800040001000000", 0x24) 10:34:57 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x80) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x40602, 0x72) r1 = openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x39) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000200)="82a3d6e8c51d5434e3f8e40fdc4319a00fe0c87fc30359a6990407af190ab51f776940e0d860985694007478df57dfe7956d0e550b36788dedae7b2325a900106d6e2e265205a0afd5", 0x49, 0x1}, {&(0x7f0000000300)="d3c1cba4c60431e9ee20bc91bfd7c092748dd47eeba0a2dba9e7acbea511420152c3150c6789d94799b24fcbece748da3e66ab9d1eaad42155a4cc6f404e9a868b08e4d25dbbfacfdb3e9b51271d03211f8b7a64699380238477b4e2c3196acae8885f1f340a174f4141e877291035865c537558699201d778d5a506eef7011781ba690e0288bc1a3be2e209aea5e1958727998f60ddc9", 0x97, 0x1}, {&(0x7f00000003c0)="aff376bf3a41303df91a3f1d78882a7450ae865e51dd9ee35fb896e5e921824573e4f16825493013c99f09b791ffc8508a700e18b996f50e840bbff2911e692f5bd527f778e031a49439a218cf1a4265652b15785edf03c0cb5acf327909fffb6b5ce4333a560412f226cced196de97c554433214aa87fe8daf9263b94debfbc17400b232c463ce5254799320f8eab49dab5a1f71df03005dd503092b37a55435943edf6fa8bb03f00bf0846a1d4032b8af8a1faf321b151193246efc7663b16c3a852b99c2dab91f5010622d06709d6f45c189f4f5b53bcd3c902113af5", 0xde, 0xfffffffffffffff7}, {&(0x7f00000004c0)="166b88ee388d37f31f0d901f61997da245e29af14e540ab2c1f2d575f44b670a16927b460a19ea2340840d771598581e96c0b53047558dba4fef8eb833dd9c64ce1fbd35f55747c46a537a6c", 0x4c, 0x10000}, {&(0x7f0000000540)="70ee1f1e9ebcff831ef853e0156c87eced5806026de1b0c1ccac11b5ffd4426ac88faab73bddcd401a092c14ae2c724bcc497d9f5f45ed", 0x37, 0xffffffffffffff00}, {&(0x7f0000000580)="fdf6b1031c6424fca00eacd98f74fd2deaaee975db8fa94c0305a6d53bb9480dabefe58b317022b04c2926a993cbfeabb6d9245654c6b11b1c4d9151eed666af765a84e1c35db96d9eba25e33a07530381873dfba83736273887cd4e6d9ee8b2e176794cd846202eacb7e52d046c7b52dc27ddc2edd6eb4b6b7cf7eb8ddd9204fc7741ba941c28466bda5e3fb17530e9a632d0c413f4006fb0d19e96b600bdbffbae3daa4ef6ff74b78d28ae0ff6712fcd", 0xb1, 0x7}, {&(0x7f0000000640)="3606f7d0f6350a9b5e36bb6c6afc269472faa59700057719799dc4ff3343271dae5830aa297af1b22973e5b260576ffc0ddc4fae1a1360e251ba1e07ea642c92f8a80f7366c35834edccc21243365526044c133cf9508db0b0c5463b742a7dde92961d30e44f668f4c53dd444b0386222c35aa3b0eddd21727ee544ab647e8808f50eaf20363fd78b5b5d58fb338faeb7121608377bac37f1c60d6da25f77e04151da300dc6043e7", 0xa8, 0x771}], 0x80020, &(0x7f0000000880)={[{@dioread_nolock='dioread_nolock'}, {@data_writeback='data=writeback'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x62, 0x63, 0x37, 0x37, 0x33, 0x63, 0x33], 0x2d, [0xb7e4b5233b01a1d2, 0x31, 0x66, 0x63], 0x2d, [0x35, 0x61, 0x35, 0x65], 0x2d, [0x65, 0x62, 0x6, 0x61], 0x2d, [0x38, 0x31, 0x36, 0x39, 0x61, 0x65, 0x64, 0x66]}}}]}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:57 executing program 5: r0 = syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x93) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 539.755226][T18887] RSP: 002b:00007f23c55d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 539.763706][T18887] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 539.771657][T18887] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 539.779625][T18887] RBP: 00007f23c55d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 539.787583][T18887] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 539.795593][T18887] R13: 00007fff95c211cf R14: 00007f23c55d5300 R15: 0000000000022000 10:34:57 executing program 3: syz_io_uring_setup(0x86, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x119}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x4000, 0x2f) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_complete(r0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) 10:34:57 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x157) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) [ 540.128053][T18880] ref_ctr going negative. vaddr: 0x20000004, curr val: -1, delta: -1 [ 540.136179][T18880] ref_ctr decrement failed for inode: 0x361e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000c9bcb7cd 10:34:58 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1011fe, 0x140) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080ffffffff) r3 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) sendfile(r5, r3, 0x0, 0x800100020001) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0f91c0832235e3792057742cf910159593807b3cac6093c72e"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) 10:34:58 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x400, 0x20, 0x2}, 0x18) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0xa480, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@usrquota='usrquota'}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}) 10:34:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff9}, 0x10) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000065000000000200000800040001000000", 0x24) 10:34:58 executing program 3: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="90d300006c1b2499"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:58 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x36, 0x3, 0x5, "bbea4db36435ad0a3eff65daaa8d231d", "9f3e2a09aeae96f266b7fe5778be37695dae334265e34d3664c5d47c0b64c11383"}, 0x36, 0x3) 10:34:58 executing program 0 (fault-call:4 fault-nth:74): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 540.743063][T18939] FAULT_INJECTION: forcing a failure. [ 540.743063][T18939] name failslab, interval 1, probability 0, space 0, times 0 [ 540.755753][T18939] CPU: 0 PID: 18939 Comm: syz-executor.0 Tainted: G W 5.12.0-rc8-syzkaller #0 [ 540.765905][T18939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 540.775965][T18939] Call Trace: [ 540.779398][T18939] dump_stack+0x137/0x19d [ 540.783725][T18939] should_fail+0x23c/0x250 [ 540.788160][T18939] __should_failslab+0x81/0x90 [ 540.792939][T18939] ? register_for_each_vma+0x372/0x890 [ 540.798389][T18939] should_failslab+0x5/0x20 [ 540.802913][T18939] kmem_cache_alloc_trace+0x49/0x320 [ 540.808200][T18939] ? register_for_each_vma+0x372/0x890 [ 540.813784][T18939] ? vma_interval_tree_iter_next+0x24c/0x280 [ 540.819794][T18939] register_for_each_vma+0x372/0x890 [ 540.825069][T18939] __uprobe_register+0x3f4/0x8a0 [ 540.830048][T18939] uprobe_register_refctr+0x29/0x40 [ 540.835229][T18939] probe_event_enable+0x2be/0x7d0 [ 540.840236][T18939] ? __uprobe_trace_func+0x420/0x420 [ 540.845518][T18939] trace_uprobe_register+0x88/0x410 [ 540.850937][T18939] ? find_next_bit+0xa7/0xf0 [ 540.855513][T18939] ? cpumask_next+0xc/0x30 [ 540.859940][T18939] perf_trace_event_init+0x34e/0x790 [ 540.865204][T18939] perf_uprobe_init+0xf5/0x140 [ 540.869947][T18939] perf_uprobe_event_init+0xde/0x140 [ 540.875311][T18939] perf_try_init_event+0x21a/0x400 [ 540.880401][T18939] perf_event_alloc+0x7eb/0x14d0 [ 540.885335][T18939] __se_sys_perf_event_open+0x5c9/0x25c0 [ 540.890954][T18939] ? __fget_light+0x21b/0x260 [ 540.895626][T18939] __x64_sys_perf_event_open+0x63/0x70 [ 540.901140][T18939] do_syscall_64+0x34/0x50 [ 540.905550][T18939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 540.913145][T18939] RIP: 0033:0x466459 [ 540.917029][T18939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:34:58 executing program 3: r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x8, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)={[{@data_journal='data=journal'}]}) 10:34:58 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x193) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f00000002c0)) 10:34:58 executing program 5: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x9, &(0x7f00000018c0)=[{&(0x7f0000000180)="4324845e8d0cfb91429c28e46edadb6eff6eb2c98f513b9aa6009b038e3f2face1ef8548c95f069ff7bec667569d61673b2834d3c45cbbd321162126a310bdb4ce263b5b6cfe8bc3691ddfd2ed62ee6b8beac455cee740bc9547700fa7e4d5a9cafb14037101486b7371dbfd26d0e932d323f2534bfdd5765ff76445eeafe84a53f0e8e7697e0405467011558fb074ff9180966c1b51d4deab6bfb43d64a37346ca9e66cdef1536d7a6e70ad0d9217c9c91302f9073b68e236b13065366b41fb318de473f31e", 0xc6}, {&(0x7f0000000300)="fa191c27dc45c35eedc750938d8db61a9658715b27a16b9600d6c4e898e1b329bb456eeafe896b0f3c4b3da56c2e51a57fd00e51248d4d7b622f40ecdd726a9aa2fe892f5ed427c6b20174b818d42cfb376bacaea3789b98dd8af0fdae349a17dd718ec3d92c05c229ec5e3bde14883208fc56ae", 0x74, 0x3}, {&(0x7f0000000380)="3375fa4fd776afe2d4114fe9503c450f2a530e7b44e9c5f2765baa97037d8869e4b202dd5e6484ec1a979886f14f1f6402410f9e515bc099c97d60d860371c27c7cd35609b0257fa018134df317712909c1eaaf287673dd3d877506fba7db984c17478d0c61958d4648a7c5068d3cac8360c8b5de9675893806932e9fce2fe13effe85eba1e8af612fbecfc01eb8dff9c2399f362a8f2ed73c1eaabf2baf9a65cc4e77db6a7ecb067b9a260645408df9e261b980f154c5f41c81f1f0220e94c4fbddd58cffd9c235f19f5a", 0xcb, 0xc80}, {&(0x7f0000000480)="279840067e66884d300d536c3eee7ee642f94be4f60a438a6a1dc61af1cf59c6fb1464678c612c2ae742536ebc4abd0dcd51c571ed", 0x35}, {&(0x7f00000004c0)="bf5f4e3cf207596fdcf64bce88ac52377c551f57c460292439e83f182e6a80b5901d8e1165db9fe061e5f8ee1723c8a9653cb3c2fcc1fd5024351b0a3e3ee9f3d87159b726203cdca1debd3a7bae7cf1985476d3c9bd9dcc1e57fa394ecc328420b49cc322cf798ded51b13f3d391109b22ed39a2bb673bc7de6d2595e0a5343749b8933035117a6383e22bd", 0x8c, 0x8ac8}, {&(0x7f0000000580)="8ac511008d45d0c7914e26a2b337af620604f799ad0868520ec713081d8e081f7bf82b8bf0ca762c420bf741d4f3c3d6124e0f3b77873e1d3265f04f44bf1c4c42c4761480a1e0f9f509143fb454728561a043602f065efba5f8150c69ff62f1f771687625e8bf9d0def3cdedca2eafe3a69878d3918133f6327615ed86c51db81358ff8bf86a0807e33b3c1cb0568d9c4bd17733016dd9e1bcd6e8f1cd53f08a5a28bd2572af53751dc6d380a7046b863a0660de73db33838ca4e203c8c3870252cdd24cd64cfbcf736811a684a246834d09c", 0xd3}, {&(0x7f00000007c0)="853888ddba68ff7f3c7116427f49b05b0dee6c64a8174c1cb503f9202b3fb4df77f384348486f6d7af51b35a4514c6179625726736a8424542ca854fba499757687e7617c22bb26fd8c261e314f3b0f82f6b9c9ef73a0977db2a9edfc8fc18e3f4a7a203b292963106ee353ac1de545cf41e2680dec70b6e74107a4cef58d55f88e0452fee988ca6e1d15a1168187c964cda01868053e11a7ffc3a20c595290dc8fe13ce4245ef4cba67c8dec70534994ffa9edfeab764ce669d4b2bc58fff6576ac0cb0fc721d4f2735394a07acf8e2c882f38361a134cf8ace25c6e63ff55eaabffe7b5d34ddc2989343b43740f797198b1343e5a74c1c78abac79b707394d55d8dec97449a21c10b40ece9fb7602c71969e647d9ac9e4782b883a0a29aeec0fcfeb2e62f83c8138bf41380a1f1825392e1aa4706027d595eacd61d636ad1b8d6aef300403c6993f7c1951813e694bf32ba146915018042118009bf51ea5decbc9965211b4b8f0493488a9330c70b36c27aaf41a58cbd554c4159f0e510d3cfc83de7d53688d1c6e02564b1481a6fb023b18f492f49d83408ed9c26477df8f9f6a6809a5fb4c0da570c7b14d08a0214f9df1d7a45593ff8831ef07fcf96a25e893b9bb2b2c7bdae3e73e2c25bb9814a42b007f355d1360af573c9846aca50dee3282557559139c45afb6e563f32f313c8662e979979e6550d1ab57f39a6859f5f1f7641f67dddc1438324cf9353bec0f21de46a33906b99041cbeb6dba84cebb8d6bde6c223d55b7d0557e715c061c25194031e6c699a28f1ffdf57042e9664675ba5214968d04f9624f9c1ece6c2e35f6b4139839d46379a39a1a209122ee847b095bae90d05575375a80e4a57ab3cd372d3e695dd16df34355b4e9e7ece7a7f05c2e7a11307b27071e5ab4d568a3616eea142596adcfe7f4511095acd80e797853da2044647646a172eeb6156f0efb3b086043ae732737445090ad65eb95c8f2a0a3693b869aeebd6bb1e550565f440e139882379bf0ea5e342e84fb1a20f4e95aef18c204f4320a69a4b0c243f2e7efb802a95673939980d07c7a8d01f72f5054a42f69e458cc18b0735c2833b75394d1e21b833644795f63f7dcf99ab2991cd2dab9c0882eefc98cd298659c4d51af11cd7fa0f2c823dc963bbd66bab0db24949d66c3883235d2d3343568da03f259b9a0f961b206b0a5db06a4571cc20714c0285d3a56e518877239d180bd938523df86f678754880fe7265aa93918983b8669037a5df092d357b5fd3010c2616c195cd8fa2e6c565f469f59061f1f60d509eef18ec30ed4b0045d24ffff8cc3a1abee42a3948858e463c670c5bf33bd7918e1a15fc9ebc5cc0ed839d1e1858bd72e6bbfc3510da5e035d7a02f28d52e2228c67010f5409f241aa48af2af61d5c0cddede4b54544830bcccd1c8f52e35c50f95dfef564190361321d841bae50942127f8f9c2686c8abc20ac6cc64d1c4a0d4ffc0e975d192bb88c89b2740d3fdd9a9b0737cd2138852b62d27f3d738b7fd3048626933d3878dac1f92fec98f7363d0d0e350529d804e129c6cf9ec2d0f4e9bdd807d73dc63ee2f2d53bdf442be4e55b646163f4e626e373dff3564f7921f0014ba834cd2c19d57ce3c1b0afb7a2c3ea4c56d1486e292b2aeca2bd68529cd013aa631da7e027b59188c4fd9027edc2643728ec50a991e61a666472ee7c4843766d75fa8ebebde8c6200c860ec07305d0f877e66991ffb274d76a8a06c04919a161cd2cb138e27d5d12506b96eec1cd37b1feafdf3bfd43523ff588397095afe7fe31482c8be5f6fa82e38b9d4e1f64b13d0c721d9c5d54f2e0826fb0764235c59134805d572af66d06fdc326922a5ea6d234a98748785fe61084cd9502283789b3ca3cc25342eed01295c32f5a7b38d6aedd9926d7b848563b8730e4c8488ae23c771a5ef6f0b45585ee03551664c6cbd95c3d1bb726a2daceced691de47b6c01424ea92e4b0b3b60b4590a3a02833bd81ec9afcf109af103a4a7c608bdb3761500fde037e40fc6060557cc05aac55710d0c1623578602bb36dfe0c0983badeac1717ed26830031fece6220573a028c96de5eb430ebc2f4e70b49e0f9179d995089e57f097c67b1248d977b01c81dee63103b4f1172d4c72ee744261a43f5fbd509e2e9c2b3c4316a23eed54738b549412377acdbad2225d06ded6c775e0ae7fc639aa2e7a5c4bd78ffe9bc86ee929f1c1c7455abc5a87706ff88a1609b4b6c6a7e289b3798922a8963b7beaf10e06246d690f80455f0fbceca1e8a78cab7496d4a441b22a38ea66da56358079e97083dbffdf86e8b21160c24c3c1fa024b4c3da70ba574670b22b8d43db156e78e3bef7e14522170f12863649b81b23732dbae41429d375cbcaa94027e37396c8e945965639b607606ac22ffe184cb544692e78e44adc623a79d8f715240ca47d97114c256665f84ba3e31342359c2664a17472a1b3185ce439130f216356b2556325ecdae6c619c2f167b40641ca4ced95894a4faa9419ccbfd437ec04694e66a396e53deed72e1156a97a142c6a9db602c2090cc5398ba399436a8ded973a7bb1a6f6aca33c2e2cd122411a055b11878a8abeee787d3d3ab89ac1da8f79d7d6ec68c456c1c5b1bcdb629d1e74eb80a0f60456b6959b663b59919f783f36c6f15cb1a246c2de107e2bcbe84a07acc3aeaf01b75b5d37b0df1f175e8572ce4affca87f784f703d0a656c3b05bd8dd3ea602968834a3986406e0251bf97913965b49dc977d3a008bbd210630700babbc21aa26bcb0b42fa7bbb5efb133542eb17b10438ab6000103041548a6cea702535b3dab3636b84b16ab02af28a3e5d6c5592222600d9ea4210bf5735e8c81ef31e9b6b435cadd6507152251bd31c69c76a25ea2956073021b1c87f5b417ad9ca5fc516508640f5708313143909c19a00ac57f6fa7f550d4f5baf209f7099d7f101311ba444e9c3a03a93e1afbb8ca21ddf06ebc8e72df8faa89aca70e033c33b837933c07f3f3ed01f4d37ea08b72e877d535083bd1844f6d89996070763fb416747022ea4d753c3a5b55bbc984127595eca071c9fcb6199138508f10e99b7b8301c571698138718cf24fecfe2b46c9ec44cb70ff98b5e9f773c3ccc604a006be0bf11e81d93065397624fc5d65f184952ca486269c379de1b81c773bed52f453663eebb3450d4771b630a38b82e4157a3719358d7b58cf5b293138f9e0bf0949f21406378ae01370ecb4359a41ff17b81b2f4d0a6e80e5c571d85250d57d7ce1e0d0d787df3dd53d94f47e0ad823511a3c0e9e8b6fca08a3ac154485c6384004ab3af2105a0dadb82fcd012a5b5f4fd47339fd942b14b6fdf511f3203d83170f7279b90b3807f85b695de494136d8b9a5ccd7979f5ca21ff579e4d92cdf50f9f79973f15010a0ff306cd04ed5d0d7930c81b67cf8e8aa3690c7e97d5cee024fd20765e5f417af3534ad3116a9f6273526f698ac82b46e92d6854ed0b7316c76ae348222695331c2551056344063b67f71bbc936543b740e464410d476511b433442d5ce283d3e87c00d07bfdadbc9df31ded366fab48ddeec879e0fe646022bc7dcda2693114bdd63b4e4d3273f4556492cfac84728a6cd192f3e5a5a6edbc386241ecfebf9d28a17b608a86a4042ff8f1235b8d88e140d952dd9b4cb2db77ad58e845d543bae0b4a55b3ee86b9cfd9a27ce9affafff2fb9ada32c8dac4a91398a276fc772901ccb2046ce24e7daf9b96e150e197e3a2215e35e12fb41b01288ecc2d6de894cd353309b2eeaab6effd51fe83f3466d500cae510c40d8adc1d8d41825fb56cc88e4da8267a50a0f0bd146cdc04d13fd1247c00f2e115a6d31baae6ac707dbb1847de00e6f5787d5b8d9c9feb84f3a