lock_bug.part.0+0x90/0x90 [ 668.118011] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.118526] ? selinux_inode_getsecctx+0x90/0x90 [ 668.119036] ? loop_set_status_old+0x1b0/0x1b0 [ 668.119519] blkdev_ioctl+0x362/0x7f0 [ 668.119928] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.120437] ? __x64_sys_ioctl+0x97/0x210 [ 668.120875] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 668.121479] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.121974] __x64_sys_ioctl+0x196/0x210 [ 668.122407] do_syscall_64+0x3b/0x90 [ 668.122811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 668.123350] RIP: 0033:0x7f9aebdc68d7 [ 668.123743] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.125680] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.126480] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 668.127230] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 668.127985] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 668.128728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 668.129479] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 668.130235] [ 668.131000] FAULT_INJECTION: forcing a failure. [ 668.131000] name failslab, interval 1, probability 0, space 0, times 0 [ 668.132207] CPU: 0 PID: 6745 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 668.133239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 668.134425] Call Trace: [ 668.134706] [ 668.134945] dump_stack_lvl+0x8b/0xb3 [ 668.135358] should_fail.cold+0x5/0xa [ 668.135763] ? create_object.isra.0+0x3a/0xa20 [ 668.136245] should_failslab+0x5/0x10 [ 668.136645] kmem_cache_alloc+0x5b/0x480 [ 668.137087] create_object.isra.0+0x3a/0xa20 [ 668.137561] ? kasan_unpoison+0x23/0x50 [ 668.137985] kmem_cache_alloc_trace+0x22e/0x3c0 [ 668.138483] alloc_workqueue_attrs+0x38/0x80 [ 668.138954] alloc_workqueue+0x939/0xeb0 [ 668.139383] ? do_raw_spin_unlock+0x4f/0x210 [ 668.139845] ? _raw_spin_unlock+0x24/0x40 [ 668.140285] ? bd_prepare_to_claim+0x164/0x300 [ 668.140782] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 668.141332] ? __fget_files+0x28d/0x470 [ 668.141760] ? loop_configure+0x62b/0x1950 [ 668.142213] loop_configure+0x6ec/0x1950 [ 668.142643] ? putname+0xfe/0x140 [ 668.143012] lo_ioctl+0x782/0x1860 [ 668.143395] ? avc_has_extended_perms+0x7e8/0xeb0 [ 668.143913] ? loop_set_status_old+0x1b0/0x1b0 [ 668.144394] ? fsnotify+0xb4f/0x1250 [ 668.144803] ? avc_ss_reset+0x180/0x180 [ 668.145231] ? fsnotify_first_mark+0x1f0/0x1f0 [ 668.145715] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.146214] ? lock_acquire+0x41c/0x4d0 [ 668.146633] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.147139] ? lock_release+0x505/0x6f0 [ 668.147556] ? find_and_remove_object+0xe4/0x120 [ 668.148080] ? __delete_object+0xb3/0x100 [ 668.148525] ? lock_downgrade+0x6d0/0x6d0 [ 668.148971] ? rwlock_bug.part.0+0x90/0x90 [ 668.149431] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.149948] ? selinux_inode_getsecctx+0x90/0x90 [ 668.150454] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.150964] ? loop_set_status_old+0x1b0/0x1b0 [ 668.151451] blkdev_ioctl+0x362/0x7f0 [ 668.151861] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.152379] ? __x64_sys_ioctl+0x97/0x210 [ 668.152823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 668.153409] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.153471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 668.153924] __x64_sys_ioctl+0x196/0x210 [ 668.153939] do_syscall_64+0x3b/0x90 [ 668.155698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 668.156247] RIP: 0033:0x7f22ed51d8d7 [ 668.156644] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.158570] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.159373] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 668.160126] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 668.160866] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 668.161625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 668.162367] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 668.163121] [ 668.170237] FAULT_INJECTION: forcing a failure. [ 668.170237] name failslab, interval 1, probability 0, space 0, times 0 [ 668.171507] CPU: 1 PID: 6748 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 08:04:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 26) 08:04:31 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 22) 08:04:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 24) 08:04:31 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x6d02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r6, 0x0, 0x9, 0x9, 0x4, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0x6, 0x9}}) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x12a4, 0x13, 0x400, 0x70bd2d, 0x25dfdbfd, {0x1f, 0x4, 0x0, 0x81, {0x4e21, 0x4e24, [0x3, 0x4, 0x2, 0x10001], [0x9, 0x7, 0x1da3, 0x1], r8, [0xfffffff7, 0x7fffffff]}, 0x80, 0x7ad0}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "c0eca962929d1a6d5b690983e2bdb9bda7da61e3058c94643f6747400c8e7eab520402698a121acde5d8f6419c475cbaeaeb1acfca587abcae9527d48e2842a71f0871a907c14c1b15c416712806e6d9f9a73e586cb21f7bd5c6a1a2fd37391b16e63be365f5a22262b6969f6a6933233060d4fd15dae3fa18c6f8815044ed5d9029168e519072787c575835af1edb17b1ec82a340f4833617ea4ee5b4e69bfe7321da0cdce6"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "fc30ef833dae566e7b4722a5dd0304aa193e6fe1a9676a5b2c2a17eaa649e0cb6acfe7af0897d88fc7a05c02135b351433252ecaaf35c98039cf373c54f2445db06f88e0c28a8cdcbbc06d7c891efb449e3600a545c897be9cd10e73f646a659772d9d39e41810c9fa29fd22fe21e291805d09d9795df8b1016bca4a70761a593c83ebb8fdb0d1d615d3548bc72079984fcd7c45f79bc19205d4b90ba30d1e9d42f6fb"}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x40000}, 0x841) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r4, &(0x7f0000000500), 0x9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8800) [ 668.172532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 668.174117] Call Trace: [ 668.174400] [ 668.174638] dump_stack_lvl+0x8b/0xb3 [ 668.175052] should_fail.cold+0x5/0xa [ 668.175472] ? create_object.isra.0+0x3a/0xa20 [ 668.175485] loop5: detected capacity change from 0 to 128 [ 668.175970] should_failslab+0x5/0x10 [ 668.175983] kmem_cache_alloc+0x5b/0x480 [ 668.177400] create_object.isra.0+0x3a/0xa20 [ 668.177870] ? kasan_unpoison+0x23/0x50 [ 668.178294] kmem_cache_alloc+0x239/0x480 [ 668.178730] __alloc_file+0x21/0x240 [ 668.179131] alloc_empty_file+0x6d/0x170 [ 668.179564] path_openat+0xe1/0x28a0 [ 668.179983] ? __is_insn_slot_addr+0x144/0x250 [ 668.180468] ? kernel_text_address+0x53/0xb0 [ 668.180941] ? path_lookupat+0x850/0x850 [ 668.181395] ? unwind_get_return_address+0x51/0x90 [ 668.181902] ? create_prof_cpu_mask+0x20/0x20 [ 668.182380] ? arch_stack_walk+0x99/0xf0 [ 668.182806] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.183300] ? lock_acquire+0x41c/0x4d0 [ 668.183722] do_filp_open+0x1aa/0x400 [ 668.184131] ? may_open_dev+0xf0/0xf0 [ 668.184539] ? lock_release+0x505/0x6f0 [ 668.184967] ? alloc_fd+0x2f0/0x670 [ 668.185365] ? lock_downgrade+0x6d0/0x6d0 [ 668.185814] ? rwlock_bug.part.0+0x90/0x90 [ 668.186263] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 668.186852] ? _find_next_bit+0x1e5/0x260 [ 668.187300] ? _raw_spin_unlock+0x24/0x40 [ 668.187743] ? alloc_fd+0x2f0/0x670 [ 668.188133] do_sys_openat2+0x16d/0x4d0 [ 668.188560] ? build_open_flags+0x6f0/0x6f0 [ 668.189023] ? preempt_count_add+0x74/0x140 [ 668.189498] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 668.190087] __x64_sys_openat+0x13f/0x1f0 [ 668.190532] ? __x64_sys_open+0x1c0/0x1c0 [ 668.190978] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 668.191518] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 668.192083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 668.192627] do_syscall_64+0x3b/0x90 [ 668.193030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 668.193590] RIP: 0033:0x7faf15e66a04 [ 668.193981] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 668.195953] RSP: 002b:00007faf13428ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 668.196752] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15e66a04 [ 668.197524] RDX: 0000000000000002 RSI: 00007faf13429000 RDI: 00000000ffffff9c [ 668.198279] RBP: 00007faf13429000 R08: 0000000000000000 R09: ffffffffffffffff [ 668.199045] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 668.199806] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 668.200551] [ 668.212501] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 668.215226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 668.232862] ISOFS: Unable to identify CD-ROM format. 08:04:32 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 11) [ 668.265984] FAULT_INJECTION: forcing a failure. [ 668.265984] name failslab, interval 1, probability 0, space 0, times 0 [ 668.267246] CPU: 1 PID: 6754 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 668.268267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 668.269496] Call Trace: [ 668.269773] [ 668.270006] dump_stack_lvl+0x8b/0xb3 [ 668.270426] should_fail.cold+0x5/0xa [ 668.270836] ? create_object.isra.0+0x3a/0xa20 [ 668.271338] should_failslab+0x5/0x10 [ 668.271744] kmem_cache_alloc+0x5b/0x480 [ 668.272175] create_object.isra.0+0x3a/0xa20 [ 668.272657] ? kasan_unpoison+0x23/0x50 [ 668.273098] kmem_cache_alloc+0x239/0x480 [ 668.273553] __alloc_file+0x21/0x240 [ 668.273947] alloc_empty_file+0x6d/0x170 [ 668.274395] alloc_file+0x59/0x590 [ 668.274771] alloc_file_pseudo+0x16a/0x250 [ 668.275232] ? alloc_file+0x590/0x590 [ 668.275643] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 668.276245] ? shmem_get_inode+0x622/0xd20 [ 668.276708] __shmem_file_setup+0x144/0x310 [ 668.277193] __do_sys_memfd_create+0x1c6/0x4f0 [ 668.277687] do_syscall_64+0x3b/0x90 [ 668.278091] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 668.278644] RIP: 0033:0x7f432f5bbb19 [ 668.279043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.281000] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 668.281824] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f432f5bbb19 [ 668.282590] RDX: 00007f432cb31000 RSI: 0000000000000000 RDI: 00007f432f6150fb [ 668.283360] RBP: 0000000000000000 R08: 00007f432cb30ff8 R09: ffffffffffffffff [ 668.284125] R10: 00007f432cb30ffc R11: 0000000000000246 R12: 0000000020000040 [ 668.284892] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000020000000 [ 668.285673] 08:04:32 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 27) [ 668.290480] loop0: detected capacity change from 0 to 128 [ 668.296147] FAULT_INJECTION: forcing a failure. [ 668.296147] name failslab, interval 1, probability 0, space 0, times 0 [ 668.297415] CPU: 0 PID: 6756 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 668.298418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 668.299607] Call Trace: [ 668.299874] [ 668.300111] dump_stack_lvl+0x8b/0xb3 [ 668.300531] should_fail.cold+0x5/0xa [ 668.300933] ? create_object.isra.0+0x3a/0xa20 [ 668.301435] should_failslab+0x5/0x10 [ 668.301840] kmem_cache_alloc+0x5b/0x480 [ 668.302276] create_object.isra.0+0x3a/0xa20 [ 668.302743] ? kasan_unpoison+0x23/0x50 [ 668.303185] __kmalloc+0x25b/0x440 [ 668.303562] alloc_workqueue+0x914/0xeb0 [ 668.303992] ? do_raw_spin_unlock+0x4f/0x210 [ 668.304462] ? _raw_spin_unlock+0x24/0x40 [ 668.304904] ? bd_prepare_to_claim+0x164/0x300 [ 668.305401] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 668.305933] ? __fget_files+0x28d/0x470 [ 668.306372] ? loop_configure+0x62b/0x1950 [ 668.306820] loop_configure+0x6ec/0x1950 [ 668.307258] ? putname+0xfe/0x140 [ 668.307635] lo_ioctl+0x782/0x1860 [ 668.308006] ? avc_has_extended_perms+0x7e8/0xeb0 [ 668.308528] ? loop_set_status_old+0x1b0/0x1b0 [ 668.309017] ? arch_stack_walk+0x99/0xf0 [ 668.309475] ? avc_ss_reset+0x180/0x180 [ 668.309899] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.310405] ? lock_acquire+0x41c/0x4d0 [ 668.310826] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.311321] ? lock_release+0x505/0x6f0 [ 668.311738] ? find_and_remove_object+0xe4/0x120 [ 668.312238] ? __delete_object+0xb3/0x100 [ 668.312682] ? lock_downgrade+0x6d0/0x6d0 [ 668.313119] ? rwlock_bug.part.0+0x90/0x90 [ 668.313572] ? rcu_read_lock_sched_held+0xd/0x70 [ 668.314083] ? selinux_inode_getsecctx+0x90/0x90 [ 668.314587] ? loop_set_status_old+0x1b0/0x1b0 [ 668.315079] blkdev_ioctl+0x362/0x7f0 [ 668.315483] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.315982] ? __x64_sys_ioctl+0x97/0x210 [ 668.316424] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 668.317011] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 668.317509] __x64_sys_ioctl+0x196/0x210 [ 668.317943] do_syscall_64+0x3b/0x90 [ 668.318343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 668.318891] RIP: 0033:0x7f9aebdc68d7 [ 668.319285] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 668.321205] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.322021] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 668.322772] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 668.323523] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 668.324261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 668.325017] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 668.325793] [ 668.327616] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:04:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x400454cd, 0x30a) syz_io_uring_setup(0x4bba, &(0x7f0000000080)={0x0, 0x9359, 0x4, 0x2, 0x3b2, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x5d74, &(0x7f0000000180)={0x0, 0x2bbc, 0x0, 0x2, 0x118, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)={0x0, 0x3938700}}, 0x4) [ 668.347814] ISOFS: Unable to identify CD-ROM format. [ 668.364229] loop5: detected capacity change from 0 to 128 [ 668.378859] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 668.707583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:04:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001600)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44000, 0x116) [ 681.394037] FAULT_INJECTION: forcing a failure. [ 681.394037] name failslab, interval 1, probability 0, space 0, times 0 [ 681.395247] CPU: 0 PID: 6774 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.396264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.396990] FAULT_INJECTION: forcing a failure. [ 681.396990] name failslab, interval 1, probability 0, space 0, times 0 [ 681.397373] Call Trace: [ 681.397379] [ 681.399055] dump_stack_lvl+0x8b/0xb3 [ 681.399472] should_fail.cold+0x5/0xa [ 681.399878] ? create_object.isra.0+0x3a/0xa20 [ 681.400369] should_failslab+0x5/0x10 [ 681.400744] kmem_cache_alloc+0x5b/0x480 [ 681.401171] create_object.isra.0+0x3a/0xa20 [ 681.401654] ? kasan_unpoison+0x23/0x50 [ 681.402078] kmem_cache_alloc_trace+0x22e/0x3c0 [ 681.402569] alloc_workqueue_attrs+0x38/0x80 [ 681.403040] alloc_workqueue+0x939/0xeb0 [ 681.403442] ? do_raw_spin_unlock+0x4f/0x210 [ 681.403909] ? _raw_spin_unlock+0x24/0x40 [ 681.404319] ? bd_prepare_to_claim+0x164/0x300 [ 681.404768] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 681.405268] ? __fget_files+0x28d/0x470 [ 681.405656] ? loop_configure+0x62b/0x1950 [ 681.406110] loop_configure+0x6ec/0x1950 [ 681.406538] ? putname+0xfe/0x140 [ 681.406911] lo_ioctl+0x782/0x1860 [ 681.407293] ? avc_has_extended_perms+0x7e8/0xeb0 [ 681.407827] ? loop_set_status_old+0x1b0/0x1b0 [ 681.408315] ? fsnotify+0xb4f/0x1250 [ 681.408684] ? avc_ss_reset+0x180/0x180 [ 681.409118] ? fsnotify_first_mark+0x1f0/0x1f0 [ 681.409567] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.410074] ? lock_acquire+0x41c/0x4d0 [ 681.410502] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.410975] ? lock_release+0x505/0x6f0 [ 681.411406] ? find_and_remove_object+0xe4/0x120 [ 681.411883] ? __delete_object+0xb3/0x100 [ 681.412333] ? lock_downgrade+0x6d0/0x6d0 [ 681.412777] ? rwlock_bug.part.0+0x90/0x90 [ 681.413222] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.413754] ? selinux_inode_getsecctx+0x90/0x90 [ 681.414264] ? loop_set_status_old+0x1b0/0x1b0 [ 681.414728] blkdev_ioctl+0x362/0x7f0 [ 681.415142] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.415659] ? __x64_sys_ioctl+0x97/0x210 [ 681.416101] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.416689] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.417195] __x64_sys_ioctl+0x196/0x210 [ 681.417608] do_syscall_64+0x3b/0x90 [ 681.418016] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.418572] RIP: 0033:0x7f9aebdc68d7 [ 681.418965] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.420936] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.421755] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 681.422449] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 681.423211] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 681.423963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.424655] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 681.425450] [ 681.425702] CPU: 1 PID: 6776 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.426729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.427927] Call Trace: [ 681.428204] [ 681.428435] dump_stack_lvl+0x8b/0xb3 [ 681.428853] should_fail.cold+0x5/0xa [ 681.429270] ? security_file_alloc+0x34/0x170 [ 681.429767] should_failslab+0x5/0x10 [ 681.430174] kmem_cache_alloc+0x5b/0x480 [ 681.430604] security_file_alloc+0x34/0x170 [ 681.431064] __alloc_file+0xb6/0x240 [ 681.431468] alloc_empty_file+0x6d/0x170 [ 681.431895] path_openat+0xe1/0x28a0 [ 681.432305] ? __is_insn_slot_addr+0x144/0x250 [ 681.432807] ? kernel_text_address+0x53/0xb0 [ 681.433289] ? path_lookupat+0x850/0x850 [ 681.433721] ? unwind_get_return_address+0x51/0x90 [ 681.434236] ? create_prof_cpu_mask+0x20/0x20 [ 681.434719] ? arch_stack_walk+0x99/0xf0 [ 681.435157] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.435660] ? lock_acquire+0x41c/0x4d0 [ 681.436086] do_filp_open+0x1aa/0x400 [ 681.436492] ? may_open_dev+0xf0/0xf0 [ 681.436900] ? lock_release+0x505/0x6f0 [ 681.437330] ? alloc_fd+0x2f0/0x670 [ 681.437721] ? lock_downgrade+0x6d0/0x6d0 [ 681.438171] ? rwlock_bug.part.0+0x90/0x90 [ 681.438628] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 681.439207] ? _find_next_bit+0x1e5/0x260 [ 681.439647] ? _raw_spin_unlock+0x24/0x40 [ 681.440086] ? alloc_fd+0x2f0/0x670 [ 681.440471] do_sys_openat2+0x16d/0x4d0 [ 681.440893] ? build_open_flags+0x6f0/0x6f0 [ 681.441363] ? preempt_count_add+0x74/0x140 [ 681.441824] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.442412] __x64_sys_openat+0x13f/0x1f0 [ 681.442844] audit: type=1400 audit(1645862685.289:15): avc: denied { write } for pid=6770 comm="syz-executor.6" name="task" dev="proc" ino=24887 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 681.442852] ? __x64_sys_open+0x1c0/0x1c0 [ 681.442868] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 681.446061] audit: type=1400 audit(1645862685.289:16): avc: denied { add_name } for pid=6770 comm="syz-executor.6" name="6777" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 681.446112] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 681.448543] audit: type=1400 audit(1645862685.289:17): avc: denied { create } for pid=6770 comm="syz-executor.6" name="6777" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 681.448790] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.451454] do_syscall_64+0x3b/0x90 [ 681.451855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.452400] RIP: 0033:0x7faf15e66a04 [ 681.452786] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 681.454700] RSP: 002b:00007faf13428ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 681.455494] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15e66a04 [ 681.456240] RDX: 0000000000000002 RSI: 00007faf13429000 RDI: 00000000ffffff9c [ 681.456984] RBP: 00007faf13429000 R08: 0000000000000000 R09: ffffffffffffffff [ 681.457745] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 681.458486] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 681.459239] [ 681.464298] FAULT_INJECTION: forcing a failure. [ 681.464298] name failslab, interval 1, probability 0, space 0, times 0 [ 681.465552] CPU: 0 PID: 6779 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.466585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.467802] Call Trace: [ 681.468068] [ 681.468295] FAULT_INJECTION: forcing a failure. [ 681.468295] name failslab, interval 1, probability 0, space 0, times 0 [ 681.468304] dump_stack_lvl+0x8b/0xb3 [ 681.469935] should_fail.cold+0x5/0xa [ 681.470345] ? security_file_alloc+0x34/0x170 [ 681.470838] should_failslab+0x5/0x10 [ 681.471248] kmem_cache_alloc+0x5b/0x480 [ 681.471685] security_file_alloc+0x34/0x170 [ 681.472154] __alloc_file+0xb6/0x240 [ 681.472553] alloc_empty_file+0x6d/0x170 [ 681.472996] alloc_file+0x59/0x590 [ 681.473387] alloc_file_pseudo+0x16a/0x250 [ 681.473851] ? alloc_file+0x590/0x590 [ 681.474262] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 681.474863] ? shmem_get_inode+0x622/0xd20 [ 681.475329] __shmem_file_setup+0x144/0x310 [ 681.475794] __do_sys_memfd_create+0x1c6/0x4f0 [ 681.476296] do_syscall_64+0x3b/0x90 [ 681.476705] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.477261] RIP: 0033:0x7f432f5bbb19 [ 681.477664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.479628] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 681.480446] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f432f5bbb19 [ 681.481223] RDX: 00007f432cb31000 RSI: 0000000000000000 RDI: 00007f432f6150fb [ 681.482001] RBP: 0000000000000000 R08: 00007f432cb30ff8 R09: ffffffffffffffff [ 681.482698] R10: 00007f432cb30ffc R11: 0000000000000246 R12: 0000000020000040 [ 681.483469] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000020000000 [ 681.484171] [ 681.484415] CPU: 1 PID: 6782 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.485474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.486701] Call Trace: [ 681.486943] loop5: detected capacity change from 0 to 128 [ 681.486988] [ 681.487828] dump_stack_lvl+0x8b/0xb3 [ 681.488239] should_fail.cold+0x5/0xa [ 681.488639] should_failslab+0x5/0x10 [ 681.489045] __kmalloc_track_caller+0x79/0x420 [ 681.489525] ? kasprintf+0xbb/0xf0 [ 681.489903] kvasprintf+0xb5/0x150 [ 681.490284] ? bust_spinlocks+0xe0/0xe0 [ 681.490704] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.491203] ? preempt_count_add+0x74/0x140 [ 681.491652] ? __is_module_percpu_address+0x237/0x300 [ 681.492199] kasprintf+0xbb/0xf0 [ 681.492563] ? kvasprintf_const+0x190/0x190 [ 681.493021] ? save_trace+0xd00/0xd00 [ 681.493433] ? lockdep_init_map_type+0x21a/0x7e0 [ 681.493946] alloc_workqueue+0x408/0xeb0 [ 681.494354] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 681.494386] ? do_raw_spin_unlock+0x4f/0x210 [ 681.495634] ? _raw_spin_unlock+0x24/0x40 [ 681.496079] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 681.496606] ? __fget_files+0x28d/0x470 [ 681.497033] ? loop_configure+0x62b/0x1950 [ 681.497495] loop_configure+0x6ec/0x1950 [ 681.497927] ? putname+0xfe/0x140 [ 681.498297] lo_ioctl+0x782/0x1860 [ 681.498671] ? avc_has_extended_perms+0x7e8/0xeb0 [ 681.499188] ? loop_set_status_old+0x1b0/0x1b0 [ 681.499666] ? fsnotify+0xb4f/0x1250 [ 681.500059] ? avc_ss_reset+0x180/0x180 [ 681.500485] ? fsnotify_first_mark+0x1f0/0x1f0 [ 681.500987] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.501487] ? lock_acquire+0x41c/0x4d0 [ 681.501912] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.502408] ? lock_release+0x505/0x6f0 [ 681.502834] ? find_and_remove_object+0xe4/0x120 [ 681.503332] ? __delete_object+0xb3/0x100 [ 681.503768] ? lock_downgrade+0x6d0/0x6d0 [ 681.504199] ? rwlock_bug.part.0+0x90/0x90 [ 681.504639] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.505140] ? selinux_inode_getsecctx+0x90/0x90 [ 681.505657] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.506155] ? loop_set_status_old+0x1b0/0x1b0 [ 681.506629] blkdev_ioctl+0x362/0x7f0 [ 681.507026] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.507522] ? __x64_sys_ioctl+0x97/0x210 [ 681.507959] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.508530] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.509031] __x64_sys_ioctl+0x196/0x210 [ 681.509462] do_syscall_64+0x3b/0x90 [ 681.509856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.510392] RIP: 0033:0x7f22ed51d8d7 [ 681.510775] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.512671] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.513467] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 681.514226] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 681.514974] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 681.515728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.516472] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 681.517222] 08:04:45 executing program 6: unlink(&(0x7f0000000000)='./file0\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff8, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x4462, 0x0) 08:04:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 28) 08:04:45 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 25) 08:04:45 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 23) 08:04:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 12) 08:04:45 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39b}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNDETACHFILTER(r0, 0x400454cd, 0x30a) syz_io_uring_setup(0x4bba, &(0x7f0000000080)={0x0, 0x9359, 0x4, 0x2, 0x3b2, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x5d74, &(0x7f0000000180)={0x0, 0x2bbc, 0x0, 0x2, 0x118, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)={0x0, 0x3938700}}, 0x4) 08:04:45 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000001880)='./file0\x00', 0xb) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=r2, @ANYBLOB="01f4"]) r3 = fcntl$dupfd(r0, 0x0, r1) mount_setattr(r0, &(0x7f0000001800)='./file0\x00', 0x800, &(0x7f0000001840)={0x42, 0x2, 0x40000, {r3}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfd, 0x6}, {&(0x7f00000006c0)="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", 0x1000, 0x4}, {&(0x7f0000000140)="35ad93648dbed6caae475ef26f03ff23122575339e3728ddadcffcb4cb6a337c8df8f1acd895070ee60a17fb41204e7c3181819b1be2259346b46bfddc83b8ca4ba6822baf47c8bfe19f00622d5a96b0dafaabb4", 0x54, 0x6}, {&(0x7f0000000380)="d3ba6e58948b955c9834fb3b2db0f8e15fb1ea88bac16f43e9be91dec79ee913b5f41e26a185ee0eb9a6ca6bd08c2921fc407d6ebc47bc5761253a367906be29b76dbaed", 0x44, 0x100000000}, {&(0x7f0000000080)="8b23fae8470a6c9f02a01641ba0858d95f6d48576afd4a1b0598eee18753e4ebb73017b4cc2acfd62521df8fec64d06f7ed67124", 0x34, 0x9}, {&(0x7f0000000400)="4e734b6755fdb1bd826290c4e1d09c139df8d43f86ff863c6ee0a763eafe3544783e55d981388ae3e2a3d687bcccb258ac68e82945139eefcec8a039ea4f0dfa666753a334b96821a8fb1ce6cdbd75cdec6974cb6ee70ddd9f07", 0x5a, 0x9}], 0x401040, &(0x7f00000016c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, r2}}, {@huge_within_size}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x24}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x74]}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x34, 0x33, 0x39, 0x34, 0x65, 0x36, 0x64], 0x2d, [0x30, 0x62, 0x53, 0x31], 0x2d, [0x37, 0x65, 0x62, 0x38], 0x2d, [0x66, 0x2, 0x65, 0x31], 0x2d, [0x66, 0x64, 0x38, 0x36, 0x36, 0x7, 0x66, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'devpts\x00'}}, {@fowner_lt={'fowner<', r4}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'devpts\x00'}}]}) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 681.531751] ext4: Bad value for 'resgid' [ 681.543498] ext4: Bad value for 'resgid' 08:04:45 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 13) 08:04:45 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 29) [ 681.572178] FAULT_INJECTION: forcing a failure. [ 681.572178] name failslab, interval 1, probability 0, space 0, times 0 08:04:45 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04000076b65be2f6da47278c750525a5b65a09", 0x78, 0x400}, {&(0x7f0000010080)="000000000000000000000000ede2de4df49d4f87b54a3176cfd4eb4f010040000c000000000000009f09c75f", 0x2c, 0x4e0}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401000012", 0x19, 0x560}, {&(0x7f00000100e0)="00000000000000000000000000000000000000000104", 0x16, 0x640}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb0300000013000000230000002b0005000200040000000000907306c205002a9c00000000000000000000000000000000000000000000000091ecd11b", 0x5c, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003", 0x3b, 0x8c60}], 0x0, &(0x7f0000000040)) r1 = signalfd(r0, &(0x7f0000000140), 0x8) r2 = getgid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r3, 0x400, 0x1) lstat(&(0x7f0000000340)='./mnt/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./mnt/file0\x00', &(0x7f0000000300), 0x1002020, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@cache_none}, {@uname={'uname', 0x3d, ':){'}}, {@noextend}, {@version_L}, {@posixacl}], [{@obj_user={'obj_user', 0x3d, 'dfltgid'}}, {@euid_gt={'euid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r4}}, {@subj_role={'subj_role', 0x3d, ':#*'}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./mnt/file0\x00', &(0x7f00000000c0), 0x84441, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@loose}, {@version_L}, {@cache_fscache}]}}) [ 681.573493] CPU: 0 PID: 6791 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.574607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.575817] Call Trace: [ 681.576101] [ 681.576340] dump_stack_lvl+0x8b/0xb3 [ 681.576629] ISOFS: Unable to identify CD-ROM format. [ 681.576756] should_fail.cold+0x5/0xa [ 681.576773] ? create_object.isra.0+0x3a/0xa20 [ 681.578187] should_failslab+0x5/0x10 [ 681.578586] kmem_cache_alloc+0x5b/0x480 [ 681.579018] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 681.579572] create_object.isra.0+0x3a/0xa20 [ 681.580043] ? kasan_unpoison+0x23/0x50 [ 681.580470] kmem_cache_alloc+0x239/0x480 [ 681.580910] security_file_alloc+0x34/0x170 [ 681.581292] loop6: detected capacity change from 0 to 140 [ 681.581397] __alloc_file+0xb6/0x240 [ 681.582370] alloc_empty_file+0x6d/0x170 [ 681.582801] alloc_file+0x59/0x590 [ 681.583185] alloc_file_pseudo+0x16a/0x250 [ 681.583640] ? alloc_file+0x590/0x590 [ 681.584051] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 681.584653] ? shmem_get_inode+0x622/0xd20 [ 681.585121] __shmem_file_setup+0x144/0x310 [ 681.587082] FAULT_INJECTION: forcing a failure. [ 681.587082] name failslab, interval 1, probability 0, space 0, times 0 [ 681.587436] __do_sys_memfd_create+0x1c6/0x4f0 [ 681.589048] do_syscall_64+0x3b/0x90 [ 681.589457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.590002] RIP: 0033:0x7f432f5bbb19 [ 681.590395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.592329] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 681.593076] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f432f5bbb19 [ 681.593835] RDX: 00007f432cb31000 RSI: 0000000000000000 RDI: 00007f432f6150fb [ 681.594586] RBP: 0000000000000000 R08: 00007f432cb30ff8 R09: ffffffffffffffff [ 681.595339] R10: 00007f432cb30ffc R11: 0000000000000246 R12: 0000000020000040 [ 681.596037] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000020000000 [ 681.596789] [ 681.597027] CPU: 1 PID: 6795 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.598107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.599303] Call Trace: [ 681.599572] [ 681.599809] dump_stack_lvl+0x8b/0xb3 [ 681.600221] should_fail.cold+0x5/0xa [ 681.600626] should_failslab+0x5/0x10 [ 681.601025] __kmalloc_track_caller+0x79/0x420 [ 681.601524] ? kasprintf+0xbb/0xf0 [ 681.601904] kvasprintf+0xb5/0x150 [ 681.602275] ? bust_spinlocks+0xe0/0xe0 [ 681.602694] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.603199] ? preempt_count_add+0x74/0x140 [ 681.603658] ? __is_module_percpu_address+0x237/0x300 [ 681.604205] kasprintf+0xbb/0xf0 [ 681.604572] ? kvasprintf_const+0x190/0x190 [ 681.605029] ? save_trace+0xd00/0xd00 [ 681.605441] ? lockdep_init_map_type+0x21a/0x7e0 [ 681.605940] alloc_workqueue+0x408/0xeb0 [ 681.606366] ? do_raw_spin_unlock+0x4f/0x210 [ 681.606836] ? _raw_spin_unlock+0x24/0x40 [ 681.607277] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 681.607805] ? __fget_files+0x28d/0x470 [ 681.608227] ? loop_configure+0x62b/0x1950 [ 681.608675] loop_configure+0x6ec/0x1950 [ 681.609102] ? putname+0xfe/0x140 [ 681.609487] lo_ioctl+0x782/0x1860 [ 681.609859] ? avc_has_extended_perms+0x7e8/0xeb0 [ 681.610378] ? loop_set_status_old+0x1b0/0x1b0 [ 681.610856] ? fsnotify+0xb4f/0x1250 [ 681.611254] ? avc_ss_reset+0x180/0x180 [ 681.611673] ? fsnotify_first_mark+0x1f0/0x1f0 [ 681.612164] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.612653] ? lock_acquire+0x41c/0x4d0 [ 681.613065] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.613564] ? lock_release+0x505/0x6f0 [ 681.613981] ? find_and_remove_object+0xe4/0x120 [ 681.614476] ? __delete_object+0xb3/0x100 [ 681.614911] ? lock_downgrade+0x6d0/0x6d0 [ 681.615342] ? rwlock_bug.part.0+0x90/0x90 [ 681.615786] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.616285] ? selinux_inode_getsecctx+0x90/0x90 [ 681.616786] ? loop_set_status_old+0x1b0/0x1b0 [ 681.617269] blkdev_ioctl+0x362/0x7f0 [ 681.617672] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.618158] ? __x64_sys_ioctl+0x97/0x210 [ 681.618587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.619162] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.619652] __x64_sys_ioctl+0x196/0x210 [ 681.620082] do_syscall_64+0x3b/0x90 [ 681.620472] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.621010] RIP: 0033:0x7f9aebdc68d7 [ 681.621408] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.623324] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.624108] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 681.624871] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 681.625618] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 681.626350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.627076] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 681.627810] [ 681.628808] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities 08:04:45 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000001880)='./file0\x00', 0xb) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=r2, @ANYBLOB="01f4"]) r3 = fcntl$dupfd(r0, 0x0, r1) mount_setattr(r0, &(0x7f0000001800)='./file0\x00', 0x800, &(0x7f0000001840)={0x42, 0x2, 0x40000, {r3}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000000480)=[{&(0x7f0000000280)="1af354add56bddc766f65d5b17bd5f7049fe05deb3178fdc0509144100cf9002989bb2ab4a8f82a3cf10ed875280d8742776bca898cc270a8912b4b1b12a21d400633f2f5c470d5088e65903a0a6053334889a15e4640c92d1ab89621dd9e19cb9c2dd47d6811d803f603be5f470eeb023f86c595d510f2735db70500cda93809df315b36cec008e2118f9d1b140144cebf25f949ea5364d5d85d60b0cf54c4b4cb3f7a456163703bb2cc704262c7f69c56d54c1eb751913be2eda268070172fc2c3004aac13a1add0b3e6e71853d9936acba8483bc4f9fb6fd41eab5819c5608191310765b8e0f4681d49b1c2027f99d3900e9b10facea63099547dd1", 0xfd, 0x6}, {&(0x7f00000006c0)="f9e3ce95cc3e71c48abd2c5cbab1e5070f67adff405d155c6b2270da55f158a9a7c82ab8b659573270a47fc5e5a2dfc7e1d180ca2d31ef3cf00b958044f78354a6deff85ce1ad7c72a8c4c8c76f98f3f0618c3bb814c966963d22cbcda035867627b018ea4451a074db7fab13225974ad18733785e55ca2f35564b96030cf0c377a55bb744a0b19dfb525d895370c465b87ea70f422c1938559de32d08888b63cf85affc0cd64391c2b826f8d508bcf88d21ecb50f43df074e6d17f1a4e74f6628bd87eaa875036ce6294d84d9210bd2c4d510d237db1f8871b85c8cd9a6e593368b83f804d7981dd2141830291a178186e0777d49e689a1b8ad53ca32e70cb3a514c8f5caf6134abd1e803f2c17bb37908c565dd8a7b9608778290eaf091a5da17189f380e90b921ab9aa1187cd4067ead46f5f0363c1e6ba8ee05bea98564e9d22f09d06a706800769934c976f52a74858f12cb76bc4ac9cc48a677fcba765abe4df29b1dfa7ad27c34376bae0e20c7ff2570698b8861ad7deba934de4d0e1da532a02894cdd1cb00ecb720cc0b488909eafe5c9f85262c81d265eec93a021adc6ce30f59b30badf5ad017b6a29d6fc7dc1781a89539606ba355e0bbb350937aaaa12b164a28d4783c1e3be91140acb738e4bdc618c60f4679aaea78eed578bfc46331ea30add1c88604477e383b83386dd8e17ddae2a4131f5f65e321bf6d98bde433aa11eab0ce3716183886a8f829bf278624a41c94bad54d43022c61684a313a2610bf8fd1b3610c93d9575255219b6cf9c79e9463acdf1a2ca3b8d5a620cbc8d77c4d1484e83a27b3ebf83467496bc820375a25d7ede9f9a7eee3634c8a17edbe6a29304e69c920441864d2b7cc59e32087c73b13d0979d9967128989d4aaaa0e5fefebf7be56a4a0352dacb1b35a1e57347989cd28458e0f6a90145b668f247e00a0bf7cef14a99c587cd2a7397081507c8b05948d0c16ab1b0f0a00ebc96bbcc6c39d87186555870552fd211aad220081e0795e2bc3d22247d9d4b85213ef295e77b6c261a403fe5b3c548ef667d4a55e0469026eacb40dd0099b0b09e86ae5b8c16ca55c3917356da01a4c8f8473f3778a18391ee528ba0088edd0b5b1aad0fc271002be075a26650dff263d5a0371022f47018a0fede53abfeb88e1a59371d060bc6677c4104347bb3a5b87974912be06eecc313c055a9bf8acd97b116193174aa4e3f56e2826bfa91af3d9e074c6652489b7c792d8cf4d32c27428564c6309925955cc7aa92566a87a735d4409ae7121d6a6859eb28e398c7c49d4a3f724ff3af99036bc92257fbd375db458bbdbe9c54c5c41797b2867ffe17e8b189a333024392c58d182d08bfd1b8af343cf03744ddd7465d3f8a36cd533d77545b0ac4d5efd296cf635dfe2fc62645601f9b821b1da7fdf8802ef91fc5d0154c598c9418ebf495c3ec46aaf6e7963e82169137af222d749b219d2e8bd3494f631b0893ea05f90753c2111cb4035a4089a6e70e8c237577c68f2d2153a86beeba18ceea2af0010878e576b1d764223f6b987114bb304cf86d729f4640629d3196ccbf323a8b7bd0447553de143f0d599a397853734de5fb842b12a522111642513078586f4f53d19d326b2279f88e30f944f14029ef50535e6a74dde3c4f9a3e261c86fb86a5bee0ad529e876df4c5b59dc42f7f2511e77930648008e209c174a21626051a13b62661bd948d3ab6aed76f3921fa6c3709c4f56aeae31486f0349e512ff25f449ccb0a742ed01886e731939ce425d62b266ffa069f6ff657c9f47a80fa59e12eca9389245b6c64a39672d615145547234c5573e9df79ba6f652d53dd30d617793b3c9f391e24e5df4f421931316ab8fe8a53485f68eb9ff987b8f7c3cde89f8598fb80674d0e69c87c25bf47eaf30bb16fbc3b9b2875b9824c0c609e3fd2b85861099d0c97947f52b8578c60427e3ce1d5a22d0155c5ce14a686437393ad48369c671369173852474fbf298409b4cdf57f4d06b9617112286988a3051f74be056dca462aee081897d6328738da8dea53d6fbe608ee96334770d61630db7a24080656a256232922d6e2a2e9687c4a8ed2db49fe300bc650afdf0424d343b454c104846e1bd1935e88e4343d4cc351c805ca3b7d99adba4c615a8b29b89c1f1f6662e20120855ca6540b21af566abfa63d6f430fb28c5b4ee22faf0d0a45398f747b1dd84475dc954462a8fc57517eb38cdf0f3542a5f458bd5494f3c57f8f67e16b81892741644d044f89b1b0e57ec31e6520fe6ff8496c6b1d41bd898979b2550ead80a64b97ee1d6a6d75741931f590a2132370f455c91349e908169ee2ddcc5711c33ecd96fb731c41f5b45c56e49fb30559e57e51be1033f14c1826b8b5de7c0ea572d6d7b3361f230fb451d3788e8b44f43a8ff531ebb042fe7b5c8344a7571d5123e9318709e0136e9c680f5983c14908cca9443b87fcf6aa6eef7040ccebaf70b058ab4f33bf735338d5e1aa59f7ea2bbbf90de2f9c70a51c44749f687e6788e1b201baf1216f7505837c13007e093468128686668c9ad38d65b84d35c63d001a33fc711fcba9ee82f04b17099387187c2278a63857900f92c49b1c24f57e9836313be7a40eee831d8eb55bb8d516687299638bc16f8c909ac09c6ac8db2ee4559dc5ded02ddf357d2dfd09cfeaa81975f1f0606534abe4ba64a31ab30cd414d4295da351855631b398056e16720a0702c2a6d8f822b1405c29dfbdb7d9b336ca7f4e81a3b36f339370b326a249bb8aacde79059004280c24f870a2cda9828508cce0e47ea433da240f998641949841fa6e9b8452e9023860249b046f6ebd4b31f05fb8c8b47257ab323bc66c019f268d1216ad4b8bc627973ac94e617243d151ac412a5b82c4f432b51319ccc83cc807cb253621fe92d282cd25bca375d82e96aab4b3f490bb216b520ea56aea662010d6a9076f100de712be35873741da78c5855861347bab74cbd7d12b78d8bd582301e601fd5cc18a0cdf70abc1e6f52860d863d8cc838a81f736baf041cd1c2a0d2b42a401db2eafe9c0b6e45181c83c50d3cb44b68fc47159d24fdbd8a3f0283f336ed9789ac48289ac9e7384ce9aac8b2917771de0bddc5ea41611a409d99a365f16053377cf37cc2b0be8778d21b5ef664d6adc46eb8f4db817c9aceeebc9945e2972191d34c534123d765bc2b0dc3ec3de42b626f85d8e2582e50fafb45ba3171c30bbf7c933ea16cd99be2cebf643ea8d5a1f3dbcc16cb462523725c1877a50ff6fe56fb2aca9fae95d8f4ead4f06aad395d423257c9903c2bdf8c81664f93aee7d23b3fb521052561b7415d161259b8b9c335655417470d8db26b5f49628566387fda510b7b9406749a9e0519f1a24bcd7236cd1c70d88f28119cb1b6d4ae75eca55576717f7bf73e0c68ecd265e099c626fabb9a1a024e7c077e89a345ed979f3ac469f6735f4ee64d1573c36696b1b12e8671dd2013f0857589b270d35fea4d8e6aa81489ceb1eeeecc2fe3f37fc2de63302bd4c65b934dbc32f96a7b7efc6b2af782b95e3e0c2cad670f3cff2e2017b077f4ef86d397043f865d9b39ed59cd675677754875de34abeb2e68ecae198bfe42b3b5ca49d4d6fe369b798c4cce02d5e4749d1b9dd57200bc9bada546b357e041939e6ac43713af22790a7bd922f368ed66b95a13418222ca613485548e3b721961ba6945c28b21d033c5e734c48d727f98dec7c3dbf4a5d6a8746327970bf0ab299536cdc5a3401d6a8695a3f6aeed5c64f5484334595f6f1f9b207ffab536b1088c26a0664decb2caeedfd0700fb827d92dc6fd5bc2f0252515fc9b73abe6f47bb6b3f1710674d8eaf6f384f6d187fa9e12ab181eaca3e5db387d599d7616c713c888f47eb60abf8ecfb5a8aa02fb151b2970d2cad865d8b5bf77b73347d3263e9756823ccab6ed69932f351cb7a15cc01d8a4fbbd0502830264dcb65cbac72333d608ad6f8754985d2cddd0e6dc27b352f787b075c4fd152f96ff1227cc7439c68799d1a7041ee7834f287ded5e8b48ee7df8d9b9dd0da303cf6b8be4d56d7723e9cb241917d1d0f1b66f7179afbeead9f5bd51f5d6ef08f9804900966814d4baeaa0ee9ff6601ef2019731e9561ecd5f434e5629e972bf15bf042dd53f01fb42e86846f13e5e1d66e2ecf66ccf0756629924c011d8f4ac9dc47988a33451d7cf075d38b0d2d4f6f889b63d4f28538fff74aba650ba47af1dc983f52690755160fea3a403049549bafe7f34642cb8c3892447f328a1ef792f4af4e6fd0fdb7b0352bbf4ed256ee7cfbac0f576d0c3d1cb2f6a5698adf2ab0d02ae0e74a3d133ae1317ad43059039803853819f4365487bc0c1178c5c5a42c785290bc729eed4ffc8b0bc9c48e493bcd786c5c4d7349fdfba785cac7d7502a7762139f8e4ddda414ba7792db232e756a2a508625a3ce4dbbb47ae6ec7dac85fcc97f8216dcaea478e92fac1d9409691ce4d393df4af5eb674c8080e9bb01ae9567cdcaffd7f58b40b96cf911c111356c341236454056d90e41c70791de47155cc2bd0bd9e6522fcf6f55d822edc30fb0110c25fcb3ddfb43b350c830e4d6c4d3af326ec49eafcd36c4105da6290f00877f8fed3fc56c4b5f521e949fa068efbc2fe1a87cf4d4195f33aacd1f3de8e572c5205e27f8d6e5763387813ef87b04799720ba3e6287f3cfa468abde63ca20a45420b16f45dc26e5f94f267716353c165d22ae2fbc4a1d0fb18ac782855374e120fc93b887b916c0ce56e42f9d4408b385abb43073b2e1537de35081b541e45aad7eca41eb0dfa2e647647e3035354c335901c3298d70bad458a735c35027e53d9d8ed449212de1cf4f18bfbeee603d90e074f5a23e75e650566f0c2d83335a11d45a2b3b466dc6bce5509c9ecf14d2c25f3608d1db39575c0835884afee627b53da5706c793f18ba58eb246127d5c14411a72a74aff8ca6519d502e31d4f6de46cdc8d0b173a3021b27aef5d21a6af1c95ce2de5f799ad1e3c2327a8176d71e8c96ae99f15afdacac34c75d6a06c52c0b4f54a44474c65a4abe95af8e67039fdc6b134076617f3d890a74505855a6b9e4a78ab9c45ceb101f398070ccb1e5240aa3657abcf5dc618fe415e67a1748233090cd907037ef42801c283a1e1940b5c3dc19c06d9064d8f8e76e2fac66110e3a95c9085425ee2ba938a6a1e69b56d9fc4e8552871f9417bebd503800627ad0e3964a8b31e20e6928bdb51a442ab37b466a55c2a420e205ead02ec81303ab98b4bdd4ef90587a97e260302cf7625b787dab19035b6a6e49f0a770d63135ea2bfbd5f134b56c0bdbbb51ac47507c9a40e7d4fabd9c3667d826d2870b2fdf6a5eab11cda0c53cb45d6e1539700608879f0400a123343887db99ea5411c196d29adb976f94eb212a6d018457b52079b7d639314b078240b87aab12ee7a85523ab3d24a30b1ef4498444ee7b19d5f59dc2548d1e74f2510bb3e2fb3d920d8bc6e1506b21f594ed5540f0b5d0452cf5f8a0d448fb7c66755ad23c9025b20b62293d7d57e1b7c4860600841a4c5d1facc0a662fec050fe47b0ae77bd0b0bcd622b2b3fcaa7e419ca42f45a28640d58c74449bcd774ed14548a3ddc00cec525f4cdd3927fa9ac874867460e93b51e40af75d59177efebffd8b87de0d2a43337f4b25900999ddb1db6617b3d46403a5d8af88c404e8198446938900cc474c9a2d5456a848362f1ea4fa9b6c3f1794603f658187a44ec48107a1a7", 0x1000, 0x4}, {&(0x7f0000000140)="35ad93648dbed6caae475ef26f03ff23122575339e3728ddadcffcb4cb6a337c8df8f1acd895070ee60a17fb41204e7c3181819b1be2259346b46bfddc83b8ca4ba6822baf47c8bfe19f00622d5a96b0dafaabb4", 0x54, 0x6}, {&(0x7f0000000380)="d3ba6e58948b955c9834fb3b2db0f8e15fb1ea88bac16f43e9be91dec79ee913b5f41e26a185ee0eb9a6ca6bd08c2921fc407d6ebc47bc5761253a367906be29b76dbaed", 0x44, 0x100000000}, {&(0x7f0000000080)="8b23fae8470a6c9f02a01641ba0858d95f6d48576afd4a1b0598eee18753e4ebb73017b4cc2acfd62521df8fec64d06f7ed67124", 0x34, 0x9}, {&(0x7f0000000400)="4e734b6755fdb1bd826290c4e1d09c139df8d43f86ff863c6ee0a763eafe3544783e55d981388ae3e2a3d687bcccb258ac68e82945139eefcec8a039ea4f0dfa666753a334b96821a8fb1ce6cdbd75cdec6974cb6ee70ddd9f07", 0x5a, 0x9}], 0x401040, &(0x7f00000016c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, r2}}, {@huge_within_size}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x24}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x74]}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x34, 0x33, 0x39, 0x34, 0x65, 0x36, 0x64], 0x2d, [0x30, 0x62, 0x53, 0x31], 0x2d, [0x37, 0x65, 0x62, 0x38], 0x2d, [0x66, 0x2, 0x65, 0x31], 0x2d, [0x66, 0x64, 0x38, 0x36, 0x36, 0x7, 0x66, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'devpts\x00'}}, {@fowner_lt={'fowner<', r4}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'devpts\x00'}}]}) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:04:45 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000001880)='./file0\x00', 0xb) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=r2, @ANYBLOB="01f4"]) r3 = fcntl$dupfd(r0, 0x0, r1) mount_setattr(r0, &(0x7f0000001800)='./file0\x00', 0x800, &(0x7f0000001840)={0x42, 0x2, 0x40000, {r3}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000000480)=[{&(0x7f0000000280)="1af354add56bddc766f65d5b17bd5f7049fe05deb3178fdc0509144100cf9002989bb2ab4a8f82a3cf10ed875280d8742776bca898cc270a8912b4b1b12a21d400633f2f5c470d5088e65903a0a6053334889a15e4640c92d1ab89621dd9e19cb9c2dd47d6811d803f603be5f470eeb023f86c595d510f2735db70500cda93809df315b36cec008e2118f9d1b140144cebf25f949ea5364d5d85d60b0cf54c4b4cb3f7a456163703bb2cc704262c7f69c56d54c1eb751913be2eda268070172fc2c3004aac13a1add0b3e6e71853d9936acba8483bc4f9fb6fd41eab5819c5608191310765b8e0f4681d49b1c2027f99d3900e9b10facea63099547dd1", 0xfd, 0x6}, {&(0x7f00000006c0)="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", 0x1000, 0x4}, {&(0x7f0000000140)="35ad93648dbed6caae475ef26f03ff23122575339e3728ddadcffcb4cb6a337c8df8f1acd895070ee60a17fb41204e7c3181819b1be2259346b46bfddc83b8ca4ba6822baf47c8bfe19f00622d5a96b0dafaabb4", 0x54, 0x6}, {&(0x7f0000000380)="d3ba6e58948b955c9834fb3b2db0f8e15fb1ea88bac16f43e9be91dec79ee913b5f41e26a185ee0eb9a6ca6bd08c2921fc407d6ebc47bc5761253a367906be29b76dbaed", 0x44, 0x100000000}, {&(0x7f0000000080)="8b23fae8470a6c9f02a01641ba0858d95f6d48576afd4a1b0598eee18753e4ebb73017b4cc2acfd62521df8fec64d06f7ed67124", 0x34, 0x9}, {&(0x7f0000000400)="4e734b6755fdb1bd826290c4e1d09c139df8d43f86ff863c6ee0a763eafe3544783e55d981388ae3e2a3d687bcccb258ac68e82945139eefcec8a039ea4f0dfa666753a334b96821a8fb1ce6cdbd75cdec6974cb6ee70ddd9f07", 0x5a, 0x9}], 0x401040, &(0x7f00000016c0)={[{@huge_within_size}, {@gid={'gid', 0x3d, r2}}, {@huge_within_size}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x24}}, {@huge_always}, {@nr_blocks={'nr_blocks', 0x3d, [0x74]}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x34, 0x33, 0x39, 0x34, 0x65, 0x36, 0x64], 0x2d, [0x30, 0x62, 0x53, 0x31], 0x2d, [0x37, 0x65, 0x62, 0x38], 0x2d, [0x66, 0x2, 0x65, 0x31], 0x2d, [0x66, 0x64, 0x38, 0x36, 0x36, 0x7, 0x66, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'devpts\x00'}}, {@fowner_lt={'fowner<', r4}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'devpts\x00'}}]}) clone3(&(0x7f0000000640)={0x133363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 681.630943] loop5: detected capacity change from 0 to 128 [ 681.637314] loop6: detected capacity change from 0 to 140 08:04:45 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 24) [ 681.649049] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 681.656823] ext4: Bad value for 'resgid' [ 681.659412] loop1: detected capacity change from 0 to 264192 [ 681.660495] FAULT_INJECTION: forcing a failure. [ 681.660495] name failslab, interval 1, probability 0, space 0, times 0 [ 681.661152] ext4: Bad value for 'resgid' [ 681.661688] CPU: 1 PID: 6803 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.663111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.664290] Call Trace: [ 681.664589] [ 681.664821] dump_stack_lvl+0x8b/0xb3 [ 681.665243] should_fail.cold+0x5/0xa [ 681.665669] ? create_object.isra.0+0x3a/0xa20 [ 681.666159] should_failslab+0x5/0x10 [ 681.666560] kmem_cache_alloc+0x5b/0x480 [ 681.666989] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 681.667538] create_object.isra.0+0x3a/0xa20 [ 681.668020] ? kasan_unpoison+0x23/0x50 [ 681.668457] kmem_cache_alloc+0x239/0x480 [ 681.668916] security_file_alloc+0x34/0x170 [ 681.669383] __alloc_file+0xb6/0x240 [ 681.669785] alloc_empty_file+0x6d/0x170 [ 681.670214] path_openat+0xe1/0x28a0 [ 681.670610] ? __is_insn_slot_addr+0x144/0x250 [ 681.671093] ? kernel_text_address+0x53/0xb0 [ 681.671559] ? path_lookupat+0x850/0x850 [ 681.671985] ? unwind_get_return_address+0x51/0x90 [ 681.672507] ? create_prof_cpu_mask+0x20/0x20 [ 681.672988] ? arch_stack_walk+0x99/0xf0 [ 681.673434] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.673932] ? lock_acquire+0x41c/0x4d0 [ 681.674360] do_filp_open+0x1aa/0x400 [ 681.674776] ? may_open_dev+0xf0/0xf0 [ 681.675194] ? lock_release+0x505/0x6f0 [ 681.675605] ? alloc_fd+0x2f0/0x670 [ 681.675989] ? lock_downgrade+0x6d0/0x6d0 [ 681.676423] ? rwlock_bug.part.0+0x90/0x90 [ 681.676864] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 681.677455] ? _find_next_bit+0x1e5/0x260 [ 681.677884] ? _raw_spin_unlock+0x24/0x40 [ 681.678323] ? alloc_fd+0x2f0/0x670 [ 681.678705] do_sys_openat2+0x16d/0x4d0 [ 681.679116] ? build_open_flags+0x6f0/0x6f0 [ 681.679567] ? preempt_count_add+0x74/0x140 [ 681.680020] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.680592] __x64_sys_openat+0x13f/0x1f0 [ 681.681032] ? __x64_sys_open+0x1c0/0x1c0 [ 681.681481] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 681.682012] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 681.682568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.683112] do_syscall_64+0x3b/0x90 [ 681.683505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.684040] RIP: 0033:0x7faf15e66a04 [ 681.684420] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 681.686362] RSP: 002b:00007faf13428ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 681.687149] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15e66a04 [ 681.687894] RDX: 0000000000000002 RSI: 00007faf13429000 RDI: 00000000ffffff9c [ 681.688628] RBP: 00007faf13429000 R08: 0000000000000000 R09: ffffffffffffffff [ 681.689383] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 681.690124] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 681.690869] [ 681.694809] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:04:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000058c0)={'sit0\x00', &(0x7f0000005840)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x5, 0xf3c6, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x8000, 0x7f}}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005900)={{{@in=@multicast1, @in=@loopback, 0x4e23, 0x401, 0x4e20, 0x4, 0x0, 0x80, 0x20, 0x6, r2, 0xffffffffffffffff}, {0x4, 0x80, 0xea, 0xff, 0x6, 0x8001, 0xe7c8}, {0x8, 0x101, 0xfd}, 0x80000000, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x0, 0x1, 0x2, 0xfffffff7, 0x4, 0xfffffffa}}, 0xe8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r3, 0x400, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) fcntl$setlease(r4, 0x400, 0x1) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0xfa08, 0xffffffffffffff81, 0x2, 0x8, 0x9, 0x800]}, &(0x7f0000000080)=0x78) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x0, 0x3, 0x7, 0xfffffffffffff801], 0x6, &(0x7f0000000200)=[{}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 08:04:45 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 26) [ 681.706038] loop0: detected capacity change from 0 to 128 [ 681.709351] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 681.729103] FAULT_INJECTION: forcing a failure. [ 681.729103] name failslab, interval 1, probability 0, space 0, times 0 [ 681.730286] CPU: 0 PID: 6809 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.731226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.732330] Call Trace: [ 681.732584] [ 681.732802] dump_stack_lvl+0x8b/0xb3 [ 681.733187] should_fail.cold+0x5/0xa [ 681.733571] ? create_object.isra.0+0x3a/0xa20 [ 681.734027] should_failslab+0x5/0x10 [ 681.734399] kmem_cache_alloc+0x5b/0x480 [ 681.734810] create_object.isra.0+0x3a/0xa20 [ 681.735249] ? kasan_unpoison+0x23/0x50 [ 681.735649] __kmalloc_track_caller+0x25e/0x420 [ 681.736108] ? kasprintf+0xbb/0xf0 [ 681.736471] kvasprintf+0xb5/0x150 [ 681.736835] ? bust_spinlocks+0xe0/0xe0 [ 681.737280] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.737768] ? preempt_count_add+0x74/0x140 [ 681.738199] ? __is_module_percpu_address+0x237/0x300 [ 681.738732] kasprintf+0xbb/0xf0 [ 681.739089] ? kvasprintf_const+0x190/0x190 [ 681.739544] ? save_trace+0xd00/0xd00 [ 681.739934] ? lockdep_init_map_type+0x21a/0x7e0 [ 681.740426] alloc_workqueue+0x408/0xeb0 [ 681.740849] ? do_raw_spin_unlock+0x4f/0x210 [ 681.741311] ? _raw_spin_unlock+0x24/0x40 [ 681.741769] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 681.742317] ? __fget_files+0x28d/0x470 [ 681.742733] ? loop_configure+0x62b/0x1950 [ 681.743176] loop_configure+0x6ec/0x1950 [ 681.743607] ? putname+0xfe/0x140 [ 681.743989] lo_ioctl+0x782/0x1860 [ 681.744364] ? avc_has_extended_perms+0x7e8/0xeb0 [ 681.744879] ? loop_set_status_old+0x1b0/0x1b0 [ 681.745370] ? fsnotify+0xb4f/0x1250 [ 681.745758] ? avc_ss_reset+0x180/0x180 [ 681.746188] ? fsnotify_first_mark+0x1f0/0x1f0 [ 681.746666] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.747152] ? lock_acquire+0x41c/0x4d0 [ 681.747558] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.748058] ? lock_release+0x505/0x6f0 [ 681.748472] ? find_and_remove_object+0xe4/0x120 [ 681.748962] ? __delete_object+0xb3/0x100 [ 681.749405] ? lock_downgrade+0x6d0/0x6d0 [ 681.749823] ? rwlock_bug.part.0+0x90/0x90 [ 681.750251] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.750736] ? selinux_inode_getsecctx+0x90/0x90 [ 681.751225] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.751711] ? loop_set_status_old+0x1b0/0x1b0 [ 681.752180] blkdev_ioctl+0x362/0x7f0 [ 681.752564] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.753051] ? __x64_sys_ioctl+0x97/0x210 [ 681.753481] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.754037] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.754501] __x64_sys_ioctl+0x196/0x210 [ 681.754905] do_syscall_64+0x3b/0x90 [ 681.755288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.755807] RIP: 0033:0x7f22ed51d8d7 [ 681.756173] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.758026] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.758777] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 681.759491] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 681.760202] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 681.760922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.761645] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 681.762359] [ 681.769988] ISOFS: Unable to identify CD-ROM format. 08:04:45 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 25) [ 681.781595] FAULT_INJECTION: forcing a failure. [ 681.781595] name failslab, interval 1, probability 0, space 0, times 0 [ 681.782817] CPU: 1 PID: 6811 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 681.783845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 681.785050] Call Trace: [ 681.785325] [ 681.785563] dump_stack_lvl+0x8b/0xb3 [ 681.785983] should_fail.cold+0x5/0xa [ 681.786387] ? alloc_workqueue+0x914/0xeb0 [ 681.786843] should_failslab+0x5/0x10 [ 681.787243] __kmalloc+0x72/0x440 [ 681.787622] alloc_workqueue+0x914/0xeb0 [ 681.788060] ? do_raw_spin_unlock+0x4f/0x210 [ 681.788533] ? _raw_spin_unlock+0x24/0x40 [ 681.788985] ? bd_prepare_to_claim+0x164/0x300 [ 681.789496] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 681.790043] ? __fget_files+0x28d/0x470 [ 681.790473] ? loop_configure+0x62b/0x1950 [ 681.790925] loop_configure+0x6ec/0x1950 [ 681.791358] ? putname+0xfe/0x140 [ 681.791742] lo_ioctl+0x782/0x1860 [ 681.792117] ? avc_has_extended_perms+0x7e8/0xeb0 [ 681.792633] ? loop_set_status_old+0x1b0/0x1b0 [ 681.793110] ? fsnotify+0xb4f/0x1250 [ 681.793506] ? avc_ss_reset+0x180/0x180 [ 681.793932] ? fsnotify_first_mark+0x1f0/0x1f0 [ 681.794411] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.794905] ? lock_acquire+0x41c/0x4d0 [ 681.795322] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.795812] ? lock_release+0x505/0x6f0 [ 681.796230] ? find_and_remove_object+0xe4/0x120 [ 681.796736] ? __delete_object+0xb3/0x100 [ 681.797171] ? lock_downgrade+0x6d0/0x6d0 [ 681.797623] ? rwlock_bug.part.0+0x90/0x90 [ 681.798065] ? rcu_read_lock_sched_held+0xd/0x70 [ 681.798574] ? selinux_inode_getsecctx+0x90/0x90 [ 681.799073] ? loop_set_status_old+0x1b0/0x1b0 [ 681.799566] blkdev_ioctl+0x362/0x7f0 [ 681.799966] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.800464] ? __x64_sys_ioctl+0x97/0x210 [ 681.800901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 681.801498] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 681.801989] __x64_sys_ioctl+0x196/0x210 [ 681.802409] do_syscall_64+0x3b/0x90 [ 681.802805] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.803353] RIP: 0033:0x7faf15eb38d7 [ 681.803746] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.805665] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.806452] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 681.807191] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 681.807937] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 681.808682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 681.809446] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 681.810190] [ 681.831109] ISOFS: Unable to identify CD-ROM format. 08:04:54 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 26) 08:04:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fffffc, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x40) 08:04:54 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 27) 08:04:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000058c0)={'sit0\x00', &(0x7f0000005840)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x5, 0xf3c6, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x8000, 0x7f}}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005900)={{{@in=@multicast1, @in=@loopback, 0x4e23, 0x401, 0x4e20, 0x4, 0x0, 0x80, 0x20, 0x6, r2, 0xffffffffffffffff}, {0x4, 0x80, 0xea, 0xff, 0x6, 0x8001, 0xe7c8}, {0x8, 0x101, 0xfd}, 0x80000000, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3507, 0x0, 0x1, 0x2, 0xfffffff7, 0x4, 0xfffffffa}}, 0xe8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r3, 0x400, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) fcntl$setlease(r4, 0x400, 0x1) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0xfa08, 0xffffffffffffff81, 0x2, 0x8, 0x9, 0x800]}, &(0x7f0000000080)=0x78) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x4, 0x0, 0x3, 0x7, 0xfffffffffffff801], 0x6, &(0x7f0000000200)=[{}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 08:04:54 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 30) [ 690.568704] FAULT_INJECTION: forcing a failure. [ 690.568704] name failslab, interval 1, probability 0, space 0, times 0 [ 690.569907] CPU: 0 PID: 6821 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 690.570927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 690.572024] Call Trace: [ 690.572305] [ 690.572525] dump_stack_lvl+0x8b/0xb3 [ 690.572937] should_fail.cold+0x5/0xa [ 690.573352] ? create_object.isra.0+0x3a/0xa20 [ 690.573863] should_failslab+0x5/0x10 [ 690.574276] kmem_cache_alloc+0x5b/0x480 [ 690.574709] create_object.isra.0+0x3a/0xa20 [ 690.575188] ? kasan_unpoison+0x23/0x50 [ 690.575584] __kmalloc+0x25b/0x440 [ 690.575964] alloc_workqueue+0x914/0xeb0 [ 690.576394] ? do_raw_spin_unlock+0x4f/0x210 [ 690.576865] ? _raw_spin_unlock+0x24/0x40 [ 690.577313] ? bd_prepare_to_claim+0x164/0x300 [ 690.577817] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 690.578360] ? __fget_files+0x28d/0x470 [ 690.578756] ? loop_configure+0x62b/0x1950 [ 690.579223] loop_configure+0x6ec/0x1950 [ 690.579675] ? putname+0xfe/0x140 [ 690.580061] lo_ioctl+0x782/0x1860 [ 690.580455] ? avc_has_extended_perms+0x7e8/0xeb0 [ 690.580994] ? loop_set_status_old+0x1b0/0x1b0 [ 690.581500] ? fsnotify+0xb4f/0x1250 [ 690.581875] ? avc_ss_reset+0x180/0x180 [ 690.582316] ? fsnotify_first_mark+0x1f0/0x1f0 [ 690.582820] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.583351] ? lock_acquire+0x41c/0x4d0 [ 690.583738] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.584260] ? lock_release+0x505/0x6f0 [ 690.584676] ? find_and_remove_object+0xe4/0x120 [ 690.585204] ? __delete_object+0xb3/0x100 [ 690.585662] ? lock_downgrade+0x6d0/0x6d0 [ 690.586100] ? rwlock_bug.part.0+0x90/0x90 [ 690.586547] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.587046] ? selinux_inode_getsecctx+0x90/0x90 [ 690.587545] ? loop_set_status_old+0x1b0/0x1b0 [ 690.588023] blkdev_ioctl+0x362/0x7f0 [ 690.588420] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.588917] ? __x64_sys_ioctl+0x97/0x210 [ 690.589350] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 690.589940] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.590434] __x64_sys_ioctl+0x196/0x210 [ 690.590861] do_syscall_64+0x3b/0x90 [ 690.591258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.591824] RIP: 0033:0x7faf15eb38d7 [ 690.592208] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.594236] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.595030] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 690.595785] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 690.596539] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 690.597282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 690.598044] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 690.598837] 08:04:54 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 14) [ 690.603553] FAULT_INJECTION: forcing a failure. [ 690.603553] name failslab, interval 1, probability 0, space 0, times 0 [ 690.605956] CPU: 1 PID: 6824 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 690.607959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 690.610332] Call Trace: [ 690.610864] [ 690.611324] dump_stack_lvl+0x8b/0xb3 [ 690.612136] should_fail.cold+0x5/0xa [ 690.612936] ? apply_wqattrs_prepare+0xab/0x880 [ 690.613928] should_failslab+0x5/0x10 [ 690.614718] __kmalloc+0x72/0x440 [ 690.615445] apply_wqattrs_prepare+0xab/0x880 [ 690.616393] ? is_kernel_percpu_address+0xe6/0x110 [ 690.617455] apply_workqueue_attrs_locked+0xc1/0x140 [ 690.618291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 690.618518] alloc_workqueue+0xb1a/0xeb0 [ 690.620270] ? do_raw_spin_unlock+0x4f/0x210 [ 690.621200] ? _raw_spin_unlock+0x24/0x40 [ 690.622107] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 690.623174] ? __fget_files+0x28d/0x470 [ 690.624006] ? loop_configure+0x62b/0x1950 [ 690.624889] loop_configure+0x6ec/0x1950 [ 690.625745] ? putname+0xfe/0x140 [ 690.626474] lo_ioctl+0x782/0x1860 [ 690.627209] ? avc_has_extended_perms+0x7e8/0xeb0 [ 690.628213] ? loop_set_status_old+0x1b0/0x1b0 [ 690.629154] ? fsnotify+0xb4f/0x1250 [ 690.629977] ? avc_ss_reset+0x180/0x180 [ 690.630807] ? fsnotify_first_mark+0x1f0/0x1f0 [ 690.631742] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.632726] ? lock_acquire+0x41c/0x4d0 [ 690.633572] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.634545] ? lock_release+0x505/0x6f0 [ 690.635361] ? find_and_remove_object+0xe4/0x120 [ 690.636336] ? __delete_object+0xb3/0x100 [ 690.637199] ? lock_downgrade+0x6d0/0x6d0 [ 690.638101] ? rwlock_bug.part.0+0x90/0x90 [ 690.638986] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.639986] ? selinux_inode_getsecctx+0x90/0x90 [ 690.640979] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.641969] ? loop_set_status_old+0x1b0/0x1b0 [ 690.642910] blkdev_ioctl+0x362/0x7f0 [ 690.643716] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.644674] ? __x64_sys_ioctl+0x97/0x210 [ 690.645584] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 690.646715] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.647668] __x64_sys_ioctl+0x196/0x210 [ 690.648494] do_syscall_64+0x3b/0x90 [ 690.649262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.650324] RIP: 0033:0x7f22ed51d8d7 [ 690.651091] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.654823] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.656358] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 690.657824] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 690.659268] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 690.660728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 690.662201] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 690.663651] 08:04:54 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x78) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x2, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @l2={0x1f, 0x3, @any, 0xdddb, 0x1}, @xdp={0x2c, 0x3, 0x0, 0x3a}, @l2tp={0x2, 0x0, @private=0x1, 0x3}, 0x401, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x1, 0xbd25}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) recvfrom$inet6(r0, &(0x7f0000000640)=""/101, 0x65, 0x102, &(0x7f00000006c0)={0xa, 0x4e23, 0x5, @empty, 0x81}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) 08:04:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./file1\x00', 0x407600, 0x91) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000053380)={{0x0, 0x8, 0x0, 0x6, 0x89c6, 0x1ff, 0x2, 0x5, 0xa21, 0x7, 0x25, 0x81, 0xffffffffffff7fff, 0x2, 0xffffffffffffff01}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000054380)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000055380)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000055580)={0x0, 0x0, "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", "78803d48872fd68156733886bae43ede08a4bf84820905d1ef91f54653792d437e6f3a52b252f0913ad15be899fe43e6b24c41c6aa13c9e4dbbca913c9106ef53768471bace3380e7a8a14f3117e367847bc0692b918b3608c21d3348456276437684ad0b5c2c81bc9463790e05ecc91582da300b0ec697889571bf5453f72007f66ad340ddfd3d24d35179f05cfc813acd7c3959e5d8c105abf91aef6df8091843c2a3c327e7389a5c05f5ac756867624840b1310075f1a4927e38462a0e8832acaa163eec55937628b2e523a2e6a4ccf5ea0b6f2d6c6a1bc9c7865f6743438f328812778b61d96b11da08fa19f7e4e3397adad8913018ac260900ace34aa0fe8824b649f6ddeb8b3d9b36c482b8834de93c13c0562be0ec70321061ab9f7386a21b7bae5d77a34cb299e8d5df5110b21e81e19b74de48a661c2d6ac310638f11f79cfc01faec031615223b72f80e6e3495f80fabdbe78d55d195d7fd8e841cec983302a78604311fade159e842ab9e5317e3183b41f490e60cfa3ca17a910d65ef60460f90fb404aa18ca970b8a25d8e0bd74eb170504c750db6484b07df7b243562b73d3cd80453e0d65a01297621ebe4d43abef6f2074ad3815afc08b61e284c42e31700b78a1292d80154c476ecd3f295d7758dc33b592b767182a337bc9bf18ed7e952da553e884920da007cc5db748f822b181cfdb05ecff142f7a90fac07bdb5c599c6e53ce28b78bc79a7ce0d8d90522ede498a281ef1214c9f12dfabcaaa3f048c9271e588b84f7266561a21440eacb74c371cff3e8909c7dd0279abc69243ff9271fb01c5fc34ea298eb97bb0a0d672e8a6c0666a6c02cd190187ef71dd803e825d3e018e584fbc3c6c8dc1ab1db60bad57f4c214f334d21585290e8d69966a2cd22e6141f4943be560445aa6b60a5ad875d6fcf4b555b9dfaedac5d5278432ea7fcad68901c7c7817f27382ac81ccff19c642626155ab1298eae8936b589fc8711bb4d826361b8c89a0e4ccc4df3cf807941e12e881d41c6c4f5538126a2b6495f117170cb7c414ab7e4935f862d3476633514d0373f005a91010106b0c2019ea2c1be10b89747c96ecd94b81bcdbd24b30f0d1f67ee19a5fdd198aff17e178815ac1657712c4fb6ece23d4c819c16ca2d4f0e5eedafc4a69e4a43a26c8762d5e2e8399fce2ba8452b351059731b56001c335c91cfca699539763cc7143f4451a15a9a19d6b52e554edf1bb0ade2e2fd90254222957208b374d7af7865028d86e1231e61a25129e421a6122ca721e34eb7384b8fabb7a59e74713cf6a3b80547dc8cec1f2f274ec84ee26fbee4d25f1a77d49b6c61fe564c9d6cc06b2c6fa3d422bc12077ffd9c5dc8e1c56d4ef0caf117f7c748be05db4ad6fffeac125c84cac0c4e26dd7f9d6e42452012bcfd8130795d41f27b9168420c6dc1af616c4690d7bb615eb2b3969767c7de5d5406fb9f3a5ec953f6ab59ffee7961ad79b32ce75afc6a2e521bcb28f91d1c32d87660bdac36ed78cc8f3cf877388d3cc236beff01f6cd8577ec8b0406b7abed325979f7ed39346089010235255d83cce0e39b51ce65816e70a8c4410634704cc19431d8ddbc9788c3b22544134f9aac6f0b26e756e76adfb7207d85fce961bbd251d4ec4a2e061a76b6a2e2b5dcd6da470a6b3554ab8fe47c395e13357f022dccd16a0ab0743f65922fc4150503d534d3e2354bd597862f3bb1d3ac3d95f17dd21381dfac9e5d1063b52132287d66f2f03b81c9c1f7939bbdcf9ea3c8e30a5b5b76d35faa1bdb898c391d884bfe92828af01c292d16c5e21ef81970447fe07e213e6b50671a1dc2a45dc62f82505b39a5f3df6caaef26ff8a1237e390c346267ca6ab247b690f52b0363827784e552ead03eaf6bec35dfa3090a3e876c07e75af958e15226343c0f977f2241426d816f952635414092a3ff9fd8d9911fea91579bcc5e682cf3777dd6233142e1fcf6f54a30cb3339f121eab88bd9412372462b62067c9cc47dd49baa36ad77a91139874488f231addc8030d314af5a616d26e1c0c6a7cf89a649cd112c2a1baa94b7371c11674106a25dcd0e50528f306ced012f2121e5e39b9bf765c4d1af9a88d77ddfafbefe1ee7467457653635c999031650e707d3d56a08e47381985faeca27496dbcb512868ddde7bf125926672fa70dfa0f1b3a676dd8bf2045cd3570076a3352b6bad7c283a95c28e2392bd9eb73028b292e0ec2753a2efe7d6d54390be075c44f35730b99fdcd24d947a7ca851021c2e34545400b5c99b98e2a056386fdfe1e62655c093b1f674800f59ebf2843c2de4e19da2ed5d10eb43fd6c1283ac12c896a410d2fcfd9993989b3c313a52a7d5c560b8fa2117eeadd88124dc9f73f699652f69c089cd453635a7719f168e55f1ee406c6c4f3e41140f66605339e3b351a75e38d28a08e545a563c8e62ae60d07a399e430b7e2e98f062918789da32ddb39e96905b91960eff3e249f46b646fc9a2e7461df7f8fb1de86919302363d73bd043c528cd3b1cb7a55b5f04fd0a6f5600e68bc557de7ffe40162aa63ba7ce6314fcc74b3c96094dc5b08a79487e48c6c6fb183bc948ae5ae3c04c001491a76baa8c64e88fb301728e9b9fb85dec097e3f949d731c331c15efc5e0690f2aebf23857616b19e2d4b1a519272046a6911e4d368d7fee5666544abf91ba472c3a2ffd519c7cd9ece73313279e3f58aa18c973cb1f89d24fadcfcbc0038a8658ffabb0bc2f7c481b488f41c0f7e54b15138c277a51cd044ab6bd2869cb98772d77a855426475868f284ea1a8786f0c4f5d70179de0f81a01d64788b981e8a58a4ab00466cd8352d69e623c9a4b5facf0695e4303a5a0d2f2c4144adb5ceb1803d8a848d5f213d60b062c68ee1f2012817fd3965d4c6f8d6a1c3f8a4705f840607c207c74f6e5fb24af5503690921651bcab075234b0104fc1c658ad0ba32f6c04c43c2a6ecf6b0308e14be471ce59045f6b5dc27c9bb891e0a499c04867c5ad282d54980ccf650eabf1d3b823c5353800a9ce3fbfdd848a5d4d91e78702796e9ebbc79fab2b5ba8428e487ed6d20618744ecb2ee4dc3c08ccccf09e87b2eed60065dccdb0bd929bf11eb54363cbbeb88752de01510203201a6d161f21720552af709a28d4ae58f0acf36cc8255be2cb34b6c99f2f541d2a76a7c4c1dcafc0b2f17f4143860ddf5a3957ee2b4eabc3b4d600010bd50fe9b417466f36176dac39399ce7dacc43f6e283909cbcc7a63696e05c6f8b5324152271f1582c9414903d5e32721cf2fc66862afb193533d20ee4d682fca60b5bed8d4b3a57e2be1a6d482f704a9ee28f41a65dc0047d4d525976689ff2b18b4d4ffab5e768dc78730497771d6f9a14086f6a5d5af94eb097386ca3883cbc55614c4c0d8ff23562867fb21f31f89bb473a7e41e3aa89a8e1c8a5efb0a2b782267bfe58df0ca4d3ed71c218e2ff7927c6dd86d1ff4b5aa9a0d91ae6ee35f25a4e181c45d501b134af4be6c77aad8551803a0306c34bea99125dc6e6394430300d394be56f09e65e3cacea56d348ce366fcf3eb9da7d93ea4d23a613f88bcf33c2432d9363514ee64f61153af920cc40399909d3d0c637eb46b1efe71fc148df79c87a14d551638764e190e1165b195d3ac8c08a65c0be0b384d9861460ac512c749c84eba387b253bd2bb28fd7c8697e418856746f04fc97b8ea73dd13a085f8f0bf6ee7a26db94bffd29701ed2c52d3c8aeff5d7b7549ce799c1c94b18244600dde102d55ff69ae349d402eaa508b2ab41497415ec583c879d73c5d26832d4cc4c268ab77e8b43dbe888f22373599488e6ac7c7d9d53c1b98dc7b8cecf2732d34feb912b9b5fe125fbabadcc27c6bf50aef2cb530083ed9802dbe1546e998329c8dfe7efd1c46ac0b947a292b33ee2e5b7bd64d9f6e7438eae243f4396271c0a305bfb88e4660f093a83bc71b566cb0cec023f8ec7978ba22ae98a68e935dc606baab0a532c85f0b9bece6e0c24e93c508d3495ba1d3c9458194ec5db04e0eaf0d603af6b1de88f7337ca0656a3335e0bced5dcd9ced55e177201b391e29e7867f5a09ce3a51b6944f12310c5ee6cc8efd242ff835e35608195b3f470788076e8eb1ff0b5a8095e5fb7fb4f07ce7540c793090c478a323cbc1874c22b515ce717415fd19940849e36c106aca8c566bd8d6b2029aff435069634f02e15e8c1e7978820af2fb54db0202f5499fc86077c9d9f5b140b0865954acc5e43187fd2cd4256fdbba8666bc558324cef0ee29e0bd981ac392797ab6236698f8554a45556ed4109c718ecad4c540b7172eccbdfde981125b46e39e06e8242171f2740fa4d31921e731400c36d788e26427ee3ac60673726e0c9fdbeabcd282162b20f24bcd10fe424341f010662fe878252bf6bdddddc74aa89a9c2bacad57653c249e05890e5050af0c832cc6f6a2294c055e637090533ad00615a878843631f2553e5085091209716bcd4837a90a618a5064b2c03f1917cfc955b8e37e6cb5bfb58fae9dc4b7eac93fadef0686fa74b8b94cf9d6f6db6ced695d83c88a99f194c2dbd577cfc53c297694034d82e35de5b68bc899597e59b247884c74c3dc4051c40e7145aadcdb01475b69a338bfa0893a4a986e1d9985b812b2fe49c949073723b2e62ce422c2421dbd469eac68cc7baeeece4c1b508e29c54084628d0975d655ff914dc5223de696c4b40283c1eda9b9336043d5d484f7c52d9449a36a46d2c161648ee66b524fd0fa9c93f48514d95a13d8037a85c8393a958ebe9a6f2c1e5c37f0fe29d9402f1ea995563059d91a92ffaaf19b4ddf2846982557b0711b1271d1cecf1b40f86d98552144556b16f440e8f35968426dab552512c9dc855821d86f03c0306a0fd99e525cfc502ec22ff2fb705b8b228577b6958f5636922392e290c3793100a9974f1ff1c2eabba6508b8f6ad29bffbd720cccac1ca8c22a656dcdfa475b5889b442ed6e37e488ccbd39181aea864ba153b47b273b2a74e265af08bc1c841ab319b05ca65a6a3403938d9f8bccdee6bdc1857e16b9edbf4a2b07bd5846ce1643797ea0428757d6994e46cdb96b338662fe7cf02960c867f37596d61785b3a19f0b5e7173277e725b24fca22efc99a9fdcbba872df32cfcda6f1ebf72ac1406f747040f5adf65a19de8dc5a218200751033bd2581c987a24c5d2a47d2b413727f1f247d6fae4a2498f94d47e83231895d9839730203c67b9637f69ca61447aa85bfab659b42a254ba7418963cd1877b12aa65c9ff0a53b56af6cdf8747eabdbd1820ae35c76086fee38e1461163cc6be0bfacf79875f92cbdfb8edc1463e49571193f450455171a4c8aca209e29606318531a0bd0eca4aa3"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000056580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000056780)={{0x0, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x6, 0x200, 0xffff, 0x80000000, 0x8000, 0x4, 0x80000000, 0x4bbb, 0x1000, 0x40}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000057780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000057980)={0x47afbc7d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "9ef51ca59cd4f2"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000058980)={{0x0, 0x100000000, 0x4, 0x1, 0xfffffffeffffffff, 0x4, 0x4, 0x9, 0x3, 0x800, 0x6, 0x7676f89b, 0x3, 0x2, 0x2}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000059980)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005a980)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb7, "f9c606853cd2bb"}) [ 690.681123] loop0: detected capacity change from 0 to 128 [ 690.684867] FAULT_INJECTION: forcing a failure. [ 690.684867] name failslab, interval 1, probability 0, space 0, times 0 [ 690.686060] CPU: 0 PID: 6841 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 690.687087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 690.688310] Call Trace: [ 690.688586] [ 690.688823] dump_stack_lvl+0x8b/0xb3 [ 690.689242] should_fail.cold+0x5/0xa [ 690.689654] ? getname_flags.part.0+0x50/0x4f0 [ 690.690155] should_failslab+0x5/0x10 [ 690.690555] kmem_cache_alloc+0x5b/0x480 [ 690.690987] ? lock_downgrade+0x6d0/0x6d0 [ 690.691452] getname_flags.part.0+0x50/0x4f0 [ 690.691919] getname+0x8e/0xd0 [ 690.692272] do_sys_openat2+0xf5/0x4d0 [ 690.692687] ? build_open_flags+0x6f0/0x6f0 [ 690.693136] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.693657] ? lock_release+0x505/0x6f0 [ 690.694084] ? do_syscall_64+0x3b/0x90 [ 690.694509] __x64_sys_openat+0x13f/0x1f0 [ 690.694952] ? __x64_sys_open+0x1c0/0x1c0 [ 690.695399] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 690.695935] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 690.696505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 690.697056] do_syscall_64+0x3b/0x90 [ 690.697467] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.698013] RIP: 0033:0x7f432f56ea04 [ 690.698410] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 690.700414] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 690.701248] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 690.702057] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 690.702845] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 690.703628] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 690.704405] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 690.705194] ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005b980)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000005c980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {r6, r7}, {}, {}, {r8}, {}, {r9, r10}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}, {r14}, {r15, r16}], 0x9, "51b73d002326d1"}) lseek(r0, 0x0, 0x4) 08:04:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) pwrite64(r2, &(0x7f0000000140)="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", 0x1000, 0x1) lseek(r0, 0x0, 0x4) 08:04:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x187101, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) [ 690.707553] FAULT_INJECTION: forcing a failure. [ 690.707553] name failslab, interval 1, probability 0, space 0, times 0 [ 690.709697] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 690.710071] CPU: 1 PID: 6842 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 690.712664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 690.714960] Call Trace: [ 690.715471] [ 690.715911] dump_stack_lvl+0x8b/0xb3 [ 690.716685] should_fail.cold+0x5/0xa [ 690.717451] ? create_object.isra.0+0x3a/0xa20 [ 690.718366] should_failslab+0x5/0x10 [ 690.719116] kmem_cache_alloc+0x5b/0x480 [ 690.719920] create_object.isra.0+0x3a/0xa20 [ 690.720784] ? kasan_unpoison+0x23/0x50 [ 690.721581] __kmalloc_track_caller+0x25e/0x420 [ 690.722502] ? kasprintf+0xbb/0xf0 [ 690.723205] kvasprintf+0xb5/0x150 [ 690.723910] ? bust_spinlocks+0xe0/0xe0 [ 690.724697] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.725653] ? preempt_count_add+0x74/0x140 [ 690.726518] ? __is_module_percpu_address+0x237/0x300 [ 690.727553] kasprintf+0xbb/0xf0 [ 690.728228] ? kvasprintf_const+0x190/0x190 [ 690.729094] ? save_trace+0xd00/0xd00 [ 690.729858] ? lockdep_init_map_type+0x21a/0x7e0 [ 690.730803] alloc_workqueue+0x408/0xeb0 [ 690.731620] ? do_raw_spin_unlock+0x4f/0x210 [ 690.732498] ? _raw_spin_unlock+0x24/0x40 [ 690.733333] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 690.734351] ? __fget_files+0x28d/0x470 [ 690.735144] ? loop_configure+0x62b/0x1950 [ 690.735991] loop_configure+0x6ec/0x1950 [ 690.736795] ? putname+0xfe/0x140 [ 690.737505] lo_ioctl+0x782/0x1860 [ 690.738218] ? avc_has_extended_perms+0x7e8/0xeb0 [ 690.739197] ? loop_set_status_old+0x1b0/0x1b0 [ 690.740103] ? fsnotify+0xb4f/0x1250 [ 690.740846] ? avc_ss_reset+0x180/0x180 [ 690.741668] ? fsnotify_first_mark+0x1f0/0x1f0 [ 690.742575] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.743511] ? lock_acquire+0x41c/0x4d0 [ 690.744300] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.745229] ? lock_release+0x505/0x6f0 [ 690.746029] ? find_and_remove_object+0xe4/0x120 [ 690.746973] ? __delete_object+0xb3/0x100 [ 690.747821] ? lock_downgrade+0x6d0/0x6d0 [ 690.748639] ? rwlock_bug.part.0+0x90/0x90 [ 690.749493] ? rcu_read_lock_sched_held+0xd/0x70 [ 690.750463] ? selinux_inode_getsecctx+0x90/0x90 [ 690.751412] ? loop_set_status_old+0x1b0/0x1b0 [ 690.752319] blkdev_ioctl+0x362/0x7f0 [ 690.753069] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.754020] ? __x64_sys_ioctl+0x97/0x210 [ 690.754838] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 690.755927] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 690.756858] __x64_sys_ioctl+0x196/0x210 [ 690.757669] do_syscall_64+0x3b/0x90 [ 690.758412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.759427] RIP: 0033:0x7f9aebdc68d7 [ 690.760157] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.763794] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.765287] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 690.766698] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 690.768121] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 690.769542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 690.770946] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 690.772357] 08:04:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xec, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xad, 0x1, "d5310c8df8a3d7a5130194b74a6b649815f25b0d101c0e2c1c82a21e6936272c1f4e7c9bef5b8146f4ce944e0e84c018e4cb828f6c62a5a5a6de8b56d899918c1c4814cdfc8486cf7b7e93bc749c06f4324f3fad1baebd5820006944d2df6152590c6a1aa357e511f82413b707a9dd13f6f1a1b13271e4701c24d4da93d573443df57406cf9b05495858eced011661ab512ea9321f3ee6f4c494396649e83e29dffa897648f3b80103"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x47, 0x0, 0x2) lseek(r3, 0x0, 0x4) 08:04:54 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x1000000000000003, 0x1b000000) lseek(r0, 0x0, 0x4) [ 690.777149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 690.795248] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 690.846337] loop5: detected capacity change from 0 to 128 [ 690.857301] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:05:08 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5d0000000000000000058da24f9ff00000000000000000000000000000000000000000007cab252b039b88f971ee4721ed464b4d556114fe5277817f2455410f8c78a493cf85915128104efaad0971f620a5c4af9af8fcdd43ec73389e593cd012ef7bf0af29c7ee79bc0dcd1d07857528af4291e1af8e149b843c6b6cee3e1d43da2c3ac17b64bfe84fbbc76af8593025404bfe19770ebc73e8a0255fa9fcee542b86f701f561b23e485ff1b6a817f8fe02cbad958923afa54ce56dea27affc046b06282f033e8b287154034e1d1"], 0x78) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000013c0)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000000)="d7061e52", 0x4}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x81}, 0x1c, &(0x7f0000001580), 0x0, &(0x7f00000000c0)=[@flowinfo={{0x14}}, @rthdrdstopts={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}}}], 0x58}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x2, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @l2={0x1f, 0x3, @any, 0xdddb, 0x1}, @xdp={0x2c, 0x3, 0x0, 0x3a}, @l2tp={0x2, 0x0, @private=0x1, 0x3}, 0x401, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x1, 0xbd25}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) recvfrom$inet6(r0, &(0x7f0000000640)=""/101, 0x65, 0x102, &(0x7f00000006c0)={0xa, 0x4e23, 0x5, @empty, 0x81}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/49, 0x31, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) 08:05:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 31) 08:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ccd7eb0258dd8259faf897e119b6e64b9d", 0x11}], 0x1, 0x3) fallocate(r1, 0x10, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001500)={{0x1, 0x1, 0x18, r1, {0x8, 0xbf}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000001540)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file1\x00', 0x0, 0x82) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) preadv2(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000001400)=""/102, 0x66}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/127, 0x7f}, {&(0x7f0000001300)=""/205, 0xcd}, {&(0x7f0000001480)=""/11, 0xb}], 0x7, 0x3, 0x9, 0x13) lseek(r0, 0x0, 0x4) 08:05:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 28) 08:05:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 15) 08:05:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 27) 08:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xec, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xad, 0x1, "d5310c8df8a3d7a5130194b74a6b649815f25b0d101c0e2c1c82a21e6936272c1f4e7c9bef5b8146f4ce944e0e84c018e4cb828f6c62a5a5a6de8b56d899918c1c4814cdfc8486cf7b7e93bc749c06f4324f3fad1baebd5820006944d2df6152590c6a1aa357e511f82413b707a9dd13f6f1a1b13271e4701c24d4da93d573443df57406cf9b05495858eced011661ab512ea9321f3ee6f4c494396649e83e29dffa897648f3b80103"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x40008d0}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x47, 0x0, 0x2) lseek(r3, 0x0, 0x4) 08:05:08 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) r0 = socket(0x1a, 0xa, 0x7) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x29, @private=0xa010100, 0x4e24, 0x0, 'sh\x00', 0x2, 0x80000001, 0x32}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 0xc0, 0x7, 0x7}}, 0x44) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)=0x1) fcntl$getown(r0, 0x9) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1dc, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x374a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5dc93367}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd24}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1229}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x44}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000005c0)="5f7195fcdff882525744ad8b9e90896a886ca7468a700c6162f6d734c17cf854ddafb5060546d04315359af542517186a5166b3fef6b3069bf9e69d578449c7e1afb5e2f96ada8726f75f261651b824e7b39358b2a57f502e8d6872ea11700f6cbdb689408d26efc0d58f08b70d11b9b777a95", 0x73) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000640)) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000680)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xe422, 0x7, {{0x10, 0x4, 0x0, 0x3b, 0x40, 0x68, 0x0, 0x1f, 0x4, 0x0, @rand_addr=0x64010100, @loopback, {[@rr={0x7, 0x13, 0x12, [@loopback, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x4f, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) socketpair(0x28, 0x1, 0x2, &(0x7f0000000a40)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000bc0)={'nat\x00', 0x0, 0x4, 0xdf, [0x8, 0x9, 0x3, 0x9, 0x2, 0x9], 0x3, &(0x7f0000000a80)=[{}, {}, {}], &(0x7f0000000ac0)=""/223}, &(0x7f0000000c40)=0x78) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r6 = memfd_secret(0x80000) accept4$inet6(r6, &(0x7f0000000c80)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000cc0)=0x1c, 0x80000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000dc0)={0x7, 'veth0_virt_wifi\x00', {0x6}, 0x1}) [ 704.404061] FAULT_INJECTION: forcing a failure. [ 704.404061] name failslab, interval 1, probability 0, space 0, times 0 [ 704.405283] CPU: 1 PID: 6856 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.406308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.407526] Call Trace: [ 704.407801] [ 704.408035] dump_stack_lvl+0x8b/0xb3 [ 704.408464] should_fail.cold+0x5/0xa [ 704.408875] ? apply_wqattrs_prepare+0xab/0x880 [ 704.409382] should_failslab+0x5/0x10 [ 704.409804] __kmalloc+0x72/0x440 [ 704.410186] apply_wqattrs_prepare+0xab/0x880 [ 704.410666] ? is_kernel_percpu_address+0xe6/0x110 [ 704.411192] apply_workqueue_attrs_locked+0xc1/0x140 [ 704.411736] alloc_workqueue+0xb1a/0xeb0 [ 704.412174] ? do_raw_spin_unlock+0x4f/0x210 [ 704.412653] ? _raw_spin_unlock+0x24/0x40 [ 704.413141] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.413686] ? __fget_files+0x28d/0x470 [ 704.414113] ? loop_configure+0x62b/0x1950 [ 704.414570] loop_configure+0x6ec/0x1950 [ 704.415009] ? putname+0xfe/0x140 [ 704.415382] lo_ioctl+0x782/0x1860 [ 704.415768] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.416287] ? loop_set_status_old+0x1b0/0x1b0 [ 704.416782] ? fsnotify+0xb4f/0x1250 [ 704.417196] ? avc_ss_reset+0x180/0x180 [ 704.417626] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.418136] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.418629] ? lock_acquire+0x41c/0x4d0 [ 704.419075] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.419567] ? lock_release+0x505/0x6f0 [ 704.420014] ? find_and_remove_object+0xe4/0x120 [ 704.420515] ? __delete_object+0xb3/0x100 [ 704.420987] ? lock_downgrade+0x6d0/0x6d0 [ 704.421420] ? rwlock_bug.part.0+0x90/0x90 [ 704.421914] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.422455] ? selinux_inode_getsecctx+0x90/0x90 [ 704.422988] ? loop_set_status_old+0x1b0/0x1b0 [ 704.423497] blkdev_ioctl+0x362/0x7f0 [ 704.423917] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.424442] ? __x64_sys_ioctl+0x97/0x210 [ 704.424910] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.425519] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.426024] __x64_sys_ioctl+0x196/0x210 [ 704.426478] do_syscall_64+0x3b/0x90 [ 704.426901] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.427472] RIP: 0033:0x7f9aebdc68d7 [ 704.427884] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.429953] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.430806] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 704.431597] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.432383] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.433177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.433981] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 704.434777] [ 704.438393] FAULT_INJECTION: forcing a failure. [ 704.438393] name failslab, interval 1, probability 0, space 0, times 0 [ 704.439654] CPU: 1 PID: 6865 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.440723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.441991] Call Trace: [ 704.442279] [ 704.442524] dump_stack_lvl+0x8b/0xb3 [ 704.442953] should_fail.cold+0x5/0xa [ 704.443136] FAULT_INJECTION: forcing a failure. [ 704.443136] name failslab, interval 1, probability 0, space 0, times 0 [ 704.443379] ? create_object.isra.0+0x3a/0xa20 [ 704.443398] should_failslab+0x5/0x10 [ 704.443408] kmem_cache_alloc+0x5b/0x480 [ 704.447094] create_object.isra.0+0x3a/0xa20 [ 704.447596] ? kasan_unpoison+0x23/0x50 [ 704.448042] kmem_cache_alloc+0x239/0x480 [ 704.448483] getname_flags.part.0+0x50/0x4f0 [ 704.448986] getname+0x8e/0xd0 [ 704.449325] do_sys_openat2+0xf5/0x4d0 [ 704.449779] ? build_open_flags+0x6f0/0x6f0 [ 704.450251] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.450775] ? lock_release+0x505/0x6f0 [ 704.451212] ? do_syscall_64+0x3b/0x90 [ 704.451644] __x64_sys_openat+0x13f/0x1f0 [ 704.452099] ? __x64_sys_open+0x1c0/0x1c0 [ 704.452560] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 704.453107] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 704.453699] ? syscall_enter_from_user_mode+0x1d/0x50 [ 704.454263] do_syscall_64+0x3b/0x90 [ 704.454674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.455241] RIP: 0033:0x7f432f56ea04 [ 704.455640] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 704.457661] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 704.458495] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 704.459274] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 704.460052] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 704.460831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 704.461624] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 704.462404] [ 704.462656] CPU: 0 PID: 6868 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.464678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.467064] Call Trace: [ 704.467601] [ 704.468068] dump_stack_lvl+0x8b/0xb3 [ 704.468881] should_fail.cold+0x5/0xa [ 704.469697] ? alloc_workqueue_attrs+0x38/0x80 [ 704.470669] should_failslab+0x5/0x10 [ 704.471467] kmem_cache_alloc_trace+0x55/0x3c0 [ 704.472434] alloc_workqueue_attrs+0x38/0x80 [ 704.473367] alloc_workqueue+0x939/0xeb0 [ 704.474251] ? do_raw_spin_unlock+0x4f/0x210 [ 704.475182] ? _raw_spin_unlock+0x24/0x40 [ 704.476061] ? bd_prepare_to_claim+0x164/0x300 [ 704.477036] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.478113] ? __fget_files+0x28d/0x470 [ 704.478955] ? loop_configure+0x62b/0x1950 [ 704.479853] loop_configure+0x6ec/0x1950 [ 704.480720] ? putname+0xfe/0x140 [ 704.481464] lo_ioctl+0x782/0x1860 [ 704.482236] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.483268] ? loop_set_status_old+0x1b0/0x1b0 [ 704.484237] ? fsnotify+0xb4f/0x1250 [ 704.485023] ? avc_ss_reset+0x180/0x180 [ 704.485882] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.486846] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.487842] ? lock_acquire+0x41c/0x4d0 [ 704.488679] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.489697] ? lock_release+0x505/0x6f0 [ 704.490537] ? find_and_remove_object+0xe4/0x120 [ 704.491542] ? __delete_object+0xb3/0x100 [ 704.492077] FAULT_INJECTION: forcing a failure. [ 704.492077] name failslab, interval 1, probability 0, space 0, times 0 [ 704.492423] ? lock_downgrade+0x6d0/0x6d0 [ 704.494498] ? rwlock_bug.part.0+0x90/0x90 [ 704.495396] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.496441] ? selinux_inode_getsecctx+0x90/0x90 [ 704.497452] ? loop_set_status_old+0x1b0/0x1b0 [ 704.498445] blkdev_ioctl+0x362/0x7f0 [ 704.499249] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.500253] ? __x64_sys_ioctl+0x97/0x210 [ 704.501128] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.502312] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.503311] __x64_sys_ioctl+0x196/0x210 [ 704.504168] do_syscall_64+0x3b/0x90 [ 704.504963] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.506066] RIP: 0033:0x7faf15eb38d7 [ 704.506845] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.510726] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.512320] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 704.513824] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.515322] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.516820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.518336] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 704.519846] [ 704.520332] CPU: 1 PID: 6869 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.521409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.522595] Call Trace: [ 704.522879] [ 704.523133] dump_stack_lvl+0x8b/0xb3 [ 704.523568] should_fail.cold+0x5/0xa [ 704.523991] ? create_object.isra.0+0x3a/0xa20 [ 704.524501] should_failslab+0x5/0x10 [ 704.524897] kmem_cache_alloc+0x5b/0x480 [ 704.525357] ? do_raw_spin_unlock+0x4f/0x210 [ 704.525835] create_object.isra.0+0x3a/0xa20 [ 704.526335] ? kasan_unpoison+0x23/0x50 [ 704.526762] __kmalloc+0x25b/0x440 [ 704.527166] apply_wqattrs_prepare+0xab/0x880 [ 704.527651] apply_workqueue_attrs_locked+0xc1/0x140 [ 704.528231] alloc_workqueue+0xb1a/0xeb0 [ 704.528657] ? do_raw_spin_unlock+0x4f/0x210 [ 704.529151] ? _raw_spin_unlock+0x24/0x40 [ 704.529586] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.530152] ? __fget_files+0x28d/0x470 [ 704.530571] ? loop_configure+0x62b/0x1950 [ 704.531048] loop_configure+0x6ec/0x1950 [ 704.531478] ? putname+0xfe/0x140 [ 704.531868] lo_ioctl+0x782/0x1860 [ 704.532240] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.532789] ? loop_set_status_old+0x1b0/0x1b0 [ 704.533293] ? fsnotify+0xb4f/0x1250 [ 704.533718] ? avc_ss_reset+0x180/0x180 [ 704.534170] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.534681] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.535196] ? lock_acquire+0x41c/0x4d0 [ 704.535643] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.536167] ? lock_release+0x505/0x6f0 [ 704.536612] ? find_and_remove_object+0xe4/0x120 [ 704.537140] ? __delete_object+0xb3/0x100 [ 704.537616] ? lock_downgrade+0x6d0/0x6d0 [ 704.538078] ? rwlock_bug.part.0+0x90/0x90 [ 704.538555] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.539079] ? selinux_inode_getsecctx+0x90/0x90 [ 704.539612] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.540136] ? loop_set_status_old+0x1b0/0x1b0 [ 704.540658] blkdev_ioctl+0x362/0x7f0 [ 704.541076] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.541615] ? __x64_sys_ioctl+0x97/0x210 [ 704.542074] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.542682] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.543207] __x64_sys_ioctl+0x196/0x210 [ 704.543661] do_syscall_64+0x3b/0x90 [ 704.544082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.544666] RIP: 0033:0x7f22ed51d8d7 [ 704.545077] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.547128] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.547973] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 704.548755] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.549553] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.550359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.551147] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 704.551931] 08:05:08 executing program 1: ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0xff, 0x7, 0x0, 0x1000, 0x5}) r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/netfilter\x00') ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$FIONCLEX(r1, 0x5450) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r4, 0x400, 0x1) clone3(&(0x7f00000005c0)={0x200000000, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000440), {0x20}, &(0x7f0000000480)=""/24, 0x18, &(0x7f00000004c0)=""/171, &(0x7f0000000580)=[r0, r0, 0xffffffffffffffff, r0, r0], 0x5, {r1}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="ffff00002e2f66696c653000"]) mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) r6 = fork() ptrace$setopts(0x4206, r6, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) tkill(r6, 0x9) wait4(r6, &(0x7f0000000000), 0x20000000, &(0x7f00000006c0)) clone3(&(0x7f00000002c0)={0x26002080, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x13}, &(0x7f0000000340)=""/82, 0x52, &(0x7f0000000200)=""/26, &(0x7f0000000280)=[r6], 0x1, {r3}}, 0x58) 08:05:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 32) [ 704.596926] FAULT_INJECTION: forcing a failure. [ 704.596926] name failslab, interval 1, probability 0, space 0, times 0 [ 704.598236] CPU: 1 PID: 6884 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.599293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.600541] Call Trace: [ 704.600822] [ 704.601065] dump_stack_lvl+0x8b/0xb3 [ 704.601492] should_fail.cold+0x5/0xa [ 704.601938] ? create_object.isra.0+0x3a/0xa20 [ 704.602449] should_failslab+0x5/0x10 [ 704.602867] kmem_cache_alloc+0x5b/0x480 [ 704.603318] create_object.isra.0+0x3a/0xa20 [ 704.603809] ? kasan_unpoison+0x23/0x50 [ 704.604253] __kmalloc+0x25b/0x440 [ 704.604650] apply_wqattrs_prepare+0xab/0x880 [ 704.605150] ? is_kernel_percpu_address+0xe6/0x110 [ 704.605684] apply_workqueue_attrs_locked+0xc1/0x140 [ 704.606247] alloc_workqueue+0xb1a/0xeb0 [ 704.606709] ? do_raw_spin_unlock+0x4f/0x210 [ 704.607193] ? _raw_spin_unlock+0x24/0x40 [ 704.607654] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.608207] ? __fget_files+0x28d/0x470 [ 704.608643] ? loop_configure+0x62b/0x1950 [ 704.609109] loop_configure+0x6ec/0x1950 [ 704.609564] ? putname+0xfe/0x140 [ 704.609961] lo_ioctl+0x782/0x1860 [ 704.610351] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.610885] ? loop_set_status_old+0x1b0/0x1b0 [ 704.611385] ? fsnotify+0xb4f/0x1250 [ 704.611791] ? avc_ss_reset+0x180/0x180 [ 704.612230] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.612730] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.613246] ? lock_acquire+0x41c/0x4d0 [ 704.613695] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.614217] ? lock_release+0x505/0x6f0 [ 704.614653] ? find_and_remove_object+0xe4/0x120 [ 704.615177] ? __delete_object+0xb3/0x100 [ 704.615634] ? lock_downgrade+0x6d0/0x6d0 [ 704.616091] ? rwlock_bug.part.0+0x90/0x90 [ 704.616565] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.617094] ? selinux_inode_getsecctx+0x90/0x90 [ 704.617637] ? loop_set_status_old+0x1b0/0x1b0 [ 704.618140] blkdev_ioctl+0x362/0x7f0 [ 704.618567] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.619092] ? __x64_sys_ioctl+0x97/0x210 [ 704.619552] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.620159] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.620687] __x64_sys_ioctl+0x196/0x210 [ 704.621130] do_syscall_64+0x3b/0x90 [ 704.621554] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.622131] RIP: 0033:0x7f9aebdc68d7 [ 704.622541] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.624521] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.625355] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 704.626152] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.626938] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.627723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.628502] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 704.629298] 08:05:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6c9, r1, &(0x7f0000000000)="64fa56483c2ea9f573aa28a2662ad792f08f58676e59a20959530bfc7b064fd383f9ae19896483c6a9b053e95e9047c7b539c67461d4ced73e7c2cf76e2826ef0cff4e9134328d99510597d56d14a8c590d80e6e5189faf9537b4bd4f167306620c05c390924c020fc58c3ee2b56032c5d2bc15ded1cd5a0e27182fad6ad583fc3e762d330b884673be5326e6ae6e0259d2b7f077510150fbbe794a77301ef548dc7dee08d3322e632fd8c46b86fa7e0f37ed1d6b8e80b4d96573aa14df03d6e9d8258616075c3f78f44320ed837217b50f25d665c01a72cef3ab668b4d2", 0xde, 0x5, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800, r5, &(0x7f0000000180)="e654b441c25bdfeefcc3858834bb93e923c437bb2678edf6bf8d8acb6966dd69dc8634d10fddbc0151179223971976242ccd53e5dc870ba68041a42bc852", 0x3e, 0x931, 0x0, 0x1, r0}]) lseek(r0, 0x0, 0x4) [ 704.634650] ISOFS: Unable to identify CD-ROM format. [ 704.645529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:05:08 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="e1bfd893691c3decbc5da7137b6b6b49942b16a598525f96e23a3587e42f9f69277bc51f3e42fad8f1562ef743a2b72f865e48490ffe11e7a43a04f775ea5c057ffffee08c83ca80bf7b90673caf3ddccf2eee076a2bfdf1fc88"], 0x1c}}, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x7) mount(&(0x7f0000000500)=ANY=[@ANYBLOB="2f940d2f2f"], &(0x7f0000000080)='./file0\x00', 0x0, 0x1005085, 0x0) [ 704.675170] loop5: detected capacity change from 0 to 128 [ 704.689522] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:05:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 16) 08:05:08 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x10, 0x0, 0x2) write$binfmt_aout(r2, &(0x7f0000000140)={{0xcc, 0x4, 0xe8, 0x110, 0x25c, 0x1, 0x337, 0x7}, "af5a49a9771751490ed8d9b4405586829b2341f310133c2cef4a6f192acf81f5453e2556558c0d5ac0e8b0a9ae7eef27aede1878f7e27d7490671b614b8d38c245b288948c8580aaecac9e3c72f9f0bd15801b17d2bb545ad56e739081b32e2c575d841cac156a0d344bb0cabd5bf512857fde096ed256037c44a660ac8497d245966947e0182b46462ab597eaa53e677d45b25425ff99ae2a0c49346876a37ea450bf40c8a9547e3b9a91018fad33c9242d628b3785d33bdc629b0a79ed1c531b03d96be817b3b761ac425dc1bd01439355163732abc56252b2902a07d1371e8ec440471a333b5d76fb9d113b8c0ffd64917c77493965"}, 0x117) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(r3, &(0x7f0000000080)='./file1\x00', 0x103000, 0x100) lseek(r1, 0x0, 0x4) lseek(r1, 0x80, 0x1) [ 704.704713] ISOFS: Unable to identify CD-ROM format. 08:05:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 28) 08:05:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 33) [ 704.736328] FAULT_INJECTION: forcing a failure. [ 704.736328] name failslab, interval 1, probability 0, space 0, times 0 [ 704.737582] CPU: 1 PID: 6896 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.738617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.739874] Call Trace: [ 704.740155] [ 704.740400] dump_stack_lvl+0x8b/0xb3 [ 704.740829] should_fail.cold+0x5/0xa [ 704.741250] ? create_object.isra.0+0x3a/0xa20 [ 704.741781] should_failslab+0x5/0x10 [ 704.742200] kmem_cache_alloc+0x5b/0x480 [ 704.742650] create_object.isra.0+0x3a/0xa20 [ 704.743138] ? kasan_unpoison+0x23/0x50 [ 704.743584] kmem_cache_alloc_trace+0x22e/0x3c0 [ 704.744098] alloc_workqueue_attrs+0x38/0x80 [ 704.744588] alloc_workqueue+0x939/0xeb0 [ 704.745028] ? do_raw_spin_unlock+0x4f/0x210 [ 704.745521] ? _raw_spin_unlock+0x24/0x40 [ 704.745994] ? bd_prepare_to_claim+0x164/0x300 [ 704.746504] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.747058] ? __fget_files+0x28d/0x470 [ 704.747494] ? loop_configure+0x62b/0x1950 [ 704.747959] loop_configure+0x6ec/0x1950 [ 704.748412] ? putname+0xfe/0x140 [ 704.748803] lo_ioctl+0x782/0x1860 [ 704.749194] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.749743] ? loop_set_status_old+0x1b0/0x1b0 [ 704.750247] ? fsnotify+0xb4f/0x1250 [ 704.750652] ? avc_ss_reset+0x180/0x180 [ 704.751095] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.751597] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.752117] ? lock_acquire+0x41c/0x4d0 [ 704.752556] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.753085] ? lock_release+0x505/0x6f0 [ 704.753518] ? find_and_remove_object+0xe4/0x120 [ 704.754064] ? __delete_object+0xb3/0x100 [ 704.754523] ? lock_downgrade+0x6d0/0x6d0 [ 704.754986] ? rwlock_bug.part.0+0x90/0x90 [ 704.755455] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.755992] ? selinux_inode_getsecctx+0x90/0x90 [ 704.756517] ? loop_set_status_old+0x1b0/0x1b0 [ 704.757030] blkdev_ioctl+0x362/0x7f0 [ 704.757445] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.757974] ? __x64_sys_ioctl+0x97/0x210 [ 704.758361] FAULT_INJECTION: forcing a failure. [ 704.758361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.758431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.761435] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.761972] __x64_sys_ioctl+0x196/0x210 [ 704.762416] do_syscall_64+0x3b/0x90 [ 704.762828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.763401] RIP: 0033:0x7faf15eb38d7 [ 704.763808] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.765801] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.766637] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 704.767420] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.768214] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.769011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.769808] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 704.770603] [ 704.770862] CPU: 0 PID: 6901 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.772870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.775245] Call Trace: [ 704.775253] [ 704.775261] dump_stack_lvl+0x8b/0xb3 [ 704.775304] should_fail.cold+0x5/0xa [ 704.775338] strncpy_from_user+0x34/0x3d0 [ 704.775379] getname_flags.part.0+0x95/0x4f0 [ 704.775420] getname+0x8e/0xd0 [ 704.775453] do_sys_openat2+0xf5/0x4d0 [ 704.775481] ? build_open_flags+0x6f0/0x6f0 [ 704.775508] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.775537] ? lock_release+0x505/0x6f0 [ 704.775564] ? do_syscall_64+0x3b/0x90 [ 704.775602] __x64_sys_openat+0x13f/0x1f0 [ 704.775628] ? __x64_sys_open+0x1c0/0x1c0 [ 704.775655] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 704.775685] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 704.775715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 704.775744] do_syscall_64+0x3b/0x90 [ 704.775777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.775803] RIP: 0033:0x7f432f56ea04 [ 704.775821] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 704.775844] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 704.775867] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 704.775884] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 704.775899] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 704.775915] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 704.775929] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 704.775953] [ 704.789294] FAULT_INJECTION: forcing a failure. [ 704.789294] name failslab, interval 1, probability 0, space 0, times 0 [ 704.789312] CPU: 1 PID: 6906 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 704.789325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 704.789333] Call Trace: [ 704.789336] [ 704.789341] dump_stack_lvl+0x8b/0xb3 [ 704.789359] should_fail.cold+0x5/0xa [ 704.789375] ? alloc_workqueue_attrs+0x38/0x80 [ 704.789392] should_failslab+0x5/0x10 [ 704.789403] kmem_cache_alloc_trace+0x55/0x3c0 [ 704.789418] alloc_workqueue_attrs+0x38/0x80 [ 704.789434] apply_wqattrs_prepare+0xb3/0x880 [ 704.789450] ? is_kernel_percpu_address+0xe6/0x110 [ 704.789471] apply_workqueue_attrs_locked+0xc1/0x140 [ 704.789488] alloc_workqueue+0xb1a/0xeb0 [ 704.789503] ? do_raw_spin_unlock+0x4f/0x210 [ 704.789518] ? _raw_spin_unlock+0x24/0x40 [ 704.789536] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 704.789555] ? __fget_files+0x28d/0x470 [ 704.789568] ? loop_configure+0x62b/0x1950 [ 704.789583] loop_configure+0x6ec/0x1950 [ 704.789608] ? putname+0xfe/0x140 [ 704.789626] lo_ioctl+0x782/0x1860 [ 704.789639] ? avc_has_extended_perms+0x7e8/0xeb0 [ 704.789659] ? loop_set_status_old+0x1b0/0x1b0 [ 704.789673] ? fsnotify+0xb4f/0x1250 [ 704.789688] ? avc_ss_reset+0x180/0x180 [ 704.789707] ? fsnotify_first_mark+0x1f0/0x1f0 [ 704.789719] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.789732] ? lock_acquire+0x41c/0x4d0 [ 704.789745] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.789758] ? lock_release+0x505/0x6f0 [ 704.789770] ? find_and_remove_object+0xe4/0x120 [ 704.789787] ? __delete_object+0xb3/0x100 [ 704.789804] ? lock_downgrade+0x6d0/0x6d0 [ 704.789817] ? rwlock_bug.part.0+0x90/0x90 [ 704.789831] ? rcu_read_lock_sched_held+0xd/0x70 [ 704.789851] ? selinux_inode_getsecctx+0x90/0x90 [ 704.789869] ? loop_set_status_old+0x1b0/0x1b0 [ 704.789884] blkdev_ioctl+0x362/0x7f0 [ 704.789894] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.789905] ? __x64_sys_ioctl+0x97/0x210 [ 704.789917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 704.789933] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 704.789944] __x64_sys_ioctl+0x196/0x210 [ 704.789957] do_syscall_64+0x3b/0x90 [ 704.789974] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 704.789985] RIP: 0033:0x7f9aebdc68d7 [ 704.789994] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 704.790006] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.790017] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 704.790025] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 704.790032] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 704.790040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 704.790046] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 704.790058] [ 704.820056] loop0: detected capacity change from 0 to 128 [ 704.889526] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:05:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 29) 08:05:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 17) 08:05:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 29) 08:05:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6c9, r1, &(0x7f0000000000)="64fa56483c2ea9f573aa28a2662ad792f08f58676e59a20959530bfc7b064fd383f9ae19896483c6a9b053e95e9047c7b539c67461d4ced73e7c2cf76e2826ef0cff4e9134328d99510597d56d14a8c590d80e6e5189faf9537b4bd4f167306620c05c390924c020fc58c3ee2b56032c5d2bc15ded1cd5a0e27182fad6ad583fc3e762d330b884673be5326e6ae6e0259d2b7f077510150fbbe794a77301ef548dc7dee08d3322e632fd8c46b86fa7e0f37ed1d6b8e80b4d96573aa14df03d6e9d8258616075c3f78f44320ed837217b50f25d665c01a72cef3ab668b4d2", 0xde, 0x5, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800, r5, &(0x7f0000000180)="e654b441c25bdfeefcc3858834bb93e923c437bb2678edf6bf8d8acb6966dd69dc8634d10fddbc0151179223971976242ccd53e5dc870ba68041a42bc852", 0x3e, 0x931, 0x0, 0x1, r0}]) lseek(r0, 0x0, 0x4) 08:05:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 34) 08:05:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6c9, r1, &(0x7f0000000000)="64fa56483c2ea9f573aa28a2662ad792f08f58676e59a20959530bfc7b064fd383f9ae19896483c6a9b053e95e9047c7b539c67461d4ced73e7c2cf76e2826ef0cff4e9134328d99510597d56d14a8c590d80e6e5189faf9537b4bd4f167306620c05c390924c020fc58c3ee2b56032c5d2bc15ded1cd5a0e27182fad6ad583fc3e762d330b884673be5326e6ae6e0259d2b7f077510150fbbe794a77301ef548dc7dee08d3322e632fd8c46b86fa7e0f37ed1d6b8e80b4d96573aa14df03d6e9d8258616075c3f78f44320ed837217b50f25d665c01a72cef3ab668b4d2", 0xde, 0x5, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800, r5, &(0x7f0000000180)="e654b441c25bdfeefcc3858834bb93e923c437bb2678edf6bf8d8acb6966dd69dc8634d10fddbc0151179223971976242ccd53e5dc870ba68041a42bc852", 0x3e, 0x931, 0x0, 0x1, r0}]) lseek(r0, 0x0, 0x4) 08:05:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6c9, r1, &(0x7f0000000000)="64fa56483c2ea9f573aa28a2662ad792f08f58676e59a20959530bfc7b064fd383f9ae19896483c6a9b053e95e9047c7b539c67461d4ced73e7c2cf76e2826ef0cff4e9134328d99510597d56d14a8c590d80e6e5189faf9537b4bd4f167306620c05c390924c020fc58c3ee2b56032c5d2bc15ded1cd5a0e27182fad6ad583fc3e762d330b884673be5326e6ae6e0259d2b7f077510150fbbe794a77301ef548dc7dee08d3322e632fd8c46b86fa7e0f37ed1d6b8e80b4d96573aa14df03d6e9d8258616075c3f78f44320ed837217b50f25d665c01a72cef3ab668b4d2", 0xde, 0x5, 0x0, 0x0, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800, r5, &(0x7f0000000180)="e654b441c25bdfeefcc3858834bb93e923c437bb2678edf6bf8d8acb6966dd69dc8634d10fddbc0151179223971976242ccd53e5dc870ba68041a42bc852", 0x3e, 0x931, 0x0, 0x1, r0}]) lseek(r0, 0x0, 0x4) 08:05:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) [ 717.188467] FAULT_INJECTION: forcing a failure. [ 717.188467] name failslab, interval 1, probability 0, space 0, times 0 [ 717.191331] CPU: 0 PID: 6919 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.192115] FAULT_INJECTION: forcing a failure. [ 717.192115] name failslab, interval 1, probability 0, space 0, times 0 [ 717.193393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.193412] Call Trace: [ 717.193420] [ 717.197997] dump_stack_lvl+0x8b/0xb3 [ 717.198830] should_fail.cold+0x5/0xa [ 717.199670] should_failslab+0x5/0x10 [ 717.200493] __kmalloc_track_caller+0x79/0x420 [ 717.201489] ? kasprintf+0xbb/0xf0 [ 717.202296] kvasprintf+0xb5/0x150 [ 717.203069] ? bust_spinlocks+0xe0/0xe0 [ 717.203951] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.204978] ? preempt_count_add+0x74/0x140 [ 717.205936] ? __is_module_percpu_address+0x237/0x300 [ 717.207057] kasprintf+0xbb/0xf0 [ 717.207802] ? kvasprintf_const+0x190/0x190 [ 717.208729] ? save_trace+0xd00/0xd00 [ 717.209543] ? lockdep_init_map_type+0x21a/0x7e0 [ 717.210562] alloc_workqueue+0x408/0xeb0 [ 717.211452] ? do_raw_spin_unlock+0x4f/0x210 [ 717.212407] ? _raw_spin_unlock+0x24/0x40 [ 717.213320] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.214419] ? __fget_files+0x28d/0x470 [ 717.215269] ? loop_configure+0x62b/0x1950 [ 717.216207] loop_configure+0x6ec/0x1950 [ 717.217075] ? putname+0xfe/0x140 [ 717.217845] lo_ioctl+0x782/0x1860 [ 717.218617] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.219694] ? loop_set_status_old+0x1b0/0x1b0 [ 717.220685] ? fsnotify+0xb4f/0x1250 [ 717.221483] ? avc_ss_reset+0x180/0x180 [ 717.222377] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.223373] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.224397] ? lock_acquire+0x41c/0x4d0 [ 717.225246] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.226288] ? lock_release+0x505/0x6f0 [ 717.227137] ? find_and_remove_object+0xe4/0x120 [ 717.228191] ? __delete_object+0xb3/0x100 [ 717.229086] ? lock_downgrade+0x6d0/0x6d0 [ 717.229978] ? rwlock_bug.part.0+0x90/0x90 [ 717.230880] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.231905] ? selinux_inode_getsecctx+0x90/0x90 [ 717.232926] ? loop_set_status_old+0x1b0/0x1b0 [ 717.234108] blkdev_ioctl+0x362/0x7f0 [ 717.234963] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.235963] ? __x64_sys_ioctl+0x97/0x210 [ 717.236853] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.238038] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.239047] __x64_sys_ioctl+0x196/0x210 [ 717.239928] do_syscall_64+0x3b/0x90 [ 717.240790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.242224] RIP: 0033:0x7faf15eb38d7 [ 717.243234] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.247524] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.249147] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 717.250677] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.252198] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.253749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.255296] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 717.256829] [ 717.257334] CPU: 1 PID: 6921 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.258315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.259437] Call Trace: [ 717.259694] [ 717.259913] dump_stack_lvl+0x8b/0xb3 [ 717.260303] should_fail.cold+0x5/0xa [ 717.260700] ? create_object.isra.0+0x3a/0xa20 [ 717.261173] should_failslab+0x5/0x10 [ 717.261550] kmem_cache_alloc+0x5b/0x480 [ 717.261966] create_object.isra.0+0x3a/0xa20 [ 717.262411] ? kasan_unpoison+0x23/0x50 [ 717.262818] kmem_cache_alloc_trace+0x22e/0x3c0 [ 717.263279] alloc_workqueue_attrs+0x38/0x80 [ 717.263719] apply_wqattrs_prepare+0xb3/0x880 [ 717.264165] ? is_kernel_percpu_address+0xe6/0x110 [ 717.264742] apply_workqueue_attrs_locked+0xc1/0x140 [ 717.265276] alloc_workqueue+0xb1a/0xeb0 [ 717.265688] ? do_raw_spin_unlock+0x4f/0x210 [ 717.266165] ? _raw_spin_unlock+0x24/0x40 [ 717.266601] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.267137] ? __fget_files+0x28d/0x470 [ 717.267549] ? loop_configure+0x62b/0x1950 [ 717.267982] loop_configure+0x6ec/0x1950 [ 717.268385] ? putname+0xfe/0x140 [ 717.268744] lo_ioctl+0x782/0x1860 [ 717.269093] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.269352] FAULT_INJECTION: forcing a failure. [ 717.269352] name failslab, interval 1, probability 0, space 0, times 0 [ 717.269584] ? loop_set_status_old+0x1b0/0x1b0 [ 717.272383] ? fsnotify+0xb4f/0x1250 [ 717.272761] ? avc_ss_reset+0x180/0x180 [ 717.273165] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.273666] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.274147] ? lock_acquire+0x41c/0x4d0 [ 717.274541] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.275056] ? lock_release+0x505/0x6f0 [ 717.275445] ? find_and_remove_object+0xe4/0x120 [ 717.275973] ? __delete_object+0xb3/0x100 [ 717.276390] ? lock_downgrade+0x6d0/0x6d0 [ 717.276854] ? rwlock_bug.part.0+0x90/0x90 [ 717.277272] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.277814] ? selinux_inode_getsecctx+0x90/0x90 [ 717.278342] ? loop_set_status_old+0x1b0/0x1b0 [ 717.278845] blkdev_ioctl+0x362/0x7f0 [ 717.279264] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.279778] ? __x64_sys_ioctl+0x97/0x210 [ 717.280236] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.280842] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.281359] __x64_sys_ioctl+0x196/0x210 [ 717.281818] do_syscall_64+0x3b/0x90 [ 717.282199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.282782] RIP: 0033:0x7f9aebdc68d7 [ 717.283182] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.285197] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.286035] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 717.286808] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.287596] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.288373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.289140] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 717.289933] [ 717.290185] CPU: 0 PID: 6923 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.292239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.294664] Call Trace: [ 717.295203] [ 717.295680] dump_stack_lvl+0x8b/0xb3 [ 717.296519] should_fail.cold+0x5/0xa [ 717.297345] ? __alloc_file+0x21/0x240 [ 717.298190] should_failslab+0x5/0x10 [ 717.298997] kmem_cache_alloc+0x5b/0x480 [ 717.299874] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.300900] __alloc_file+0x21/0x240 [ 717.301709] alloc_empty_file+0x6d/0x170 [ 717.302602] path_openat+0xe1/0x28a0 [ 717.303412] ? __is_insn_slot_addr+0x144/0x250 [ 717.304409] ? kernel_text_address+0x53/0xb0 [ 717.305365] ? path_lookupat+0x850/0x850 [ 717.306247] ? unwind_get_return_address+0x51/0x90 [ 717.306521] loop5: detected capacity change from 0 to 128 [ 717.307312] ? create_prof_cpu_mask+0x20/0x20 [ 717.308895] ? arch_stack_walk+0x99/0xf0 [ 717.309776] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.310805] ? lock_acquire+0x41c/0x4d0 [ 717.311572] FAULT_INJECTION: forcing a failure. [ 717.311572] name failslab, interval 1, probability 0, space 0, times 0 [ 717.311665] do_filp_open+0x1aa/0x400 [ 717.313704] ? may_open_dev+0xf0/0xf0 [ 717.314540] ? lock_release+0x505/0x6f0 [ 717.315391] ? alloc_fd+0x2f0/0x670 [ 717.316159] ? lock_downgrade+0x6d0/0x6d0 [ 717.317055] ? rwlock_bug.part.0+0x90/0x90 [ 717.317982] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 717.319152] ? _find_next_bit+0x1e5/0x260 [ 717.320037] ? _raw_spin_unlock+0x24/0x40 [ 717.320948] ? alloc_fd+0x2f0/0x670 [ 717.321735] do_sys_openat2+0x16d/0x4d0 [ 717.322612] ? build_open_flags+0x6f0/0x6f0 [ 717.323536] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.324555] ? lock_release+0x505/0x6f0 [ 717.325415] ? do_syscall_64+0x3b/0x90 [ 717.326271] __x64_sys_openat+0x13f/0x1f0 [ 717.327154] ? __x64_sys_open+0x1c0/0x1c0 [ 717.328039] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 717.329113] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 717.330295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 717.331416] do_syscall_64+0x3b/0x90 [ 717.332208] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.333326] RIP: 0033:0x7f432f56ea04 [ 717.334117] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 717.338057] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 717.339883] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 717.341437] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 717.342986] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 717.344903] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 717.346852] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 717.348499] [ 717.348990] CPU: 1 PID: 6925 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.350006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.351185] Call Trace: [ 717.351455] [ 717.351689] dump_stack_lvl+0x8b/0xb3 [ 717.352090] should_fail.cold+0x5/0xa [ 717.352487] ? alloc_workqueue_attrs+0x38/0x80 [ 717.352975] should_failslab+0x5/0x10 [ 717.353375] kmem_cache_alloc_trace+0x55/0x3c0 [ 717.353867] alloc_workqueue_attrs+0x38/0x80 [ 717.354335] apply_wqattrs_prepare+0xb3/0x880 [ 717.354817] ? is_kernel_percpu_address+0xe6/0x110 [ 717.355330] apply_workqueue_attrs_locked+0xc1/0x140 [ 717.355858] alloc_workqueue+0xb1a/0xeb0 [ 717.356281] ? do_raw_spin_unlock+0x4f/0x210 [ 717.356744] ? _raw_spin_unlock+0x24/0x40 [ 717.357195] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.357722] ? __fget_files+0x28d/0x470 [ 717.358156] ? loop_configure+0x62b/0x1950 [ 717.358598] loop_configure+0x6ec/0x1950 [ 717.359022] ? putname+0xfe/0x140 [ 717.359392] lo_ioctl+0x782/0x1860 [ 717.359757] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.360268] ? loop_set_status_old+0x1b0/0x1b0 [ 717.360747] ? fsnotify+0xb4f/0x1250 [ 717.361136] ? avc_ss_reset+0x180/0x180 [ 717.361558] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.362038] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.362534] ? lock_acquire+0x41c/0x4d0 [ 717.362956] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.363449] ? lock_release+0x505/0x6f0 [ 717.363869] ? find_and_remove_object+0xe4/0x120 [ 717.364365] ? __delete_object+0xb3/0x100 [ 717.364803] ? lock_downgrade+0x6d0/0x6d0 [ 717.365237] ? rwlock_bug.part.0+0x90/0x90 [ 717.365689] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.366206] ? selinux_inode_getsecctx+0x90/0x90 [ 717.366711] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.367199] ? loop_set_status_old+0x1b0/0x1b0 [ 717.367681] blkdev_ioctl+0x362/0x7f0 [ 717.368074] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.368573] ? __x64_sys_ioctl+0x97/0x210 [ 717.369005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.369585] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.370087] __x64_sys_ioctl+0x196/0x210 [ 717.370513] do_syscall_64+0x3b/0x90 [ 717.370907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.371451] RIP: 0033:0x7f22ed51d8d7 [ 717.371834] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.373738] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.374531] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 717.375274] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.376011] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.376744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.377477] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 717.378227] [ 717.386368] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 717.395398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 717.401198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.405074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:05:21 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x142, 0x280) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 35) [ 717.431975] FAULT_INJECTION: forcing a failure. [ 717.431975] name failslab, interval 1, probability 0, space 0, times 0 [ 717.433256] CPU: 1 PID: 6938 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.434253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.435449] Call Trace: [ 717.435718] [ 717.435951] dump_stack_lvl+0x8b/0xb3 [ 717.436360] should_fail.cold+0x5/0xa [ 717.436765] ? alloc_workqueue_attrs+0x38/0x80 [ 717.437248] should_failslab+0x5/0x10 [ 717.437647] kmem_cache_alloc_trace+0x55/0x3c0 [ 717.438145] alloc_workqueue_attrs+0x38/0x80 [ 717.438608] apply_wqattrs_prepare+0xbb/0x880 [ 717.439081] ? is_kernel_percpu_address+0xe6/0x110 [ 717.439604] apply_workqueue_attrs_locked+0xc1/0x140 [ 717.440135] alloc_workqueue+0xb1a/0xeb0 [ 717.440567] ? do_raw_spin_unlock+0x4f/0x210 [ 717.441041] ? _raw_spin_unlock+0x24/0x40 [ 717.441481] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.442014] ? __fget_files+0x28d/0x470 [ 717.442436] ? loop_configure+0x62b/0x1950 [ 717.442882] loop_configure+0x6ec/0x1950 [ 717.443308] ? putname+0xfe/0x140 [ 717.443676] lo_ioctl+0x782/0x1860 [ 717.444051] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.444558] ? loop_set_status_old+0x1b0/0x1b0 [ 717.445036] ? fsnotify+0xb4f/0x1250 [ 717.445432] ? avc_ss_reset+0x180/0x180 [ 717.445864] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.446336] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.446838] ? lock_acquire+0x41c/0x4d0 [ 717.447256] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.447751] ? lock_release+0x505/0x6f0 [ 717.448165] ? find_and_remove_object+0xe4/0x120 [ 717.448663] ? __delete_object+0xb3/0x100 [ 717.449105] ? lock_downgrade+0x6d0/0x6d0 [ 717.449536] ? rwlock_bug.part.0+0x90/0x90 [ 717.450006] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.450510] ? selinux_inode_getsecctx+0x90/0x90 [ 717.451018] ? loop_set_status_old+0x1b0/0x1b0 [ 717.451496] blkdev_ioctl+0x362/0x7f0 [ 717.451889] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.452376] ? __x64_sys_ioctl+0x97/0x210 [ 717.452806] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.453376] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.453872] __x64_sys_ioctl+0x196/0x210 [ 717.454294] do_syscall_64+0x3b/0x90 [ 717.454694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.455228] RIP: 0033:0x7f9aebdc68d7 [ 717.455610] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.457528] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.458341] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 717.459083] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.459813] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.460549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.461290] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 717.462030] 08:05:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:21 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc066}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) 08:05:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 30) [ 717.516098] FAULT_INJECTION: forcing a failure. [ 717.516098] name failslab, interval 1, probability 0, space 0, times 0 [ 717.517355] CPU: 1 PID: 6944 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.518365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.519545] Call Trace: [ 717.519814] [ 717.520053] dump_stack_lvl+0x8b/0xb3 [ 717.520481] should_fail.cold+0x5/0xa [ 717.520883] ? alloc_workqueue_attrs+0x38/0x80 [ 717.521351] should_failslab+0x5/0x10 [ 717.521760] kmem_cache_alloc_trace+0x55/0x3c0 [ 717.522255] alloc_workqueue_attrs+0x38/0x80 [ 717.522705] apply_wqattrs_prepare+0xb3/0x880 [ 717.523180] ? is_kernel_percpu_address+0xe6/0x110 [ 717.523714] apply_workqueue_attrs_locked+0xc1/0x140 [ 717.524228] alloc_workqueue+0xb1a/0xeb0 [ 717.524655] ? do_raw_spin_unlock+0x4f/0x210 [ 717.525120] ? _raw_spin_unlock+0x24/0x40 [ 717.525571] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.526101] ? __fget_files+0x28d/0x470 [ 717.526512] ? loop_configure+0x62b/0x1950 [ 717.526969] loop_configure+0x6ec/0x1950 [ 717.527387] ? putname+0xfe/0x140 [ 717.527768] lo_ioctl+0x782/0x1860 [ 717.528132] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.528644] ? loop_set_status_old+0x1b0/0x1b0 [ 717.529107] ? fsnotify+0xb4f/0x1250 [ 717.529498] ? avc_ss_reset+0x180/0x180 [ 717.529931] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.530408] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.530904] ? lock_acquire+0x41c/0x4d0 [ 717.531319] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.531808] ? lock_release+0x505/0x6f0 [ 717.532222] ? find_and_remove_object+0xe4/0x120 [ 717.532724] ? __delete_object+0xb3/0x100 [ 717.533167] ? lock_downgrade+0x6d0/0x6d0 [ 717.533587] ? rwlock_bug.part.0+0x90/0x90 [ 717.534056] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.534561] ? selinux_inode_getsecctx+0x90/0x90 [ 717.535043] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.535540] ? loop_set_status_old+0x1b0/0x1b0 [ 717.536015] blkdev_ioctl+0x362/0x7f0 [ 717.536414] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.536898] ? __x64_sys_ioctl+0x97/0x210 [ 717.537314] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.537872] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.538368] __x64_sys_ioctl+0x196/0x210 [ 717.538782] do_syscall_64+0x3b/0x90 [ 717.539176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.539679] RIP: 0033:0x7f22ed51d8d7 [ 717.540067] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.541851] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.542641] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 717.543385] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.544126] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.544866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.545620] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 717.546363] 08:05:21 executing program 6: sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'team_slave_1\x00'}}, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000000130001000000002e0000fce9000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000c00)=@un=@abs, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)="6f11337d", 0x4}], 0x1}}], 0x1, 0x0) 08:05:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 36) 08:05:21 executing program 7: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002140)=""/252, 0xfc, 0x1, &(0x7f0000000a80)=""/85, 0x55}, &(0x7f0000002280)=0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(r1, &(0x7f0000001dc0)='./file1\x00', 0x400000, 0x184) fcntl$setlease(r0, 0x400, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000800)=""/174, 0xae}, {&(0x7f0000000200)=""/144, 0x90}, {&(0x7f00000022c0)=""/115, 0x73}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000340)=""/15, 0xf}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/223, 0xdf}], 0x8, &(0x7f0000000700)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f00000020c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/183, 0xb7}, {&(0x7f0000001cc0)=""/236, 0xec}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/27, 0x1b}], 0x6, &(0x7f0000001ec0)}}], 0x3, 0x10001, &(0x7f0000002080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x10, 0x0, 0x2) lseek(r5, 0x0, 0x4) truncate(&(0x7f0000000000)='./file1\x00', 0x7) [ 717.590501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 717.599240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 717.603900] FAULT_INJECTION: forcing a failure. [ 717.603900] name failslab, interval 1, probability 0, space 0, times 0 [ 717.605145] CPU: 1 PID: 6954 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 717.606158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 717.607345] Call Trace: [ 717.607614] [ 717.607846] dump_stack_lvl+0x8b/0xb3 [ 717.608260] should_fail.cold+0x5/0xa [ 717.608659] ? create_object.isra.0+0x3a/0xa20 [ 717.609146] should_failslab+0x5/0x10 [ 717.609545] kmem_cache_alloc+0x5b/0x480 [ 717.609984] create_object.isra.0+0x3a/0xa20 [ 717.610457] ? kasan_unpoison+0x23/0x50 [ 717.610880] kmem_cache_alloc_trace+0x22e/0x3c0 [ 717.611369] alloc_workqueue_attrs+0x38/0x80 [ 717.611837] apply_wqattrs_prepare+0xbb/0x880 [ 717.612308] apply_workqueue_attrs_locked+0xc1/0x140 [ 717.612845] alloc_workqueue+0xb1a/0xeb0 [ 717.613271] ? do_raw_spin_unlock+0x4f/0x210 [ 717.613731] ? _raw_spin_unlock+0x24/0x40 [ 717.614174] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 717.614699] ? __fget_files+0x28d/0x470 [ 717.615119] ? loop_configure+0x62b/0x1950 [ 717.615560] loop_configure+0x6ec/0x1950 [ 717.615990] ? putname+0xfe/0x140 [ 717.616361] lo_ioctl+0x782/0x1860 [ 717.616735] ? avc_has_extended_perms+0x7e8/0xeb0 [ 717.617243] ? loop_set_status_old+0x1b0/0x1b0 [ 717.617728] ? fsnotify+0xb4f/0x1250 [ 717.618136] ? avc_ss_reset+0x180/0x180 [ 717.618560] ? fsnotify_first_mark+0x1f0/0x1f0 [ 717.619032] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.619526] ? lock_acquire+0x41c/0x4d0 [ 717.619939] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.620432] ? lock_release+0x505/0x6f0 [ 717.620850] ? find_and_remove_object+0xe4/0x120 [ 717.621349] ? __delete_object+0xb3/0x100 [ 717.621784] ? lock_downgrade+0x6d0/0x6d0 [ 717.622221] ? rwlock_bug.part.0+0x90/0x90 [ 717.622661] ? rcu_read_lock_sched_held+0xd/0x70 [ 717.623165] ? selinux_inode_getsecctx+0x90/0x90 [ 717.623659] ? loop_set_status_old+0x1b0/0x1b0 [ 717.624141] blkdev_ioctl+0x362/0x7f0 [ 717.624533] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.625025] ? __x64_sys_ioctl+0x97/0x210 [ 717.625454] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 717.626042] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 717.626531] __x64_sys_ioctl+0x196/0x210 [ 717.626953] do_syscall_64+0x3b/0x90 [ 717.627344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 717.627886] RIP: 0033:0x7f9aebdc68d7 [ 717.628271] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 717.630188] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.630979] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 717.631713] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 717.632451] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 717.633195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.633941] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 717.634686] [ 717.663295] loop5: detected capacity change from 0 to 128 [ 717.663602] loop0: detected capacity change from 0 to 128 [ 717.671951] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 717.680875] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:05:31 executing program 2: statx(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f00000001c0)) request_key(0x0, 0x0, 0x0, 0x0) r0 = request_key(0x0, &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0) request_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)='\\^^{}/-{\x00', 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x90) request_key(&(0x7f00000009c0)='rxrpc\x00', &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000a40)='/\xd1^+\xb5z/\x00', 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="0f", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0xfffffffffffffffb, 0x0) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000d40)={'syz', 0x2}, &(0x7f0000000d80)='/\xd1^+\xb5z/\x00', r2) request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\\^^{}/-{\x00', r0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x400002) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x90) 08:05:31 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x0, 0x2) 08:05:31 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, &(0x7f0000000040)="3f8ed604e0e69551dafbc34b25801f03f39ce7bbcfec7e9bf6e689fea33e489ee7160a2c7ca75976f2dc1aa00c10a78438056093b822", 0x36}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000140), 0x7fff, 0x200000) r7 = syz_open_dev$vcsa(&(0x7f0000000380), 0x9, 0x8800) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x2, r3, &(0x7f00000001c0)="94f1417343b94897399d11249e457b52ae1743e1288a82d3557c4507ca6c357e1cd7ac856e1ff4124ff17ef5ff8da3834745095dbf1618cb1caebac96a5607875810ddb8427d8adc773e2c6c2207dd486ed6fd918e08a93698a0ba1f266dc908fb115e815b96051e655f3214449fb4d86853caa2ba52f94ad0806af5adb1bca34e5caa7608bacc176ea7994f527460ae47e296a6fcbab2795b3516c4149b", 0x9e, 0x2, 0x0, 0x0, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x3ff, r6, &(0x7f0000000280)="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", 0xfb, 0x5b06, 0x0, 0x2, r7}]) 08:05:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000100)}, 0x8}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000003c0)=""/117, 0x75}, 0x8}, {{&(0x7f0000000440)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/205, 0xcd}, {&(0x7f0000000680)=""/162, 0xa2}], 0x4, &(0x7f0000000780)=""/202, 0xca}, 0x401}, {{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001a00)=""/238, 0xee}, 0x6}], 0x4, 0x40000000, &(0x7f0000001c00)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f0000000240)=0xe9) [ 727.312898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.318441] FAULT_INJECTION: forcing a failure. [ 727.318441] name failslab, interval 1, probability 0, space 0, times 0 [ 727.319631] CPU: 0 PID: 6977 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.320629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.321841] Call Trace: [ 727.322124] [ 727.322362] dump_stack_lvl+0x8b/0xb3 [ 727.322787] should_fail.cold+0x5/0xa [ 727.323193] ? alloc_unbound_pwq+0x4ad/0xd70 [ 727.323507] FAULT_INJECTION: forcing a failure. [ 727.323507] name failslab, interval 1, probability 0, space 0, times 0 [ 727.323667] should_failslab+0x5/0x10 [ 727.323681] kmem_cache_alloc_node+0x55/0x490 [ 727.323699] alloc_unbound_pwq+0x4ad/0xd70 [ 727.327572] apply_wqattrs_prepare+0x2a4/0x880 [ 727.328044] ? is_kernel_percpu_address+0xe6/0x110 [ 727.328571] apply_workqueue_attrs_locked+0xc1/0x140 [ 727.329117] alloc_workqueue+0xb1a/0xeb0 [ 727.329549] ? do_raw_spin_unlock+0x4f/0x210 [ 727.330027] ? _raw_spin_unlock+0x24/0x40 [ 727.330476] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.331013] ? __fget_files+0x28d/0x470 [ 727.331448] ? loop_configure+0x62b/0x1950 [ 727.331908] loop_configure+0x6ec/0x1950 [ 727.332341] ? putname+0xfe/0x140 [ 727.332725] lo_ioctl+0x782/0x1860 [ 727.333104] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.333610] ? loop_set_status_old+0x1b0/0x1b0 [ 727.334113] ? fsnotify+0xb4f/0x1250 [ 727.334520] ? avc_ss_reset+0x180/0x180 [ 727.334956] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.335448] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.335952] ? lock_acquire+0x41c/0x4d0 [ 727.336377] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.336876] ? lock_release+0x505/0x6f0 [ 727.337304] ? find_and_remove_object+0xe4/0x120 [ 727.337817] ? __delete_object+0xb3/0x100 [ 727.338267] ? lock_downgrade+0x6d0/0x6d0 [ 727.338718] ? rwlock_bug.part.0+0x90/0x90 [ 727.339155] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.339666] ? selinux_inode_getsecctx+0x90/0x90 [ 727.340174] ? loop_set_status_old+0x1b0/0x1b0 [ 727.340658] blkdev_ioctl+0x362/0x7f0 [ 727.341075] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.341571] ? __x64_sys_ioctl+0x97/0x210 [ 727.342004] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.342588] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.343089] __x64_sys_ioctl+0x196/0x210 [ 727.343523] do_syscall_64+0x3b/0x90 [ 727.343924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.344482] RIP: 0033:0x7f9aebdc68d7 [ 727.344867] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.346816] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.347623] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 727.348379] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 727.349132] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.349862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.350618] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 727.351372] [ 727.351617] CPU: 1 PID: 6979 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.353720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.356206] Call Trace: [ 727.356762] [ 727.357258] dump_stack_lvl+0x8b/0xb3 [ 727.358138] should_fail.cold+0x5/0xa [ 727.358971] ? create_object.isra.0+0x3a/0xa20 [ 727.359976] should_failslab+0x5/0x10 08:05:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 18) 08:05:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 31) 08:05:31 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 30) 08:05:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 37) [ 727.360808] kmem_cache_alloc+0x5b/0x480 [ 727.361930] create_object.isra.0+0x3a/0xa20 [ 727.362931] ? kasan_unpoison+0x23/0x50 [ 727.363807] kmem_cache_alloc+0x239/0x480 [ 727.364725] __alloc_file+0x21/0x240 [ 727.365845] alloc_empty_file+0x6d/0x170 [ 727.366768] path_openat+0xe1/0x28a0 [ 727.367586] ? __is_insn_slot_addr+0x144/0x250 [ 727.368583] ? kernel_text_address+0x53/0xb0 08:05:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, 0x10, 0x40) lseek(r0, 0x0, 0x4) [ 727.369661] ? path_lookupat+0x850/0x850 [ 727.370770] ? unwind_get_return_address+0x51/0x90 [ 727.371847] ? create_prof_cpu_mask+0x20/0x20 [ 727.372850] ? arch_stack_walk+0x99/0xf0 [ 727.373762] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.374851] ? lock_acquire+0x41c/0x4d0 [ 727.375715] do_filp_open+0x1aa/0x400 [ 727.376577] ? may_open_dev+0xf0/0xf0 [ 727.377413] ? lock_release+0x505/0x6f0 [ 727.378326] ? alloc_fd+0x2f0/0x670 [ 727.379188] ? lock_downgrade+0x6d0/0x6d0 [ 727.380143] ? rwlock_bug.part.0+0x90/0x90 [ 727.381104] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 727.382695] ? _find_next_bit+0x1e5/0x260 [ 727.383634] ? _raw_spin_unlock+0x24/0x40 [ 727.384588] ? alloc_fd+0x2f0/0x670 [ 727.385407] do_sys_openat2+0x16d/0x4d0 [ 727.386311] ? build_open_flags+0x6f0/0x6f0 [ 727.387285] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.388348] ? lock_release+0x505/0x6f0 [ 727.389272] ? do_syscall_64+0x3b/0x90 [ 727.390180] __x64_sys_openat+0x13f/0x1f0 [ 727.391108] ? __x64_sys_open+0x1c0/0x1c0 [ 727.392052] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 727.393185] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 727.394394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 727.395560] do_syscall_64+0x3b/0x90 [ 727.396399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.397546] RIP: 0033:0x7f432f56ea04 [ 727.398389] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 727.402515] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 727.404197] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 727.405774] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 727.407354] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 727.408474] FAULT_INJECTION: forcing a failure. [ 727.408474] name failslab, interval 1, probability 0, space 0, times 0 [ 727.408943] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 727.408963] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 727.413319] [ 727.413834] CPU: 0 PID: 6974 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.414875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.416074] Call Trace: [ 727.416345] [ 727.416581] dump_stack_lvl+0x8b/0xb3 [ 727.416995] should_fail.cold+0x5/0xa [ 727.417400] ? alloc_workqueue_attrs+0x38/0x80 [ 727.417897] should_failslab+0x5/0x10 [ 727.418319] kmem_cache_alloc_trace+0x55/0x3c0 [ 727.418812] alloc_workqueue_attrs+0x38/0x80 [ 727.419276] apply_wqattrs_prepare+0xbb/0x880 [ 727.419755] ? is_kernel_percpu_address+0xe6/0x110 [ 727.420287] apply_workqueue_attrs_locked+0xc1/0x140 [ 727.420833] alloc_workqueue+0xb1a/0xeb0 [ 727.421257] ? do_raw_spin_unlock+0x4f/0x210 [ 727.421591] FAULT_INJECTION: forcing a failure. [ 727.421591] name failslab, interval 1, probability 0, space 0, times 0 [ 727.421735] ? _raw_spin_unlock+0x24/0x40 [ 727.421757] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.425156] ? __fget_files+0x28d/0x470 [ 727.425589] ? loop_configure+0x62b/0x1950 [ 727.426064] loop_configure+0x6ec/0x1950 [ 727.426514] ? putname+0xfe/0x140 [ 727.426898] lo_ioctl+0x782/0x1860 [ 727.427279] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.427908] ? loop_set_status_old+0x1b0/0x1b0 [ 727.428406] ? fsnotify+0xb4f/0x1250 [ 727.428887] ? avc_ss_reset+0x180/0x180 [ 727.429324] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.429916] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.430438] ? lock_acquire+0x41c/0x4d0 [ 727.430946] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.431456] ? lock_acquire+0x41c/0x4d0 [ 727.431885] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.432493] ? trace_pelt_se_tp+0x108/0x190 [ 727.432964] ? __update_load_avg_se+0x3fb/0xaf0 [ 727.433563] ? lock_downgrade+0x6d0/0x6d0 [ 727.434026] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.434644] ? selinux_inode_getsecctx+0x90/0x90 [ 727.435164] ? loop_set_status_old+0x1b0/0x1b0 [ 727.435758] blkdev_ioctl+0x362/0x7f0 [ 727.436164] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.436765] ? __x64_sys_ioctl+0x97/0x210 [ 727.437209] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.437915] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.438426] __x64_sys_ioctl+0x196/0x210 [ 727.438950] do_syscall_64+0x3b/0x90 [ 727.439428] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.439964] RIP: 0033:0x7f22ed51d8d7 [ 727.440359] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.442320] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.443115] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 727.443871] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 727.444559] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.445240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.445923] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 727.446640] [ 727.446868] CPU: 1 PID: 6985 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.448942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.451402] Call Trace: [ 727.451947] [ 727.452447] dump_stack_lvl+0x8b/0xb3 [ 727.453287] should_fail.cold+0x5/0xa [ 727.454130] ? create_object.isra.0+0x3a/0xa20 [ 727.455132] should_failslab+0x5/0x10 [ 727.455856] ISOFS: Unable to identify CD-ROM format. [ 727.455947] kmem_cache_alloc+0x5b/0x480 [ 727.457306] create_object.isra.0+0x3a/0xa20 [ 727.458285] ? kasan_unpoison+0x23/0x50 [ 727.459166] __kmalloc_track_caller+0x25e/0x420 [ 727.460167] ? kasprintf+0xbb/0xf0 [ 727.460930] kvasprintf+0xb5/0x150 [ 727.461698] ? bust_spinlocks+0xe0/0xe0 [ 727.462593] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.463626] ? preempt_count_add+0x74/0x140 [ 727.464565] ? __is_module_percpu_address+0x237/0x300 [ 727.465681] kasprintf+0xbb/0xf0 [ 727.466440] ? kvasprintf_const+0x190/0x190 [ 727.467377] ? save_trace+0xd00/0xd00 [ 727.468206] ? lockdep_init_map_type+0x21a/0x7e0 [ 727.469255] alloc_workqueue+0x408/0xeb0 [ 727.470148] ? do_raw_spin_unlock+0x4f/0x210 [ 727.471095] ? _raw_spin_unlock+0x24/0x40 [ 727.472004] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.473105] ? __fget_files+0x28d/0x470 [ 727.473981] ? loop_configure+0x62b/0x1950 [ 727.474908] loop_configure+0x6ec/0x1950 [ 727.475795] ? putname+0xfe/0x140 [ 727.476569] lo_ioctl+0x782/0x1860 [ 727.477348] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.478417] ? loop_set_status_old+0x1b0/0x1b0 [ 727.479405] ? fsnotify+0xb4f/0x1250 [ 727.480219] ? avc_ss_reset+0x180/0x180 [ 727.481081] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.482072] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.483096] ? lock_acquire+0x41c/0x4d0 [ 727.483943] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.484953] ? lock_release+0x505/0x6f0 [ 727.485812] ? find_and_remove_object+0xe4/0x120 [ 727.486867] ? __delete_object+0xb3/0x100 [ 727.487766] ? lock_downgrade+0x6d0/0x6d0 [ 727.488657] ? rwlock_bug.part.0+0x90/0x90 [ 727.489575] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.490611] ? selinux_inode_getsecctx+0x90/0x90 [ 727.491629] ? loop_set_status_old+0x1b0/0x1b0 [ 727.492611] blkdev_ioctl+0x362/0x7f0 [ 727.493422] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.494459] ? __x64_sys_ioctl+0x97/0x210 [ 727.495348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.496536] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.497547] __x64_sys_ioctl+0x196/0x210 [ 727.498459] do_syscall_64+0x3b/0x90 [ 727.499260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.500325] RIP: 0033:0x7faf15eb38d7 [ 727.501114] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.505002] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.506612] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 727.508122] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 727.509622] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.511140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.512636] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 727.514167] [ 727.515110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.517339] loop0: detected capacity change from 0 to 128 08:05:31 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 19) [ 727.566972] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:05:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 32) 08:05:31 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 38) 08:05:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3, 0x9, &(0x7f0000002580)=[{&(0x7f0000000080)="9fd8bd96034c7882d8b281b1f0d90f1e97388310ef1e635bba294d76cc10bf00d8c2f88fe8d1200ba519af4523718182ff444c1ab0aab98782d5d0efb34e52da32e81f6ed88e9e4be1f4c4e5cd89fb72668697a892f1131b28f62026b2e9501513c7f5fe", 0x64, 0x8}, {&(0x7f0000000140)="7e1d36caa1d2fcba1b1a83be16a7cfb893fe6946f70e9bf5803c636d4b606837ae9e8514c090a4f0d62f617927c13e78a738614bab5e8678484cc40b85338701804d4d113865605f0b942fc59cf430025ce7ca894323776f50a1a7cac2ad1294c9bf11e4a67dcb25b7d04d89632751ab500deb34fe2c12b6ed1e8804b14367c77c716ceff61f4ad57cb24eb2d2a797ed5f9f219c4d990097fdbfa966d1d3db0448a41dcde90ce63b3d5e8018ead7f5b846fbcc5108ed339075e382996e02fd8397c5935138bef6b2c5592f2081ffa9987bb11298872976d741c585cd3ac50a814662aa5ba0363743e8e1f900ebe11b47d97731383b42", 0xf6, 0xfffffffffffffff7}, {&(0x7f0000000240)="1da6f011d2d437eacc571e943b10db374fdf0520ced4c1a0535d3ccd5382a511a108b178664b178411c51746eda380df14578beba138abe8461fb0c28ba99ebd5031", 0x42, 0x6}, {&(0x7f00000002c0)="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", 0x1000, 0x3}, {&(0x7f00000012c0)="7d7cabd58cae3d66cefa16a3c03d2063d67219adc981f0c580737662b46b50b089dfc7b2dbf0aa47db4c80966e97f4b8013dc44c3e56600be7f66336548534764a9f6eda7c6e8e64506db305c5abdecbda76676554fc9aed12909a3ff66841de3e2f21e464403af9497d9bcb7bd5a1cf8f4e3513bfc367aca6caf8f3739e6106e85d293adb", 0x85, 0x8}, {&(0x7f0000001380)="d6ea59f8d533001b29ab7e1754f759b00c1801e08a476c2fa68ed5ef8df3a48007285ed76a6a1fc60c903c2a402e3ade3549cd4561fcf5f8950ea66c11142b675c36992ba907a444e2d1b364b3f84938ba6f756ec8b26ea357d4dd3d3b7438a9d10335ae301907c1a6b8e6ee2d7d22de16cc5f9f0b52b69719c48aec93cff5a6df8854f954d213a4a4e366", 0x8b}, {&(0x7f0000001440)="165a8c34a31125e2efc995844cd250dd853fa2f153b6f74731e0ca9b2a30ebe97a6e7c0de69aa0f3451a6ad702cf0eb2314e33e9d6f669b265b13330ff17cb12772d2d722d65d940c1e5c67d389ad30a64e956ccb0ed2018739eaeb594efe243bc6faf", 0x63}, {&(0x7f00000014c0)="0ce120b7ca40bb32deb4c6892da2b48a37c04accdc84b1db10e8346d148b1684649bb141a2ec15dbaec65dc95574e20a5a4b983129a55b11b755f1b935ef8e9170eb204e92baa9712c49324f547270aac0385096b5880c91cef7fb49a6dd1c9bffd823f1e3e8bfa413d23dcc6d03904733c9134a0cc6d46031c3952acdb90ea783ea4c6229e7ab3b971607b0b8dc105687b5e7927a5c2f3f201961d904eb8e71f4f55749e68c1bf5b9f2c8a31dd627f73ab3", 0xb2, 0xf9f}, {&(0x7f0000001580)="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", 0x1000, 0xfffffffffffffff9}], 0x1200000, &(0x7f0000002680)={[{@nocompress}, {@utf8}, {@overriderock}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, ')]\'#,@'}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) openat(r2, &(0x7f0000002740)='./file1\x00', 0x101200, 0x2) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="f7b7368f83c30a5a26687a67c202f6240d8cc1c8a8506ead34797e3858fdeae5daab054d970cee67bd4dc8d5ab5d4885c2e2a5d26017e77b8fceca47741e6c55d6e859c177bb11c0b36bc50533d523a2681e29cc08c388d6f0e24afaf5fb89fd83c21474425d39d7f84ca6c3f5f24ab771e877466ce2a3dacc9a792e45f8435cc6419d57973ead9abb77c86187eb4622a416a4316dd7e099b6850e7043715f02222c92ba47dc2a2ed0ff66ff801412415a3ad22d99d765fc1a638be463668514e9d78c534f0449ace1e6415d040f6b8ea0167defbbb648b985bf6f9456ec26cd892376c3c136e7c2b2f24ba37bb6c3dfac64f9946ee75b71b3556253472dc515d21e6b8d002ee1f93a8e0ae4b240d15b8f0b6288cdeaadf7053c750c181d7541f18342cf4c2942b0b8b484812a0af715accdc0319f1af83d2ec0d6fb27029b2d10885e293cd02864a5ebb73bfffee29ec262844066f2775ffe55106707556597dbf869b323056dbb97c5d64f87fa02109f17c687f1965545355385aceff1e0f9a7967dcb5a5632a063883473fe25483fccaba432781d7f12e9b241def070d68fa444b2c221ade6764da78b1b4ce6473a29b64335f623cbbb870c5938d19db360eb683b8d07afcd208fce17e56b85c38fe586039b0d1875c102c52f0dec8e110f6bc2cecc134f8ae968c31df7d96906263fbb7872879cb9e4af0bba03dd852acf78002ff7d722fb68321f7364c7a2d750b18d8718feb03279afea2b2d8db2cacef1df246e16e9bdadf5a8aa93c4536defe02136f2b852cb55d88164f2b709b72c39a5cb6f470d48e0c2549115b3769e4ff468515902d2408e855691d745c241d955f8f20803714d9ec879bdd269fd7a73239dc1110392b3a23515fe2f4c71dfddbba4655d93dffe1293fd2930093777a3dc4d68dde341d1c26e2ecfa8916b7a1f28256c1cee8ade327eafb775b314133eaecd11bb85aa83d65898a28117d5e4cbfd3e2b859330fbc4082ecf4e2a1b55244962aea870ab899aba09fd5cddafe28ad182de9bd9bbb23138cb27b7f933b1b6260ff33ba4f4e8416e76346168396c2952d176bf4fb1cb89e3160b3a18f0c685094b2dc8cf3d1e15cbbe04d7ca4cb7c1283de1d71d475c1460f147303cf9416ae46ecfdf255fa3426d653d017feb20f71257e5f729a0157e482324dfa97ae86490333a3a56a27ffc3524a7d842798c706e60f55188e4cc7a1c8f3b4317161dd0e5b781bff3b06952db3e86d5f0de3f6bf7666c0e3b46426b57b996283a44878bab7cd504788c1d2dd36af95033a565872b3a76a4ae0ca677ad256acfa6740a3d82ad66d30f66e9dd888f16bfca19abef37178135c1f3651a9c2fe72a7b1ae683e2c3c51d1ce97630188ddbbe400b15fcbac62e08fea24ced22ef7cfc8126efae3576b457b858ce9ce37aaa1728cfc255fbd8d115e88a6a35e9fa928047b07396e095076ce31b6d52963d4eddd7cb50b2ed44d935779d5daee4e2a3705c8edc9d472bd9efef93095fd98fff34be4e09ac2cb23be22eb0480b068a5c166a86115fb28bc96c93e384c58a02270264d44a6164c02b125c520ab21ba9886e7b1aca3dfef578f402bb5e7c6548bdc8f6e1e50fb0092698a9b05e5ffb85d14a285dcd208d2d592460079c1aedbbac4d31f170c13176eb1c12c16cdf81657facc6d1f55af07c947977ee9a2ccd3ffdaf91e84e5f3674b669445d05b256456180bd448ccf8cf92985c774959b309a5e349b5bf8a228482159fc1afb0a2e41bde5f5b8aef14a23a3124ad064ba1bf2980e67fc4517d4a293a2e1978b4c4c9bef5e2b3b0d71230c9456bf6c61c3ce8c7baa562c7b71d50b1b9b9ddfdf7681658c79f92cef99159ced49e0013718b7e23e811f3f19ae1f25c6b3aaa1c4412b0047f86770052fbb20eedfd616f1b7823bebc54fd7af6331284b181e5e6c68db963c3ff22b5953ac9289fa4f7b68d570208153bb33dbf27bdfcc963c5ecfbe6eac78f9c2374cc97d7fe94bf74cf2cbc4388651354954e077722482c47685e43e129a55c81a5600f46cb042bf91bda204283ec226534263bae5ce1c5e4469b7bb088214c6afb93317b734a91aaeafe0f0dc1b515ffcb08335f80865cb0ae0ed54c6c3987823e7a31efe4c99e51a47cf742791f08a5b3fda2cc1c8511ef14712e085c13f827139c7c53a75a309cb7413db635aba77d62a4589a44255492487fef2b5b6f7c43caf5e359b2937841310f7035c23cc840e29aa6043a5ecec2cee590733dec0a70fed4e24d47d7f0c783ea8bcd5186fc72ac500088c35d76a414cdab115bc3376c36d8ff939952f338bb103a52973140a42dd469885c70197ad294cb71390dee297d0231e55cebc2945bea94e6de13747cbe3797cb96218fb3f57f955214ef1d747a9076b40dfb865483b0fe76514ff29127bbbc11f7f0c95c943d94c8d97baddf091405933dad0d8bcc0ceff78d178f6abbe693c3e50dd59790dab65c12744af2d1c3db08e1d686c6725cda90114f58ae8e41919091b5f5a52fac834f4d458c27fb52f56c03a4040b81d1451dd355227d0d16f3c7ba4ba000e7dcb593de317ff04a5b63fb32909c9dfc0b79950e95253bdded7a656f42551801d3e38c1411984320074ce0456f0bc51e70a4b9f4246bced26c2f1b8775e1697c48a43ac3343aad59be80d9ce2f543cc051a672dbf125ff135439b14d4320e1201326831a26d41fadcf2e386cfa802cec5e02ef695af1dfb45f049e508785eed87e9aa956549a74dfa9e996b99392eecf6d93440e69ec886aadb30b659fd17d2b116a624a4062b8366284d4a1ace88fd9fb4f9cde052edb8e20c1f26c9162fa77b2f7b787293af42753ce9268947294c44d1e3ec125d8e040d93b0d511e2def14c63e04357dd0fe0e9d886ca4cdaf018f5fef173b6faab04e36f1525dd9984a96fd91dd4f2fc01e004e9277024bf68b0ee6da8748f4313af87daaf4718f513aacc157e5ce961753b60fcd6f3f0da40984f9266c9b2cb74c40c2c35965674e10464c88f0cdec5b7f6b4ecfc665b80298aaba0ee9d66ab19d51b258d4ff22c1acbcbf8d01d25844f0f506adec44b58461e0a058f8cfd277b6aa53c368872bcd5f127cc140db63cbe0a4a6ac4c66414f09c9543bfc2042d736d4d022acf42047b7bc7a8eff0745c623615a414c5e58d89c9d556401938af4908c9feae154bb27cb14a57c889abc3eabedb0161eee2f35bed50ca9c5cb0ba5e93bcf2f54b3e848781459af232dde9a4370c79d48f8d762a1a0134c9f44380ef8b9baaf805d7e1a334f1418b882d93ea3c443ca3f0f6b55645776f51ee4de8a8c04a4027774d7e38755b542fcfb93e7030ed3869ccb0845d397875169352734a59547a06f1524b2d3a6184863b21744b29f463ed70d6962cfe19b6a6c55e05968966f067a0215b8ea75604ded2b565afbe8c5ad8b759bc0bda836449b97078412ee7f7c0d2ea9dd9645d42c7d0a6825a7cdf73408c782e0dbcfb736b57537329e5cc3b233c247babb527d8eff205af030f565b9f0cc486d180962ed6ae03d34e9779b1b8e9f8f4a08bfc3e87e3867aa926fbad847dbd4e814192794d5d39c8be2faf24e66a6640e0e2d7fb5f02a557075931565d8f856d717e5b7adbd9d1a6704f133c302e8da549db30a7586efb6e0456b3e9f413d35fdf43e8ea0f6cdb1b4ccd4964626d06255cd174f2e7c481fd2b1dfc3466b1bf77ca7c473e40412c47437dc39d0e7aae8f75a99c58b96d7062543332db4453cb4363223852f73c35cd792e990a89ca095a3f9cd7368a98c160e69a738d618c5f890c7d15fe796d15c91537993ba1f0ac6d66d8ef01c1321be5b4a12bbdeab1ad2a3629f6c30c799c1a4767a914099601593372858b7f491c0a69ded2c9a27ebc4e0556561576569e1f851e34e3aa9139de519c78664cfb3252e29f01587504423f12aa908bca850a02e44e633235f63a933fa90da7860499f8d3089a74eb4a7e57dd762696bd643019c5555b5b269f9300e838264a6b4f3633dd86f3280215bb166e1f3270c1911d4477cd5461ff40c54f11299ab073ba2fc5d927ceab5344606113ad9b114f987fe090e80ff280a53546f810163a711e2bd17e4ff7982d9bf0d9a977dd654cfdee60edf0dd2be01c356f775463c4db25d0200abe6a3dfa7f7f5fa0b60b2925d881692130db9a05af0a97ff67d144cd32ac85f903700208527409a6de4e059514a6653f081c31ae3dfcda6497ad7cfe2eeee7443bca9684e02d2d584c282b50de4fb394cfcf3a6ac3da4bf65c5b34e72bbc4dde11780d9a044d44b8d401c11fbc737381c996c22a5fa11ba46fec575b7107647fc3c2a4bfae25484f3b1c79fed977c3dea044bdb010c62a0d044f1689c31433281bb0fb68ea2565817e67fcf86e2285cb5737ab11fb0a5ba16a5db954480bc76b737bd9dfbc8e4691a3a2e80eac83eef5894cb515b9854144eaa9fb13f4f08639c13e6d820512a7c4538af21342c59b20928c27c6ba413ab5d91e36d4486bf2b6a1d9d23eb47b14b2603e7231b6401ced5323cdab00a5dc3014a9f3eda6d5ad871d65424cc426d51447a61185fa79ef03bda17e7cb7e1eab3423608730576fb9971e3608579805ffc9deaa5b934fb6716de4554608d3b6cca2f83b2c4123f354d075d30c6c94de6c80b5ad5a1fdf5d285774d1afd4771b31ca8d6c3f43ba22715ac868173d88ad7459b33f9d1f78c4ecb28d8cb3bc00859bad5c69bc31be4e1a1b06ae63c6c5fcc81631ac56c27e399515dff5b8ca1c97701f9e5b4f82bc10424ccafadaf543b1c0532f5283f5e4bf016cea5b0d01950cef09f4a28eca8a557f68ffd3800931162b76b81665f430db5dc951d640c1505fbe0eb9ef5414976a32213ba8e3d82d0af59e74ae0c8f18de3c00b03d81204048c3e4d10b22d607b1944bcfe76110b62b88acc25f88c6c8765969710e5e7810a1ee52b811730b1ccf83ffb55ce1a6d918a6191a88305616664eb779dc47dbae9f8b36062c5ca89540626811c40d3e0eddb23d658a88b467c606629a262dfd1614c4e994f28074d83eed5f57a566c715117926bad6bd79ba1e13031de34bf6fb3ef6ff2183227bfdfd08a96bf5cac68ee60a5e200177a12ce78b171ead4a917b85528dc9702f12875c1aaca6a995fd9e6824b03bb04706b9e42cebb8fda0c5170df8cf28a519947c3cab4d872655ff662a0090c184801646b83f83a4dad48c6bd1e6606810a2a747736d08c90864f327a867a47e7966463cf41fa5abfcc8a47de721ab6a19e28d3b8f8563be5e295a14b9530e0351f5fb14e70a291711430964ca7a333c739ed7cf3c127d50492eafa28ce72701d945af54dec8acb221c885ba7476380c87ccb71541d05c549dc78f8cf9b58f2d2937b0aa64259494ec74079bd1eefcdca464f60f4037ecc6bee2706a77693f4abd422813d87ab7673f70d4d5c045ac87321714d963a53149263ae3fcfaf8c5998d1662327f5afd0eb1feae7d4b88f2895c529b9481c800ea1b19ef7fe806082b139ffe7fafa39f8e568e1d08d032a22c6b0401393b3ef543c03b39628b57abfeb5b4825968ff38ca4ad25674f1c75cfa7db64e6450d3362218a1aa7923e8280ccee320d0dc894cfe71d2719a97c805ffcdfc12568f30eaa076f20c564e4a50fdfe0fd73c3cfc6fcecb5fce56f3b347b0921c704084500a0c972a741f80412249a277dfa31cf56443a11a8f0f508ba10665fded0996f00445a5f9f590b002fae60906e59541428099e5c", 0x1000}], 0x1, 0x10, 0x40) lseek(r0, 0x0, 0x4) [ 727.598621] FAULT_INJECTION: forcing a failure. [ 727.598621] name failslab, interval 1, probability 0, space 0, times 0 [ 727.601305] CPU: 1 PID: 6995 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.603517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.606138] Call Trace: [ 727.606724] [ 727.607231] dump_stack_lvl+0x8b/0xb3 [ 727.608124] should_fail.cold+0x5/0xa [ 727.608942] FAULT_INJECTION: forcing a failure. [ 727.608942] name failslab, interval 1, probability 0, space 0, times 0 [ 727.609001] ? security_file_alloc+0x34/0x170 [ 727.612320] should_failslab+0x5/0x10 [ 727.613189] kmem_cache_alloc+0x5b/0x480 [ 727.614134] security_file_alloc+0x34/0x170 [ 727.615128] __alloc_file+0xb6/0x240 [ 727.615980] alloc_empty_file+0x6d/0x170 [ 727.616912] path_openat+0xe1/0x28a0 [ 727.617767] ? __is_insn_slot_addr+0x144/0x250 [ 727.618820] ? kernel_text_address+0x53/0xb0 [ 727.619828] ? path_lookupat+0x850/0x850 [ 727.620758] ? unwind_get_return_address+0x51/0x90 [ 727.621867] ? create_prof_cpu_mask+0x20/0x20 [ 727.622906] ? arch_stack_walk+0x99/0xf0 [ 727.623835] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.624913] ? lock_acquire+0x41c/0x4d0 [ 727.625819] do_filp_open+0x1aa/0x400 [ 727.626706] ? may_open_dev+0xf0/0xf0 [ 727.627579] ? lock_release+0x505/0x6f0 [ 727.628478] ? alloc_fd+0x2f0/0x670 [ 727.629299] ? lock_downgrade+0x6d0/0x6d0 [ 727.630245] ? rwlock_bug.part.0+0x90/0x90 [ 727.631194] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 727.632423] ? _find_next_bit+0x1e5/0x260 [ 727.633348] ? _raw_spin_unlock+0x24/0x40 [ 727.634309] ? alloc_fd+0x2f0/0x670 [ 727.635126] do_sys_openat2+0x16d/0x4d0 [ 727.636016] ? build_open_flags+0x6f0/0x6f0 [ 727.636981] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.638045] ? lock_release+0x505/0x6f0 [ 727.638934] ? do_syscall_64+0x3b/0x90 [ 727.639818] __x64_sys_openat+0x13f/0x1f0 [ 727.640744] ? __x64_sys_open+0x1c0/0x1c0 [ 727.641672] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 727.642811] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 727.644004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 727.645178] do_syscall_64+0x3b/0x90 [ 727.646022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.647160] RIP: 0033:0x7f432f56ea04 [ 727.647977] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 727.652050] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 727.653725] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 727.655319] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 727.656894] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 727.658482] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 727.660061] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 727.661632] [ 727.662158] CPU: 0 PID: 6998 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.664379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.666748] Call Trace: [ 727.667279] [ 727.667743] dump_stack_lvl+0x8b/0xb3 [ 727.668549] should_fail.cold+0x5/0xa [ 727.669344] ? create_object.isra.0+0x3a/0xa20 [ 727.670311] should_failslab+0x5/0x10 [ 727.671097] kmem_cache_alloc+0x5b/0x480 [ 727.671948] create_object.isra.0+0x3a/0xa20 [ 727.672870] ? kasan_unpoison+0x23/0x50 [ 727.673706] kmem_cache_alloc_trace+0x22e/0x3c0 [ 727.674697] alloc_workqueue_attrs+0x38/0x80 [ 727.675617] apply_wqattrs_prepare+0xbb/0x880 [ 727.676550] ? is_kernel_percpu_address+0xe6/0x110 [ 727.677581] apply_workqueue_attrs_locked+0xc1/0x140 [ 727.678646] alloc_workqueue+0xb1a/0xeb0 [ 727.679498] ? do_raw_spin_unlock+0x4f/0x210 [ 727.680415] ? _raw_spin_unlock+0x24/0x40 [ 727.681291] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.682351] ? __fget_files+0x28d/0x470 [ 727.683180] ? loop_configure+0x62b/0x1950 [ 727.684060] loop_configure+0x6ec/0x1950 [ 727.684906] ? putname+0xfe/0x140 [ 727.685637] lo_ioctl+0x782/0x1860 [ 727.686389] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.687402] ? loop_set_status_old+0x1b0/0x1b0 [ 727.688354] ? fsnotify+0xb4f/0x1250 [ 727.689127] ? avc_ss_reset+0x180/0x180 [ 727.689977] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.690926] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.691914] ? lock_acquire+0x41c/0x4d0 [ 727.692743] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.693722] ? lock_release+0x505/0x6f0 [ 727.694553] ? find_and_remove_object+0xe4/0x120 [ 727.695545] ? __delete_object+0xb3/0x100 [ 727.696413] ? lock_downgrade+0x6d0/0x6d0 [ 727.697274] ? rwlock_bug.part.0+0x90/0x90 [ 727.698446] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.699445] ? selinux_inode_getsecctx+0x90/0x90 [ 727.700433] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.701412] ? loop_set_status_old+0x1b0/0x1b0 [ 727.702372] blkdev_ioctl+0x362/0x7f0 [ 727.703154] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.704130] ? __x64_sys_ioctl+0x97/0x210 08:05:31 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4042, 0x58) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) lseek(r2, 0x9, 0x1) lseek(r1, 0x1000408, 0x4) [ 727.704990] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.706304] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.707283] __x64_sys_ioctl+0x196/0x210 [ 727.708126] do_syscall_64+0x3b/0x90 [ 727.708908] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.709981] RIP: 0033:0x7f22ed51d8d7 [ 727.710745] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.714541] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.716107] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 727.717578] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 727.719069] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.720537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.722018] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 727.723495] 08:05:31 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 31) 08:05:31 executing program 2: r0 = syz_io_uring_setup(0x356e, &(0x7f0000004e80)={0x0, 0x0, 0x2, 0x0, 0x315}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004f00), &(0x7f0000004f40)) fsetxattr$security_selinux(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 08:05:31 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 727.779891] FAULT_INJECTION: forcing a failure. [ 727.779891] name failslab, interval 1, probability 0, space 0, times 0 [ 727.780135] loop7: detected capacity change from 0 to 16383 [ 727.782320] CPU: 0 PID: 6997 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.785005] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 727.785493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.789397] Call Trace: [ 727.789965] [ 727.790449] dump_stack_lvl+0x8b/0xb3 [ 727.791278] should_fail.cold+0x5/0xa [ 727.792100] ? create_object.isra.0+0x3a/0xa20 [ 727.793091] should_failslab+0x5/0x10 [ 727.793906] kmem_cache_alloc+0x5b/0x480 [ 727.794791] create_object.isra.0+0x3a/0xa20 [ 727.795746] ? kasan_unpoison+0x23/0x50 [ 727.796608] kmem_cache_alloc_node+0x248/0x490 [ 727.797593] alloc_unbound_pwq+0x4ad/0xd70 [ 727.798529] apply_wqattrs_prepare+0x2a4/0x880 [ 727.799526] apply_workqueue_attrs_locked+0xc1/0x140 [ 727.800622] alloc_workqueue+0xb1a/0xeb0 [ 727.801498] ? do_raw_spin_unlock+0x4f/0x210 [ 727.802454] ? _raw_spin_unlock+0x24/0x40 [ 727.803358] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.804441] ? __fget_files+0x28d/0x470 [ 727.805295] ? loop_configure+0x62b/0x1950 [ 727.806217] loop_configure+0x6ec/0x1950 [ 727.807097] ? putname+0xfe/0x140 [ 727.807860] lo_ioctl+0x782/0x1860 [ 727.808624] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.809674] ? loop_set_status_old+0x1b0/0x1b0 [ 727.810674] ? fsnotify+0xb4f/0x1250 [ 727.811474] ? avc_ss_reset+0x180/0x180 [ 727.812342] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.813321] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.814344] ? lock_acquire+0x41c/0x4d0 [ 727.815197] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.816214] ? lock_release+0x505/0x6f0 [ 727.817067] ? find_and_remove_object+0xe4/0x120 [ 727.818103] ? __delete_object+0xb3/0x100 [ 727.819000] ? lock_downgrade+0x6d0/0x6d0 [ 727.819889] ? rwlock_bug.part.0+0x90/0x90 [ 727.820802] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.821833] ? selinux_inode_getsecctx+0x90/0x90 [ 727.822864] ? loop_set_status_old+0x1b0/0x1b0 [ 727.823845] blkdev_ioctl+0x362/0x7f0 [ 727.824660] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.825667] ? __x64_sys_ioctl+0x97/0x210 [ 727.826570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.827749] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.828759] __x64_sys_ioctl+0x196/0x210 [ 727.829626] do_syscall_64+0x3b/0x90 [ 727.830441] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.831543] RIP: 0033:0x7f9aebdc68d7 [ 727.832335] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.836281] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.837907] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 727.839446] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 08:05:31 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 727.840971] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.842682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.844201] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 727.845729] [ 727.869565] ISOFS: Unable to identify CD-ROM format. [ 727.904734] FAULT_INJECTION: forcing a failure. [ 727.904734] name failslab, interval 1, probability 0, space 0, times 0 [ 727.906964] CPU: 0 PID: 7007 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 727.908839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 727.911088] Call Trace: [ 727.911591] [ 727.912027] dump_stack_lvl+0x8b/0xb3 [ 727.912789] should_fail.cold+0x5/0xa [ 727.913541] ? apply_wqattrs_prepare+0xab/0x880 [ 727.914469] should_failslab+0x5/0x10 [ 727.915212] __kmalloc+0x72/0x440 [ 727.915899] apply_wqattrs_prepare+0xab/0x880 [ 727.916791] apply_workqueue_attrs_locked+0xc1/0x140 [ 727.917794] alloc_workqueue+0xb1a/0xeb0 [ 727.918610] ? do_raw_spin_unlock+0x4f/0x210 [ 727.919476] ? _raw_spin_unlock+0x24/0x40 [ 727.920302] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 727.921294] ? __fget_files+0x28d/0x470 [ 727.922084] ? loop_configure+0x62b/0x1950 [ 727.922926] loop_configure+0x6ec/0x1950 [ 727.923727] ? putname+0xfe/0x140 [ 727.924419] lo_ioctl+0x782/0x1860 [ 727.925119] ? avc_has_extended_perms+0x7e8/0xeb0 [ 727.926083] ? loop_set_status_old+0x1b0/0x1b0 [ 727.926983] ? fsnotify+0xb4f/0x1250 [ 727.927714] ? avc_ss_reset+0x180/0x180 [ 727.928505] ? fsnotify_first_mark+0x1f0/0x1f0 [ 727.929395] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.930343] ? lock_acquire+0x41c/0x4d0 [ 727.931123] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.932048] ? lock_release+0x505/0x6f0 [ 727.932827] ? find_and_remove_object+0xe4/0x120 [ 727.933765] ? __delete_object+0xb3/0x100 [ 727.934602] ? lock_downgrade+0x6d0/0x6d0 [ 727.935420] ? rwlock_bug.part.0+0x90/0x90 [ 727.936256] ? rcu_read_lock_sched_held+0xd/0x70 [ 727.937204] ? selinux_inode_getsecctx+0x90/0x90 [ 727.938162] ? loop_set_status_old+0x1b0/0x1b0 [ 727.939064] blkdev_ioctl+0x362/0x7f0 [ 727.939813] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.940738] ? __x64_sys_ioctl+0x97/0x210 [ 727.941552] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 727.942646] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 727.943577] __x64_sys_ioctl+0x196/0x210 [ 727.944380] do_syscall_64+0x3b/0x90 [ 727.945121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 727.946142] RIP: 0033:0x7faf15eb38d7 [ 727.946870] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 727.950495] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.951985] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 727.953390] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 727.954805] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 727.956205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 727.957610] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 727.959035] [ 727.961547] loop5: detected capacity change from 0 to 128 [ 727.964479] loop7: detected capacity change from 0 to 16383 [ 727.968538] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 727.992932] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:05:43 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 32) 08:05:43 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 20) 08:05:43 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) 08:05:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x4c, 0x0, 0x10b, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x24040010) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 33) 08:05:43 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x800010, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) write(r1, &(0x7f0000000080)="01", 0xffff8000) pwrite64(r1, &(0x7f0000000240)="8975", 0x2, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x40c200, 0x4) ioctl$KDENABIO(0xffffffffffffffff, 0x4b3c) getresuid(0x0, &(0x7f00000001c0), 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x8, 0x2) r2 = openat2(0xffffffffffffffff, &(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x10000, 0x0, 0x13}, 0x18) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000003680)={0x7}, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) creat(&(0x7f0000000080)='./file0\x00', 0x0) 08:05:43 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 39) 08:05:43 executing program 6: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2dd50100000000000000070000000a0004007770616e33011000"/42], 0x30}}, 0x0) [ 739.218891] FAULT_INJECTION: forcing a failure. [ 739.218891] name failslab, interval 1, probability 0, space 0, times 0 [ 739.221761] CPU: 1 PID: 7027 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 739.224218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 739.227133] Call Trace: [ 739.227795] [ 739.228371] dump_stack_lvl+0x8b/0xb3 [ 739.229379] should_fail.cold+0x5/0xa [ 739.230408] ? kobject_uevent_env+0x236/0xfa0 [ 739.231675] should_failslab+0x5/0x10 [ 739.232768] kmem_cache_alloc_trace+0x55/0x3c0 [ 739.233953] kobject_uevent_env+0x236/0xfa0 [ 739.235082] ? dev_uevent_filter+0xd0/0xd0 [ 739.236180] ? _raw_spin_unlock+0x24/0x40 [ 739.237136] FAULT_INJECTION: forcing a failure. [ 739.237136] name failslab, interval 1, probability 0, space 0, times 0 [ 739.237263] disk_event_uevent+0x17b/0x1e0 [ 739.240990] ? disk_events_async_show+0x10/0x10 [ 739.242234] ? __fget_files+0x28d/0x470 [ 739.243284] disk_force_media_change+0x1e/0xc0 [ 739.244494] loop_configure+0x75b/0x1950 [ 739.245572] ? putname+0xfe/0x140 [ 739.246520] lo_ioctl+0x782/0x1860 [ 739.247465] ? avc_has_extended_perms+0x7e8/0xeb0 [ 739.248772] ? loop_set_status_old+0x1b0/0x1b0 [ 739.250004] ? fsnotify+0xb4f/0x1250 [ 739.251023] ? avc_ss_reset+0x180/0x180 [ 739.252107] ? fsnotify_first_mark+0x1f0/0x1f0 [ 739.253324] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.254608] ? lock_acquire+0x41c/0x4d0 [ 739.255672] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.256942] ? lock_release+0x505/0x6f0 [ 739.258003] ? find_and_remove_object+0xe4/0x120 [ 739.259306] ? __delete_object+0xb3/0x100 [ 739.260430] ? lock_downgrade+0x6d0/0x6d0 [ 739.261544] ? rwlock_bug.part.0+0x90/0x90 [ 739.262694] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.263997] ? selinux_inode_getsecctx+0x90/0x90 [ 739.265270] ? loop_set_status_old+0x1b0/0x1b0 [ 739.266519] blkdev_ioctl+0x362/0x7f0 [ 739.267534] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.268790] ? __x64_sys_ioctl+0x97/0x210 [ 739.269901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 739.271381] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.272654] __x64_sys_ioctl+0x196/0x210 [ 739.273740] do_syscall_64+0x3b/0x90 [ 739.274758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 739.276134] RIP: 0033:0x7f9aebdc68d7 [ 739.277114] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.281917] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.283876] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 739.285691] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 739.287446] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 739.289024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.290609] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 739.292196] [ 739.292708] CPU: 0 PID: 7031 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 739.294847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 739.297354] Call Trace: [ 739.297918] [ 739.298433] dump_stack_lvl+0x8b/0xb3 [ 739.299278] should_fail.cold+0x5/0xa [ 739.300127] ? create_object.isra.0+0x3a/0xa20 [ 739.301148] should_failslab+0x5/0x10 [ 739.301985] kmem_cache_alloc+0x5b/0x480 [ 739.302899] create_object.isra.0+0x3a/0xa20 [ 739.303886] ? kasan_unpoison+0x23/0x50 [ 739.304780] __kmalloc+0x25b/0x440 [ 739.305574] apply_wqattrs_prepare+0xab/0x880 [ 739.306590] ? is_kernel_percpu_address+0xe6/0x110 [ 739.307708] apply_workqueue_attrs_locked+0xc1/0x140 [ 739.308844] alloc_workqueue+0xb1a/0xeb0 [ 739.309758] ? do_raw_spin_unlock+0x4f/0x210 [ 739.310743] ? _raw_spin_unlock+0x24/0x40 [ 739.311661] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 739.312787] ? __fget_files+0x28d/0x470 [ 739.313659] ? loop_configure+0x62b/0x1950 [ 739.314614] loop_configure+0x6ec/0x1950 [ 739.315528] ? putname+0xfe/0x140 [ 739.316032] FAULT_INJECTION: forcing a failure. [ 739.316032] name failslab, interval 1, probability 0, space 0, times 0 [ 739.316311] lo_ioctl+0x782/0x1860 [ 739.319509] ? avc_has_extended_perms+0x7e8/0xeb0 [ 739.320579] ? loop_set_status_old+0x1b0/0x1b0 [ 739.321621] ? fsnotify+0xb4f/0x1250 [ 739.322452] ? avc_ss_reset+0x180/0x180 [ 739.323349] ? fsnotify_first_mark+0x1f0/0x1f0 [ 739.324346] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.325394] ? lock_acquire+0x41c/0x4d0 [ 739.326271] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.327322] ? lock_release+0x505/0x6f0 [ 739.328209] ? find_and_remove_object+0xe4/0x120 [ 739.329265] ? __delete_object+0xb3/0x100 [ 739.330210] ? lock_downgrade+0x6d0/0x6d0 [ 739.331133] ? rwlock_bug.part.0+0x90/0x90 [ 739.332105] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.333172] ? selinux_inode_getsecctx+0x90/0x90 [ 739.334239] ? loop_set_status_old+0x1b0/0x1b0 [ 739.335256] blkdev_ioctl+0x362/0x7f0 [ 739.336099] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.337147] ? __x64_sys_ioctl+0x97/0x210 [ 739.338065] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 739.339292] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.340357] __x64_sys_ioctl+0x196/0x210 [ 739.341259] do_syscall_64+0x3b/0x90 [ 739.342097] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 739.343262] RIP: 0033:0x7faf15eb38d7 [ 739.344083] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.348149] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.349832] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 739.351420] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 739.353003] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 739.354597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.356197] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 739.357780] [ 739.358294] CPU: 1 PID: 7038 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 739.360425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 739.362935] Call Trace: [ 739.363509] [ 739.363995] dump_stack_lvl+0x8b/0xb3 [ 739.364852] should_fail.cold+0x5/0xa [ 739.365712] ? create_object.isra.0+0x3a/0xa20 [ 739.366751] should_failslab+0x5/0x10 [ 739.367595] kmem_cache_alloc+0x5b/0x480 [ 739.368496] create_object.isra.0+0x3a/0xa20 [ 739.369484] ? kasan_unpoison+0x23/0x50 [ 739.370393] __kmalloc_node+0x26f/0x470 [ 739.371326] memcg_alloc_slab_cgroups+0x7a/0x120 [ 739.372376] allocate_slab+0xd6/0x300 [ 739.373224] ___slab_alloc+0x913/0xee0 [ 739.374080] ? __alloc_file+0x21/0x240 [ 739.374970] ? lock_downgrade+0x6d0/0x6d0 [ 739.375901] ? stack_trace_save+0x8c/0xc0 [ 739.376829] ? obj_cgroup_charge+0x244/0x570 [ 739.377824] ? __alloc_file+0x21/0x240 [ 739.378710] __slab_alloc.constprop.0+0x45/0x80 [ 739.379749] ? __alloc_file+0x21/0x240 [ 739.380619] kmem_cache_alloc+0x393/0x480 [ 739.381541] __alloc_file+0x21/0x240 [ 739.382389] alloc_empty_file+0x6d/0x170 [ 739.383338] path_openat+0xe1/0x28a0 [ 739.384204] ? __is_insn_slot_addr+0x144/0x250 [ 739.385234] ? kernel_text_address+0x53/0xb0 [ 739.386228] ? path_lookupat+0x850/0x850 [ 739.387142] ? unwind_get_return_address+0x51/0x90 [ 739.388233] ? create_prof_cpu_mask+0x20/0x20 [ 739.389234] ? arch_stack_walk+0x99/0xf0 [ 739.390159] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.391210] ? lock_acquire+0x41c/0x4d0 [ 739.392100] do_filp_open+0x1aa/0x400 [ 739.392960] ? may_open_dev+0xf0/0xf0 [ 739.393819] ? lock_release+0x505/0x6f0 [ 739.394715] ? alloc_fd+0x2f0/0x670 [ 739.395523] ? lock_downgrade+0x6d0/0x6d0 [ 739.396449] ? rwlock_bug.part.0+0x90/0x90 [ 739.397391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 739.398627] ? _find_next_bit+0x1e5/0x260 [ 739.399544] ? _raw_spin_unlock+0x24/0x40 [ 739.400461] ? alloc_fd+0x2f0/0x670 [ 739.401284] do_sys_openat2+0x16d/0x4d0 [ 739.402179] ? build_open_flags+0x6f0/0x6f0 [ 739.403144] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.404206] ? lock_release+0x505/0x6f0 [ 739.405087] ? do_syscall_64+0x3b/0x90 [ 739.405950] __x64_sys_openat+0x13f/0x1f0 [ 739.406888] ? __x64_sys_open+0x1c0/0x1c0 [ 739.407757] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 739.408758] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 739.409829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 739.410866] do_syscall_64+0x3b/0x90 [ 739.411609] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 739.412623] RIP: 0033:0x7f432f56ea04 [ 739.413358] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 739.417026] RSP: 002b:00007f432cb30ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 739.418535] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f56ea04 [ 739.419948] RDX: 0000000000000002 RSI: 00007f432cb31000 RDI: 00000000ffffff9c [ 739.421371] RBP: 00007f432cb31000 R08: 0000000000000000 R09: ffffffffffffffff [ 739.422796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 739.424229] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 739.425663] 08:05:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x80000001, 0x200, 0x20, 0x6, 0x3, 0x97}, {0x49804369, 0x94d, 0x3, 0x5, 0xbd, 0x4}], ['\x00']}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) getdents(r2, &(0x7f0000000000)=""/204, 0xcc) 08:05:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002", 0x2d, 0x2000000000000000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x5}, {&(0x7f0000000080)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000fe0db691adb83fe0900000000000000ac5948cb4453960dbd4c4e8b217131309b3351", 0x4e, 0x12000}], 0x0, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES64, @ANYRES32=r2, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r0]) r4 = dup2(r3, r3) openat(r4, &(0x7f0000000140)='./file2/file0\x00', 0x884040, 0x0) 08:05:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x14}], 0x1, 0x0, 0x0, 0x800a}, 0x0) read(r0, &(0x7f0000000000)=""/97, 0x61) 08:05:43 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) [ 739.476509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 739.515533] loop5: detected capacity change from 0 to 128 08:05:43 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) pwrite64(r0, &(0x7f0000000140)="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", 0x1000, 0x800) lseek(r0, 0x0, 0x4) [ 739.533093] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 739.546826] loop0: detected capacity change from 0 to 128 [ 739.547555] FAULT_INJECTION: forcing a failure. [ 739.547555] name failslab, interval 1, probability 0, space 0, times 0 [ 739.550965] CPU: 1 PID: 7037 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 739.553184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 739.555747] Call Trace: [ 739.556326] [ 739.556823] dump_stack_lvl+0x8b/0xb3 [ 739.557695] should_fail.cold+0x5/0xa [ 739.558638] ? alloc_unbound_pwq+0x4ad/0xd70 [ 739.559643] should_failslab+0x5/0x10 [ 739.560075] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 739.560515] kmem_cache_alloc_node+0x55/0x490 [ 739.562925] alloc_unbound_pwq+0x4ad/0xd70 [ 739.563919] apply_wqattrs_prepare+0x2a4/0x880 [ 739.565001] apply_workqueue_attrs_locked+0xc1/0x140 [ 739.566188] alloc_workqueue+0xb1a/0xeb0 [ 739.567169] ? do_raw_spin_unlock+0x4f/0x210 [ 739.568270] ? _raw_spin_unlock+0x24/0x40 [ 739.569326] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 739.570590] ? __fget_files+0x28d/0x470 [ 739.571576] ? loop_configure+0x62b/0x1950 [ 739.572627] loop_configure+0x6ec/0x1950 [ 739.573625] ? putname+0xfe/0x140 [ 739.574493] lo_ioctl+0x782/0x1860 [ 739.575376] ? avc_has_extended_perms+0x7e8/0xeb0 [ 739.576592] ? loop_set_status_old+0x1b0/0x1b0 [ 739.577717] ? fsnotify+0xb4f/0x1250 [ 739.578671] ? avc_ss_reset+0x180/0x180 [ 739.579652] ? fsnotify_first_mark+0x1f0/0x1f0 [ 739.580785] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.581959] ? lock_acquire+0x41c/0x4d0 [ 739.582943] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.584085] ? lock_release+0x505/0x6f0 [ 739.585066] ? find_and_remove_object+0xe4/0x120 [ 739.586253] ? __delete_object+0xb3/0x100 [ 739.587272] ? lock_downgrade+0x6d0/0x6d0 [ 739.588260] ? rwlock_bug.part.0+0x90/0x90 [ 739.589293] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.590477] ? selinux_inode_getsecctx+0x90/0x90 [ 739.591630] ? rcu_read_lock_sched_held+0xd/0x70 [ 739.592772] ? loop_set_status_old+0x1b0/0x1b0 [ 739.593870] blkdev_ioctl+0x362/0x7f0 [ 739.594792] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.595926] ? __x64_sys_ioctl+0x97/0x210 [ 739.596924] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 739.598259] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 739.599395] __x64_sys_ioctl+0x196/0x210 [ 739.600376] do_syscall_64+0x3b/0x90 [ 739.601287] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 739.602538] RIP: 0033:0x7f22ed51d8d7 [ 739.603429] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 739.607851] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.609655] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 739.611372] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 739.613067] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 739.614814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 739.616507] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 739.618212] [ 739.619252] loop6: detected capacity change from 0 to 264192 08:05:43 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) [ 739.639901] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 739.668869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 739.716075] ISOFS: Unable to identify CD-ROM format. [ 752.139460] FAULT_INJECTION: forcing a failure. [ 752.139460] name failslab, interval 1, probability 0, space 0, times 0 [ 752.141782] CPU: 0 PID: 7070 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.143731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.145984] Call Trace: [ 752.146506] [ 752.146980] dump_stack_lvl+0x8b/0xb3 [ 752.147770] should_fail.cold+0x5/0xa [ 752.148555] ? create_object.isra.0+0x3a/0xa20 [ 752.149507] should_failslab+0x5/0x10 [ 752.150272] kmem_cache_alloc+0x5b/0x480 [ 752.151116] create_object.isra.0+0x3a/0xa20 [ 752.152010] ? kasan_unpoison+0x23/0x50 [ 752.152837] kmem_cache_alloc_trace+0x22e/0x3c0 [ 752.153773] kobject_uevent_env+0x236/0xfa0 [ 752.154667] ? dev_uevent_filter+0xd0/0xd0 [ 752.155571] ? _raw_spin_unlock+0x24/0x40 [ 752.156658] disk_event_uevent+0x17b/0x1e0 [ 752.157735] ? disk_events_async_show+0x10/0x10 [ 752.158933] ? __fget_files+0x28d/0x470 [ 752.159801] disk_force_media_change+0x1e/0xc0 [ 752.160730] loop_configure+0x75b/0x1950 08:05:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x14}], 0x1, 0x0, 0x0, 0x800a}, 0x0) read(r0, &(0x7f0000000000)=""/97, 0x61) 08:05:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(r2, &(0x7f0000000000)='./file1\x00', 0x500, 0x100) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 21) 08:05:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 33) 08:05:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 40) 08:05:55 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) 08:05:55 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 34) 08:05:55 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) [ 752.161548] ? putname+0xfe/0x140 [ 752.162503] lo_ioctl+0x782/0x1860 [ 752.163238] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.164223] ? loop_set_status_old+0x1b0/0x1b0 [ 752.165148] ? fsnotify+0xb4f/0x1250 [ 752.165901] ? avc_ss_reset+0x180/0x180 [ 752.166754] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.167677] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.168632] ? lock_acquire+0x41c/0x4d0 [ 752.169424] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.170386] ? lock_release+0x505/0x6f0 [ 752.171187] ? find_and_remove_object+0xe4/0x120 [ 752.172156] ? __delete_object+0xb3/0x100 [ 752.172999] ? lock_downgrade+0x6d0/0x6d0 [ 752.173840] ? rwlock_bug.part.0+0x90/0x90 [ 752.174713] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.175689] ? selinux_inode_getsecctx+0x90/0x90 [ 752.176679] ? loop_set_status_old+0x1b0/0x1b0 [ 752.177626] blkdev_ioctl+0x362/0x7f0 [ 752.178411] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.179366] ? __x64_sys_ioctl+0x97/0x210 [ 752.180195] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.181291] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.182242] __x64_sys_ioctl+0x196/0x210 [ 752.183065] do_syscall_64+0x3b/0x90 [ 752.183820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.184850] RIP: 0033:0x7f9aebdc68d7 [ 752.185589] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.189275] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.190810] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 752.192231] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.193655] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.195086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.196496] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 752.197923] [ 752.210565] FAULT_INJECTION: forcing a failure. [ 752.210565] name failslab, interval 1, probability 0, space 0, times 0 [ 752.212916] CPU: 1 PID: 7079 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.214863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.217168] Call Trace: [ 752.217686] [ 752.218139] dump_stack_lvl+0x8b/0xb3 [ 752.218944] should_fail.cold+0x5/0xa [ 752.219842] ? create_object.isra.0+0x3a/0xa20 [ 752.220770] should_failslab+0x5/0x10 [ 752.221528] kmem_cache_alloc+0x5b/0x480 [ 752.222367] create_object.isra.0+0x3a/0xa20 [ 752.223262] ? kasan_unpoison+0x23/0x50 [ 752.224063] kmem_cache_alloc_node+0x248/0x490 [ 752.224988] alloc_unbound_pwq+0x4ad/0xd70 [ 752.225840] apply_wqattrs_prepare+0x2a4/0x880 [ 752.226790] ? is_kernel_percpu_address+0xe6/0x110 [ 752.227783] apply_workqueue_attrs_locked+0xc1/0x140 [ 752.228803] alloc_workqueue+0xb1a/0xeb0 [ 752.229621] ? do_raw_spin_unlock+0x4f/0x210 [ 752.230517] ? _raw_spin_unlock+0x24/0x40 [ 752.231359] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 752.232362] ? __fget_files+0x28d/0x470 [ 752.233159] ? loop_configure+0x62b/0x1950 [ 752.234002] loop_configure+0x6ec/0x1950 [ 752.234825] ? putname+0xfe/0x140 [ 752.235537] lo_ioctl+0x782/0x1860 [ 752.236259] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.237237] ? loop_set_status_old+0x1b0/0x1b0 [ 752.238155] ? fsnotify+0xb4f/0x1250 [ 752.238911] ? avc_ss_reset+0x180/0x180 [ 752.239722] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.240640] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.241584] ? lock_acquire+0x41c/0x4d0 [ 752.242389] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.243345] ? lock_release+0x505/0x6f0 [ 752.244155] ? find_and_remove_object+0xe4/0x120 [ 752.245124] ? __delete_object+0xb3/0x100 [ 752.245529] loop5: detected capacity change from 0 to 128 [ 752.245950] ? lock_downgrade+0x6d0/0x6d0 [ 752.245976] ? rwlock_bug.part.0+0x90/0x90 [ 752.248855] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.249820] ? selinux_inode_getsecctx+0x90/0x90 [ 752.250784] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.251745] ? loop_set_status_old+0x1b0/0x1b0 [ 752.252003] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 752.252661] blkdev_ioctl+0x362/0x7f0 [ 752.252686] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.256047] ? __x64_sys_ioctl+0x97/0x210 [ 752.256881] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.257980] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.258932] __x64_sys_ioctl+0x196/0x210 [ 752.259749] do_syscall_64+0x3b/0x90 [ 752.260510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.261539] RIP: 0033:0x7f22ed51d8d7 [ 752.262281] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.265966] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.267508] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 752.268943] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.270402] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.271858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.273313] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 752.274794] [ 752.276005] FAULT_INJECTION: forcing a failure. [ 752.276005] name failslab, interval 1, probability 0, space 0, times 0 [ 752.278263] CPU: 1 PID: 7080 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.280198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.282479] Call Trace: [ 752.282988] [ 752.283451] dump_stack_lvl+0x8b/0xb3 [ 752.284227] should_fail.cold+0x5/0xa [ 752.284992] ? alloc_workqueue+0x914/0xeb0 [ 752.285850] should_failslab+0x5/0x10 [ 752.286658] __kmalloc+0x72/0x440 [ 752.287363] alloc_workqueue+0x914/0xeb0 [ 752.288186] ? do_raw_spin_unlock+0x4f/0x210 [ 752.289076] ? _raw_spin_unlock+0x24/0x40 [ 752.289927] ? bd_prepare_to_claim+0x164/0x300 [ 752.290873] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 752.291898] ? __fget_files+0x28d/0x470 [ 752.292702] ? loop_configure+0x62b/0x1950 [ 752.293558] loop_configure+0x6ec/0x1950 [ 752.294408] ? putname+0xfe/0x140 [ 752.295130] lo_ioctl+0x782/0x1860 [ 752.295854] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.296847] ? loop_set_status_old+0x1b0/0x1b0 [ 752.297794] ? fsnotify+0xb4f/0x1250 [ 752.298582] ? avc_ss_reset+0x180/0x180 [ 752.299394] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.300315] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.301267] ? lock_acquire+0x41c/0x4d0 [ 752.302058] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.303028] ? lock_release+0x505/0x6f0 [ 752.303826] ? find_and_remove_object+0xe4/0x120 [ 752.304789] ? __delete_object+0xb3/0x100 [ 752.305629] ? lock_downgrade+0x6d0/0x6d0 [ 752.306494] ? rwlock_bug.part.0+0x90/0x90 [ 752.307344] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.308310] ? selinux_inode_getsecctx+0x90/0x90 [ 752.309284] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.310260] ? loop_set_status_old+0x1b0/0x1b0 [ 752.311204] blkdev_ioctl+0x362/0x7f0 [ 752.311970] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.312938] ? __x64_sys_ioctl+0x97/0x210 [ 752.313779] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.314923] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.315865] __x64_sys_ioctl+0x196/0x210 [ 752.316697] do_syscall_64+0x3b/0x90 [ 752.317457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.318494] RIP: 0033:0x7f432f5bb8d7 [ 752.319239] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.323029] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.324556] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 752.325977] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.327412] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.328841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.330269] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 752.331714] 08:05:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x80000001, 0x200, 0x20, 0x6, 0x3, 0x97}, {0x49804369, 0x94d, 0x3, 0x5, 0xbd, 0x4}], ['\x00']}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) getdents(r2, &(0x7f0000000000)=""/204, 0xcc) 08:05:56 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 08:05:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(r2, &(0x7f0000000000)='./file1\x00', 0x400100, 0x2) fallocate(r1, 0x10, 0x0, 0x2) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2400, 0x2bc) lseek(r0, 0x0, 0x4) 08:05:56 executing program 7: r0 = gettid() capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0xf3b1, 0x5, 0x0, 0x7, 0x7fff, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) fdatasync(r3) fallocate(r2, 0x10, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000004600)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) read(0xffffffffffffffff, &(0x7f0000000000)=""/227, 0xe3) lseek(r1, 0x0, 0x4) [ 752.358790] FAULT_INJECTION: forcing a failure. [ 752.358790] name failslab, interval 1, probability 0, space 0, times 0 [ 752.361109] CPU: 0 PID: 7084 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.363002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.365298] Call Trace: [ 752.365805] [ 752.366256] dump_stack_lvl+0x8b/0xb3 [ 752.367059] should_fail.cold+0x5/0xa [ 752.367838] ? alloc_workqueue_attrs+0x38/0x80 [ 752.368784] should_failslab+0x5/0x10 [ 752.369554] kmem_cache_alloc_trace+0x55/0x3c0 [ 752.370488] alloc_workqueue_attrs+0x38/0x80 [ 752.371368] apply_wqattrs_prepare+0xb3/0x880 [ 752.372268] apply_workqueue_attrs_locked+0xc1/0x140 [ 752.373280] alloc_workqueue+0xb1a/0xeb0 [ 752.374091] ? do_raw_spin_unlock+0x4f/0x210 [ 752.374977] ? _raw_spin_unlock+0x24/0x40 [ 752.375810] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 752.376810] ? __fget_files+0x28d/0x470 [ 752.377598] ? loop_configure+0x62b/0x1950 [ 752.378462] loop_configure+0x6ec/0x1950 [ 752.379278] ? putname+0xfe/0x140 [ 752.379977] lo_ioctl+0x782/0x1860 [ 752.380687] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.381656] ? loop_set_status_old+0x1b0/0x1b0 [ 752.382570] ? fsnotify+0xb4f/0x1250 [ 752.383307] ? avc_ss_reset+0x180/0x180 [ 752.384106] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.385015] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.385954] ? lock_acquire+0x41c/0x4d0 [ 752.386751] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.387692] ? lock_release+0x505/0x6f0 [ 752.388479] ? find_and_remove_object+0xe4/0x120 [ 752.389424] ? __delete_object+0xb3/0x100 [ 752.390254] ? lock_downgrade+0x6d0/0x6d0 [ 752.391095] ? rwlock_bug.part.0+0x90/0x90 [ 752.391935] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.392888] ? selinux_inode_getsecctx+0x90/0x90 [ 752.393836] ? loop_set_status_old+0x1b0/0x1b0 [ 752.394752] blkdev_ioctl+0x362/0x7f0 [ 752.395504] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.396441] ? __x64_sys_ioctl+0x97/0x210 [ 752.397262] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.398362] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.399299] __x64_sys_ioctl+0x196/0x210 [ 752.400107] do_syscall_64+0x3b/0x90 [ 752.400859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.401879] RIP: 0033:0x7faf15eb38d7 [ 752.402625] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.406256] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.407762] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 752.409169] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.410581] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.411990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.413396] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 752.414826] 08:05:56 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r1, &(0x7f0000ff0000/0x3000)=nil, 0x4000) 08:05:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x4) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:05:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 22) 08:05:56 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 41) [ 752.499170] ISOFS: Unable to identify CD-ROM format. [ 752.539168] FAULT_INJECTION: forcing a failure. [ 752.539168] name failslab, interval 1, probability 0, space 0, times 0 [ 752.541480] CPU: 1 PID: 7104 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.543421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.544168] FAULT_INJECTION: forcing a failure. [ 752.544168] name failslab, interval 1, probability 0, space 0, times 0 [ 752.545703] Call Trace: [ 752.545712] [ 752.545720] dump_stack_lvl+0x8b/0xb3 [ 752.549674] should_fail.cold+0x5/0xa [ 752.550446] ? create_object.isra.0+0x3a/0xa20 [ 752.551366] should_failslab+0x5/0x10 [ 752.552123] kmem_cache_alloc+0x5b/0x480 [ 752.552940] create_object.isra.0+0x3a/0xa20 [ 752.553825] ? kasan_unpoison+0x23/0x50 [ 752.554634] __kmalloc+0x25b/0x440 [ 752.555348] alloc_workqueue+0x914/0xeb0 [ 752.556166] ? do_raw_spin_unlock+0x4f/0x210 [ 752.557049] ? _raw_spin_unlock+0x24/0x40 [ 752.557885] ? bd_prepare_to_claim+0x164/0x300 [ 752.558824] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 752.559830] ? __fget_files+0x28d/0x470 [ 752.560637] ? loop_configure+0x62b/0x1950 [ 752.561499] loop_configure+0x6ec/0x1950 [ 752.562322] ? putname+0xfe/0x140 [ 752.563028] lo_ioctl+0x782/0x1860 [ 752.563738] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.564716] ? loop_set_status_old+0x1b0/0x1b0 [ 752.565638] ? fsnotify+0xb4f/0x1250 [ 752.566397] ? avc_ss_reset+0x180/0x180 [ 752.567208] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.568116] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.569059] ? lock_acquire+0x41c/0x4d0 [ 752.569852] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.570802] ? lock_release+0x505/0x6f0 [ 752.571592] ? find_and_remove_object+0xe4/0x120 [ 752.572541] ? __delete_object+0xb3/0x100 [ 752.573375] ? lock_downgrade+0x6d0/0x6d0 [ 752.574202] ? rwlock_bug.part.0+0x90/0x90 [ 752.575064] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.576019] ? selinux_inode_getsecctx+0x90/0x90 [ 752.576981] ? loop_set_status_old+0x1b0/0x1b0 [ 752.577893] blkdev_ioctl+0x362/0x7f0 [ 752.578672] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.579614] ? __x64_sys_ioctl+0x97/0x210 [ 752.580447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.581557] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.582510] __x64_sys_ioctl+0x196/0x210 [ 752.583330] do_syscall_64+0x3b/0x90 [ 752.584083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.585113] RIP: 0033:0x7f432f5bb8d7 [ 752.585844] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.589506] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.591018] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 752.592457] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.593890] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.595336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.596770] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 752.598212] [ 752.598683] CPU: 0 PID: 7105 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 752.600620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 752.602877] Call Trace: [ 752.603386] [ 752.603827] dump_stack_lvl+0x8b/0xb3 [ 752.604600] should_fail.cold+0x5/0xa [ 752.605365] ? kobject_get_path+0xc0/0x1d0 [ 752.606214] should_failslab+0x5/0x10 [ 752.606985] __kmalloc+0x72/0x440 [ 752.607681] kobject_get_path+0xc0/0x1d0 [ 752.608496] kobject_uevent_env+0x25c/0xfa0 [ 752.609364] ? _raw_spin_unlock+0x24/0x40 [ 752.610203] disk_event_uevent+0x17b/0x1e0 [ 752.611092] ? disk_events_async_show+0x10/0x10 [ 752.612028] ? __fget_files+0x28d/0x470 [ 752.612821] disk_force_media_change+0x1e/0xc0 [ 752.613734] loop_configure+0x75b/0x1950 [ 752.614554] ? putname+0xfe/0x140 [ 752.615257] lo_ioctl+0x782/0x1860 [ 752.615966] ? avc_has_extended_perms+0x7e8/0xeb0 [ 752.616938] ? loop_set_status_old+0x1b0/0x1b0 [ 752.617848] ? fsnotify+0xb4f/0x1250 [ 752.618606] ? avc_ss_reset+0x180/0x180 [ 752.619408] ? fsnotify_first_mark+0x1f0/0x1f0 [ 752.620314] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.621255] ? lock_acquire+0x41c/0x4d0 [ 752.622045] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.622991] ? lock_release+0x505/0x6f0 [ 752.623780] ? find_and_remove_object+0xe4/0x120 [ 752.624728] ? __delete_object+0xb3/0x100 [ 752.625562] ? lock_downgrade+0x6d0/0x6d0 [ 752.626392] ? rwlock_bug.part.0+0x90/0x90 [ 752.627234] ? rcu_read_lock_sched_held+0xd/0x70 [ 752.628191] ? selinux_inode_getsecctx+0x90/0x90 [ 752.629139] ? loop_set_status_old+0x1b0/0x1b0 [ 752.630049] blkdev_ioctl+0x362/0x7f0 [ 752.630819] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.631982] ? __x64_sys_ioctl+0x97/0x210 [ 752.633062] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 752.634351] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 752.635313] __x64_sys_ioctl+0x196/0x210 [ 752.636140] do_syscall_64+0x3b/0x90 [ 752.636940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.638008] RIP: 0033:0x7f9aebdc68d7 [ 752.638761] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.642420] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.643927] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 752.645341] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 752.646786] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 752.648203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 752.649613] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 752.651056] [ 752.661941] loop5: detected capacity change from 0 to 128 [ 752.676874] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 752.689460] ISOFS: Unable to identify CD-ROM format. 08:06:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 23) 08:06:08 executing program 2: syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) 08:06:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 35) 08:06:08 executing program 6: r0 = gettid() capset(&(0x7f00000001c0)={0x19980330, r0}, &(0x7f0000000200)={0xf3b1, 0x5, 0x0, 0x7, 0x7fff, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) fdatasync(r3) fallocate(r2, 0x10, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000004600)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f00000023c0)={0x14}, 0x14}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) read(0xffffffffffffffff, &(0x7f0000000000)=""/227, 0xe3) lseek(r1, 0x0, 0x4) 08:06:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 34) 08:06:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) lseek(r0, 0x0, 0x4) 08:06:08 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) 08:06:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 42) [ 764.234601] FAULT_INJECTION: forcing a failure. [ 764.234601] name failslab, interval 1, probability 0, space 0, times 0 [ 764.236317] CPU: 1 PID: 7120 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.237702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.239954] Call Trace: [ 764.240559] [ 764.241083] dump_stack_lvl+0x8b/0xb3 [ 764.241991] should_fail.cold+0x5/0xa [ 764.242440] FAULT_INJECTION: forcing a failure. [ 764.242440] name failslab, interval 1, probability 0, space 0, times 0 [ 764.242924] ? create_object.isra.0+0x3a/0xa20 [ 764.246367] should_failslab+0x5/0x10 [ 764.247263] kmem_cache_alloc+0x5b/0x480 [ 764.248220] create_object.isra.0+0x3a/0xa20 [ 764.249259] ? kasan_unpoison+0x23/0x50 [ 764.250204] kmem_cache_alloc_trace+0x22e/0x3c0 [ 764.251303] alloc_workqueue_attrs+0x38/0x80 [ 764.252341] apply_wqattrs_prepare+0xb3/0x880 [ 764.253397] ? is_kernel_percpu_address+0xe6/0x110 [ 764.254590] apply_workqueue_attrs_locked+0xc1/0x140 [ 764.255700] alloc_workqueue+0xb1a/0xeb0 [ 764.256556] ? do_raw_spin_unlock+0x4f/0x210 [ 764.257486] ? _raw_spin_unlock+0x24/0x40 [ 764.258367] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 764.259453] ? __fget_files+0x28d/0x470 [ 764.260294] ? loop_configure+0x62b/0x1950 [ 764.261185] loop_configure+0x6ec/0x1950 [ 764.262043] ? putname+0xfe/0x140 [ 764.262789] lo_ioctl+0x782/0x1860 [ 764.263539] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.264564] ? loop_set_status_old+0x1b0/0x1b0 [ 764.265522] ? fsnotify+0xb4f/0x1250 [ 764.266303] ? avc_ss_reset+0x180/0x180 [ 764.267165] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.268121] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.269112] ? lock_acquire+0x41c/0x4d0 [ 764.269945] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.270941] ? lock_release+0x505/0x6f0 [ 764.271772] ? find_and_remove_object+0xe4/0x120 [ 764.272772] ? __delete_object+0xb3/0x100 [ 764.273647] ? lock_downgrade+0x6d0/0x6d0 [ 764.274526] ? rwlock_bug.part.0+0x90/0x90 [ 764.275414] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.276418] ? selinux_inode_getsecctx+0x90/0x90 [ 764.277416] ? loop_set_status_old+0x1b0/0x1b0 [ 764.278372] blkdev_ioctl+0x362/0x7f0 [ 764.279172] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.280157] ? __x64_sys_ioctl+0x97/0x210 [ 764.281021] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.282173] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.283164] __x64_sys_ioctl+0x196/0x210 [ 764.284013] do_syscall_64+0x3b/0x90 [ 764.284804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.285882] RIP: 0033:0x7faf15eb38d7 [ 764.286667] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.290503] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.292085] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 764.293569] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.295068] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.296553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.298036] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 764.299538] [ 764.300022] CPU: 0 PID: 7122 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.302071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.304502] Call Trace: [ 764.305050] [ 764.305523] dump_stack_lvl+0x8b/0xb3 [ 764.306354] should_fail.cold+0x5/0xa [ 764.307185] ? alloc_workqueue_attrs+0x38/0x80 [ 764.308174] should_failslab+0x5/0x10 [ 764.308986] kmem_cache_alloc_trace+0x55/0x3c0 [ 764.309967] alloc_workqueue_attrs+0x38/0x80 [ 764.310925] alloc_workqueue+0x939/0xeb0 [ 764.311791] ? do_raw_spin_unlock+0x4f/0x210 [ 764.312728] ? _raw_spin_unlock+0x24/0x40 [ 764.313619] ? bd_prepare_to_claim+0x164/0x300 [ 764.314610] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 764.315674] ? __fget_files+0x28d/0x470 [ 764.316519] ? loop_configure+0x62b/0x1950 [ 764.317420] loop_configure+0x6ec/0x1950 [ 764.318285] ? putname+0xfe/0x140 [ 764.319048] lo_ioctl+0x782/0x1860 [ 764.319808] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.320844] ? loop_set_status_old+0x1b0/0x1b0 [ 764.321817] ? fsnotify+0xb4f/0x1250 [ 764.322610] ? avc_ss_reset+0x180/0x180 [ 764.323462] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.324427] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.325430] ? lock_acquire+0x41c/0x4d0 [ 764.326273] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.327280] ? lock_release+0x505/0x6f0 [ 764.328123] ? find_and_remove_object+0xe4/0x120 [ 764.329132] ? __delete_object+0xb3/0x100 [ 764.330019] ? lock_downgrade+0x6d0/0x6d0 [ 764.330915] ? rwlock_bug.part.0+0x90/0x90 [ 764.331818] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.332839] ? selinux_inode_getsecctx+0x90/0x90 [ 764.333852] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.334865] ? loop_set_status_old+0x1b0/0x1b0 [ 764.335839] blkdev_ioctl+0x362/0x7f0 [ 764.336644] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.337644] ? __x64_sys_ioctl+0x97/0x210 [ 764.338532] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.339708] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.340713] __x64_sys_ioctl+0x196/0x210 [ 764.341577] do_syscall_64+0x3b/0x90 [ 764.342380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.343488] RIP: 0033:0x7f432f5bb8d7 [ 764.344264] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.348178] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.349808] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 764.351352] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.352890] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.354432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.355991] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 764.357536] [ 764.360592] FAULT_INJECTION: forcing a failure. [ 764.360592] name failslab, interval 1, probability 0, space 0, times 0 [ 764.360805] loop0: detected capacity change from 0 to 128 08:06:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 764.363116] CPU: 1 PID: 7125 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.366430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.368816] Call Trace: [ 764.369355] [ 764.369822] dump_stack_lvl+0x8b/0xb3 [ 764.370648] should_fail.cold+0x5/0xa [ 764.371456] ? kobject_uevent_env+0x236/0xfa0 [ 764.372408] should_failslab+0x5/0x10 [ 764.373206] kmem_cache_alloc_trace+0x55/0x3c0 [ 764.374176] kobject_uevent_env+0x236/0xfa0 [ 764.375107] ? dev_uevent_filter+0xd0/0xd0 [ 764.376001] ? _raw_spin_unlock+0x24/0x40 [ 764.376888] disk_event_uevent+0x17b/0x1e0 [ 764.377787] ? disk_events_async_show+0x10/0x10 [ 764.378777] ? __fget_files+0x28d/0x470 [ 764.379617] disk_force_media_change+0x1e/0xc0 [ 764.380585] loop_configure+0x75b/0x1950 [ 764.381448] ? putname+0xfe/0x140 [ 764.382192] lo_ioctl+0x782/0x1860 [ 764.382970] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.384005] ? loop_set_status_old+0x1b0/0x1b0 [ 764.384969] ? fsnotify+0xb4f/0x1250 [ 764.385755] ? avc_ss_reset+0x180/0x180 [ 764.386617] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.387580] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.388581] ? lock_acquire+0x41c/0x4d0 [ 764.389419] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.390415] ? lock_release+0x505/0x6f0 [ 764.391258] ? find_and_remove_object+0xe4/0x120 [ 764.392267] ? __delete_object+0xb3/0x100 [ 764.393150] ? lock_downgrade+0x6d0/0x6d0 [ 764.394027] ? rwlock_bug.part.0+0x90/0x90 [ 764.394936] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.395949] ? selinux_inode_getsecctx+0x90/0x90 [ 764.396956] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.397955] ? loop_set_status_old+0x1b0/0x1b0 [ 764.398930] blkdev_ioctl+0x362/0x7f0 [ 764.399732] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.400724] ? __x64_sys_ioctl+0x97/0x210 [ 764.401594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.402771] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.403766] __x64_sys_ioctl+0x196/0x210 [ 764.404620] do_syscall_64+0x3b/0x90 [ 764.405418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.406508] RIP: 0033:0x7f22ed51d8d7 [ 764.407372] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.411047] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.412548] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 08:06:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x202100, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:06:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 24) [ 764.413954] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.415561] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.416976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.418387] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 764.419821] [ 764.419846] FAULT_INJECTION: forcing a failure. [ 764.419846] name failslab, interval 1, probability 0, space 0, times 0 [ 764.422799] CPU: 0 PID: 7126 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.424886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.427355] Call Trace: [ 764.427912] [ 764.428397] dump_stack_lvl+0x8b/0xb3 [ 764.429244] should_fail.cold+0x5/0xa [ 764.430080] ? create_object.isra.0+0x3a/0xa20 [ 764.431104] should_failslab+0x5/0x10 [ 764.431929] kmem_cache_alloc+0x5b/0x480 [ 764.432812] create_object.isra.0+0x3a/0xa20 [ 764.433776] ? kasan_unpoison+0x23/0x50 [ 764.434658] __kmalloc+0x25b/0x440 [ 764.435433] kobject_get_path+0xc0/0x1d0 [ 764.436325] kobject_uevent_env+0x25c/0xfa0 [ 764.437272] ? _raw_spin_unlock+0x24/0x40 [ 764.438185] disk_event_uevent+0x17b/0x1e0 [ 764.439122] ? disk_events_async_show+0x10/0x10 [ 764.440138] ? __fget_files+0x28d/0x470 [ 764.441006] disk_force_media_change+0x1e/0xc0 [ 764.442003] loop_configure+0x75b/0x1950 [ 764.442903] ? putname+0xfe/0x140 [ 764.443669] lo_ioctl+0x782/0x1860 [ 764.444111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.444443] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.447280] ? loop_set_status_old+0x1b0/0x1b0 [ 764.447330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.448273] ? fsnotify+0xb4f/0x1250 [ 764.448302] ? avc_ss_reset+0x180/0x180 [ 764.451700] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.452691] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.453718] ? lock_acquire+0x41c/0x4d0 [ 764.454594] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.455622] ? lock_release+0x505/0x6f0 [ 764.456485] ? find_and_remove_object+0xe4/0x120 [ 764.457520] ? __delete_object+0xb3/0x100 [ 764.458430] ? lock_downgrade+0x6d0/0x6d0 [ 764.459348] ? rwlock_bug.part.0+0x90/0x90 [ 764.460274] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.461319] ? selinux_inode_getsecctx+0x90/0x90 [ 764.462361] ? loop_set_status_old+0x1b0/0x1b0 [ 764.462943] ISOFS: Unable to identify CD-ROM format. [ 764.463360] blkdev_ioctl+0x362/0x7f0 [ 764.463385] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.466209] ? __x64_sys_ioctl+0x97/0x210 [ 764.467112] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.468307] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.469337] __x64_sys_ioctl+0x196/0x210 [ 764.470220] do_syscall_64+0x3b/0x90 [ 764.471055] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.472170] RIP: 0033:0x7f9aebdc68d7 [ 764.472968] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.476940] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.478582] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 764.480118] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.481653] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.483207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.484743] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 764.486285] [ 764.499798] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:06:08 executing program 6: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0x402) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x1, 0x3, 0x11}) openat$sr(0xffffffffffffff9c, &(0x7f0000001880), 0x40280, 0x0) 08:06:08 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 764.522200] FAULT_INJECTION: forcing a failure. [ 764.522200] name failslab, interval 1, probability 0, space 0, times 0 [ 764.524522] CPU: 0 PID: 7136 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.526399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.528711] Call Trace: [ 764.529216] [ 764.529672] dump_stack_lvl+0x8b/0xb3 [ 764.530425] should_fail.cold+0x5/0xa [ 764.531227] ? create_object.isra.0+0x3a/0xa20 [ 764.532137] should_failslab+0x5/0x10 [ 764.532878] kmem_cache_alloc+0x5b/0x480 [ 764.533691] create_object.isra.0+0x3a/0xa20 [ 764.534615] ? kasan_unpoison+0x23/0x50 [ 764.535497] kmem_cache_alloc_trace+0x22e/0x3c0 [ 764.536539] alloc_workqueue_attrs+0x38/0x80 [ 764.537510] alloc_workqueue+0x939/0xeb0 [ 764.538422] ? do_raw_spin_unlock+0x4f/0x210 [ 764.539406] ? _raw_spin_unlock+0x24/0x40 [ 764.540319] ? bd_prepare_to_claim+0x164/0x300 [ 764.541323] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 764.542416] ? __fget_files+0x28d/0x470 [ 764.543293] ? loop_configure+0x62b/0x1950 [ 764.544154] loop_configure+0x6ec/0x1950 [ 764.544949] ? putname+0xfe/0x140 [ 764.545636] lo_ioctl+0x782/0x1860 [ 764.546343] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.547315] ? loop_set_status_old+0x1b0/0x1b0 [ 764.548227] ? fsnotify+0xb4f/0x1250 [ 764.548952] ? avc_ss_reset+0x180/0x180 [ 764.549739] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.550642] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.551793] ? lock_acquire+0x41c/0x4d0 [ 764.552678] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.553729] ? lock_release+0x505/0x6f0 [ 764.554624] ? find_and_remove_object+0xe4/0x120 [ 764.555747] ? __delete_object+0xb3/0x100 [ 764.556682] ? lock_downgrade+0x6d0/0x6d0 [ 764.557596] ? rwlock_bug.part.0+0x90/0x90 [ 764.558551] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.559624] ? selinux_inode_getsecctx+0x90/0x90 [ 764.560663] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.561712] ? loop_set_status_old+0x1b0/0x1b0 [ 764.562743] blkdev_ioctl+0x362/0x7f0 [ 764.563579] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.564624] ? __x64_sys_ioctl+0x97/0x210 [ 764.565558] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.566810] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.567856] __x64_sys_ioctl+0x196/0x210 [ 764.568755] do_syscall_64+0x3b/0x90 [ 764.569593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.570745] RIP: 0033:0x7f432f5bb8d7 [ 764.571562] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.575658] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.577329] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 764.578801] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.580366] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.581825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.583399] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 764.584978] 08:06:08 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 36) 08:06:08 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:06:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 35) [ 764.618114] FAULT_INJECTION: forcing a failure. [ 764.618114] name failslab, interval 1, probability 0, space 0, times 0 [ 764.620455] CPU: 1 PID: 7144 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.622402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.624709] Call Trace: [ 764.625244] [ 764.625705] dump_stack_lvl+0x8b/0xb3 [ 764.626507] should_fail.cold+0x5/0xa [ 764.627282] ? create_object.isra.0+0x3a/0xa20 [ 764.628214] should_failslab+0x5/0x10 [ 764.628980] kmem_cache_alloc+0x5b/0x480 [ 764.629811] create_object.isra.0+0x3a/0xa20 [ 764.630725] ? kasan_unpoison+0x23/0x50 [ 764.631529] kmem_cache_alloc_trace+0x22e/0x3c0 [ 764.632459] kobject_uevent_env+0x236/0xfa0 [ 764.633335] ? dev_uevent_filter+0xd0/0xd0 [ 764.634199] ? _raw_spin_unlock+0x24/0x40 [ 764.635087] disk_event_uevent+0x17b/0x1e0 [ 764.635941] ? disk_events_async_show+0x10/0x10 [ 764.636876] ? __fget_files+0x28d/0x470 [ 764.637667] disk_force_media_change+0x1e/0xc0 [ 764.638673] loop_configure+0x75b/0x1950 [ 764.639712] ? putname+0xfe/0x140 [ 764.640604] lo_ioctl+0x782/0x1860 [ 764.641505] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.642761] ? loop_set_status_old+0x1b0/0x1b0 [ 764.643027] FAULT_INJECTION: forcing a failure. [ 764.643027] name failslab, interval 1, probability 0, space 0, times 0 [ 764.643908] ? fsnotify+0xb4f/0x1250 [ 764.647121] ? avc_ss_reset+0x180/0x180 [ 764.647936] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.648858] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.649812] ? lock_acquire+0x41c/0x4d0 [ 764.650626] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.651569] ? lock_release+0x505/0x6f0 [ 764.652370] ? find_and_remove_object+0xe4/0x120 [ 764.653326] ? __delete_object+0xb3/0x100 [ 764.654171] ? lock_downgrade+0x6d0/0x6d0 [ 764.655021] ? rwlock_bug.part.0+0x90/0x90 [ 764.655873] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.656834] ? selinux_inode_getsecctx+0x90/0x90 [ 764.657798] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.658759] ? loop_set_status_old+0x1b0/0x1b0 [ 764.659666] blkdev_ioctl+0x362/0x7f0 [ 764.660431] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.661378] ? __x64_sys_ioctl+0x97/0x210 [ 764.662222] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.663348] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.664295] __x64_sys_ioctl+0x196/0x210 [ 764.665113] do_syscall_64+0x3b/0x90 [ 764.665871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.666914] RIP: 0033:0x7f22ed51d8d7 [ 764.667647] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.671322] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.672841] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 764.674253] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.675683] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.677115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.678530] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 764.679960] [ 764.680421] CPU: 0 PID: 7148 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.682568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.684975] Call Trace: [ 764.685543] [ 764.686035] dump_stack_lvl+0x8b/0xb3 [ 764.686919] should_fail.cold+0x5/0xa [ 764.687771] ? alloc_workqueue_attrs+0x38/0x80 [ 764.688795] should_failslab+0x5/0x10 [ 764.689635] kmem_cache_alloc_trace+0x55/0x3c0 [ 764.690667] alloc_workqueue_attrs+0x38/0x80 [ 764.691649] apply_wqattrs_prepare+0xbb/0x880 [ 764.692650] ? is_kernel_percpu_address+0xe6/0x110 [ 764.693758] apply_workqueue_attrs_locked+0xc1/0x140 [ 764.694910] alloc_workqueue+0xb1a/0xeb0 [ 764.695821] ? do_raw_spin_unlock+0x4f/0x210 [ 764.696806] ? _raw_spin_unlock+0x24/0x40 [ 764.697740] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 764.698869] ? __fget_files+0x28d/0x470 [ 764.699750] ? loop_configure+0x62b/0x1950 [ 764.700695] loop_configure+0x6ec/0x1950 [ 764.701604] ? putname+0xfe/0x140 [ 764.702388] lo_ioctl+0x782/0x1860 [ 764.703199] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.704287] ? loop_set_status_old+0x1b0/0x1b0 [ 764.705302] ? arch_stack_walk+0x99/0xf0 [ 764.706209] ? avc_ss_reset+0x180/0x180 [ 764.707112] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.708160] ? lock_acquire+0x41c/0x4d0 [ 764.709042] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.710092] ? lock_release+0x505/0x6f0 [ 764.710988] ? find_and_remove_object+0xe4/0x120 [ 764.712050] ? __delete_object+0xb3/0x100 [ 764.712980] ? lock_downgrade+0x6d0/0x6d0 [ 764.713900] ? rwlock_bug.part.0+0x90/0x90 [ 764.714848] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.715915] ? selinux_inode_getsecctx+0x90/0x90 [ 764.716980] ? loop_set_status_old+0x1b0/0x1b0 [ 764.718001] blkdev_ioctl+0x362/0x7f0 [ 764.718849] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.719897] ? __x64_sys_ioctl+0x97/0x210 [ 764.720815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.722032] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.723267] __x64_sys_ioctl+0x196/0x210 [ 764.724082] do_syscall_64+0x3b/0x90 [ 764.724834] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.725859] RIP: 0033:0x7faf15eb38d7 [ 764.726378] loop5: detected capacity change from 0 to 128 [ 764.726599] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.731371] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.732895] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 764.734310] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.735729] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.737139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.738564] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 764.739986] [ 764.771220] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:06:08 executing program 7: r0 = syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x499, 0x3, &(0x7f00000008c0)=[{&(0x7f0000000680)="8b882f2ed6b6756a2450ba5fafeb4f00df59b38ddc1e05c82c92f9c84bfaba9a09d671963a26997eb9d41d5772203a8c90ea3f8e0399e19e60d7a7aab825304ca1bb7b84ebfc1d10b8dbbf4d719c2f912f51200483a83ae04bca166e598e3618ae8f34dbff9b86a3f317c19475e2ed7578de45fc884486cb34e1fe523c000c29302aa35ea2d02377f85cc9a179085cf49e816780f7366e957f33d3e8c2", 0x9d, 0x4}, {&(0x7f0000000740)="7753909066d2471d72e6531f7b78f9bf035bc86977e13899f42b773d73b903abc2343d4c451277951d6f35befdec0190be9c21af1702a34b12140634504acd59ad29e7e9aade94d5da6d97ff4bc67bca2c8a91f94ac2024a9bcfa4af2a61c1e2302f1b5a515a35576b0bd32d1bfa026e", 0x70, 0xffffffffffffecd4}, {&(0x7f00000007c0)="221f9809703a894069daa268fc73b0693bbe77f9bd4a33112649ad4f613f554a92e0cb68ab64c091379a67f2df429be62f85b4c1e6d748fe59fdd6c1ebe80e3e04b8aca511f98f0f03098bfbc35b0e0561a3e75a9fb36cb7419d8e401ffa95ed3fd8ff8afe24941e0370abad55fb52974862422805b1466f8e21146d7277d6762b23de5a384d5d147f28191447c334f58a4aaa771eb7ff55f19c58f1f82722e4045d8c2e8288578604af30c69a3bc990e73b5decffde1f25b769c512d7e42238223a51124b8cec7f9c77938585dc959c087c91b831d0001413d16f68adebf13f50af", 0xe2, 0x8}], 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="646f74732c73686f77657865632c6e6f646f74732c6e6f646f74732c646f74732c646f74732c646f74732c646f745813a8eaef584c54816f6fdf276e5eb4732c736d61636b66737472616e736d7574653d6e6673002c7375626a5f757365723d272c7375626a5f757365723d2c646f6e745f61707072616973652c6673636f6e746578743d756e636f6e66696e65645f752c00"]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x10, 0x0, 0xfcb) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='\x00', 0x2, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000080)="b1cff5a6f84d414f39db78502803b619e380e4cac619", 0x16, 0x7}, {&(0x7f0000000140)="aeffd0d29fe3eacd13870b484b61f7100595c044633ceceb4bedd6d28b9905bd1149218f71d812b3289a00174bc08963d386df2d55b46882d9ea21d8f9599f1fb350b6fd2200ca9c1a83d6c4e91ea65287236b073be9baf3ff1d6d63efe1f5ee7ca52358c4326825416a59a7f3670ee86ea5f225f567049e", 0x78, 0x3}, {&(0x7f00000001c0)="d0414e6852982a9ca049082b9a5f862d0ba4dda936b35cd192600072f5b3ee7fd3cf952a50dcc69c00875695c9e90e19d46a48016b5879bd79afdf27239b8d503151989a9bb88e8f33f83294c2cdf33723583b62251d2c9579ed0924d3e4e62741d3f003a54be8d2e07f3c9f078a10108e7dba1a4445533760ff0799dff072c302f12178115bd7d04836f64bf138690f440cf3a6df8ce3d42a16d6ea438d66cb36558996d5a659f6b7dea284352717d3925dacadd1c623e1a92fc96919d38bc579bb03074c3afbcb0c860fea54613fbf90d44b58fc27adfa70c45e10", 0xdc, 0x9}, {&(0x7f00000002c0)="4313fa4fbb5698efb1ad52cdac2cbf45ac0cf71f72384a26e3474c3f15d26479e8490b8eec56d0b19e09a5382a7edeae08154946d8d01d041f2c215c248b2541b3901dbf52a05f27f5ffac82e02507167d7f89315b1315d34b49dd70137ed86f711ab3eab1896d4a4005819af85245bdd6098a156598890628a1e200d4cae7a27eadfba1af06ddea752ee154e0020f3f6f6eed752d8d4f305c52d2777600428fa824b9", 0xa3, 0x101}, {&(0x7f0000000380)="838a24242dc6724cd617609658d07cadd8634752605eef3812c03b4d601a740fc4473824631aed710be29111f996fee7cf5b0e745e7dc66d1b2eeb7e02449224b4c830d5e6873105c2e5bf91b4443067b86d90a51df7e0127a0ef7d0a75bb8c56811a279e8a650e73a07446ec13c47588abe76e1d41ee509d39ad24b3d2f08d6a2e95844a73efd7410c541f28998634558ddce95ab2b1613e3f253f3c8094bc8aeacaf9048ee7ad7b252bdcd8ae5e1a2705dca2b6e", 0xb5, 0x6}, {&(0x7f0000000440)="7a3fb1ec598224cb946782b88892213f3e56e25e6a3aa1ae106e3427b6aea0b4a087270f0c78a790d9320acc340f064fe0281c6127af983a904b358a76b5e3e4f94661ec4be14944fb019d77720e72885b840d76e7d523bec0e5540280cf49f55826c4b3d1319ea9777e8a85b200", 0x6e, 0x1f}], 0x40000, &(0x7f00000000c0)={[{'$\x84@\\\'*@'}, {'!..%\':,[:-*{\':^@'}, {'\''}], [{@subj_role={'subj_role', 0x3d, '}$&)\\&'}}]}) lseek(r1, 0x0, 0x4) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000005c0)=0x7) [ 764.783770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.786869] ISOFS: Unable to identify CD-ROM format. [ 764.787325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.818649] ISOFS: Unable to identify CD-ROM format. 08:06:08 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 764.845828] loop7: detected capacity change from 0 to 16364 08:06:08 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 764.862802] FAT-fs (loop7): Unrecognized mount option "dotX¨êïXLTooß'n^´s" or missing value 08:06:08 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 36) 08:06:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 25) 08:06:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 43) [ 764.904056] loop7: detected capacity change from 0 to 1 [ 764.918941] loop7: detected capacity change from 0 to 16364 [ 764.926514] FAT-fs (loop7): Unrecognized mount option "dotX¨êïXLTooß'n^´s" or missing value [ 764.932025] FAULT_INJECTION: forcing a failure. [ 764.932025] name failslab, interval 1, probability 0, space 0, times 0 [ 764.934376] CPU: 1 PID: 7161 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.936336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.938191] FAULT_INJECTION: forcing a failure. [ 764.938191] name failslab, interval 1, probability 0, space 0, times 0 [ 764.938666] Call Trace: [ 764.938677] [ 764.938686] dump_stack_lvl+0x8b/0xb3 [ 764.942591] should_fail.cold+0x5/0xa [ 764.943373] ? __alloc_skb+0x211/0x340 [ 764.944181] should_failslab+0x5/0x10 [ 764.944949] kmem_cache_alloc_node+0x55/0x490 [ 764.945930] __alloc_skb+0x211/0x340 [ 764.946905] alloc_uevent_skb+0x7b/0x210 [ 764.947942] kobject_uevent_env+0xaa4/0xfa0 [ 764.949045] ? _raw_spin_unlock+0x24/0x40 [ 764.950106] disk_event_uevent+0x17b/0x1e0 [ 764.951203] ? disk_events_async_show+0x10/0x10 [ 764.952233] ? __fget_files+0x28d/0x470 [ 764.953065] disk_force_media_change+0x1e/0xc0 [ 764.953992] loop_configure+0x75b/0x1950 [ 764.954854] ? putname+0xfe/0x140 [ 764.955571] lo_ioctl+0x782/0x1860 [ 764.956299] ? avc_has_extended_perms+0x7e8/0xeb0 [ 764.957281] ? loop_set_status_old+0x1b0/0x1b0 [ 764.958210] ? fsnotify+0xb4f/0x1250 [ 764.958995] ? avc_ss_reset+0x180/0x180 [ 764.959824] ? fsnotify_first_mark+0x1f0/0x1f0 [ 764.960749] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.961889] ? lock_acquire+0x41c/0x4d0 [ 764.962718] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.963674] ? lock_release+0x505/0x6f0 [ 764.964487] ? find_and_remove_object+0xe4/0x120 [ 764.965453] ? __delete_object+0xb3/0x100 [ 764.966294] ? lock_downgrade+0x6d0/0x6d0 [ 764.967140] ? rwlock_bug.part.0+0x90/0x90 [ 764.967990] ? rcu_read_lock_sched_held+0xd/0x70 [ 764.968962] ? selinux_inode_getsecctx+0x90/0x90 [ 764.969927] ? loop_set_status_old+0x1b0/0x1b0 [ 764.970867] blkdev_ioctl+0x362/0x7f0 [ 764.971620] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.972564] ? __x64_sys_ioctl+0x97/0x210 [ 764.973397] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 764.974530] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 764.975494] __x64_sys_ioctl+0x196/0x210 [ 764.976341] do_syscall_64+0x3b/0x90 [ 764.977114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.978175] RIP: 0033:0x7f9aebdc68d7 [ 764.978930] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.982756] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.984262] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 764.985674] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 764.987119] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 764.988544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 764.989974] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 764.991395] [ 764.991862] CPU: 0 PID: 7162 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 764.993777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 764.996027] Call Trace: [ 764.996543] [ 764.996985] dump_stack_lvl+0x8b/0xb3 [ 764.997758] should_fail.cold+0x5/0xa [ 764.998546] ? create_object.isra.0+0x3a/0xa20 [ 764.999469] should_failslab+0x5/0x10 [ 765.000225] kmem_cache_alloc+0x5b/0x480 [ 765.001039] create_object.isra.0+0x3a/0xa20 [ 765.001925] ? kasan_unpoison+0x23/0x50 [ 765.002739] kmem_cache_alloc_trace+0x22e/0x3c0 [ 765.003676] alloc_workqueue_attrs+0x38/0x80 [ 765.004568] apply_wqattrs_prepare+0xbb/0x880 [ 765.005470] ? is_kernel_percpu_address+0xe6/0x110 [ 765.006486] apply_workqueue_attrs_locked+0xc1/0x140 [ 765.007533] alloc_workqueue+0xb1a/0xeb0 [ 765.008354] ? do_raw_spin_unlock+0x4f/0x210 [ 765.009238] ? _raw_spin_unlock+0x24/0x40 [ 765.010062] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 765.011074] ? __fget_files+0x28d/0x470 [ 765.011853] ? loop_configure+0x62b/0x1950 [ 765.012705] loop_configure+0x6ec/0x1950 [ 765.013520] ? putname+0xfe/0x140 [ 765.013855] loop5: detected capacity change from 0 to 128 [ 765.014208] lo_ioctl+0x782/0x1860 [ 765.016011] ? avc_has_extended_perms+0x7e8/0xeb0 [ 765.016994] ? loop_set_status_old+0x1b0/0x1b0 [ 765.017893] ? fsnotify+0xb4f/0x1250 [ 765.018648] ? avc_ss_reset+0x180/0x180 [ 765.019435] ? fsnotify_first_mark+0x1f0/0x1f0 [ 765.020355] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.021274] ? lock_acquire+0x41c/0x4d0 [ 765.022075] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.022647] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 765.023007] ? lock_release+0x505/0x6f0 [ 765.025232] ? find_and_remove_object+0xe4/0x120 [ 765.026193] ? __delete_object+0xb3/0x100 [ 765.027025] ? lock_downgrade+0x6d0/0x6d0 [ 765.027863] ? rwlock_bug.part.0+0x90/0x90 [ 765.028687] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.029650] ? selinux_inode_getsecctx+0x90/0x90 [ 765.030588] ? loop_set_status_old+0x1b0/0x1b0 [ 765.031520] blkdev_ioctl+0x362/0x7f0 [ 765.032262] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 765.033202] ? __x64_sys_ioctl+0x97/0x210 [ 765.034008] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 765.035133] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 765.036052] __x64_sys_ioctl+0x196/0x210 [ 765.036844] do_syscall_64+0x3b/0x90 [ 765.037599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.038615] RIP: 0033:0x7faf15eb38d7 [ 765.039348] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.042979] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.044487] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 765.045906] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 765.047338] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 765.048766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.050203] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 765.051637] [ 765.054454] FAULT_INJECTION: forcing a failure. [ 765.054454] name failslab, interval 1, probability 0, space 0, times 0 [ 765.056807] CPU: 0 PID: 7164 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 765.058740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 765.060991] Call Trace: [ 765.061503] [ 765.061945] dump_stack_lvl+0x8b/0xb3 [ 765.062722] should_fail.cold+0x5/0xa [ 765.063490] should_failslab+0x5/0x10 [ 765.064245] __kmalloc_track_caller+0x79/0x420 [ 765.065154] ? kasprintf+0xbb/0xf0 [ 765.065869] kvasprintf+0xb5/0x150 [ 765.066594] ? bust_spinlocks+0xe0/0xe0 [ 765.067390] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.068334] ? preempt_count_add+0x74/0x140 [ 765.069199] ? __is_module_percpu_address+0x237/0x300 [ 765.070235] kasprintf+0xbb/0xf0 [ 765.070931] ? kvasprintf_const+0x190/0x190 [ 765.071794] ? save_trace+0xd00/0xd00 [ 765.072564] ? lockdep_init_map_type+0x21a/0x7e0 [ 765.073518] alloc_workqueue+0x408/0xeb0 [ 765.074335] ? do_raw_spin_unlock+0x4f/0x210 [ 765.075213] ? _raw_spin_unlock+0x24/0x40 [ 765.076056] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 765.077046] ? __fget_files+0x28d/0x470 [ 765.077844] ? loop_configure+0x62b/0x1950 [ 765.078706] loop_configure+0x6ec/0x1950 [ 765.079518] ? putname+0xfe/0x140 [ 765.080215] lo_ioctl+0x782/0x1860 [ 765.080930] ? avc_has_extended_perms+0x7e8/0xeb0 [ 765.081899] ? loop_set_status_old+0x1b0/0x1b0 [ 765.082820] ? fsnotify+0xb4f/0x1250 [ 765.083557] ? avc_ss_reset+0x180/0x180 [ 765.084357] ? fsnotify_first_mark+0x1f0/0x1f0 [ 765.085268] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.086208] ? lock_acquire+0x41c/0x4d0 [ 765.087008] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.087947] ? lock_release+0x505/0x6f0 [ 765.088567] loop0: detected capacity change from 0 to 128 [ 765.088735] ? find_and_remove_object+0xe4/0x120 [ 765.090819] ? __delete_object+0xb3/0x100 [ 765.091651] ? lock_downgrade+0x6d0/0x6d0 [ 765.092475] ? rwlock_bug.part.0+0x90/0x90 [ 765.093320] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.094276] ? selinux_inode_getsecctx+0x90/0x90 [ 765.095235] ? rcu_read_lock_sched_held+0xd/0x70 [ 765.096185] ? loop_set_status_old+0x1b0/0x1b0 [ 765.097097] blkdev_ioctl+0x362/0x7f0 [ 765.097856] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 765.098800] ? __x64_sys_ioctl+0x97/0x210 [ 765.099623] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 765.100300] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 765.100720] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 765.100746] __x64_sys_ioctl+0x196/0x210 [ 765.103909] do_syscall_64+0x3b/0x90 [ 765.104659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.105682] RIP: 0033:0x7f432f5bb8d7 [ 765.106411] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.110060] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.111575] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 765.112990] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 765.114396] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 765.115810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.117223] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 765.118647] [ 765.190332] ISOFS: Unable to identify CD-ROM format. 08:06:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 26) 08:06:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 37) 08:06:18 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:06:18 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:18 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x81}, 0x6) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x4, 0x81) lseek(r0, 0x0, 0x4) 08:06:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 44) 08:06:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 37) [ 774.359708] FAULT_INJECTION: forcing a failure. [ 774.359708] name failslab, interval 1, probability 0, space 0, times 0 [ 774.361305] FAULT_INJECTION: forcing a failure. [ 774.361305] name failslab, interval 1, probability 0, space 0, times 0 [ 774.362048] CPU: 1 PID: 7176 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 774.365165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 774.367446] Call Trace: [ 774.367969] [ 774.368413] dump_stack_lvl+0x8b/0xb3 [ 774.369210] should_fail.cold+0x5/0xa [ 774.369984] ? create_object.isra.0+0x3a/0xa20 [ 774.370934] should_failslab+0x5/0x10 [ 774.371698] kmem_cache_alloc+0x5b/0x480 [ 774.372517] create_object.isra.0+0x3a/0xa20 [ 774.373414] ? kasan_unpoison+0x23/0x50 [ 774.374229] kmem_cache_alloc_node+0x248/0x490 [ 774.375192] __alloc_skb+0x211/0x340 [ 774.375962] alloc_uevent_skb+0x7b/0x210 [ 774.376793] kobject_uevent_env+0xaa4/0xfa0 [ 774.377667] ? _raw_spin_unlock+0x24/0x40 [ 774.378518] disk_event_uevent+0x17b/0x1e0 [ 774.379380] ? disk_events_async_show+0x10/0x10 [ 774.380327] ? __fget_files+0x28d/0x470 [ 774.381130] disk_force_media_change+0x1e/0xc0 [ 774.382049] loop_configure+0x75b/0x1950 [ 774.382889] ? putname+0xfe/0x140 [ 774.383586] lo_ioctl+0x782/0x1860 [ 774.384317] ? avc_has_extended_perms+0x7e8/0xeb0 [ 774.385307] ? loop_set_status_old+0x1b0/0x1b0 [ 774.386232] ? fsnotify+0xb4f/0x1250 [ 774.387010] ? avc_ss_reset+0x180/0x180 [ 774.387824] ? fsnotify_first_mark+0x1f0/0x1f0 [ 774.388736] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.389697] ? lock_acquire+0x41c/0x4d0 [ 774.390494] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.391471] ? lock_release+0x505/0x6f0 [ 774.392271] ? find_and_remove_object+0xe4/0x120 [ 774.393229] ? __delete_object+0xb3/0x100 [ 774.394082] ? lock_downgrade+0x6d0/0x6d0 [ 774.394941] ? rwlock_bug.part.0+0x90/0x90 [ 774.395801] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.396758] ? selinux_inode_getsecctx+0x90/0x90 [ 774.397745] ? loop_set_status_old+0x1b0/0x1b0 [ 774.398681] blkdev_ioctl+0x362/0x7f0 [ 774.399447] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.400397] ? __x64_sys_ioctl+0x97/0x210 [ 774.401253] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 774.402354] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.403339] __x64_sys_ioctl+0x196/0x210 [ 774.404164] do_syscall_64+0x3b/0x90 [ 774.404925] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.405960] RIP: 0033:0x7f9aebdc68d7 [ 774.406710] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.410358] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.411918] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 774.413338] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 774.414769] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 774.416198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 774.417607] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 774.419045] [ 774.419506] CPU: 0 PID: 7179 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 774.420520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 774.421037] FAULT_INJECTION: forcing a failure. [ 774.421037] name failslab, interval 1, probability 0, space 0, times 0 [ 774.421724] Call Trace: [ 774.421731] [ 774.421735] dump_stack_lvl+0x8b/0xb3 [ 774.424891] should_fail.cold+0x5/0xa [ 774.425321] ? alloc_unbound_pwq+0x4ad/0xd70 [ 774.425806] should_failslab+0x5/0x10 [ 774.426223] kmem_cache_alloc_node+0x55/0x490 [ 774.426715] alloc_unbound_pwq+0x4ad/0xd70 [ 774.427172] apply_wqattrs_prepare+0x2a4/0x880 [ 774.427668] ? is_kernel_percpu_address+0xe6/0x110 [ 774.428209] apply_workqueue_attrs_locked+0xc1/0x140 [ 774.428765] alloc_workqueue+0xb1a/0xeb0 [ 774.429204] ? do_raw_spin_unlock+0x4f/0x210 [ 774.429680] ? _raw_spin_unlock+0x24/0x40 [ 774.430131] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 774.430696] ? __fget_files+0x28d/0x470 [ 774.431126] ? loop_configure+0x62b/0x1950 [ 774.431585] loop_configure+0x6ec/0x1950 [ 774.432027] ? putname+0xfe/0x140 [ 774.432407] lo_ioctl+0x782/0x1860 [ 774.432792] ? avc_has_extended_perms+0x7e8/0xeb0 [ 774.433316] ? loop_set_status_old+0x1b0/0x1b0 [ 774.433812] ? fsnotify+0xb4f/0x1250 [ 774.434210] ? avc_ss_reset+0x180/0x180 [ 774.434650] ? fsnotify_first_mark+0x1f0/0x1f0 [ 774.435141] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.435651] ? lock_acquire+0x41c/0x4d0 [ 774.436090] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.436586] ? lock_release+0x505/0x6f0 [ 774.437010] ? find_and_remove_object+0xe4/0x120 [ 774.437517] ? __delete_object+0xb3/0x100 [ 774.437966] ? lock_downgrade+0x6d0/0x6d0 [ 774.438410] ? rwlock_bug.part.0+0x90/0x90 [ 774.438878] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.439411] ? selinux_inode_getsecctx+0x90/0x90 [ 774.439924] ? loop_set_status_old+0x1b0/0x1b0 [ 774.440413] blkdev_ioctl+0x362/0x7f0 [ 774.440821] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.441328] ? __x64_sys_ioctl+0x97/0x210 [ 774.441769] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 774.442365] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.442891] __x64_sys_ioctl+0x196/0x210 [ 774.443321] do_syscall_64+0x3b/0x90 [ 774.443728] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.444275] RIP: 0033:0x7faf15eb38d7 [ 774.444667] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.446596] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.447419] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 774.448177] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 774.448938] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 774.449699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 774.450454] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 774.451229] [ 774.451481] CPU: 1 PID: 7177 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 774.453427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 774.455723] Call Trace: [ 774.456248] [ 774.456693] dump_stack_lvl+0x8b/0xb3 [ 774.457480] should_fail.cold+0x5/0xa [ 774.458261] ? create_object.isra.0+0x3a/0xa20 [ 774.459230] should_failslab+0x5/0x10 [ 774.460002] kmem_cache_alloc+0x5b/0x480 [ 774.460836] create_object.isra.0+0x3a/0xa20 [ 774.461725] ? kasan_unpoison+0x23/0x50 [ 774.462561] __kmalloc_track_caller+0x25e/0x420 [ 774.463520] ? kasprintf+0xbb/0xf0 [ 774.464290] kvasprintf+0xb5/0x150 [ 774.465030] ? bust_spinlocks+0xe0/0xe0 [ 774.465855] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.466861] ? preempt_count_add+0x74/0x140 [ 774.467731] ? __is_module_percpu_address+0x237/0x300 [ 774.468807] kasprintf+0xbb/0xf0 [ 774.469485] ? kvasprintf_const+0x190/0x190 [ 774.470374] ? save_trace+0xd00/0xd00 [ 774.471167] ? lockdep_init_map_type+0x21a/0x7e0 [ 774.472124] alloc_workqueue+0x408/0xeb0 [ 774.472963] ? do_raw_spin_unlock+0x4f/0x210 [ 774.473872] ? _raw_spin_unlock+0x24/0x40 [ 774.474734] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 774.475749] ? __fget_files+0x28d/0x470 [ 774.476557] ? loop_configure+0x62b/0x1950 [ 774.477006] loop5: detected capacity change from 0 to 128 [ 774.477407] loop_configure+0x6ec/0x1950 [ 774.478834] ? putname+0xfe/0x140 [ 774.479546] lo_ioctl+0x782/0x1860 [ 774.480262] ? avc_has_extended_perms+0x7e8/0xeb0 [ 774.481260] ? loop_set_status_old+0x1b0/0x1b0 [ 774.482175] ? fsnotify+0xb4f/0x1250 [ 774.482919] ? avc_ss_reset+0x180/0x180 [ 774.483722] ? fsnotify_first_mark+0x1f0/0x1f0 [ 774.484642] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.485587] ? lock_acquire+0x41c/0x4d0 [ 774.486385] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.487365] ? lock_release+0x505/0x6f0 [ 774.488172] ? find_and_remove_object+0xe4/0x120 [ 774.489158] ? __delete_object+0xb3/0x100 [ 774.490003] ? lock_downgrade+0x6d0/0x6d0 [ 774.490869] ? rwlock_bug.part.0+0x90/0x90 [ 774.491714] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.492686] ? selinux_inode_getsecctx+0x90/0x90 [ 774.493643] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.494604] ? loop_set_status_old+0x1b0/0x1b0 08:06:18 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 774.495538] blkdev_ioctl+0x362/0x7f0 [ 774.496485] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.497442] ? __x64_sys_ioctl+0x97/0x210 [ 774.498294] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 774.499415] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.500380] __x64_sys_ioctl+0x196/0x210 [ 774.501201] do_syscall_64+0x3b/0x90 [ 774.501961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.503018] RIP: 0033:0x7f432f5bb8d7 [ 774.503741] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.507475] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.508995] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 774.510419] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 774.511878] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 774.512756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.513299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 774.515704] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 774.517156] [ 774.524482] FAULT_INJECTION: forcing a failure. [ 774.524482] name failslab, interval 1, probability 0, space 0, times 0 [ 774.526791] CPU: 1 PID: 7189 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 774.528714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 774.531009] Call Trace: [ 774.531511] [ 774.531971] dump_stack_lvl+0x8b/0xb3 08:06:18 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 774.532746] should_fail.cold+0x5/0xa [ 774.533683] ? kobject_get_path+0xc0/0x1d0 [ 774.534541] should_failslab+0x5/0x10 [ 774.535318] __kmalloc+0x72/0x440 [ 774.536030] kobject_get_path+0xc0/0x1d0 [ 774.536879] kobject_uevent_env+0x25c/0xfa0 [ 774.537758] ? _raw_spin_unlock+0x24/0x40 [ 774.538612] disk_event_uevent+0x17b/0x1e0 [ 774.539486] ? disk_events_async_show+0x10/0x10 [ 774.540440] ? __fget_files+0x28d/0x470 [ 774.541246] disk_force_media_change+0x1e/0xc0 [ 774.542204] loop_configure+0x75b/0x1950 [ 774.543047] ? putname+0xfe/0x140 [ 774.543760] lo_ioctl+0x782/0x1860 [ 774.544470] ? avc_has_extended_perms+0x7e8/0xeb0 [ 774.545679] ? loop_set_status_old+0x1b0/0x1b0 [ 774.546852] ? fsnotify+0xb4f/0x1250 [ 774.547779] ? avc_ss_reset+0x180/0x180 [ 774.548798] ? fsnotify_first_mark+0x1f0/0x1f0 [ 774.549937] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.551129] ? lock_acquire+0x41c/0x4d0 [ 774.552137] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.553241] ? lock_release+0x505/0x6f0 [ 774.554049] ? find_and_remove_object+0xe4/0x120 [ 774.555030] ? __delete_object+0xb3/0x100 [ 774.555868] ? lock_downgrade+0x6d0/0x6d0 [ 774.556692] ? rwlock_bug.part.0+0x90/0x90 [ 774.557536] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.558525] ? selinux_inode_getsecctx+0x90/0x90 [ 774.559508] ? rcu_read_lock_sched_held+0xd/0x70 [ 774.560451] ? loop_set_status_old+0x1b0/0x1b0 [ 774.561369] blkdev_ioctl+0x362/0x7f0 [ 774.562146] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.563110] ? __x64_sys_ioctl+0x97/0x210 [ 774.563944] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 774.565042] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 774.565989] __x64_sys_ioctl+0x196/0x210 [ 774.566830] do_syscall_64+0x3b/0x90 [ 774.567578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.568615] RIP: 0033:0x7f22ed51d8d7 [ 774.569359] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.573061] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.574592] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 774.576177] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 774.577595] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 774.579046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 774.580478] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 774.581918] [ 774.585541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.586191] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 774.597799] ISOFS: Unable to identify CD-ROM format. [ 774.656361] ISOFS: Unable to identify CD-ROM format. [ 783.876461] FAULT_INJECTION: forcing a failure. [ 783.876461] name failslab, interval 1, probability 0, space 0, times 0 [ 783.878796] CPU: 1 PID: 7210 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 783.880735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 783.881899] FAULT_INJECTION: forcing a failure. [ 783.881899] name failslab, interval 1, probability 0, space 0, times 0 [ 783.883036] Call Trace: [ 783.883046] [ 783.883054] dump_stack_lvl+0x8b/0xb3 [ 783.885924] should_fail.cold+0x5/0xa [ 783.886695] ? create_object.isra.0+0x3a/0xa20 [ 783.887630] should_failslab+0x5/0x10 [ 783.888381] kmem_cache_alloc+0x5b/0x480 [ 783.889193] create_object.isra.0+0x3a/0xa20 [ 783.890078] ? kasan_unpoison+0x23/0x50 [ 783.890894] __kmalloc+0x25b/0x440 [ 783.891604] kobject_get_path+0xc0/0x1d0 [ 783.892418] kobject_uevent_env+0x25c/0xfa0 [ 783.893281] ? _raw_spin_unlock+0x24/0x40 [ 783.894115] disk_event_uevent+0x17b/0x1e0 [ 783.894964] ? disk_events_async_show+0x10/0x10 [ 783.895891] ? __fget_files+0x28d/0x470 [ 783.896681] disk_force_media_change+0x1e/0xc0 [ 783.897588] loop_configure+0x75b/0x1950 [ 783.898401] ? putname+0xfe/0x140 [ 783.899121] lo_ioctl+0x782/0x1860 [ 783.899870] ? avc_has_extended_perms+0x7e8/0xeb0 [ 783.900857] ? loop_set_status_old+0x1b0/0x1b0 [ 783.901777] ? fsnotify+0xb4f/0x1250 [ 783.902523] ? avc_ss_reset+0x180/0x180 [ 783.903340] ? fsnotify_first_mark+0x1f0/0x1f0 [ 783.904262] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.905219] ? lock_acquire+0x41c/0x4d0 [ 783.906019] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.906969] ? lock_release+0x505/0x6f0 [ 783.907766] ? find_and_remove_object+0xe4/0x120 [ 783.908727] ? __delete_object+0xb3/0x100 [ 783.909576] ? lock_downgrade+0x6d0/0x6d0 [ 783.910405] ? rwlock_bug.part.0+0x90/0x90 [ 783.911286] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.912257] ? selinux_inode_getsecctx+0x90/0x90 [ 783.913225] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.914176] ? loop_set_status_old+0x1b0/0x1b0 [ 783.915100] blkdev_ioctl+0x362/0x7f0 [ 783.915873] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 783.916822] ? __x64_sys_ioctl+0x97/0x210 [ 783.917648] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 783.918756] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 783.919711] __x64_sys_ioctl+0x196/0x210 [ 783.920520] do_syscall_64+0x3b/0x90 [ 783.921261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.922285] RIP: 0033:0x7f22ed51d8d7 [ 783.923035] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.926681] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.928211] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 783.929631] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 783.931068] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 783.932470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 783.933880] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 783.935302] [ 783.935757] CPU: 0 PID: 7215 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 783.936757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 783.937934] Call Trace: [ 783.938199] [ 783.938428] dump_stack_lvl+0x8b/0xb3 [ 783.938849] should_fail.cold+0x5/0xa [ 783.939250] ? create_object.isra.0+0x3a/0xa20 [ 783.939730] should_failslab+0x5/0x10 [ 783.940122] kmem_cache_alloc+0x5b/0x480 [ 783.940546] create_object.isra.0+0x3a/0xa20 [ 783.941012] ? kasan_unpoison+0x23/0x50 [ 783.941434] kmem_cache_alloc_node+0x248/0x490 [ 783.941907] alloc_unbound_pwq+0x4ad/0xd70 [ 783.942350] apply_wqattrs_prepare+0x2a4/0x880 [ 783.942829] ? is_kernel_percpu_address+0xe6/0x110 [ 783.943346] apply_workqueue_attrs_locked+0xc1/0x140 [ 783.943868] alloc_workqueue+0xb1a/0xeb0 [ 783.944301] ? do_raw_spin_unlock+0x4f/0x210 [ 783.944760] ? _raw_spin_unlock+0x24/0x40 [ 783.945203] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 783.945722] ? __fget_files+0x28d/0x470 [ 783.946132] ? loop_configure+0x62b/0x1950 [ 783.946574] loop_configure+0x6ec/0x1950 [ 783.947005] ? putname+0xfe/0x140 [ 783.947372] lo_ioctl+0x782/0x1860 [ 783.947739] ? avc_has_extended_perms+0x7e8/0xeb0 [ 783.948245] ? loop_set_status_old+0x1b0/0x1b0 [ 783.948719] ? fsnotify+0xb4f/0x1250 [ 783.949108] ? avc_ss_reset+0x180/0x180 [ 783.949527] ? fsnotify_first_mark+0x1f0/0x1f0 [ 783.949616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.950001] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.950021] ? lock_acquire+0x41c/0x4d0 [ 783.952665] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.953152] ? lock_release+0x505/0x6f0 [ 783.953563] ? find_and_remove_object+0xe4/0x120 [ 783.954055] ? __delete_object+0xb3/0x100 [ 783.954489] ? lock_downgrade+0x6d0/0x6d0 [ 783.954922] ? rwlock_bug.part.0+0x90/0x90 [ 783.955367] ? rcu_read_lock_sched_held+0xd/0x70 [ 783.955861] ? selinux_inode_getsecctx+0x90/0x90 [ 783.956358] ? loop_set_status_old+0x1b0/0x1b0 [ 783.956822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.956832] blkdev_ioctl+0x362/0x7f0 [ 783.958976] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 783.959462] ? __x64_sys_ioctl+0x97/0x210 [ 783.959889] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 783.960459] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 783.960947] __x64_sys_ioctl+0x196/0x210 [ 783.961372] do_syscall_64+0x3b/0x90 [ 783.961765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.962294] RIP: 0033:0x7faf15eb38d7 [ 783.962679] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.964569] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.965354] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 783.966087] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 783.966836] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 783.967566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 783.968299] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 783.969035] 08:06:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 38) 08:06:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:06:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 38) 08:06:27 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 45) 08:06:27 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = accept$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e) pwritev(r2, &(0x7f0000002400)=[{&(0x7f0000000240)="ce4aa7e731d653ccf76cb44a586f39af5640b6a51906a3e61167e471fa8f5d9ef9a66e6c77790785cd056c201bfc210e5a6f17e00dbe75f0395b938231b26a925acfb1833d866c19c65d7f5d9c91fbf350c769d3dc73c3d45839072657fc13b05868193ead", 0x65}, {&(0x7f00000002c0)="9fb20293e33996ee7eb7f2aa04e498e4f395a6cfa194cc84a719a07815206f0a0ac00b1752033f4be80971e50fca4478f19dc479f1860c4771963b90f5ac07e0447df2f7c2ac258736942d27716eb10459fb538ff210641c6ef32fba8c44a9ab6ce6a6947a93202696645af458665ca9f05123684c6d8d1454d771d55e7027e2061e857b0005dd295c4fc4b78e77d33bbb3acf56476e61b94e8d65ed42ed76ac5933da1f813f344182d6b52c032e768da801", 0xb2}, {&(0x7f0000000380)="dadadef015ed9f27a936fbfaba52d4c946e4de0e6985", 0x16}, {&(0x7f00000003c0)="2e92fe2847d96f3058a7bb95580578c404feb4501d4f252e844188d9c5c96010bf8e9bff8fa4e9fb86fc54ab4d8fab5bd9c6f838fdfb1c03167782dfb00d9171422bd7c17401de31a91df720c0f8734f0cfae765c34eae382b402724f583fdd446191cb01aff8306340c20cea60ca8592459ebf9f150e1f489780e19fb354b8046079c68d30a7943b864a26a6defe1fb29fa4d141dbf426270ba88f07e057f1f31b2b72e470c7cd4820275966fc7aca2d57216e43efa43cd44e88655e5e27e53b5c7b5d929c8db75648d344b9df917808542a2ca916726de5678546b112d0535298c52d99a9ccf3f29adaa37de6c779bf4435117058140e4a7df53d683c4ea6b1a968229bd8e1e56eaa46c510780b84da4c2e0867c1836a3669694ddb26413a885bbc201a849e56a94528b30c0f79fb3ddb6fb5049e71423abdd3d0a5067964e42ea2ddca9f78b79a1101ef14b288699f70f3043e290fd0040038c0f01cdb7e84045557ae8f40019ca850fd9a8320969ee0d779b0db6907ffa85d38aa183806b2d7d93f220484cf5a4e2e02858a9914932e6ba9ffbb7441031361c941471d379df1c90f4e3bf530ee617d329689325ef293c72c3469a10bb206a0be67b7e91f11bc610da5d30804f15b67fc1e6da8f8533fa44a8d1eb7500fd9b2162720f68c984de3ef55a84778afac46c83269e72aee19673f86e142fef65bf11042b36d3d444e594757f51eecdf9fcb7c5abe134124d21b407a5be93fb7f47f4300895f88c8860fdafdcc386975cb423facaf4528a55deee9d2029891aab1728415cc425164186b84d6960c2ee019cf22aaa7710cc4a3ca57fb1723e6f57af79a48827feb52cf538781d51c056a7fc98e5147991bbe7f59572ca0d23845a535fd5a20843c9f8890c0640f6b2177b4e3021194cde5a3225b690ee3c4b626c27c19135ea1ad4750aa82fa1d9e8ed2d2857dd8d88c1e073c782534291f87e4f0e3cc8ac65686c0946ec8cc2c9a045c74039b2f324d8b64b07c0012a3f240ac824cf7af6315ad58dd06218b34a2e2e659f058e51540a91c3d2f25cb49ce6e74582b4ea89a5bda46098c4ba05eae8b2f1da5680ccd8d9a8465bc9d36fc31f33b57f519ca72934e9d903faded08034f889b493922920157dcf2b2b8e1703a1dd10b1203428d02a7b17a7b88839f068b2c7564e07add35f1959939dbdcea94569ce547275ef95e32b62cc65620ecfc92914c30181244174a3770c7cb49053f527ec3cd94a4928221676a9f73ebbaf78b7d6e5841fcc42bc207ff4da56ee55195df4b9598188b09b204560025f8879b5ed728b190db9bc8312e4a64d8abf9fd929f1ba3758aa44700125c8426b4843abc2045ee7e4fbb6cf567a80e2f94353489aca9bcada3674900634def9e14a7634c9eca94c2724877b8dbc476f5dcff75b5f6481341a0025cdeaae53c6d61c08aacdff18ab1d7eaf94e7e0d35b0a5416a5091dfdc1d2ff5dcaf56f57352704f01334e93440377636af68e41eabcbc946813193aa1606a191e99a5c0e2085128f8e9ba17c3546d39a7f0b118aa0269c69dfcd71d95a7a3d80a7a4ffed081d0ebd773e6585191e5723a7304c17d40a21a1cb497008f40a161dcdfd0375bc587717ea52dc1036a43f9bb377f56547186744ca24ceff26e0e4f258fea6374143b7b0431bfae7e403f8997ce65deae0b3d2c6e90d9dec2fa135b771af081c1e6adc80f58125899f4cd23c0057f7bb3b0d796bc8051663348aed3e7fc8df868722f0f56bc4e9fbbde42715cec22cea6fe71d96d9a1f0ae3a82113e5cf09764761137b8e58988bb5ec1a2c10541b231a709681486fadc3be15883e61c9d2dcc5f1ed4f55b6d4a56b0b4f6d81415fc3058606629fadc59b9af3768d10c3c3846365f16f874e6d19839675aab23ad6c4f6ad421f977d31e5666beeb913edfa4d644a611851bd1a8c85a27531729eeffc8c178e02ef12cbeb621c1488c0d813347f5a58b559a54fe039b1d2a2b9a9c282e03d35c19f4fa03fc455e746917ca1fadee8008cff7917a1d06d4b4430cb29144f510edfc1a12706c5cd399dbc4deb3c24cee839ceffdd19e6d54e2aa5be9bc84d1aebdd2a7e2bdffd4e975f4537701eef9f6bcf2229feb9a8300ccaa5efebcbadd75780a535f7e437c4694c33613222e49f761d3834c2c0abbf33f95514096e5ef36b011e1d643bf14090613c32a09f59def4d13d78b59c320dc0e523c961e0fc5a3711d8f26091430e62887de48f4f511a3d79bf2e785a6e1d3bfe45fc984a8a406577258d86806b2398c2796d200332587dcccc676ebca73e56d80781fb300e199bcb68e38ce699a5a841d0c994534f0c568f462da60feee98f8f7f4f19fdf13bfeb0c862dff14093caf14c5f7ab49b41663eab59677384218f9f3752854bfd48aeae89d696bd59744555ce70ba09a6103ce643a80978a8bb3f7410c11f688cd6d904fe66006c6a98471b0a75f5e79dd49c6a82483f3f3a31385286c49dc4807613b8616f19e127a67f325a80536fefd9426bb254d47624775df11a993fd02e21cbe4be121395babf0abb145595cb550ccb6a6920760e30ce646066abae64502165a1518edef8d4e0e1a8e1b1c1da532b698dde27921c6f958fbf74a0a3263dd2f39b13ce395c028f2121bd4f72efbb9dbbe3cfbe194c7c755fb91684803a73d8e9c63c6a2b2cc23f6cb891ea6eb121eb58e1724d88f7e1e9132993308ca9e9557ee63d0bb940f36576a04342d38d63e2ab85ff358c6387c64e8d2c13247151dd50fdabdd4ecddf62ea938d319fe9866e51005b94631c5fcea5b7f4ae7d361124131bf91f937b94cd34005c24059ec2d59c22aa3e464a1e3d4af0c4dd08d624d3962baa3277f3852187d9cf28bf6cac90f313218900ea5e62fabffd73a492b0eeb9041ce96baa336e051a4ef5c5649f166b9ae48b3c0a7af8e9a069a01dd2d640e9e5d894f0734cc81db997d6ca9e03cbe087db40487738d1ab8798cd8d6fa1babc0ec3d60bc9e0c8e1c320a6c387c5a3f03bdfd68ed51b46788635b6bdc1e316aeda0133fa0a8d0ce68bebc723da1978aa173ef1f66d2a9314908203cb6b1b590d31d3d2dedc065471910e227fedc426cf2e04a566275e3f53bc9ceb8d5dcdc959c10385b5e7972098b7ea5c2666c9dfaa1d651a99e60c264af2257861ae032229c9f3e87afcc1f81086818901bc4267a36949af1f8255244ca34f662206cab18654958a2f86ede93e87503f8194278b02318501a60c2514c0cf3c5464bcb55b4f7ce9c8465a5ea3c8b930a77d4aa2fdc50cbc1662045572d215eb5e6e423b781b59f0e4f79692b213e4265f97abb772ab6c3e17c43ab4852a948e25ab5b04177451e6e531602da8040617ec3d6d48f4166e53a84c20314ec9fc5c5076f1b99188ae4df37c498425f19cdbcb7202deae8107fa87322ad8f16d4d379a3b73fb7f19fba61dfacb4e0c3c064253de2e8674e6db5975ff3e718613e631a148adc0b7c1d2fc4e0168a68f51010c1fcb38fb89bd298f2cc2226cf6d9bf4c7a96aa3fb395e67790376c2568eeecdc843993896c03ac078ce06ce5e511a3b71e32fb11b15dd06502e012e7cbc49fe612f385e97647858a21fdb75d2c666aaa84a0e3717888be1ec3df856f1fb85e00dc4dfb2b066bab014cd49629046bbd67aded9e6ec619be1c4f81f6c189732e39e0ed2127d7aab598372f05c3ddb2d8b13f35bc7f4d9e45aea61b496c3c6ee9bd4d9247fc072aa5eaf7cf9fd318680179cc8efe4c02082357bf527f9e365908f221c51608152c6d3979fde7427dd66b3ce9ae5843b894699cfb0a8ef2e6bb0513f2383f3fec06f53bee8523acf993d4d3cfc38fd93273baa1653fd0075349348d05391e51c0f391b98b131caf2f0586b7b9e1ae5f9a53ce5d79275f3f4372b5767044a012e9cad4e87e0d61ff4a0960e0a7ef44fc969dd78ed668e6b157762fc6270bf711d0df5285cb2a3e423b78617b6370b15f43475b1b401984d7e5d450b6c0fb7ab32b95edc8a8b9dbbbba01ddc6727a411d44c05f838c49a69e398afd46796a2006123f636d3bc1d72b0e3cc2946be7b7e2be2c404fc7ce0cff0265130832d35d47818f135754a2306e3d0b9b3e21fa57a33b84146e21522e339bd198a8f70731fc110eb449b9c3b7f2605c34575074008e237f1d52310080a956520ccac49555caff24c2716135bf141d8b393abf5d3c56b44dfdda7d5eb2dbb0ffbbc1012d0c73ffa0d752ed95711ec15fa59503f6f2afea7f318525c4a742a0bbd14239ccb05ce0a25e559fa40050ac80aa5fb1e4401f3cd570e2d3394b7e3b405bb4bed675b9d361f75d7e14da7cd54da7c11ed4dcbed3b3cba08733d0bda34c748136ac6c4b1c6cc677ed62767ba19520cb4d6b3b2e59121d7e0004df44aa96ee61f005f3ad10f0d7ec73f92f8bbfed320b79647bd153f294664d4ea992ffae12d587f1d13e2a33b6623d7f2b29656d0fa7b92654d5c03f9de726da1140168b0c777c2d155e0ed6956142c77b229f5939368695760805df2b03cba09541759e862544819bd828d907548136d46e5c2f134c008114936944d3788caa91eb83073876dd074943816a28e59a0d21cb33b27978400f790e8c230896b56d23a777ca51d75a1a0f07dc47b8bb831d0715290bf8cae0921078f14a4f49502e96e70ba1a4ac87f1242c1622115f6806e6450200141b883ebfb83d9e136c8d5e2c3dc609caad0a3d269da2756d46b3a3d30fc329f43e62e50c06aeeaca4faf3ca1c9fe671b911fed7e14f92e0a8b7b61f4194e0b77864144f28a4af87fbe455aba8701dfb3590760865cb0b6786f908b90e50b5119865649412475754ef67bc257010db613c09323d9706bae084690f295cb51e4417ee1cd4a6a2e6e6a11baf965a4ad8c9fa290a69b8837793c56d592dba37e3822f21d0c644a047928df228e35d6c37f37561f5dc896228c9c282acd08cef72e456a7124ba84c7a5d85a37b830cdaccc5b707f81fb8a1d306cb26a6d6f93f3bc21a24b5a982286f9a9e9bc03b66d7725c6cd50466d0f9db3cba07f0f32b46234ec6409c447e86a03fc8ebe2ad29744bdc1154884b2bf6904f100f1fe6ced9d7baedea3fced010ce40a931b6ae673cb947c3e0b1331fca8fd3069e3af8d4e5a98c6cd75500cbafa6a00ddc4c6d02f5999c0366cc6fed5fc3255edd32fd78fc4b9a0c23de42f6a007c56ff93713934218fe25032b2846d914bed3c68f24e08962e81513bce522292792c084b6047306230464184e56a6b5b064ade1ada751591ef9809170c87ef7adbdf79a58f25cb41911dbae3ee3a8e8dbadb565e4db79b43d316e07c643398c5c063c3024c0d1f49f395c1979672b95b5d072b21b2ead016d5f2e205f59a015938443862ffaed52289d16633e722c10b9e4e2b209072028c8a61c75e64e9d644613c485b10fab5cbaaabb96b4317d95292f9969befe61649be261124c1933ed261aba67e15a5e4b7ef42f8e8b304b958b59f8da022700f8fb45f6cd01b8c2336f84690888a8698ffff455ebea97c12dd1bb978e4ab1be23f6db548751c7f3c741faed33bff5dad899f66bb0f5471c1df7dc31a937670fc6e25be45354eb933485b9b8c690abc3c7fb1bf914eb9e34b409cf4a76a4f79854bd9c69796877fa563dab49038c55186f54548af79ad593895f33b7ff53664311c6b1764043512a003dcb15718a55ec55157a3aa1445e49f46ce06f4c598076f039b72778ed1f0a127b57eb2148767886cb68893889", 0x1000}, {&(0x7f00000013c0)="a958f19cb3e931d0d558bee629821273a246d70a956774", 0x17}, {&(0x7f0000001400)="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", 0x1000}], 0x6, 0x200, 0x7ff) fallocate(r1, 0x10, 0x0, 0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x500, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x44008) lseek(r0, 0x0, 0x4) 08:06:27 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:27 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 27) 08:06:27 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:27 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 784.005196] loop0: detected capacity change from 0 to 128 [ 784.006145] FAULT_INJECTION: forcing a failure. [ 784.006145] name failslab, interval 1, probability 0, space 0, times 0 [ 784.008492] CPU: 1 PID: 7216 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 784.010415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 784.012693] Call Trace: [ 784.013195] [ 784.013643] dump_stack_lvl+0x8b/0xb3 [ 784.014434] should_fail.cold+0x5/0xa [ 784.015207] should_failslab+0x5/0x10 [ 784.015968] __kmalloc_node_track_caller+0x7e/0x440 [ 784.016965] ? alloc_uevent_skb+0x7b/0x210 [ 784.017821] __alloc_skb+0xe3/0x340 [ 784.018562] alloc_uevent_skb+0x7b/0x210 [ 784.019392] kobject_uevent_env+0xaa4/0xfa0 [ 784.020261] ? _raw_spin_unlock+0x24/0x40 [ 784.021097] disk_event_uevent+0x17b/0x1e0 [ 784.021945] ? disk_events_async_show+0x10/0x10 [ 784.022890] ? __fget_files+0x28d/0x470 [ 784.023694] disk_force_media_change+0x1e/0xc0 [ 784.024600] loop_configure+0x75b/0x1950 [ 784.025421] ? putname+0xfe/0x140 [ 784.026117] lo_ioctl+0x782/0x1860 [ 784.026845] ? avc_has_extended_perms+0x7e8/0xeb0 [ 784.027823] ? loop_set_status_old+0x1b0/0x1b0 [ 784.028742] ? fsnotify+0xb4f/0x1250 [ 784.029474] ? avc_ss_reset+0x180/0x180 [ 784.030082] FAULT_INJECTION: forcing a failure. [ 784.030082] name failslab, interval 1, probability 0, space 0, times 0 [ 784.030284] ? fsnotify_first_mark+0x1f0/0x1f0 [ 784.032329] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.033278] ? lock_acquire+0x41c/0x4d0 [ 784.034067] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.035038] ? lock_release+0x505/0x6f0 [ 784.035831] ? find_and_remove_object+0xe4/0x120 [ 784.036787] ? __delete_object+0xb3/0x100 [ 784.037623] ? lock_downgrade+0x6d0/0x6d0 [ 784.038444] ? rwlock_bug.part.0+0x90/0x90 [ 784.039297] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.040253] ? selinux_inode_getsecctx+0x90/0x90 [ 784.041206] ? loop_set_status_old+0x1b0/0x1b0 [ 784.042120] blkdev_ioctl+0x362/0x7f0 [ 784.042909] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.043852] ? __x64_sys_ioctl+0x97/0x210 [ 784.044674] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.045764] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.046701] __x64_sys_ioctl+0x196/0x210 [ 784.047510] do_syscall_64+0x3b/0x90 [ 784.048258] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.049276] RIP: 0033:0x7f9aebdc68d7 [ 784.050006] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.053652] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.055208] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 784.056627] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 784.058043] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 784.059475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 784.060887] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 784.062305] [ 784.062764] CPU: 0 PID: 7212 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 784.063810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 784.065010] Call Trace: [ 784.065278] [ 784.065517] dump_stack_lvl+0x8b/0xb3 [ 784.065941] should_fail.cold+0x5/0xa [ 784.066362] ? apply_wqattrs_prepare+0xab/0x880 [ 784.066878] should_failslab+0x5/0x10 [ 784.067284] __kmalloc+0x72/0x440 [ 784.067661] apply_wqattrs_prepare+0xab/0x880 [ 784.068142] apply_workqueue_attrs_locked+0xc1/0x140 [ 784.068682] alloc_workqueue+0xb1a/0xeb0 [ 784.069124] ? do_raw_spin_unlock+0x4f/0x210 [ 784.069605] ? _raw_spin_unlock+0x24/0x40 [ 784.070063] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 784.070601] ? __fget_files+0x28d/0x470 [ 784.071042] ? loop_configure+0x62b/0x1950 [ 784.071496] loop_configure+0x6ec/0x1950 [ 784.071934] ? putname+0xfe/0x140 [ 784.072310] lo_ioctl+0x782/0x1860 [ 784.072688] ? avc_has_extended_perms+0x7e8/0xeb0 [ 784.073209] ? loop_set_status_old+0x1b0/0x1b0 [ 784.073683] ? fsnotify+0xb4f/0x1250 [ 784.074092] ? avc_ss_reset+0x180/0x180 [ 784.074515] ? fsnotify_first_mark+0x1f0/0x1f0 [ 784.075011] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.075525] ? lock_acquire+0x41c/0x4d0 [ 784.075954] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.076446] ? lock_release+0x505/0x6f0 [ 784.076868] ? find_and_remove_object+0xe4/0x120 [ 784.077375] ? __delete_object+0xb3/0x100 [ 784.077841] ? lock_downgrade+0x6d0/0x6d0 [ 784.078273] ? rwlock_bug.part.0+0x90/0x90 [ 784.078749] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.079262] ? selinux_inode_getsecctx+0x90/0x90 [ 784.079797] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.080318] ? loop_set_status_old+0x1b0/0x1b0 [ 784.080840] blkdev_ioctl+0x362/0x7f0 [ 784.081236] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.081762] ? __x64_sys_ioctl+0x97/0x210 [ 784.082224] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.082845] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.083372] __x64_sys_ioctl+0x196/0x210 [ 784.083821] do_syscall_64+0x3b/0x90 [ 784.084241] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.084776] RIP: 0033:0x7f432f5bb8d7 [ 784.085182] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.087250] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.088090] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 784.088877] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 784.089666] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 784.090452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 784.091256] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 784.092058] 08:06:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x10800, 0xe) openat(r2, &(0x7f0000000040)='./file1\x00', 0x10000, 0x11) lseek(r0, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10480, 0x2a) 08:06:27 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:27 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = dup2(r0, r1) pwritev(r2, &(0x7f00000016c0)=[{&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000080)="87c81b7258032d9fe54421f4adaf8f56e3ff5a690c1b1f62d78194", 0x1b}, {&(0x7f0000000240)="92c2a2cf4bd4a7fb2f5eb34df03c2baea4e4053deb8d07f6f76e18b19dcb3ba41961766d23738b7de952780fdd3813afb4a3083f47820bfdec788c0eec2a1e2b6505b60991aa8727eeb5a28ebbc96453e6c6452ef775c5e459f062817d387c7ba537ab0b0f0a07185d840a33b16ab6863b54d9eecb0f7413224941b0180b4c65571aa124fa499bbec9cf88127f5ba86aa1913fd888c335643d121b060566312ad5caca150d40e2eca4705e27969a46d52153a27ea8d76099c736a4c10f2f825938ab91a1ad07d20ecf29542b1e096848a886a8cfa96506b976f76fa85606028cac7e17d3f18b732efd25385e1cbc234dbd3c94c1e9d7b22cfa2a6e4e4fa6b9d5740825b228d133cab65de0c10f59321a6a450fd71f82f8d30a4bc5809b39677ac9d17270c8ac00f57e1b10c83cb58a694360f6c6822f6dcf8a52bb51def5939ed6697503c85923872bd05d1559e826cf876b088061e172cb77cbc8bf080a87b4503e9bd9fcd0b6792b90c1296a2b025bdc2a81d69969c29e26f627cadf1b2caef0370279852003f21901f9082c848af33e44703c4d6bb6cdb33e45b777f609b277584275202ac8dee8a7d03b90009a6bfb4360d86c3817cdda061a0fef8108ec0ff92f429f3bd0214d598c3d271fc7aa7f8399cd6803c3f1d5f5ea731b1cf4ea7be9e1ba9f64d4c2877976864ae886c429e829a768ccccf54826045a795e46b6b40a6fa01affd7a95677d9980c9dd2dd12b576c3d61824384e1d99fa68b829f7f7a1d437b250595412a1b71ad683d91907ffa0f5dcd0d83256b0ff788cdacbf085cb281238db339b6e7096dc458ca423f5b969cf6dd57542e90352f25ec79fb991293b545509dda22a2b19b8fb33b92c99567b866704c6aee743415ef5a6d01cbc5297a54a25e6abf19e060502f3cae151f97749fc901def6ba50fe6324aafeff8f44e02e6d492a58256cc0080db4af078bd873aebe60f21cf4b294d740c7c40a2a74e6fe374517452e53acc7aa6074341e8e7fb51144ef26a8f0aa44874851ec421a8941604c18dc15e0869cec487967cbbc2697ed5c912d5a3807cec7c135b8ef3fe37e84ab87165a64e9bf4c034680a568817777b999fe0fa38e9c88ef60b88a35623cba827f462a248b704d001d17da0707e9cb909d04c81490e20d81085981fd2918150ffd5578f0f1b34af28882c198d12e9eb072dc5dcbfe683fe61182c1a6c91a1a09f2ba0c9c4614b90e209ffa0015ad64ddce7eeefacb4f163ad82fe0cc6443268fa44c9f70c7e13800f137cb31919d5b8f471feadefe4fa9692a04ac6fd3fa31f1849c0c8ba68cf5919375b0075b0e359a00a704a15d40b08909b2e1397830aa15f3ab2907493797767586a247de8d9a513776b79af19e7a654f87b43626d1b550768f364973629d267c363345df5ffcdd174cb06157f60d877ffefbe30e29446b3b2b9a6df107c86e70e9fefcc6b6fff18937880b63e1dfdac446139992753479ce7f96d3760089038768f2270bf268e99fcea4c1564d4f8bb7dba5e5b10e2717b9149c30793f6a69d396ec2c63a5e4d4647fc5cea897a7b65dd939cb9a712c1955da49f75cb8356dc73cda3de42aac5d9ed4839c42c197488d9abd3d7b3ab30a2ee88a5098237cb7db5829e01a3150b9a50f5c96f9859de7095dfa5c552f5085362e2948a35709fba875ab3966a141862014c12bb18306e12ab619654cab9c0fbca3589021108c5352af1aa9aff88d14f467ef4ef6a39499324ab02c9c70dc0510416717fb20db288a6f1f28d5efe3945720d034bca81d9c25fb7b23744ca927254ca9707965baac8efbc76f81bc8a46882fde2f3531cf8c789b5ee5fafdfc1746a78b24c30e42541ed2d4934eb3ca23a0776031180d48daffd9737b687c4e71b5b5af2b5e4285c8f37387dc8d9e5ac835134c93ff3100a022c2d6df9ae8517bfacee4af7de49afe470331bb43123ac617658dc883d597962651724c6a9ebd1b93b8f90f1c8fc1b46057a1c51746cb500ee70d1b42a5b475115d4553083f415e0f2e004e5a44782679daf6db7af3efc35193fa17b0e33d2b7e6a1c745370ab34402cb117407a91278114c62f12b1796a8e9b9e13ef474b6483336b7eecc678216193e8a7202eb495d10d7c51b9e8002314fb2065679489f53d26cee32307e1682063bc86b1b249a111d602d621a9d6a9ce39ee06c139eeb45f70354fa03bd28df1a1372766cca845131ae33d63955f238dfe428cb34d7391dbc3190b64f40430a2e6c0e3a3b523b501232f42cb655955ce7616f7115bc9f5b7ef5695f5d20995e3cf714dabc7af718a11bf9d869ae9daa372ca48814dcf5f345a9cc430779c0935ae3903c91cd92eff18788e4ed3884cea387a5f4c6c1b8980164d62c34e5e84649b27765abd1f881c0d79b908fd13a5cdc4eca8d5f20ad5ffa3a6915ca71d35ad9b8b46dfe651046858a800af0fce4a08c3c8f3d8e7c32ec24e523169c5bba85308fc36475c0f26bcad2385b03d702d30be3ae23cce15bdf3db59d1710a6d36414e43c3bc6180326ae8603584648e017ce18f6e19b8a374672b4b4f71bdb9934d16da1f175d9d41636a19d5382d40d6f5d0f02dcb0b55ea9fc3377fbe4f9a6f74f5063dad9e65fdf0fafbeefb58885b51831b7d9bb15149a08c46938f748c8ea277e6906ccc0848f18f5ee852801881c5c1feb67f7b44181ce8f7ba9b82b220823e978d56d3a1de3218edeb77fa9b3c7095ef510101e7c8f87283e10a8d554df28953d891d2250efd17e2db012e1693a7b13f26b75b5d324ae2ed14a15a690e64b2746a9d70f051d9216ee9a3876d249b3b641f2c778c7755da9512af5c2b61f301d2d573aa9c2386740379883525ba8f50243edbfbd1208401f02bb4f19b8f4b310c8536a4e49f98eaa6d4d550ddceca4b65f4a6f99d0e9c876cc3a63fa8de3e2e08dfd8bae024992d5a5e00fb18383eeb3ab96662b21074cee906abb05ea26ade88105c7fa136e81c14f167be62bf5a956a7dc22783a324cfde1ee6dcb0b8cf0e19cd3fd562632fb352684d661e4ab8907eb7da4b8067c926cf0f24251e0a32fce9557327b05732f0166b5feaa6302ec4bb5adaca657da15b1452ef8c2b3e134189830624b6f8fc17b55f4653e323b4198075345bd7dcfe53ade8ad0ac40a6328fedaee56dcd7540a8063bf8b351c712efb05a86cd024ac75f59f513f8092d2d43f3d2bf5968b8fde68d3e627a905aa7d612f318f241c49c3d6d6b7e6c98a55b6c68efbfb73fd2e0dbaf918c897695427e9e287418ad4433f7bf37be2968b5a458235eb080df55744880bd37479b1a1f721e1b79bd9b272eb6ec423bc936b413b11721575897ebd9844a9442bdd8f60a5c0c4de723d950241ed960bc4e4b3fdae6926df5259fe8b94f5628374ee3daa4e7c2385d359c99e6af2d425f6f96b6182bf8605779ce3c1d30c072c64fc03eb232ab450d902502a7a7fc4baea5a2b3534f258e940c856689d3a0fab77e77cc12ecf1534677e678542bb44c3c2d2859baab9ed413ca4c96c4d4bf078b59c89cc51df7e46326ee9b05bc52bf661bbb74b08bc51e95a3b024d9a517d89ec6c0138c225303f13ce9efe13bf63614b75ab9f0e45f301669e21343c9ed7f4de7a614b84dd7dea493dcee00b125c5381c6fc1bd882875377935405a2192f7ae91731b6ce54aead677f53cffc572767fee67cc374cc958c43cf50267654e6f9596722bb7579fd6df6960d70bdc3f99adfab18c07d2af769c301d67fa916b2e6e983beff539310106c50f675e8689ba23c531c6ba32e44ee6607e2e6f8c8f3df4e3f28469c4c15e8b78801b2bae9a7b78b1766d273437733f21fea6c4f6bd7832da9b4c09fa2c4807ce3fd1646bc20dc6c20a68adafbfefaa6daae1ad7aaf8aae20d9b160a529438d1946df03b4c601586cfdf86b5a75296069991e9d6c715069ca1da7c0653971c4ec7dc6d51fd30f9a52a8f42b2453b64f60ccab6a362f5c7446f29c51f738a5ed9438c74d2154be2b8d8dd9a3a5fbbd4b71081d9707ed1e7889e482b16de3ae423ac4fda0b417a5f0b7bfa05e5fb80a433e2ff3228d03d5f10f480ea24a40e24b0601923fd4d1ccdb2d3bcd981f465e8e1e3c40b2ba6ecb222390f40ba5fb248f4a74515fb9c92a58d74edf481997e182e61b84b0df43c102bedf5038d84d5e0c8287ace45bcfcb062b97063680e519b722645a9f7542dd3950a880ca33821e97187122c49d5779c67d1a75329c67226ea6b7f820bb94fa5baa9caf4f70e71c2446069191dbbd0efa44d6f2dc590580bc5c566410c3278d5118aaaf2b16a083b9856c40c59ab720f60b7e70f7e5f4cd7e4a53079a751a8a8e121ebbe11d78992e36d820d61f836c8a9da0ad48f0cc4c703a2afc9b0c29df17f42a52f69a8a5fe43a0d0ed9e9c6533933fe940e768b7852f35e9da2b78cb56cb0cb4bc3b262a9472d2d102e19c3188c4bc838f2027a564b2e19445c2d541eb48241f41b70feeaf16b0d3df2d87fa6e892e44d7d331a339dc58acf73f1b077bbccf2bac592036e5977221a492355c2af698a179c0231129b0184ee1233ca646279564e5dd657c58217f96f36df0ff0d7ebddaf5379aa1e4fb4806bb430ccc612016d10af649d6ee87e0d167eaa75b7bf8c7157e134bece7da275751d2118b1f1edc940b69eb791f93d778212ab3f9f3ec786d1e4638adfa4b72b30378212e9fa9157886a232efb9bbd1bb7725c83e04d987acb6aa00c2206d818869b85a9318c634f005271345966b71a2db1620e824b14ed95ad6bc4eac87d58ab7b4b3a301e56dbbefa47e85065d0b933bc76c7270715a5f7701668b20913d898475e75375f7fe81a302aa868ea83f56666b0eb80ab425be599172d495cfa88a444dff6f730cc1596bb61e25d6d61c22a838a97a02f7a6c51197d9d47ac886a45a74df846d2f7772d61dde47d189c94c4c3e300a6929d47ef6ea335e5e4be58ac29a5ab321367dfe8554f9d3968c406df257d5a259d61e1b52947461f540302bef5c26b77759fddaa2f2e92ca50044e5ad1edec1fdc89f300c09cb76fb45d9717f8558878f0e7485005678221f815daefce8ffcd96714068a24d2469ca153b63c730657de8be948ca3b51bd30690d69aa615894a47663562c5958f2f0b5bd1b2af1d9ef5f9af6c418ac4def7d6f34be1e45326b303c9cc6d2a3ef14669ab8d753a9d600553a25d08614e8b096e9e233aeb7caca00d5ff2c300bfd7718a31480917390900274d6955180247611846909618e0b332f2b2e61230c46da3450ccff64e210400351fac62f047c26e474da99995f6a6585929b30692fdc3330ab32e0f1f11702b428d49262606c8d2750f1fb4a84a94c93c4f8b55d1c6f823bfef39479d1d6f416f18f1ba7482cb59f97771e4be14b841be000b679ac61402dccd5f3618e9b524e9833d750d618613a86aecccef607455f63cd969ccaaf86d1d678818e209b550fdbd424b5eec2412e1aaf6934e7e8be176bfc4029fefa203ad2df8387cb790a869140a40cca11eaeb2e2d3f2ed530792d2721c8a87b362d93349b64f6a0571c66c1942430f6d2eab024b6704ab02cb74eeeb5f13a26210bb76e0168ce3461fc576324ff7fa23f56ddcfbd4232f38112dc17626b42bd440e3e8fdd1484acc83c518506ed5c6bf4973f040a00bbdbaa384818f6f136466c2f30f74d73e1f8d5a2c5047ab66194d7451eb3a19947a1dc97aef784ba2c798eb5e921d896402a7aa17c60da8e70befecdf09cc01e1704", 0x1000}, {&(0x7f00000000c0)="905ee13525e673622702bdc698da925713582e185691de59c96199b6448e42e4ece023", 0x23}, {&(0x7f0000001240)="fd46f9df5af674a23958c7", 0xb}, {&(0x7f0000001280)="eb68e8ee96dc58a60b7ac0f270bd8a4efc35e295321d6d5ff6536034b649a7705890c4713e213a5474b899e70f854064a982809e48c64437835da969156f71cd0ffd5725a90f8b33869c30837bc81f48033c6e8c04daf2e351080b4337367f2c8ce45175c5d8abc927c80672bbba5059d795300c9aebe7330be2e1add2db7a1790adc27e724efb5ab718f979ee4cd8914b7f5b31f7dc5da992dbff726ee87d061ef60318122bfb2babc2d578c431abc15f0bf0e83233320cd732df0c848cd63b50efa03a532b3a244c5daacdabc1fd9ab798331dbd9b250028446bc81e578ee5b24ccae83cc19c1c31fe5f25", 0xec}, {&(0x7f0000001380)="5df58ac18a8caa528ace47436ab97e4383b182324e37f52adf9fc036fe517ca0d25b6da3e6e22a55297d0090b1828c64d37ab2d4790d50694fab7b6e41346dc254d199be91463283c8f0c707321be7d6177c0bbd074c15953b3fc8bd0c37ac0c3c7c95cf2e9e2b9dabcedbab0c58a07d0e0a446a893c6e0edacc0f1f7740785f7d26ac1e2454485f7743314f97b25fc61b6bc1805e3ada19bd64841008ce9a84f64dbd40f719d7459bb1d37eba0d127cce6336307fe768260ed6492aee275f23a3", 0xc1}, {&(0x7f0000001480)="72197bf9308ca71a399cc4b04d00b6e9c0a67566268ee90ef76eefce947f5e2e2f1768afe6ed88af2fd3981d688f4ed73827bd5700ab608c84bf108dd452e17cc235afa294f1d3c3649fa9a556353aa8752b25f1f36766f53aef73abbc12676b5427cd36545a413c96d8dfed5ed0295d40a700425a91f424211064c18ab9ee14fc7ccb1602293ed38199638519e5b0f387f2dfe8c75633abf4123f2cca237a51b6e7a70b09de79218550ed98f7a4", 0xae}, {&(0x7f0000001540)="0af6d1a8258fce1cc9e3ee7a43ecda9ca7aacd052d2c43d6c0e7e8b80deb1e5d468f9dd330dd195e1df3c4709deb60c9257e119d1a0dee25783f6893f4a5e2e906a40acb38e256f9832d5b800bd1c23459da4b7716e18d6124a68caf8879a0734ac54521f9", 0x65}, {&(0x7f00000015c0)="f3ed1d87e231c283ab8ea871096f96e0d2e9075e4142dda07e12c266fee6029d7bac2968e8ea80cf148567eadcaad2fa6d3c16accb55f98fed31da4e56c74c88954b6b05622523dba95e32c825477279c6c5aefbacb2a1bf8061f282b2040ee858d67aa4f704461adccc016a9efdbc42789e4973d684d651bd18e747008863c6c55bc07aa4a73a7f32446ab70f9a9e657255c3de4c56c988ab1187abc914777301f0bff464484c6790601f4fa9b64150a82eb6682c1766e7ed10f979819b6d7844833bba51cc7c648fc9578e9a370f3446f30a417b", 0xd5}], 0xa, 0x430, 0x5) lseek(r0, 0x0, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) finit_module(r3, &(0x7f0000000040)='/*]&-\x00', 0x3) 08:06:27 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:28 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 28) [ 784.154085] loop5: detected capacity change from 0 to 128 [ 784.164225] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 784.165212] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 784.202593] FAULT_INJECTION: forcing a failure. [ 784.202593] name failslab, interval 1, probability 0, space 0, times 0 [ 784.203850] CPU: 0 PID: 7238 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 784.204879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 784.206104] Call Trace: [ 784.206379] [ 784.206628] dump_stack_lvl+0x8b/0xb3 [ 784.207065] should_fail.cold+0x5/0xa [ 784.207484] ? create_object.isra.0+0x3a/0xa20 [ 784.207991] should_failslab+0x5/0x10 [ 784.208394] kmem_cache_alloc+0x5b/0x480 [ 784.208841] create_object.isra.0+0x3a/0xa20 [ 784.209322] ? kasan_unpoison+0x23/0x50 [ 784.209758] __kmalloc+0x25b/0x440 [ 784.210145] apply_wqattrs_prepare+0xab/0x880 [ 784.210633] ? is_kernel_percpu_address+0xe6/0x110 [ 784.211167] apply_workqueue_attrs_locked+0xc1/0x140 [ 784.211711] alloc_workqueue+0xb1a/0xeb0 [ 784.212150] ? do_raw_spin_unlock+0x4f/0x210 [ 784.212617] ? _raw_spin_unlock+0x24/0x40 [ 784.213060] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 784.213619] ? __fget_files+0x28d/0x470 [ 784.214039] ? loop_configure+0x62b/0x1950 [ 784.214515] loop_configure+0x6ec/0x1950 [ 784.214959] ? putname+0xfe/0x140 [ 784.215350] lo_ioctl+0x782/0x1860 [ 784.215723] ? avc_has_extended_perms+0x7e8/0xeb0 [ 784.216274] ? loop_set_status_old+0x1b0/0x1b0 [ 784.216758] ? fsnotify+0xb4f/0x1250 [ 784.217175] ? avc_ss_reset+0x180/0x180 [ 784.217603] ? fsnotify_first_mark+0x1f0/0x1f0 [ 784.218108] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.218611] ? lock_acquire+0x41c/0x4d0 [ 784.219067] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.219566] ? lock_release+0x505/0x6f0 [ 784.220018] ? find_and_remove_object+0xe4/0x120 [ 784.220545] ? __delete_object+0xb3/0x100 [ 784.221007] ? lock_downgrade+0x6d0/0x6d0 [ 784.221468] ? rwlock_bug.part.0+0x90/0x90 [ 784.221936] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.222474] ? selinux_inode_getsecctx+0x90/0x90 [ 784.223028] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.223553] ? loop_set_status_old+0x1b0/0x1b0 [ 784.224031] blkdev_ioctl+0x362/0x7f0 [ 784.224452] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.224948] ? __x64_sys_ioctl+0x97/0x210 [ 784.225418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.226033] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.226530] __x64_sys_ioctl+0x196/0x210 [ 784.226997] do_syscall_64+0x3b/0x90 [ 784.227420] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.227955] RIP: 0033:0x7f432f5bb8d7 [ 784.228378] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.230442] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.231314] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 784.232103] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 784.232903] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 784.233700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 784.234488] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 784.235295] 08:06:28 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 39) [ 784.250159] FAULT_INJECTION: forcing a failure. [ 784.250159] name failslab, interval 1, probability 0, space 0, times 0 [ 784.252516] CPU: 1 PID: 7240 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 784.254419] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 784.256158] ISOFS: Unable to identify CD-ROM format. [ 784.256697] Call Trace: [ 784.256705] [ 784.256714] dump_stack_lvl+0x8b/0xb3 [ 784.258989] should_fail.cold+0x5/0xa [ 784.259753] ? kobject_uevent_env+0x236/0xfa0 [ 784.260675] should_failslab+0x5/0x10 [ 784.261429] kmem_cache_alloc_trace+0x55/0x3c0 [ 784.262372] kobject_uevent_env+0x236/0xfa0 [ 784.262536] ISOFS: Unable to identify CD-ROM format. [ 784.263256] ? dev_uevent_filter+0xd0/0xd0 [ 784.264652] ? _raw_spin_unlock+0x24/0x40 [ 784.265491] disk_event_uevent+0x17b/0x1e0 [ 784.266345] ? disk_events_async_show+0x10/0x10 [ 784.267297] ? __fget_files+0x28d/0x470 [ 784.268098] disk_force_media_change+0x1e/0xc0 [ 784.269017] loop_configure+0x75b/0x1950 [ 784.269840] ? putname+0xfe/0x140 [ 784.270542] lo_ioctl+0x782/0x1860 [ 784.271263] ? avc_has_extended_perms+0x7e8/0xeb0 [ 784.272243] ? loop_set_status_old+0x1b0/0x1b0 [ 784.273159] ? fsnotify+0xb4f/0x1250 [ 784.273904] ? avc_ss_reset+0x180/0x180 [ 784.274709] ? fsnotify_first_mark+0x1f0/0x1f0 [ 784.275641] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.276589] ? lock_acquire+0x41c/0x4d0 [ 784.277383] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.278325] ? lock_release+0x505/0x6f0 [ 784.279132] ? find_and_remove_object+0xe4/0x120 [ 784.280085] ? __delete_object+0xb3/0x100 [ 784.280920] ? lock_downgrade+0x6d0/0x6d0 [ 784.281745] ? rwlock_bug.part.0+0x90/0x90 [ 784.282589] ? rcu_read_lock_sched_held+0xd/0x70 [ 784.283561] ? selinux_inode_getsecctx+0x90/0x90 [ 784.284514] ? loop_set_status_old+0x1b0/0x1b0 [ 784.285429] blkdev_ioctl+0x362/0x7f0 [ 784.286181] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.287133] ? __x64_sys_ioctl+0x97/0x210 [ 784.287965] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 784.289063] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 784.289999] __x64_sys_ioctl+0x196/0x210 [ 784.290812] do_syscall_64+0x3b/0x90 [ 784.291566] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.292587] RIP: 0033:0x7faf15eb38d7 [ 784.293318] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.296988] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.298518] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 784.299975] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 784.301453] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 784.302880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 784.304286] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 784.305701] [ 784.318034] loop0: detected capacity change from 0 to 128 [ 784.329364] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 794.169201] FAULT_INJECTION: forcing a failure. [ 794.169201] name failslab, interval 1, probability 0, space 0, times 0 [ 794.170845] CPU: 0 PID: 7255 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.172186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.173733] Call Trace: [ 794.174097] [ 794.174415] dump_stack_lvl+0x8b/0xb3 [ 794.174972] should_fail.cold+0x5/0xa [ 794.175391] ? create_object.isra.0+0x3a/0xa20 [ 794.175891] should_failslab+0x5/0x10 [ 794.176306] kmem_cache_alloc+0x5b/0x480 [ 794.176759] create_object.isra.0+0x3a/0xa20 [ 794.177240] ? kasan_unpoison+0x23/0x50 [ 794.177671] __kmalloc_node_track_caller+0x269/0x440 [ 794.178214] ? alloc_uevent_skb+0x7b/0x210 [ 794.178364] FAULT_INJECTION: forcing a failure. [ 794.178364] name failslab, interval 1, probability 0, space 0, times 0 [ 794.178667] __alloc_skb+0xe3/0x340 [ 794.178689] alloc_uevent_skb+0x7b/0x210 [ 794.182125] kobject_uevent_env+0xaa4/0xfa0 [ 794.182596] ? _raw_spin_unlock+0x24/0x40 [ 794.183056] disk_event_uevent+0x17b/0x1e0 [ 794.183515] ? disk_events_async_show+0x10/0x10 [ 794.184017] ? __fget_files+0x28d/0x470 [ 794.184451] disk_force_media_change+0x1e/0xc0 [ 794.184945] loop_configure+0x75b/0x1950 [ 794.185391] ? putname+0xfe/0x140 [ 794.185772] lo_ioctl+0x782/0x1860 [ 794.186160] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.186687] ? loop_set_status_old+0x1b0/0x1b0 [ 794.187194] ? fsnotify+0xb4f/0x1250 [ 794.187599] ? avc_ss_reset+0x180/0x180 [ 794.188030] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.188516] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.189032] ? lock_acquire+0x41c/0x4d0 [ 794.189457] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.189963] ? lock_release+0x505/0x6f0 [ 794.190387] ? find_and_remove_object+0xe4/0x120 [ 794.190897] ? __delete_object+0xb3/0x100 [ 794.191356] ? lock_downgrade+0x6d0/0x6d0 [ 794.191802] ? rwlock_bug.part.0+0x90/0x90 [ 794.192247] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.192770] ? selinux_inode_getsecctx+0x90/0x90 [ 794.193276] ? loop_set_status_old+0x1b0/0x1b0 [ 794.193766] blkdev_ioctl+0x362/0x7f0 [ 794.194174] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.194683] ? __x64_sys_ioctl+0x97/0x210 [ 794.195143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.195746] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.196253] __x64_sys_ioctl+0x196/0x210 [ 794.196686] do_syscall_64+0x3b/0x90 [ 794.197086] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.197633] RIP: 0033:0x7f9aebdc68d7 [ 794.198029] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.199985] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.200802] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 794.201568] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.202337] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.203104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.203874] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 794.204629] 08:06:37 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 39) 08:06:37 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 40) 08:06:37 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:37 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:37 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 46) 08:06:38 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:06:38 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 29) [ 794.204875] CPU: 1 PID: 7256 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.207132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.209519] Call Trace: [ 794.210059] [ 794.210529] dump_stack_lvl+0x8b/0xb3 [ 794.211355] should_fail.cold+0x5/0xa [ 794.212162] ? alloc_workqueue_attrs+0x38/0x80 [ 794.213133] should_failslab+0x5/0x10 [ 794.213933] kmem_cache_alloc_trace+0x55/0x3c0 08:06:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) pwrite64(r2, &(0x7f0000000000)="af6546a757386a5a246dd5076e04f5b1655bc2eb6195bd66789a767aafa71ffb6e4626eab1f2b8af71f1d9cd9be261fc30cd6ef41497a6ee3551ee9099dc69e340501a53d0c0d2a009a341b474", 0x4d, 0x7f) lseek(r0, 0x0, 0x4) [ 794.214914] alloc_workqueue_attrs+0x38/0x80 [ 794.215941] apply_wqattrs_prepare+0xb3/0x880 [ 794.216909] ? is_kernel_percpu_address+0xe6/0x110 [ 794.217974] apply_workqueue_attrs_locked+0xc1/0x140 [ 794.219086] alloc_workqueue+0xb1a/0xeb0 [ 794.219964] ? do_raw_spin_unlock+0x4f/0x210 [ 794.220059] loop5: detected capacity change from 0 to 128 [ 794.220906] ? _raw_spin_unlock+0x24/0x40 [ 794.222379] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 794.223462] ? __fget_files+0x28d/0x470 [ 794.224385] ? loop_configure+0x62b/0x1950 [ 794.225320] loop_configure+0x6ec/0x1950 [ 794.226251] ? putname+0xfe/0x140 [ 794.226586] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 794.227051] lo_ioctl+0x782/0x1860 [ 794.228594] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.229641] ? loop_set_status_old+0x1b0/0x1b0 [ 794.230627] ? fsnotify+0xb4f/0x1250 [ 794.231447] ? avc_ss_reset+0x180/0x180 [ 794.232319] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.233301] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.234325] ? lock_acquire+0x41c/0x4d0 [ 794.235198] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.236206] ? lock_release+0x505/0x6f0 [ 794.237051] ? find_and_remove_object+0xe4/0x120 [ 794.238064] ? __delete_object+0xb3/0x100 [ 794.238967] ? lock_downgrade+0x6d0/0x6d0 [ 794.239853] ? rwlock_bug.part.0+0x90/0x90 [ 794.240754] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.241778] ? selinux_inode_getsecctx+0x90/0x90 [ 794.242793] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.243811] ? loop_set_status_old+0x1b0/0x1b0 [ 794.244787] blkdev_ioctl+0x362/0x7f0 [ 794.245585] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.246603] ? __x64_sys_ioctl+0x97/0x210 [ 794.247492] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.248680] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.249695] __x64_sys_ioctl+0x196/0x210 [ 794.250546] do_syscall_64+0x3b/0x90 [ 794.251367] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.252449] RIP: 0033:0x7f432f5bb8d7 [ 794.253242] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.257119] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.258752] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 794.260295] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.261827] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.263365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.264902] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 794.266438] 08:06:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x425442, 0x19a) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) [ 794.274427] FAULT_INJECTION: forcing a failure. 08:06:38 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 794.274427] name failslab, interval 1, probability 0, space 0, times 0 [ 794.276987] CPU: 1 PID: 7259 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.279057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.281425] Call Trace: [ 794.281975] [ 794.282440] dump_stack_lvl+0x8b/0xb3 [ 794.283279] should_fail.cold+0x5/0xa [ 794.284106] ? __alloc_skb+0x211/0x340 [ 794.284958] should_failslab+0x5/0x10 [ 794.285777] kmem_cache_alloc_node+0x55/0x490 [ 794.286748] __alloc_skb+0x211/0x340 [ 794.287582] alloc_uevent_skb+0x7b/0x210 [ 794.288472] kobject_uevent_env+0xaa4/0xfa0 [ 794.289409] ? _raw_spin_unlock+0x24/0x40 [ 794.290314] disk_event_uevent+0x17b/0x1e0 [ 794.291237] ? disk_events_async_show+0x10/0x10 [ 794.292249] ? __fget_files+0x28d/0x470 [ 794.293109] disk_force_media_change+0x1e/0xc0 [ 794.294102] loop_configure+0x75b/0x1950 [ 794.295004] ? putname+0xfe/0x140 [ 794.295757] lo_ioctl+0x782/0x1860 [ 794.296520] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.297565] ? loop_set_status_old+0x1b0/0x1b0 [ 794.298550] ? fsnotify+0xb4f/0x1250 [ 794.299121] FAULT_INJECTION: forcing a failure. [ 794.299121] name failslab, interval 1, probability 0, space 0, times 0 [ 794.299355] ? avc_ss_reset+0x180/0x180 [ 794.301396] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.302382] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.303412] ? lock_acquire+0x41c/0x4d0 [ 794.304269] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.305293] ? lock_release+0x505/0x6f0 [ 794.306155] ? find_and_remove_object+0xe4/0x120 [ 794.307201] ? __delete_object+0xb3/0x100 [ 794.308103] ? lock_downgrade+0x6d0/0x6d0 [ 794.308986] ? rwlock_bug.part.0+0x90/0x90 [ 794.309883] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.310921] ? selinux_inode_getsecctx+0x90/0x90 [ 794.311937] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.312956] ? loop_set_status_old+0x1b0/0x1b0 [ 794.313949] blkdev_ioctl+0x362/0x7f0 [ 794.314749] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.315777] ? __x64_sys_ioctl+0x97/0x210 [ 794.316648] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.317836] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.318825] __x64_sys_ioctl+0x196/0x210 [ 794.319707] do_syscall_64+0x3b/0x90 [ 794.320501] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.321607] RIP: 0033:0x7f22ed51d8d7 [ 794.322382] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.326351] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.327950] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 794.329484] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.331026] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.332555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.334085] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 794.335638] [ 794.336134] CPU: 0 PID: 7261 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.337169] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.338371] Call Trace: [ 794.338642] [ 794.338882] dump_stack_lvl+0x8b/0xb3 [ 794.339314] should_fail.cold+0x5/0xa [ 794.339736] ? kobject_uevent_env+0x236/0xfa0 [ 794.340219] should_failslab+0x5/0x10 [ 794.340626] kmem_cache_alloc_trace+0x55/0x3c0 [ 794.341130] kobject_uevent_env+0x236/0xfa0 [ 794.341593] ? dev_uevent_filter+0xd0/0xd0 [ 794.342052] ? _raw_spin_unlock+0x24/0x40 [ 794.342505] disk_event_uevent+0x17b/0x1e0 [ 794.342964] ? disk_events_async_show+0x10/0x10 [ 794.343450] ? __fget_files+0x28d/0x470 [ 794.343891] disk_force_media_change+0x1e/0xc0 [ 794.344383] loop_configure+0x75b/0x1950 [ 794.344821] ? putname+0xfe/0x140 [ 794.345208] lo_ioctl+0x782/0x1860 [ 794.345597] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.346127] ? loop_set_status_old+0x1b0/0x1b0 [ 794.346623] ? fsnotify+0xb4f/0x1250 [ 794.347035] ? avc_ss_reset+0x180/0x180 [ 794.347467] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.347962] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.348466] ? lock_acquire+0x41c/0x4d0 [ 794.348893] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.349406] ? lock_release+0x505/0x6f0 [ 794.349834] ? find_and_remove_object+0xe4/0x120 [ 794.350359] ? __delete_object+0xb3/0x100 [ 794.350821] ? lock_downgrade+0x6d0/0x6d0 [ 794.351283] ? rwlock_bug.part.0+0x90/0x90 [ 794.351743] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.352263] ? selinux_inode_getsecctx+0x90/0x90 [ 794.352778] ? loop_set_status_old+0x1b0/0x1b0 [ 794.353265] blkdev_ioctl+0x362/0x7f0 [ 794.353678] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.354194] ? __x64_sys_ioctl+0x97/0x210 [ 794.354644] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.355241] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.355758] __x64_sys_ioctl+0x196/0x210 [ 794.356195] do_syscall_64+0x3b/0x90 [ 794.356607] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.357173] RIP: 0033:0x7faf15eb38d7 [ 794.357565] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.359563] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.360390] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 794.361156] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.361929] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.362699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.363475] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 794.364245] [ 794.371562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:06:38 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 794.379410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:06:38 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:38 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) [ 794.402005] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 794.404214] ISOFS: Unable to identify CD-ROM format. 08:06:38 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:38 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 47) 08:06:38 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 40) [ 794.457731] FAULT_INJECTION: forcing a failure. [ 794.457731] name failslab, interval 1, probability 0, space 0, times 0 [ 794.459050] CPU: 0 PID: 7281 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.460068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.461255] Call Trace: [ 794.461528] [ 794.461770] dump_stack_lvl+0x8b/0xb3 [ 794.462193] should_fail.cold+0x5/0xa [ 794.462609] ? create_object.isra.0+0x3a/0xa20 [ 794.463119] should_failslab+0x5/0x10 [ 794.463523] kmem_cache_alloc+0x5b/0x480 [ 794.463961] create_object.isra.0+0x3a/0xa20 [ 794.464437] ? kasan_unpoison+0x23/0x50 [ 794.464870] kmem_cache_alloc_node+0x248/0x490 [ 794.465359] __alloc_skb+0x211/0x340 [ 794.465765] alloc_uevent_skb+0x7b/0x210 [ 794.466206] kobject_uevent_env+0xaa4/0xfa0 [ 794.466669] ? _raw_spin_unlock+0x24/0x40 [ 794.467136] disk_event_uevent+0x17b/0x1e0 [ 794.467589] ? disk_events_async_show+0x10/0x10 [ 794.468089] ? __fget_files+0x28d/0x470 [ 794.468519] disk_force_media_change+0x1e/0xc0 [ 794.469008] loop_configure+0x75b/0x1950 [ 794.469446] ? putname+0xfe/0x140 [ 794.469824] lo_ioctl+0x782/0x1860 [ 794.470201] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.470725] ? loop_set_status_old+0x1b0/0x1b0 [ 794.471226] ? fsnotify+0xb4f/0x1250 [ 794.471628] ? avc_ss_reset+0x180/0x180 [ 794.472059] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.472548] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.473057] ? lock_acquire+0x41c/0x4d0 [ 794.473485] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.473987] ? lock_release+0x505/0x6f0 [ 794.474410] ? find_and_remove_object+0xe4/0x120 [ 794.474922] ? __delete_object+0xb3/0x100 [ 794.475373] ? lock_downgrade+0x6d0/0x6d0 [ 794.475821] ? rwlock_bug.part.0+0x90/0x90 [ 794.476274] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.476793] ? selinux_inode_getsecctx+0x90/0x90 [ 794.477305] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.477814] ? loop_set_status_old+0x1b0/0x1b0 [ 794.478305] blkdev_ioctl+0x362/0x7f0 [ 794.478717] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.479229] ? __x64_sys_ioctl+0x97/0x210 [ 794.479673] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.480257] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.480767] __x64_sys_ioctl+0x196/0x210 [ 794.481201] do_syscall_64+0x3b/0x90 [ 794.481606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.482152] RIP: 0033:0x7f22ed51d8d7 [ 794.482536] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.484450] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.485266] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 794.486024] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.486781] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.487550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.488313] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 794.489079] [ 794.492920] loop0: detected capacity change from 0 to 128 [ 794.495791] FAULT_INJECTION: forcing a failure. [ 794.495791] name failslab, interval 1, probability 0, space 0, times 0 [ 794.498276] CPU: 1 PID: 7283 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 794.500363] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 794.502833] Call Trace: [ 794.503408] [ 794.503891] dump_stack_lvl+0x8b/0xb3 [ 794.504726] should_fail.cold+0x5/0xa [ 794.505564] ? skb_clone+0x170/0x3c0 [ 794.506374] should_failslab+0x5/0x10 [ 794.507203] kmem_cache_alloc+0x5b/0x480 [ 794.508014] skb_clone+0x170/0x3c0 [ 794.508793] netlink_broadcast+0x9ae/0xd60 [ 794.508944] ISOFS: Unable to identify CD-ROM format. [ 794.509709] ? alloc_uevent_skb+0x1c2/0x210 [ 794.509747] kobject_uevent_env+0xa6b/0xfa0 [ 794.513007] ? _raw_spin_unlock+0x24/0x40 [ 794.513912] disk_event_uevent+0x17b/0x1e0 [ 794.514831] ? disk_events_async_show+0x10/0x10 [ 794.515858] ? __fget_files+0x28d/0x470 [ 794.516722] disk_force_media_change+0x1e/0xc0 [ 794.517717] loop_configure+0x75b/0x1950 [ 794.518563] ? putname+0xfe/0x140 [ 794.519294] lo_ioctl+0x782/0x1860 [ 794.520070] ? avc_has_extended_perms+0x7e8/0xeb0 [ 794.521131] ? loop_set_status_old+0x1b0/0x1b0 [ 794.522041] ? fsnotify+0xb4f/0x1250 [ 794.522847] ? avc_ss_reset+0x180/0x180 [ 794.523731] ? fsnotify_first_mark+0x1f0/0x1f0 [ 794.524724] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.525749] ? lock_acquire+0x41c/0x4d0 [ 794.526622] ? rcu_read_lock_sched_held+0xd/0x70 08:06:38 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 794.527654] ? lock_release+0x505/0x6f0 [ 794.528695] ? find_and_remove_object+0xe4/0x120 [ 794.529718] ? __delete_object+0xb3/0x100 [ 794.530613] ? lock_downgrade+0x6d0/0x6d0 [ 794.531516] ? rwlock_bug.part.0+0x90/0x90 [ 794.532428] ? rcu_read_lock_sched_held+0xd/0x70 [ 794.533453] ? selinux_inode_getsecctx+0x90/0x90 [ 794.534472] ? loop_set_status_old+0x1b0/0x1b0 [ 794.535458] blkdev_ioctl+0x362/0x7f0 [ 794.536279] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.537317] ? __x64_sys_ioctl+0x97/0x210 [ 794.538223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 794.539413] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 794.540386] __x64_sys_ioctl+0x196/0x210 [ 794.541266] do_syscall_64+0x3b/0x90 [ 794.542095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.543140] RIP: 0033:0x7f9aebdc68d7 [ 794.543944] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 794.547855] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.549496] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 794.551041] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 794.552566] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 794.554084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 794.555560] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 794.557094] [ 794.582098] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 794.610818] loop5: detected capacity change from 0 to 128 [ 794.624756] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:06:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) [ 803.508002] FAULT_INJECTION: forcing a failure. 08:06:47 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 48) 08:06:47 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 41) [ 803.508002] name fail_page_alloc, interval 1, probability 0, space 0, times 0 08:06:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:06:47 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 30) [ 803.509790] CPU: 0 PID: 7291 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 803.511109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 803.512590] Call Trace: [ 803.512929] [ 803.513218] dump_stack_lvl+0x8b/0xb3 [ 803.513754] should_fail.cold+0x5/0xa [ 803.514276] prepare_alloc_pages+0x17b/0x500 [ 803.514888] __alloc_pages+0x131/0x4e0 [ 803.515421] ? lock_release+0x505/0x6f0 [ 803.515970] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 803.516781] ? lock_downgrade+0x6d0/0x6d0 [ 803.517331] ? widen_string+0xd8/0x290 [ 803.517853] ? lock_acquire+0x41c/0x4d0 [ 803.518375] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.519010] ? lock_release+0x505/0x6f0 [ 803.519544] ? lock_release+0x6f0/0x6f0 [ 803.520071] ? __slab_alloc.constprop.0+0x45/0x80 [ 803.520719] alloc_pages+0x1a0/0x2f0 [ 803.521220] allocate_slab+0x22d/0x300 [ 803.521734] ___slab_alloc+0x913/0xee0 [ 803.522250] ? skb_clone+0x170/0x3c0 [ 803.522755] ? lock_downgrade+0x6d0/0x6d0 [ 803.523588] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.524705] ? lock_acquire+0x41c/0x4d0 [ 803.525644] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.526777] ? skb_clone+0x170/0x3c0 [ 803.527683] __slab_alloc.constprop.0+0x45/0x80 [ 803.528769] ? skb_clone+0x170/0x3c0 [ 803.529638] kmem_cache_alloc+0x393/0x480 [ 803.530620] skb_clone+0x170/0x3c0 [ 803.531461] netlink_broadcast+0x9ae/0xd60 [ 803.532456] ? alloc_uevent_skb+0x1c2/0x210 [ 803.533474] kobject_uevent_env+0xa6b/0xfa0 [ 803.534489] ? _raw_spin_unlock+0x24/0x40 [ 803.535481] disk_event_uevent+0x17b/0x1e0 [ 803.536477] ? disk_events_async_show+0x10/0x10 [ 803.537568] ? __fget_files+0x28d/0x470 [ 803.538496] disk_force_media_change+0x1e/0xc0 [ 803.539597] loop_configure+0x75b/0x1950 [ 803.540531] ? putname+0xfe/0x140 [ 803.541268] lo_ioctl+0x782/0x1860 [ 803.542045] ? avc_has_extended_perms+0x7e8/0xeb0 [ 803.543100] ? loop_set_status_old+0x1b0/0x1b0 [ 803.544096] ? fsnotify+0xb4f/0x1250 [ 803.544912] ? avc_ss_reset+0x180/0x180 [ 803.545775] ? fsnotify_first_mark+0x1f0/0x1f0 [ 803.546763] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.547805] ? lock_acquire+0x41c/0x4d0 [ 803.548671] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.549692] ? lock_release+0x505/0x6f0 [ 803.550540] ? find_and_remove_object+0xe4/0x120 [ 803.551548] ? __delete_object+0xb3/0x100 [ 803.552422] ? lock_downgrade+0x6d0/0x6d0 [ 803.553293] ? rwlock_bug.part.0+0x90/0x90 [ 803.554199] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.555213] ? selinux_inode_getsecctx+0x90/0x90 [ 803.556219] ? loop_set_status_old+0x1b0/0x1b0 [ 803.557177] blkdev_ioctl+0x362/0x7f0 [ 803.557975] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.558980] ? __x64_sys_ioctl+0x97/0x210 [ 803.559875] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 803.561036] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.562039] __x64_sys_ioctl+0x196/0x210 [ 803.562906] do_syscall_64+0x3b/0x90 08:06:47 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:47 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 41) 08:06:47 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:47 executing program 1: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:47 executing program 1: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:47 executing program 1: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:47 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 803.563718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.564838] RIP: 0033:0x7f9aebdc68d7 [ 803.565617] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.569532] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.571153] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 803.572662] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 803.574167] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 803.575696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 803.577202] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 803.578717] [ 803.591613] FAULT_INJECTION: forcing a failure. [ 803.591613] name failslab, interval 1, probability 0, space 0, times 0 [ 803.592844] CPU: 1 PID: 7309 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 803.593837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 803.595006] Call Trace: [ 803.595282] [ 803.595512] dump_stack_lvl+0x8b/0xb3 [ 803.595927] should_fail.cold+0x5/0xa [ 803.596326] ? kobject_get_path+0xc0/0x1d0 [ 803.596774] should_failslab+0x5/0x10 [ 803.597177] __kmalloc+0x72/0x440 [ 803.597544] kobject_get_path+0xc0/0x1d0 [ 803.597970] kobject_uevent_env+0x25c/0xfa0 [ 803.598423] ? _raw_spin_unlock+0x24/0x40 [ 803.598867] disk_event_uevent+0x17b/0x1e0 [ 803.599325] ? disk_events_async_show+0x10/0x10 [ 803.599814] ? __fget_files+0x28d/0x470 [ 803.600233] disk_force_media_change+0x1e/0xc0 [ 803.600708] loop_configure+0x75b/0x1950 [ 803.601136] ? putname+0xfe/0x140 [ 803.601501] lo_ioctl+0x782/0x1860 [ 803.601872] ? avc_has_extended_perms+0x7e8/0xeb0 [ 803.602381] ? loop_set_status_old+0x1b0/0x1b0 [ 803.602860] ? fsnotify+0xb4f/0x1250 [ 803.603258] ? avc_ss_reset+0x180/0x180 [ 803.603675] ? fsnotify_first_mark+0x1f0/0x1f0 [ 803.604148] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.604643] ? lock_acquire+0x41c/0x4d0 [ 803.605062] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.605553] ? lock_release+0x505/0x6f0 [ 803.605964] ? find_and_remove_object+0xe4/0x120 [ 803.606460] ? __delete_object+0xb3/0x100 [ 803.606900] ? lock_downgrade+0x6d0/0x6d0 [ 803.607339] ? rwlock_bug.part.0+0x90/0x90 [ 803.607778] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.608278] ? selinux_inode_getsecctx+0x90/0x90 [ 803.608774] ? loop_set_status_old+0x1b0/0x1b0 [ 803.609246] blkdev_ioctl+0x362/0x7f0 [ 803.609636] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.610128] ? __x64_sys_ioctl+0x97/0x210 [ 803.610563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 803.611155] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.611647] __x64_sys_ioctl+0x196/0x210 [ 803.612073] do_syscall_64+0x3b/0x90 [ 803.612469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.612999] RIP: 0033:0x7faf15eb38d7 [ 803.613379] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.615269] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.616049] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 803.616785] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 803.617524] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 803.618259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 803.618998] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 803.619742] [ 803.621054] FAULT_INJECTION: forcing a failure. [ 803.621054] name failslab, interval 1, probability 0, space 0, times 0 [ 803.622236] CPU: 1 PID: 7311 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 803.623240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 803.624413] Call Trace: [ 803.624678] [ 803.624907] dump_stack_lvl+0x8b/0xb3 [ 803.625307] should_fail.cold+0x5/0xa [ 803.625704] ? create_object.isra.0+0x3a/0xa20 [ 803.626181] should_failslab+0x5/0x10 [ 803.626575] kmem_cache_alloc+0x5b/0x480 [ 803.626998] create_object.isra.0+0x3a/0xa20 [ 803.627466] ? kasan_unpoison+0x23/0x50 [ 803.627886] kmem_cache_alloc_trace+0x22e/0x3c0 [ 803.628375] alloc_workqueue_attrs+0x38/0x80 [ 803.628838] apply_wqattrs_prepare+0xb3/0x880 [ 803.629312] ? is_kernel_percpu_address+0xe6/0x110 [ 803.629831] apply_workqueue_attrs_locked+0xc1/0x140 [ 803.630359] alloc_workqueue+0xb1a/0xeb0 [ 803.630781] ? do_raw_spin_unlock+0x4f/0x210 [ 803.631250] ? _raw_spin_unlock+0x24/0x40 [ 803.631684] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 803.632207] ? __fget_files+0x28d/0x470 [ 803.632625] ? loop_configure+0x62b/0x1950 [ 803.633062] loop_configure+0x6ec/0x1950 [ 803.633481] ? putname+0xfe/0x140 [ 803.633849] lo_ioctl+0x782/0x1860 [ 803.634220] ? avc_has_extended_perms+0x7e8/0xeb0 [ 803.634732] ? loop_set_status_old+0x1b0/0x1b0 [ 803.635213] ? fsnotify+0xb4f/0x1250 [ 803.635601] ? avc_ss_reset+0x180/0x180 [ 803.636021] ? fsnotify_first_mark+0x1f0/0x1f0 [ 803.636491] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.636985] ? lock_acquire+0x41c/0x4d0 [ 803.637400] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.637900] ? lock_release+0x505/0x6f0 [ 803.638315] ? find_and_remove_object+0xe4/0x120 [ 803.638807] ? __delete_object+0xb3/0x100 [ 803.639255] ? lock_downgrade+0x6d0/0x6d0 [ 803.639695] ? rwlock_bug.part.0+0x90/0x90 [ 803.640133] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.640632] ? selinux_inode_getsecctx+0x90/0x90 [ 803.641126] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.641614] ? loop_set_status_old+0x1b0/0x1b0 [ 803.642095] blkdev_ioctl+0x362/0x7f0 [ 803.642489] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.642889] loop0: detected capacity change from 0 to 128 [ 803.642976] ? __x64_sys_ioctl+0x97/0x210 [ 803.644632] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 803.645200] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.645698] __x64_sys_ioctl+0x196/0x210 [ 803.646118] do_syscall_64+0x3b/0x90 [ 803.646507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.647041] RIP: 0033:0x7f432f5bb8d7 [ 803.647424] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.649313] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.650089] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 803.650824] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 803.651573] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 803.652305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 803.653035] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 803.653775] [ 803.655306] loop5: detected capacity change from 0 to 128 [ 803.656062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.657402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.659028] FAULT_INJECTION: forcing a failure. [ 803.659028] name failslab, interval 1, probability 0, space 0, times 0 [ 803.660216] CPU: 1 PID: 7294 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 803.661215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 803.662393] Call Trace: [ 803.662660] [ 803.662889] dump_stack_lvl+0x8b/0xb3 [ 803.663296] should_fail.cold+0x5/0xa [ 803.663695] should_failslab+0x5/0x10 [ 803.664086] __kmalloc_node_track_caller+0x7e/0x440 [ 803.664610] ? alloc_uevent_skb+0x7b/0x210 [ 803.665054] __alloc_skb+0xe3/0x340 [ 803.665442] alloc_uevent_skb+0x7b/0x210 [ 803.665870] kobject_uevent_env+0xaa4/0xfa0 [ 803.666328] ? _raw_spin_unlock+0x24/0x40 [ 803.666762] disk_event_uevent+0x17b/0x1e0 [ 803.667219] ? disk_events_async_show+0x10/0x10 [ 803.667703] ? __fget_files+0x28d/0x470 [ 803.668115] disk_force_media_change+0x1e/0xc0 [ 803.668590] loop_configure+0x75b/0x1950 [ 803.669015] ? putname+0xfe/0x140 [ 803.669381] lo_ioctl+0x782/0x1860 [ 803.669753] ? avc_has_extended_perms+0x7e8/0xeb0 [ 803.670261] ? loop_set_status_old+0x1b0/0x1b0 [ 803.670743] ? fsnotify+0xb4f/0x1250 [ 803.671134] ? avc_ss_reset+0x180/0x180 [ 803.671553] ? fsnotify_first_mark+0x1f0/0x1f0 [ 803.672033] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.672520] ? lock_acquire+0x41c/0x4d0 [ 803.672936] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.673436] ? lock_release+0x505/0x6f0 [ 803.673847] ? find_and_remove_object+0xe4/0x120 [ 803.674341] ? __delete_object+0xb3/0x100 [ 803.674773] ? lock_downgrade+0x6d0/0x6d0 [ 803.675206] ? rwlock_bug.part.0+0x90/0x90 [ 803.675649] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.676252] ? selinux_inode_getsecctx+0x90/0x90 [ 803.676789] ? rcu_read_lock_sched_held+0xd/0x70 [ 803.677281] ? loop_set_status_old+0x1b0/0x1b0 [ 803.677762] blkdev_ioctl+0x362/0x7f0 [ 803.678157] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.678645] ? __x64_sys_ioctl+0x97/0x210 [ 803.679088] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 803.679662] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 803.680156] __x64_sys_ioctl+0x196/0x210 [ 803.680578] do_syscall_64+0x3b/0x90 [ 803.680972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.681507] RIP: 0033:0x7f22ed51d8d7 [ 803.681891] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.683804] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.684589] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 803.685323] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 803.686065] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 803.686801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 803.687546] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 803.688287] [ 803.695492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.700530] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 803.711832] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 803.721218] ISOFS: Unable to identify CD-ROM format. [ 803.735772] ISOFS: Unable to identify CD-ROM format. [ 813.187815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:06:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) 08:06:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 31) 08:06:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 49) 08:06:57 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 813.194274] FAULT_INJECTION: forcing a failure. [ 813.194274] name failslab, interval 1, probability 0, space 0, times 0 [ 813.195518] CPU: 1 PID: 7326 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.196527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.197755] Call Trace: [ 813.198037] [ 813.198272] dump_stack_lvl+0x8b/0xb3 [ 813.198683] should_fail.cold+0x5/0xa [ 813.199090] ? __kernfs_new_node+0xd4/0x8b0 [ 813.199556] should_failslab+0x5/0x10 [ 813.199960] kmem_cache_alloc+0x5b/0x480 [ 813.200398] __kernfs_new_node+0xd4/0x8b0 [ 813.200841] ? kernfs_path_from_node+0x60/0x60 [ 813.201329] ? selinux_sb_statfs+0x1ba/0x250 [ 813.201799] ? call_rcu+0x4da/0xa20 [ 813.202191] ? kasan_quarantine_put+0x87/0x1e0 [ 813.202683] ? trace_hardirqs_on+0x5b/0x190 [ 813.203138] ? kasan_quarantine_put+0x87/0x1e0 [ 813.203647] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 813.204227] ? shmem_statfs+0x1b3/0x3e0 [ 813.204655] kernfs_create_dir_ns+0x9c/0x220 [ 813.205126] internal_create_group+0x782/0xb20 [ 813.205619] ? sysfs_remove_group+0x170/0x170 [ 813.206105] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 813.206635] ? __loop_update_dio+0x2a3/0x620 [ 813.207115] loop_configure+0xe87/0x1950 [ 813.207559] lo_ioctl+0x782/0x1860 [ 813.207932] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.208455] ? loop_set_status_old+0x1b0/0x1b0 [ 813.208936] ? fsnotify+0xb4f/0x1250 [ 813.209335] ? avc_ss_reset+0x180/0x180 [ 813.209776] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.210269] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.210767] ? lock_acquire+0x41c/0x4d0 [ 813.211189] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.211691] ? lock_release+0x505/0x6f0 [ 813.212108] ? find_and_remove_object+0xe4/0x120 [ 813.212605] ? __delete_object+0xb3/0x100 [ 813.213041] ? lock_downgrade+0x6d0/0x6d0 [ 813.213472] ? rwlock_bug.part.0+0x90/0x90 [ 813.213913] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.214413] ? selinux_inode_getsecctx+0x90/0x90 [ 813.214919] ? loop_set_status_old+0x1b0/0x1b0 [ 813.215423] blkdev_ioctl+0x362/0x7f0 [ 813.215817] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.216306] ? __x64_sys_ioctl+0x97/0x210 [ 813.216746] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.217318] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.217811] __x64_sys_ioctl+0x196/0x210 [ 813.218231] do_syscall_64+0x3b/0x90 [ 813.218621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.219168] RIP: 0033:0x7f9aebdc68d7 [ 813.219560] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.221470] RSP: 002b:00007f9ae933bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.222262] RAX: ffffffffffffffda RBX: 00007f9aebe10970 RCX: 00007f9aebdc68d7 [ 813.223013] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.223334] FAULT_INJECTION: forcing a failure. [ 813.223334] name failslab, interval 1, probability 0, space 0, times 0 [ 813.223764] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.223774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.223783] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 813.223796] [ 813.228427] CPU: 0 PID: 7333 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.228771] loop5: detected capacity change from 0 to 128 [ 813.230308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.233106] Call Trace: [ 813.233606] [ 813.234040] dump_stack_lvl+0x8b/0xb3 [ 813.234801] should_fail.cold+0x5/0xa [ 813.235559] ? alloc_workqueue_attrs+0x38/0x80 [ 813.236462] should_failslab+0x5/0x10 [ 813.237208] kmem_cache_alloc_trace+0x55/0x3c0 [ 813.238110] alloc_workqueue_attrs+0x38/0x80 [ 813.238978] apply_wqattrs_prepare+0xbb/0x880 [ 813.239880] ? is_kernel_percpu_address+0xe6/0x110 [ 813.240887] apply_workqueue_attrs_locked+0xc1/0x140 [ 813.241889] alloc_workqueue+0xb1a/0xeb0 [ 813.242688] ? do_raw_spin_unlock+0x4f/0x210 [ 813.243565] ? _raw_spin_unlock+0x24/0x40 [ 813.244387] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 813.245378] ? __fget_files+0x28d/0x470 [ 813.246158] ? loop_configure+0x62b/0x1950 [ 813.246986] loop_configure+0x6ec/0x1950 [ 813.247799] ? putname+0xfe/0x140 [ 813.248487] lo_ioctl+0x782/0x1860 [ 813.249184] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.250169] ? loop_set_status_old+0x1b0/0x1b0 [ 813.251097] ? fsnotify+0xb4f/0x1250 [ 813.251939] ? avc_ss_reset+0x180/0x180 [ 813.252743] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.253637] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.254573] ? lock_acquire+0x41c/0x4d0 [ 813.255392] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.256331] ? lock_release+0x505/0x6f0 [ 813.257118] ? find_and_remove_object+0xe4/0x120 [ 813.257143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.259818] ? __delete_object+0xb3/0x100 [ 813.260647] ? lock_downgrade+0x6d0/0x6d0 [ 813.261475] ? rwlock_bug.part.0+0x90/0x90 [ 813.262318] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.263283] ? selinux_inode_getsecctx+0x90/0x90 [ 813.264249] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.265189] ? loop_set_status_old+0x1b0/0x1b0 [ 813.266109] blkdev_ioctl+0x362/0x7f0 [ 813.266864] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.267828] ? __x64_sys_ioctl+0x97/0x210 [ 813.268643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.269748] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.270677] __x64_sys_ioctl+0x196/0x210 [ 813.271501] do_syscall_64+0x3b/0x90 [ 813.272255] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.273285] RIP: 0033:0x7f432f5bb8d7 [ 813.274019] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.277675] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.279460] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 813.281255] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.283034] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.284559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.286108] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 813.287532] [ 813.288321] FAULT_INJECTION: forcing a failure. [ 813.288321] name failslab, interval 1, probability 0, space 0, times 0 [ 813.289290] FAULT_INJECTION: forcing a failure. [ 813.289290] name failslab, interval 1, probability 0, space 0, times 0 [ 813.289530] CPU: 1 PID: 7334 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.292754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.293933] Call Trace: [ 813.294200] [ 813.294432] dump_stack_lvl+0x8b/0xb3 [ 813.294841] should_fail.cold+0x5/0xa [ 813.295257] ? create_object.isra.0+0x3a/0xa20 [ 813.295740] should_failslab+0x5/0x10 [ 813.296135] kmem_cache_alloc+0x5b/0x480 [ 813.296561] create_object.isra.0+0x3a/0xa20 [ 813.297026] ? kasan_unpoison+0x23/0x50 [ 813.297448] __kmalloc+0x25b/0x440 [ 813.297825] kobject_get_path+0xc0/0x1d0 [ 813.298257] kobject_uevent_env+0x25c/0xfa0 [ 813.298715] ? _raw_spin_unlock+0x24/0x40 [ 813.299155] disk_event_uevent+0x17b/0x1e0 [ 813.299603] ? disk_events_async_show+0x10/0x10 [ 813.300091] ? __fget_files+0x28d/0x470 [ 813.300510] disk_force_media_change+0x1e/0xc0 [ 813.300987] loop_configure+0x75b/0x1950 [ 813.301422] ? putname+0xfe/0x140 [ 813.301794] lo_ioctl+0x782/0x1860 [ 813.302164] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.302670] ? loop_set_status_old+0x1b0/0x1b0 [ 813.303155] ? fsnotify+0xb4f/0x1250 [ 813.303543] ? avc_ss_reset+0x180/0x180 [ 813.303961] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.304435] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.304928] ? lock_acquire+0x41c/0x4d0 [ 813.305345] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.305834] ? lock_release+0x505/0x6f0 [ 813.306244] ? find_and_remove_object+0xe4/0x120 [ 813.306738] ? __delete_object+0xb3/0x100 [ 813.307174] ? lock_downgrade+0x6d0/0x6d0 [ 813.307628] ? rwlock_bug.part.0+0x90/0x90 [ 813.308076] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.308570] ? selinux_inode_getsecctx+0x90/0x90 [ 813.309070] ? loop_set_status_old+0x1b0/0x1b0 [ 813.309545] blkdev_ioctl+0x362/0x7f0 [ 813.309938] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.310428] ? __x64_sys_ioctl+0x97/0x210 [ 813.310858] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.311439] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.311929] __x64_sys_ioctl+0x196/0x210 [ 813.312353] do_syscall_64+0x3b/0x90 [ 813.312743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.313289] RIP: 0033:0x7faf15eb38d7 [ 813.313673] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.315582] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.316372] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 813.317117] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.317852] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.318590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.319337] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 813.320074] [ 813.320319] CPU: 0 PID: 7336 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.322249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.324514] Call Trace: [ 813.325031] [ 813.325473] dump_stack_lvl+0x8b/0xb3 [ 813.326250] should_fail.cold+0x5/0xa [ 813.327030] ? create_object.isra.0+0x3a/0xa20 [ 813.327977] should_failslab+0x5/0x10 [ 813.328748] kmem_cache_alloc+0x5b/0x480 [ 813.329554] create_object.isra.0+0x3a/0xa20 [ 813.330437] ? kasan_unpoison+0x23/0x50 [ 813.331261] __kmalloc_node_track_caller+0x269/0x440 [ 813.332279] ? alloc_uevent_skb+0x7b/0x210 [ 813.333157] __alloc_skb+0xe3/0x340 [ 813.333957] alloc_uevent_skb+0x7b/0x210 [ 813.334943] kobject_uevent_env+0xaa4/0xfa0 [ 813.335878] ? _raw_spin_unlock+0x24/0x40 [ 813.336721] disk_event_uevent+0x17b/0x1e0 [ 813.337576] ? disk_events_async_show+0x10/0x10 [ 813.338513] ? __fget_files+0x28d/0x470 [ 813.339327] disk_force_media_change+0x1e/0xc0 [ 813.340243] loop_configure+0x75b/0x1950 [ 813.341076] ? putname+0xfe/0x140 [ 813.341788] lo_ioctl+0x782/0x1860 [ 813.342495] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.343479] ? loop_set_status_old+0x1b0/0x1b0 [ 813.344395] ? fsnotify+0xb4f/0x1250 [ 813.345150] ? avc_ss_reset+0x180/0x180 [ 813.345963] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.346873] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.347837] ? lock_acquire+0x41c/0x4d0 [ 813.348618] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.349567] ? lock_release+0x505/0x6f0 [ 813.350360] ? find_and_remove_object+0xe4/0x120 [ 813.351328] ? __delete_object+0xb3/0x100 [ 813.352160] ? lock_downgrade+0x6d0/0x6d0 [ 813.352996] ? rwlock_bug.part.0+0x90/0x90 [ 813.353847] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.354806] ? selinux_inode_getsecctx+0x90/0x90 [ 813.355781] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.356732] ? loop_set_status_old+0x1b0/0x1b0 [ 813.357639] blkdev_ioctl+0x362/0x7f0 [ 813.358395] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.359339] ? __x64_sys_ioctl+0x97/0x210 [ 813.360165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.361266] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.362205] __x64_sys_ioctl+0x196/0x210 [ 813.363022] do_syscall_64+0x3b/0x90 [ 813.363787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.364814] RIP: 0033:0x7f22ed51d8d7 [ 813.365545] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.369214] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.370722] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 813.372145] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.373560] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.374971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.376395] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 813.377824] 08:06:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x2b}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ba4fac2712f16079ad1579a55a91570f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "64f4668e190d53b822adb92eb2f601b4"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008490) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000cb00001900000008000300ff1489bd6e83d2e4d9e1c9310520b6e4c154eb5d3404125bf3d7becd3979d16fdb2a3f6ea8d758096c808da8986b89f7cc82b81b45af", @ANYRES32=r4, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x41}, 0x8010) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x10, 0x0, 0x2) lseek(r5, 0x0, 0x4) 08:06:57 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 42) 08:06:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 42) 08:06:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 813.394327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 813.395774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 08:06:57 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 813.409428] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 813.412382] loop0: detected capacity change from 0 to 128 [ 813.414872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 813.419502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 813.423857] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:06:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 50) 08:06:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 32) [ 813.455289] ISOFS: Unable to identify CD-ROM format. [ 813.494932] FAULT_INJECTION: forcing a failure. [ 813.494932] name failslab, interval 1, probability 0, space 0, times 0 [ 813.496250] CPU: 1 PID: 7354 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.497264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.498448] Call Trace: [ 813.498718] [ 813.498951] dump_stack_lvl+0x8b/0xb3 [ 813.499377] should_fail.cold+0x5/0xa [ 813.499781] ? create_object.isra.0+0x3a/0xa20 [ 813.500269] should_failslab+0x5/0x10 [ 813.500665] kmem_cache_alloc+0x5b/0x480 [ 813.501092] create_object.isra.0+0x3a/0xa20 [ 813.501552] ? kasan_unpoison+0x23/0x50 [ 813.501971] kmem_cache_alloc_trace+0x22e/0x3c0 [ 813.502460] alloc_workqueue_attrs+0x38/0x80 [ 813.502925] apply_wqattrs_prepare+0xbb/0x880 [ 813.503401] ? is_kernel_percpu_address+0xe6/0x110 [ 813.503919] apply_workqueue_attrs_locked+0xc1/0x140 [ 813.504449] alloc_workqueue+0xb1a/0xeb0 [ 813.504873] ? do_raw_spin_unlock+0x4f/0x210 [ 813.505333] ? _raw_spin_unlock+0x24/0x40 [ 813.505768] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 813.506303] ? __fget_files+0x28d/0x470 [ 813.506720] ? loop_configure+0x62b/0x1950 [ 813.507169] loop_configure+0x6ec/0x1950 [ 813.507597] ? putname+0xfe/0x140 [ 813.507967] lo_ioctl+0x782/0x1860 [ 813.508335] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.508845] ? loop_set_status_old+0x1b0/0x1b0 [ 813.509319] ? fsnotify+0xb4f/0x1250 [ 813.509710] ? avc_ss_reset+0x180/0x180 [ 813.510125] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.510595] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.511088] ? lock_acquire+0x41c/0x4d0 [ 813.511519] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.512015] ? lock_release+0x505/0x6f0 [ 813.512427] ? find_and_remove_object+0xe4/0x120 [ 813.512929] ? __delete_object+0xb3/0x100 [ 813.513370] ? lock_downgrade+0x6d0/0x6d0 [ 813.513806] ? rwlock_bug.part.0+0x90/0x90 [ 813.514243] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.514742] ? selinux_inode_getsecctx+0x90/0x90 [ 813.515244] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.515733] ? loop_set_status_old+0x1b0/0x1b0 [ 813.516212] blkdev_ioctl+0x362/0x7f0 [ 813.516606] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.517093] ? __x64_sys_ioctl+0x97/0x210 [ 813.517524] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.518093] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.518583] __x64_sys_ioctl+0x196/0x210 [ 813.519018] do_syscall_64+0x3b/0x90 [ 813.519421] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.519960] RIP: 0033:0x7f432f5bb8d7 [ 813.520343] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.522246] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.523029] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 813.523779] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.524518] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.525261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.525998] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 813.526733] 08:06:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 43) 08:06:57 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:06:57 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 43) [ 813.554941] FAULT_INJECTION: forcing a failure. [ 813.554941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.556238] CPU: 1 PID: 7353 Comm: syz-executor.5 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.557227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.558408] Call Trace: [ 813.558676] [ 813.558907] dump_stack_lvl+0x8b/0xb3 [ 813.559322] should_fail.cold+0x5/0xa [ 813.559722] _copy_from_user+0x2a/0x170 [ 813.560138] kstrtouint_from_user+0xac/0x160 [ 813.560596] ? kstrtouint+0x120/0x120 [ 813.560996] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.561489] ? lock_acquire+0x41c/0x4d0 [ 813.561909] proc_fail_nth_write+0x78/0x220 [ 813.562363] ? proc_task_getattr+0x1f0/0x1f0 [ 813.562825] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.563417] ? proc_task_getattr+0x1f0/0x1f0 [ 813.563877] vfs_write+0x26a/0xad0 [ 813.564250] ksys_write+0x12d/0x250 [ 813.564632] ? __ia32_sys_read+0xb0/0xb0 [ 813.565056] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 813.565574] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 813.566128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 813.566665] do_syscall_64+0x3b/0x90 [ 813.567056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.567596] RIP: 0033:0x7f9aebd795ff [ 813.567981] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 813.569872] RSP: 002b:00007f9ae933c170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 813.570426] FAULT_INJECTION: forcing a failure. [ 813.570426] name failslab, interval 1, probability 0, space 0, times 0 [ 813.570654] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9aebd795ff [ 813.570665] RDX: 0000000000000001 RSI: 00007f9ae933c1e0 RDI: 0000000000000003 [ 813.570673] RBP: 00007f9ae933c1d0 R08: 0000000000000000 R09: ffffffffffffffff [ 813.570682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 813.575798] R13: 00007ffd6f964bcf R14: 00007f9ae933c300 R15: 0000000000022000 [ 813.576537] [ 813.576777] CPU: 0 PID: 7361 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.578656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.580878] Call Trace: [ 813.581381] [ 813.581816] dump_stack_lvl+0x8b/0xb3 [ 813.582582] should_fail.cold+0x5/0xa [ 813.583346] ? __alloc_skb+0x211/0x340 [ 813.584124] should_failslab+0x5/0x10 [ 813.584889] kmem_cache_alloc_node+0x55/0x490 [ 813.585808] __alloc_skb+0x211/0x340 [ 813.586559] alloc_uevent_skb+0x7b/0x210 [ 813.587390] kobject_uevent_env+0xaa4/0xfa0 [ 813.588244] ? _raw_spin_unlock+0x24/0x40 [ 813.589066] disk_event_uevent+0x17b/0x1e0 [ 813.589897] ? disk_events_async_show+0x10/0x10 [ 813.590817] ? __fget_files+0x28d/0x470 [ 813.591614] disk_force_media_change+0x1e/0xc0 [ 813.592513] loop_configure+0x75b/0x1950 [ 813.593322] ? putname+0xfe/0x140 [ 813.594012] lo_ioctl+0x782/0x1860 [ 813.594713] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.595688] ? loop_set_status_old+0x1b0/0x1b0 [ 813.596585] ? fsnotify+0xb4f/0x1250 [ 813.597312] ? avc_ss_reset+0x180/0x180 [ 813.598098] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.598988] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.599923] ? lock_acquire+0x41c/0x4d0 [ 813.600705] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.601640] ? lock_release+0x505/0x6f0 [ 813.602414] ? find_and_remove_object+0xe4/0x120 [ 813.603359] ? __delete_object+0xb3/0x100 [ 813.604179] ? lock_downgrade+0x6d0/0x6d0 [ 813.604992] ? rwlock_bug.part.0+0x90/0x90 [ 813.605821] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.606761] ? selinux_inode_getsecctx+0x90/0x90 [ 813.607836] ? loop_set_status_old+0x1b0/0x1b0 [ 813.608902] blkdev_ioctl+0x362/0x7f0 [ 813.609782] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.610903] ? __x64_sys_ioctl+0x97/0x210 [ 813.611889] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.613166] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.614261] __x64_sys_ioctl+0x196/0x210 [ 813.615200] do_syscall_64+0x3b/0x90 [ 813.616096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.617297] RIP: 0033:0x7faf15eb38d7 [ 813.618151] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.622384] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.624132] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 813.625770] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.627443] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.629084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.630729] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 813.632379] [ 813.658125] FAULT_INJECTION: forcing a failure. [ 813.658125] name failslab, interval 1, probability 0, space 0, times 0 [ 813.659395] CPU: 1 PID: 7356 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 813.660397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 813.661578] Call Trace: [ 813.661850] [ 813.662080] dump_stack_lvl+0x8b/0xb3 [ 813.662495] should_fail.cold+0x5/0xa [ 813.662893] ? skb_clone+0x170/0x3c0 [ 813.663296] should_failslab+0x5/0x10 [ 813.663436] loop0: detected capacity change from 0 to 128 [ 813.663702] kmem_cache_alloc+0x5b/0x480 [ 813.663720] skb_clone+0x170/0x3c0 [ 813.663735] netlink_broadcast+0x9ae/0xd60 [ 813.666224] ? alloc_uevent_skb+0x1c2/0x210 [ 813.666686] kobject_uevent_env+0xa6b/0xfa0 [ 813.667147] ? _raw_spin_unlock+0x24/0x40 [ 813.667591] disk_event_uevent+0x17b/0x1e0 [ 813.668033] ? disk_events_async_show+0x10/0x10 [ 813.668529] ? __fget_files+0x28d/0x470 [ 813.668966] disk_force_media_change+0x1e/0xc0 [ 813.669446] loop_configure+0x75b/0x1950 [ 813.669882] ? putname+0xfe/0x140 [ 813.670265] lo_ioctl+0x782/0x1860 [ 813.670636] ? avc_has_extended_perms+0x7e8/0xeb0 [ 813.671148] ? loop_set_status_old+0x1b0/0x1b0 [ 813.671643] ? fsnotify+0xb4f/0x1250 [ 813.672031] ? avc_ss_reset+0x180/0x180 [ 813.672458] ? fsnotify_first_mark+0x1f0/0x1f0 [ 813.672947] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.673438] ? lock_acquire+0x41c/0x4d0 [ 813.673856] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.674355] ? lock_release+0x505/0x6f0 [ 813.674773] ? find_and_remove_object+0xe4/0x120 [ 813.675289] ? __delete_object+0xb3/0x100 [ 813.675731] ? lock_downgrade+0x6d0/0x6d0 [ 813.676163] ? rwlock_bug.part.0+0x90/0x90 [ 813.676597] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.677092] ? selinux_inode_getsecctx+0x90/0x90 [ 813.677591] ? rcu_read_lock_sched_held+0xd/0x70 [ 813.678088] ? loop_set_status_old+0x1b0/0x1b0 [ 813.678580] blkdev_ioctl+0x362/0x7f0 [ 813.678976] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.679480] ? __x64_sys_ioctl+0x97/0x210 [ 813.679911] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 813.680490] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 813.680982] __x64_sys_ioctl+0x196/0x210 [ 813.681415] do_syscall_64+0x3b/0x90 [ 813.681820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.682364] RIP: 0033:0x7f22ed51d8d7 [ 813.682755] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.684718] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.685521] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 813.686263] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 813.687018] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 813.687774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 813.688522] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 813.689281] [ 813.702230] ISOFS: Unable to identify CD-ROM format. [ 813.705593] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 813.750111] ISOFS: Unable to identify CD-ROM format. [ 815.909331] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 815.911367] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 815.913454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 815.915515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 815.917295] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 815.919551] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 817.945682] Bluetooth: hci6: command 0x0409 tx timeout [ 819.994669] Bluetooth: hci6: command 0x041b tx timeout [ 821.325157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.326781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.333956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 821.345845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.347543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.348966] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 821.493197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.497701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.041692] Bluetooth: hci6: command 0x040f tx timeout [ 824.089663] Bluetooth: hci6: command 0x0419 tx timeout 08:07:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 44) 08:07:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:07:15 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:15 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="0326265d6340d6de4a41a1ad1ad9adf8e230159cc5f3d049747aeb2c9ad44f3762b759d8a4ad186e251aaecbaec7294e09f0374508afab60990909ff30740db388d0e9db3b79b2f9196537f5ecf7096e055a7dc1e6fd83b83866c8aacd934b05b3b73e59287df62ddf42986445559a50d657007841688d46420838f246425a8107f878945763fab525f7c33a626388fba7fe12dcd24ecfd989b03bef564e350083e04b29", 0xa4}], 0x1) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:07:15 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:15 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 33) 08:07:15 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:15 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 44) [ 832.125229] FAULT_INJECTION: forcing a failure. [ 832.125229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 832.127667] CPU: 1 PID: 7830 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.129549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.131774] Call Trace: [ 832.132272] [ 832.132712] dump_stack_lvl+0x8b/0xb3 [ 832.133459] should_fail.cold+0x5/0xa [ 832.134214] prepare_alloc_pages+0x17b/0x500 [ 832.135083] __alloc_pages+0x131/0x4e0 [ 832.135883] ? lock_release+0x505/0x6f0 [ 832.136670] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 832.137883] ? lock_downgrade+0x6d0/0x6d0 [ 832.138692] ? widen_string+0xd8/0x290 [ 832.139473] ? lock_acquire+0x41c/0x4d0 [ 832.140263] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.141219] ? lock_release+0x505/0x6f0 [ 832.142021] ? lock_release+0x6f0/0x6f0 [ 832.142795] ? __slab_alloc.constprop.0+0x45/0x80 [ 832.143781] alloc_pages+0x1a0/0x2f0 [ 832.144539] allocate_slab+0x22d/0x300 [ 832.145323] ___slab_alloc+0x913/0xee0 [ 832.146083] ? skb_clone+0x170/0x3c0 [ 832.146829] ? lock_downgrade+0x6d0/0x6d0 [ 832.147668] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.148594] ? lock_acquire+0x41c/0x4d0 [ 832.149368] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.150314] ? skb_clone+0x170/0x3c0 [ 832.151036] __slab_alloc.constprop.0+0x45/0x80 [ 832.151987] ? skb_clone+0x170/0x3c0 [ 832.152725] kmem_cache_alloc+0x393/0x480 [ 832.153534] skb_clone+0x170/0x3c0 [ 832.154240] netlink_broadcast+0x9ae/0xd60 [ 832.155068] ? alloc_uevent_skb+0x1c2/0x210 [ 832.155950] kobject_uevent_env+0xa6b/0xfa0 [ 832.156827] ? _raw_spin_unlock+0x24/0x40 [ 832.157671] disk_event_uevent+0x17b/0x1e0 [ 832.158505] ? disk_events_async_show+0x10/0x10 [ 832.159439] ? __fget_files+0x28d/0x470 [ 832.160234] disk_force_media_change+0x1e/0xc0 [ 832.161151] loop_configure+0x75b/0x1950 [ 832.161975] ? putname+0xfe/0x140 [ 832.162684] lo_ioctl+0x782/0x1860 [ 832.163394] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.164388] ? loop_set_status_old+0x1b0/0x1b0 [ 832.165288] ? fsnotify+0xb4f/0x1250 [ 832.166028] ? avc_ss_reset+0x180/0x180 [ 832.166807] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.167742] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.168680] ? lock_acquire+0x41c/0x4d0 [ 832.169473] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.170426] ? lock_release+0x505/0x6f0 [ 832.171221] ? find_and_remove_object+0xe4/0x120 [ 832.172186] ? __delete_object+0xb3/0x100 [ 832.173026] ? lock_downgrade+0x6d0/0x6d0 [ 832.173846] ? rwlock_bug.part.0+0x90/0x90 [ 832.174688] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.175644] ? selinux_inode_getsecctx+0x90/0x90 [ 832.176595] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.177532] ? loop_set_status_old+0x1b0/0x1b0 [ 832.178457] blkdev_ioctl+0x362/0x7f0 [ 832.179205] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.180162] ? __x64_sys_ioctl+0x97/0x210 [ 832.180985] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.182095] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.183035] __x64_sys_ioctl+0x196/0x210 [ 832.183870] do_syscall_64+0x3b/0x90 [ 832.184614] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.184722] FAULT_INJECTION: forcing a failure. [ 832.184722] name failslab, interval 1, probability 0, space 0, times 0 [ 832.185636] RIP: 0033:0x7f22ed51d8d7 [ 832.185654] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.191201] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.192737] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 832.194146] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.195599] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.197024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.198445] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 832.199888] [ 832.200363] CPU: 0 PID: 7841 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.201371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.202560] Call Trace: [ 832.202828] [ 832.203059] dump_stack_lvl+0x8b/0xb3 [ 832.203478] should_fail.cold+0x5/0xa [ 832.203890] ? alloc_unbound_pwq+0x4ad/0xd70 [ 832.204364] should_failslab+0x5/0x10 [ 832.204766] kmem_cache_alloc_node+0x55/0x490 [ 832.205241] alloc_unbound_pwq+0x4ad/0xd70 [ 832.205689] apply_wqattrs_prepare+0x2a4/0x880 [ 832.206170] ? is_kernel_percpu_address+0xe6/0x110 08:07:16 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 832.206694] apply_workqueue_attrs_locked+0xc1/0x140 [ 832.207355] alloc_workqueue+0xb1a/0xeb0 [ 832.207799] ? do_raw_spin_unlock+0x4f/0x210 [ 832.208267] ? _raw_spin_unlock+0x24/0x40 [ 832.208716] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 832.209250] ? __fget_files+0x28d/0x470 [ 832.209666] ? loop_configure+0x62b/0x1950 [ 832.210122] loop_configure+0x6ec/0x1950 [ 832.210554] ? putname+0xfe/0x140 [ 832.210943] lo_ioctl+0x782/0x1860 [ 832.211321] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.211841] ? loop_set_status_old+0x1b0/0x1b0 [ 832.212313] ? fsnotify+0xb4f/0x1250 [ 832.212707] ? avc_ss_reset+0x180/0x180 [ 832.213145] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.213630] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.214145] ? lock_acquire+0x41c/0x4d0 [ 832.214566] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.215069] ? lock_release+0x505/0x6f0 [ 832.215485] ? find_and_remove_object+0xe4/0x120 [ 832.216008] ? __delete_object+0xb3/0x100 [ 832.216452] ? lock_downgrade+0x6d0/0x6d0 [ 832.216885] ? rwlock_bug.part.0+0x90/0x90 [ 832.217331] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.217835] ? selinux_inode_getsecctx+0x90/0x90 [ 832.218340] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.218834] ? loop_set_status_old+0x1b0/0x1b0 [ 832.219317] blkdev_ioctl+0x362/0x7f0 [ 832.219724] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.220216] ? __x64_sys_ioctl+0x97/0x210 [ 832.220653] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.221231] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.221733] __x64_sys_ioctl+0x196/0x210 [ 832.222159] do_syscall_64+0x3b/0x90 [ 832.222564] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.223113] RIP: 0033:0x7f432f5bb8d7 [ 832.223498] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.225423] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.226218] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 832.226957] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.227713] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.228458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.229200] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 832.229955] [ 832.248017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.249602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.250892] FAULT_INJECTION: forcing a failure. [ 832.250892] name failslab, interval 1, probability 0, space 0, times 0 [ 832.252084] CPU: 0 PID: 7839 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.253089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.254275] Call Trace: [ 832.254546] [ 832.254778] dump_stack_lvl+0x8b/0xb3 [ 832.255181] should_fail.cold+0x5/0xa [ 832.255597] ? create_object.isra.0+0x3a/0xa20 [ 832.256081] should_failslab+0x5/0x10 [ 832.256473] kmem_cache_alloc+0x5b/0x480 [ 832.256908] create_object.isra.0+0x3a/0xa20 [ 832.257370] ? kasan_unpoison+0x23/0x50 [ 832.257794] kmem_cache_alloc_node+0x248/0x490 [ 832.258279] __alloc_skb+0x211/0x340 [ 832.258679] alloc_uevent_skb+0x7b/0x210 [ 832.259125] kobject_uevent_env+0xaa4/0xfa0 [ 832.259596] ? _raw_spin_unlock+0x24/0x40 [ 832.260045] disk_event_uevent+0x17b/0x1e0 [ 832.260494] ? disk_events_async_show+0x10/0x10 [ 832.260987] ? __fget_files+0x28d/0x470 [ 832.261411] disk_force_media_change+0x1e/0xc0 [ 832.261893] loop_configure+0x75b/0x1950 [ 832.262327] ? putname+0xfe/0x140 [ 832.262697] lo_ioctl+0x782/0x1860 [ 832.263066] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.263585] ? loop_set_status_old+0x1b0/0x1b0 [ 832.264064] ? fsnotify+0xb4f/0x1250 [ 832.264456] ? avc_ss_reset+0x180/0x180 [ 832.264878] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.265352] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.265852] ? lock_acquire+0x41c/0x4d0 [ 832.266270] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.266775] ? lock_release+0x505/0x6f0 [ 832.267193] ? find_and_remove_object+0xe4/0x120 [ 832.267709] ? __delete_object+0xb3/0x100 [ 832.268146] ? lock_downgrade+0x6d0/0x6d0 [ 832.268587] ? rwlock_bug.part.0+0x90/0x90 [ 832.269032] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.269532] ? selinux_inode_getsecctx+0x90/0x90 [ 832.270033] ? loop_set_status_old+0x1b0/0x1b0 [ 832.270517] blkdev_ioctl+0x362/0x7f0 [ 832.270917] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.271414] ? __x64_sys_ioctl+0x97/0x210 [ 832.271850] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.272429] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.272922] __x64_sys_ioctl+0x196/0x210 [ 832.273351] do_syscall_64+0x3b/0x90 [ 832.273754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.274285] RIP: 0033:0x7faf15eb38d7 [ 832.274671] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.276637] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.277435] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 832.278184] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.278939] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.279690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.280436] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 832.281173] 08:07:16 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 832.291290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.294079] loop5: detected capacity change from 0 to 128 [ 832.294090] loop0: detected capacity change from 0 to 128 [ 832.302601] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 832.307388] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:07:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 34) 08:07:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="2aad8c647dbedc27cc2c3c8b3ef723168d5c5a73c55ecc871321ab710385a02ed9eb96f0b23766d645055549b975d5a7adb3ff3a5ea82ce6085bc6e1427ffb4351d331dbca6835cdca742f333320c02362e221f8e32fa64e2d413deb52200d188c9d8c297a158a8b4f973c60aeb4d786cac8533b4bb8232dfe6708af735b96408192eda73f679f99919b97f426450e9e1175b3651a5d90df34edf5b98bee3e44d330182b1f1f178a3564232b00"/182], 0x1c}}, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="28368fc28913cb7dafc8cd21b0e894d9bafc4065c8", 0x15}, {&(0x7f0000000040)="fa233980be18d58fa708f15bc583f2dd34392c14915150b184c17cc1b2fd4cb9c2752853c3a7f29fcdebf2d6b1205cdedc076c8eb53f4adb4813d55f2872a5045b5cc3bf90b81f9c8ec03eeaffcf9a14128ec26ec303905d56f9e78e4076bc8f2d5b64d18df688eeef", 0x69}, {&(0x7f0000000140)="ea992ffb7617a05f672e392963de99a5d226ac1d718a264a46f444759638a1083d9930deeddd9eb00ddc882dd1c9963bc49461c0b5cb74b35cabed09069ed4603d02afb57bdd9b80f123b7bce6214d066b0ffa4673a5b9ff4d98f31eb98c7d1f990bab2bb71ff5cdd489bfbd335de8f920710b86a563192410966fb12c108ce7724b9b102fb1e2af11ecde27a3a6e0acf9a710eb4de6ad2ba1e435b2719164f80559599fe5f713fbf8f8262797b7a3ad6292fe2008f5989fd804462239421feba35818c6cd07c4e55c73690384fc444d", 0xd0}, {&(0x7f00000000c0)="bbd8cdce7b34facfe244bcc97dfb6836ef7e4ac78d6b2b3fe9bc6b3b00eacc79b3dbf4b68adc098f7d84b5578c9665f07219118ce70efcf5e958a35906541d67", 0x40}], 0x4, &(0x7f0000000280)=[{0x60, 0x101, 0x4, "036eadfa12d3a752462d4f638979d5cc1e5e6341f24a051db49e2d896dfef0038c104a1229d11fd0cb71d44002b8c97458bb73daf738c3cdd4923e2e09ec33c8f793e0b8681fabefd379"}, {0x98, 0x111, 0xd3, "5373df516360df0473959a57ec0bca494ebb669b58021644ddd489e5793227f2a981f9e5d7c148aa8b4376eeb3bd4740ee50edfc3790b9069a91cbe2b01309f2f5f9d63844bb5efeb1ad224dbad61974e0617f624f300f94640934deb0ed28abf54c278989923a14bfce60d696ef84a6ee7e64c8d489df8422925afbd13113b8cb85a540bae7f2ae"}, {0x58, 0x101, 0x6, "db2cbb143f00760989e31eb2e841654f8e019cc3d54b7a0b27b1fc43e02ee649623743ac4c9303e6bda8730857d593380a66c9dd23c864d59bb87275cfb4b9c92045fc8482548c"}, {0xd8, 0x102, 0x9, "5360c462e188b40d88b7e9f197972bfb0dbca20da29206efa4b052438f6af1e318ef2904e064790d4f40f76cc5396050677f342976403829fc18a1d63efcab6753a45ea0eaa51ad7389af50fc3739ba5b0a1bde296b0f7527034276201403be8e01bf01d3725349d770d6732fec0c98395f5781846f8d11e2dd45f3a3298f0f7ee137c409b7cd654d0efe09f0a5a063905b02c381bc1b87571c2e4d631d19063997b451a437c27ebb39ab72826b3c37dcc67529e965b289381fdb2a486a7e14c214ff5565fec1a"}], 0x228}, 0x4c8d4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r8, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ee}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x57432758}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x16f3}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x91}, 0x400c815) fallocate(r4, 0x10, 0x0, 0x2) lseek(r3, 0x0, 0x4) [ 832.350431] FAULT_INJECTION: forcing a failure. [ 832.350431] name failslab, interval 1, probability 0, space 0, times 0 [ 832.351689] CPU: 0 PID: 7853 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.352686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.353869] Call Trace: [ 832.354136] [ 832.354369] dump_stack_lvl+0x8b/0xb3 [ 832.354778] should_fail.cold+0x5/0xa [ 832.355178] ? create_object.isra.0+0x3a/0xa20 [ 832.355669] should_failslab+0x5/0x10 [ 832.356068] kmem_cache_alloc+0x5b/0x480 [ 832.356501] create_object.isra.0+0x3a/0xa20 [ 832.356961] ? kasan_unpoison+0x23/0x50 [ 832.357395] kmem_cache_alloc_node+0x248/0x490 [ 832.357879] alloc_unbound_pwq+0x4ad/0xd70 [ 832.358330] apply_wqattrs_prepare+0x2a4/0x880 [ 832.358808] ? is_kernel_percpu_address+0xe6/0x110 [ 832.359328] apply_workqueue_attrs_locked+0xc1/0x140 [ 832.359874] alloc_workqueue+0xb1a/0xeb0 [ 832.360303] ? do_raw_spin_unlock+0x4f/0x210 [ 832.360766] ? _raw_spin_unlock+0x24/0x40 [ 832.361209] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 832.361732] ? __fget_files+0x28d/0x470 [ 832.362152] ? loop_configure+0x62b/0x1950 [ 832.362599] loop_configure+0x6ec/0x1950 [ 832.363027] ? putname+0xfe/0x140 [ 832.363395] lo_ioctl+0x782/0x1860 [ 832.363778] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.364285] ? loop_set_status_old+0x1b0/0x1b0 [ 832.364775] ? fsnotify+0xb4f/0x1250 [ 832.365168] ? avc_ss_reset+0x180/0x180 [ 832.365597] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.366070] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.366572] ? lock_acquire+0x41c/0x4d0 [ 832.366983] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.367482] ? lock_release+0x505/0x6f0 [ 832.367905] ? find_and_remove_object+0xe4/0x120 [ 832.368419] ? __delete_object+0xb3/0x100 [ 832.368857] ? lock_downgrade+0x6d0/0x6d0 [ 832.369298] ? rwlock_bug.part.0+0x90/0x90 [ 832.369745] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.370242] ? selinux_inode_getsecctx+0x90/0x90 [ 832.370743] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.371242] ? loop_set_status_old+0x1b0/0x1b0 [ 832.371735] blkdev_ioctl+0x362/0x7f0 [ 832.372131] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.372619] ? __x64_sys_ioctl+0x97/0x210 [ 832.373054] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.373629] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.374123] __x64_sys_ioctl+0x196/0x210 [ 832.374542] do_syscall_64+0x3b/0x90 [ 832.374936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.375470] RIP: 0033:0x7f432f5bb8d7 [ 832.375864] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.377276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 832.377761] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.377776] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 832.377785] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.377793] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.377801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.377809] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 832.383963] [ 832.385322] ISOFS: Unable to identify CD-ROM format. 08:07:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 45) 08:07:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 832.414872] ISOFS: Unable to identify CD-ROM format. [ 832.422944] FAULT_INJECTION: forcing a failure. [ 832.422944] name failslab, interval 1, probability 0, space 0, times 0 [ 832.425267] CPU: 1 PID: 7861 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.427269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.430108] Call Trace: [ 832.430637] [ 832.431103] dump_stack_lvl+0x8b/0xb3 [ 832.431942] should_fail.cold+0x5/0xa [ 832.432729] should_failslab+0x5/0x10 [ 832.433492] __kmalloc_node_track_caller+0x7e/0x440 [ 832.434514] ? alloc_uevent_skb+0x7b/0x210 [ 832.435465] __alloc_skb+0xe3/0x340 [ 832.436241] alloc_uevent_skb+0x7b/0x210 [ 832.437071] kobject_uevent_env+0xaa4/0xfa0 [ 832.437972] ? _raw_spin_unlock+0x24/0x40 [ 832.438834] disk_event_uevent+0x17b/0x1e0 [ 832.439703] ? disk_events_async_show+0x10/0x10 [ 832.440639] ? __fget_files+0x28d/0x470 [ 832.441441] disk_force_media_change+0x1e/0xc0 [ 832.442364] loop_configure+0x75b/0x1950 [ 832.443179] ? putname+0xfe/0x140 [ 832.443897] lo_ioctl+0x782/0x1860 [ 832.444610] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.445587] ? loop_set_status_old+0x1b0/0x1b0 [ 832.446504] ? fsnotify+0xb4f/0x1250 [ 832.447250] ? avc_ss_reset+0x180/0x180 [ 832.448060] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.448996] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.449959] ? lock_acquire+0x41c/0x4d0 [ 832.450770] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.451760] ? lock_release+0x505/0x6f0 [ 832.452557] ? find_and_remove_object+0xe4/0x120 [ 832.453527] ? __delete_object+0xb3/0x100 [ 832.454383] ? lock_downgrade+0x6d0/0x6d0 [ 832.455251] ? rwlock_bug.part.0+0x90/0x90 [ 832.456128] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.457097] ? selinux_inode_getsecctx+0x90/0x90 [ 832.458072] ? loop_set_status_old+0x1b0/0x1b0 [ 832.459006] blkdev_ioctl+0x362/0x7f0 [ 832.459806] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.460778] ? __x64_sys_ioctl+0x97/0x210 [ 832.461617] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.462724] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.463687] __x64_sys_ioctl+0x196/0x210 [ 832.464526] do_syscall_64+0x3b/0x90 [ 832.465282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.466312] RIP: 0033:0x7faf15eb38d7 [ 832.467049] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.470723] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.472253] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 832.473677] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.475095] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.476523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.477943] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 832.479369] 08:07:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 45) [ 832.493424] loop0: detected capacity change from 0 to 128 [ 832.495803] loop5: detected capacity change from 0 to 128 [ 832.497861] FAULT_INJECTION: forcing a failure. [ 832.497861] name failslab, interval 1, probability 0, space 0, times 0 [ 832.499049] CPU: 0 PID: 7863 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 832.500093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 832.501268] Call Trace: [ 832.501532] [ 832.501763] dump_stack_lvl+0x8b/0xb3 [ 832.502189] should_fail.cold+0x5/0xa [ 832.502592] ? __kernfs_new_node+0xd4/0x8b0 [ 832.503043] should_failslab+0x5/0x10 [ 832.503438] kmem_cache_alloc+0x5b/0x480 [ 832.503879] __kernfs_new_node+0xd4/0x8b0 [ 832.504316] ? kernfs_path_from_node+0x60/0x60 [ 832.504787] ? selinux_sb_statfs+0x1ba/0x250 [ 832.505253] ? call_rcu+0x4da/0xa20 [ 832.505645] ? kasan_quarantine_put+0x87/0x1e0 [ 832.506148] ? trace_hardirqs_on+0x5b/0x190 [ 832.506620] ? kasan_quarantine_put+0x87/0x1e0 [ 832.507103] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 832.507692] ? shmem_statfs+0x1b3/0x3e0 [ 832.508117] kernfs_create_dir_ns+0x9c/0x220 [ 832.508582] internal_create_group+0x782/0xb20 [ 832.509079] ? sysfs_remove_group+0x170/0x170 [ 832.509552] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 832.510082] ? __loop_update_dio+0x2a3/0x620 [ 832.510547] loop_configure+0xe87/0x1950 [ 832.510974] lo_ioctl+0x782/0x1860 [ 832.511340] ? avc_has_extended_perms+0x7e8/0xeb0 [ 832.511875] ? loop_set_status_old+0x1b0/0x1b0 [ 832.512355] ? fsnotify+0xb4f/0x1250 [ 832.512755] ? avc_ss_reset+0x180/0x180 [ 832.513198] ? fsnotify_first_mark+0x1f0/0x1f0 [ 832.513677] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.514167] ? lock_acquire+0x41c/0x4d0 [ 832.514595] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.515092] ? lock_release+0x505/0x6f0 [ 832.515518] ? find_and_remove_object+0xe4/0x120 [ 832.516019] ? __delete_object+0xb3/0x100 [ 832.516466] ? lock_downgrade+0x6d0/0x6d0 [ 832.516912] ? rwlock_bug.part.0+0x90/0x90 [ 832.517358] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.517861] ? selinux_inode_getsecctx+0x90/0x90 [ 832.518365] ? rcu_read_lock_sched_held+0xd/0x70 [ 832.518879] ? loop_set_status_old+0x1b0/0x1b0 [ 832.519362] blkdev_ioctl+0x362/0x7f0 [ 832.519782] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.520277] ? __x64_sys_ioctl+0x97/0x210 [ 832.520715] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 832.521296] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 832.521794] __x64_sys_ioctl+0x196/0x210 [ 832.522218] do_syscall_64+0x3b/0x90 [ 832.522615] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 832.523162] RIP: 0033:0x7f22ed51d8d7 [ 832.523556] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.525462] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.526260] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 832.527004] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.527771] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 832.528523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 832.529285] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 832.530045] [ 832.539193] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 832.543938] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 832.555482] loop5: detected capacity change from 0 to 128 [ 832.563417] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 832.582208] ISOFS: Unable to identify CD-ROM format. 08:07:25 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) 08:07:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 46) 08:07:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) pwrite64(r1, &(0x7f0000000040)="873b5a597373", 0x6, 0x561) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x10, 0x0, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20a202, 0x0) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000080)=""/60) lseek(r0, 0x0, 0x4) 08:07:25 executing program 6: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 35) 08:07:25 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 46) [ 841.705978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 841.709457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.710971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.714983] FAULT_INJECTION: forcing a failure. [ 841.714983] name failslab, interval 1, probability 0, space 0, times 0 [ 841.715654] FAULT_INJECTION: forcing a failure. [ 841.715654] name failslab, interval 1, probability 0, space 0, times 0 [ 841.717264] CPU: 0 PID: 7879 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 841.720282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 841.722566] Call Trace: [ 841.723077] [ 841.723532] dump_stack_lvl+0x8b/0xb3 [ 841.724320] should_fail.cold+0x5/0xa [ 841.725112] ? create_object.isra.0+0x3a/0xa20 [ 841.726040] should_failslab+0x5/0x10 [ 841.726801] kmem_cache_alloc+0x5b/0x480 [ 841.727617] create_object.isra.0+0x3a/0xa20 [ 841.728525] ? kasan_unpoison+0x23/0x50 [ 841.729314] kmem_cache_alloc+0x239/0x480 [ 841.730154] __kernfs_new_node+0xd4/0x8b0 [ 841.730977] ? kernfs_path_from_node+0x60/0x60 [ 841.732149] ? selinux_sb_statfs+0x1ba/0x250 [ 841.733278] ? call_rcu+0x4da/0xa20 [ 841.734230] ? kasan_quarantine_put+0x87/0x1e0 [ 841.735411] ? trace_hardirqs_on+0x5b/0x190 [ 841.736318] ? kasan_quarantine_put+0x87/0x1e0 [ 841.737235] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 841.738326] ? shmem_statfs+0x1b3/0x3e0 [ 841.739133] kernfs_create_dir_ns+0x9c/0x220 [ 841.740042] internal_create_group+0x782/0xb20 [ 841.740960] ? sysfs_remove_group+0x170/0x170 [ 841.741864] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 841.742859] ? __loop_update_dio+0x2a3/0x620 [ 841.743750] loop_configure+0xe87/0x1950 [ 841.744575] lo_ioctl+0x782/0x1860 [ 841.745279] ? avc_has_extended_perms+0x7e8/0xeb0 [ 841.746250] ? loop_set_status_old+0x1b0/0x1b0 [ 841.747158] ? fsnotify+0xb4f/0x1250 [ 841.747921] ? avc_ss_reset+0x180/0x180 [ 841.748725] ? fsnotify_first_mark+0x1f0/0x1f0 [ 841.749645] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.750588] ? lock_acquire+0x41c/0x4d0 [ 841.751373] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.752322] ? lock_release+0x505/0x6f0 [ 841.753114] ? find_and_remove_object+0xe4/0x120 [ 841.754082] ? __delete_object+0xb3/0x100 [ 841.754919] ? lock_downgrade+0x6d0/0x6d0 [ 841.755772] ? rwlock_bug.part.0+0x90/0x90 [ 841.756615] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.757580] ? selinux_inode_getsecctx+0x90/0x90 [ 841.758531] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.759466] ? loop_set_status_old+0x1b0/0x1b0 [ 841.760394] blkdev_ioctl+0x362/0x7f0 [ 841.761152] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.762089] ? __x64_sys_ioctl+0x97/0x210 [ 841.762929] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 841.764039] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.764975] __x64_sys_ioctl+0x196/0x210 [ 841.765786] do_syscall_64+0x3b/0x90 [ 841.766541] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 841.767576] RIP: 0033:0x7f22ed51d8d7 [ 841.768326] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 841.771969] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.773485] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 841.774902] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 841.776340] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 841.777770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 841.779175] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 841.780606] [ 841.781063] CPU: 1 PID: 7884 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 841.782080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 841.783263] Call Trace: [ 841.783525] [ 841.783770] dump_stack_lvl+0x8b/0xb3 [ 841.784180] should_fail.cold+0x5/0xa [ 841.784587] ? kobject_uevent_env+0x236/0xfa0 [ 841.785065] should_failslab+0x5/0x10 [ 841.785463] kmem_cache_alloc_trace+0x55/0x3c0 [ 841.785954] kobject_uevent_env+0x236/0xfa0 [ 841.786405] ? dev_uevent_filter+0xd0/0xd0 [ 841.786858] ? _raw_spin_unlock+0x24/0x40 [ 841.787301] disk_event_uevent+0x17b/0x1e0 [ 841.787753] ? disk_events_async_show+0x10/0x10 [ 841.788238] ? __fget_files+0x28d/0x470 [ 841.788289] FAULT_INJECTION: forcing a failure. [ 841.788289] name failslab, interval 1, probability 0, space 0, times 0 [ 841.788665] disk_force_media_change+0x1e/0xc0 [ 841.788684] loop_configure+0x75b/0x1950 [ 841.791731] ? putname+0xfe/0x140 [ 841.792086] lo_ioctl+0x782/0x1860 [ 841.792461] ? avc_has_extended_perms+0x7e8/0xeb0 [ 841.792945] ? loop_set_status_old+0x1b0/0x1b0 [ 841.793430] ? fsnotify+0xb4f/0x1250 [ 841.793822] ? avc_ss_reset+0x180/0x180 [ 841.794240] ? fsnotify_first_mark+0x1f0/0x1f0 [ 841.794726] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.795222] ? lock_acquire+0x41c/0x4d0 [ 841.795648] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.796114] ? lock_release+0x505/0x6f0 [ 841.796541] ? find_and_remove_object+0xe4/0x120 [ 841.797043] ? __delete_object+0xb3/0x100 [ 841.797477] ? lock_downgrade+0x6d0/0x6d0 [ 841.797908] ? rwlock_bug.part.0+0x90/0x90 [ 841.798332] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.798844] ? selinux_inode_getsecctx+0x90/0x90 [ 841.799350] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.799860] ? loop_set_status_old+0x1b0/0x1b0 [ 841.800336] blkdev_ioctl+0x362/0x7f0 [ 841.800739] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.801234] ? __x64_sys_ioctl+0x97/0x210 [ 841.801665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 841.802247] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.802722] __x64_sys_ioctl+0x196/0x210 [ 841.803143] do_syscall_64+0x3b/0x90 [ 841.803540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 841.804052] RIP: 0033:0x7f432f5bb8d7 [ 841.804433] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 841.806328] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.807069] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 841.807772] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 841.808459] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 841.809148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 841.809844] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 841.810537] [ 841.810768] CPU: 0 PID: 7886 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 841.812753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 841.815015] Call Trace: [ 841.815540] [ 841.815996] dump_stack_lvl+0x8b/0xb3 [ 841.816775] should_fail.cold+0x5/0xa [ 841.817557] ? create_object.isra.0+0x3a/0xa20 [ 841.818484] should_failslab+0x5/0x10 [ 841.819258] kmem_cache_alloc+0x5b/0x480 [ 841.820091] create_object.isra.0+0x3a/0xa20 [ 841.820980] ? kasan_unpoison+0x23/0x50 [ 841.821799] __kmalloc_node_track_caller+0x269/0x440 [ 841.822817] ? alloc_uevent_skb+0x7b/0x210 [ 841.823699] __alloc_skb+0xe3/0x340 [ 841.824432] alloc_uevent_skb+0x7b/0x210 [ 841.825257] kobject_uevent_env+0xaa4/0xfa0 [ 841.826142] ? _raw_spin_unlock+0x24/0x40 [ 841.826994] disk_event_uevent+0x17b/0x1e0 [ 841.827863] ? disk_events_async_show+0x10/0x10 [ 841.828812] ? __fget_files+0x28d/0x470 [ 841.829611] disk_force_media_change+0x1e/0xc0 [ 841.830529] loop_configure+0x75b/0x1950 [ 841.831339] ? putname+0xfe/0x140 [ 841.832068] lo_ioctl+0x782/0x1860 [ 841.832790] ? avc_has_extended_perms+0x7e8/0xeb0 [ 841.833863] ? loop_set_status_old+0x1b0/0x1b0 [ 841.835060] ? fsnotify+0xb4f/0x1250 [ 841.835997] ? avc_ss_reset+0x180/0x180 [ 841.837054] ? fsnotify_first_mark+0x1f0/0x1f0 [ 841.838238] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.839439] ? lock_acquire+0x41c/0x4d0 [ 841.840264] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.841216] ? lock_release+0x505/0x6f0 [ 841.842019] ? find_and_remove_object+0xe4/0x120 [ 841.842974] ? __delete_object+0xb3/0x100 [ 841.843849] ? lock_downgrade+0x6d0/0x6d0 [ 841.844691] ? rwlock_bug.part.0+0x90/0x90 [ 841.845547] ? rcu_read_lock_sched_held+0xd/0x70 [ 841.846515] ? selinux_inode_getsecctx+0x90/0x90 [ 841.847469] ? loop_set_status_old+0x1b0/0x1b0 [ 841.848412] blkdev_ioctl+0x362/0x7f0 [ 841.849176] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.850125] ? __x64_sys_ioctl+0x97/0x210 [ 841.850963] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 841.852113] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 841.853086] __x64_sys_ioctl+0x196/0x210 [ 841.853918] do_syscall_64+0x3b/0x90 [ 841.854681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 841.855754] RIP: 0033:0x7faf15eb38d7 [ 841.856501] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 841.860232] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.861782] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 841.863205] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 841.864691] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 841.866125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 841.867181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 841.867572] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 841.867601] [ 841.872401] loop0: detected capacity change from 0 to 128 [ 841.872437] loop5: detected capacity change from 0 to 128 [ 841.886523] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 841.896783] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 841.898446] loop5: detected capacity change from 0 to 128 [ 841.906556] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 841.916010] ISOFS: Unable to identify CD-ROM format. 08:07:25 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 841.926710] ISOFS: Unable to identify CD-ROM format. 08:07:25 executing program 6: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:25 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:25 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ad0b72d58dc300095615f1d9dd"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "263ffc1cd0"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "557b353d0d25c09ccf9d5f47b2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "338bf3598a388ae5bed9b9db38"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x804}, 0x81) fadvise64(r4, 0x40, 0x4, 0x1) fgetxattr(r2, &(0x7f0000000000)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/211, 0xd3) 08:07:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 47) 08:07:25 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 36) [ 841.979406] loop5: detected capacity change from 0 to 128 [ 841.990127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 841.994667] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:07:25 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 47) [ 842.005274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 842.009356] loop5: detected capacity change from 0 to 128 [ 842.034885] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:07:25 executing program 6: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) [ 842.042300] FAULT_INJECTION: forcing a failure. [ 842.042300] name failslab, interval 1, probability 0, space 0, times 0 [ 842.045146] CPU: 0 PID: 7908 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 08:07:25 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 842.047148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 842.049449] Call Trace: [ 842.049975] [ 842.050411] dump_stack_lvl+0x8b/0xb3 [ 842.051194] should_fail.cold+0x5/0xa [ 842.051990] ? skb_clone+0x170/0x3c0 [ 842.052766] should_failslab+0x5/0x10 [ 842.053534] kmem_cache_alloc+0x5b/0x480 [ 842.054341] skb_clone+0x170/0x3c0 [ 842.055058] netlink_broadcast+0x9ae/0xd60 [ 842.055914] ? alloc_uevent_skb+0x1c2/0x210 [ 842.056802] kobject_uevent_env+0xa6b/0xfa0 [ 842.057678] ? _raw_spin_unlock+0x24/0x40 [ 842.058516] disk_event_uevent+0x17b/0x1e0 [ 842.059364] ? disk_events_async_show+0x10/0x10 [ 842.060304] ? __fget_files+0x28d/0x470 [ 842.061133] disk_force_media_change+0x1e/0xc0 [ 842.062060] loop_configure+0x75b/0x1950 [ 842.062890] ? putname+0xfe/0x140 [ 842.063602] lo_ioctl+0x782/0x1860 [ 842.064335] ? avc_has_extended_perms+0x7e8/0xeb0 [ 842.065324] ? loop_set_status_old+0x1b0/0x1b0 [ 842.066251] ? arch_stack_walk+0x99/0xf0 [ 842.067067] ? avc_ss_reset+0x180/0x180 [ 842.067908] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.068949] ? lock_acquire+0x41c/0x4d0 [ 842.068964] FAULT_INJECTION: forcing a failure. [ 842.068964] name failslab, interval 1, probability 0, space 0, times 0 [ 842.069754] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.069783] ? lock_release+0x505/0x6f0 [ 842.072771] ? find_and_remove_object+0xe4/0x120 [ 842.073732] ? __delete_object+0xb3/0x100 [ 842.074578] ? lock_downgrade+0x6d0/0x6d0 [ 842.075400] ? rwlock_bug.part.0+0x90/0x90 [ 842.076290] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.077238] ? selinux_inode_getsecctx+0x90/0x90 [ 842.078184] ? loop_set_status_old+0x1b0/0x1b0 [ 842.079082] blkdev_ioctl+0x362/0x7f0 [ 842.079855] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.080781] ? __x64_sys_ioctl+0x97/0x210 [ 842.081596] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 842.082683] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.083610] __x64_sys_ioctl+0x196/0x210 [ 842.084416] do_syscall_64+0x3b/0x90 [ 842.085151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 842.086151] RIP: 0033:0x7faf15eb38d7 [ 842.086875] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 842.090453] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.091983] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 842.093372] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 842.094770] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 842.096164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 842.097570] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 842.098974] [ 842.099422] CPU: 1 PID: 7907 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 842.100522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 842.101631] Call Trace: [ 842.101905] [ 842.102139] dump_stack_lvl+0x8b/0xb3 [ 842.102552] should_fail.cold+0x5/0xa [ 842.102934] ? create_object.isra.0+0x3a/0xa20 [ 842.103423] should_failslab+0x5/0x10 [ 842.103829] kmem_cache_alloc+0x5b/0x480 [ 842.104262] create_object.isra.0+0x3a/0xa20 [ 842.104739] ? kasan_unpoison+0x23/0x50 [ 842.105162] kmem_cache_alloc_trace+0x22e/0x3c0 [ 842.105648] kobject_uevent_env+0x236/0xfa0 [ 842.106115] ? dev_uevent_filter+0xd0/0xd0 [ 842.106565] ? _raw_spin_unlock+0x24/0x40 [ 842.106988] disk_event_uevent+0x17b/0x1e0 [ 842.107439] ? disk_events_async_show+0x10/0x10 [ 842.107902] ? __fget_files+0x28d/0x470 [ 842.108329] disk_force_media_change+0x1e/0xc0 [ 842.108812] loop_configure+0x75b/0x1950 [ 842.109252] ? putname+0xfe/0x140 [ 842.109633] lo_ioctl+0x782/0x1860 [ 842.110010] ? avc_has_extended_perms+0x7e8/0xeb0 [ 842.110534] ? loop_set_status_old+0x1b0/0x1b0 [ 842.110984] ? fsnotify+0xb4f/0x1250 [ 842.111379] ? avc_ss_reset+0x180/0x180 [ 842.111797] ? fsnotify_first_mark+0x1f0/0x1f0 [ 842.112270] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.112746] ? lock_acquire+0x41c/0x4d0 [ 842.113168] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.113642] ? lock_release+0x505/0x6f0 [ 842.114059] ? find_and_remove_object+0xe4/0x120 [ 842.114530] ? __delete_object+0xb3/0x100 [ 842.114974] ? lock_downgrade+0x6d0/0x6d0 [ 842.115383] ? rwlock_bug.part.0+0x90/0x90 [ 842.115837] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.116341] ? selinux_inode_getsecctx+0x90/0x90 [ 842.116841] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.117332] ? loop_set_status_old+0x1b0/0x1b0 [ 842.117806] blkdev_ioctl+0x362/0x7f0 [ 842.118201] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.118688] ? __x64_sys_ioctl+0x97/0x210 [ 842.119126] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 842.119708] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.120198] __x64_sys_ioctl+0x196/0x210 [ 842.120618] do_syscall_64+0x3b/0x90 [ 842.121018] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 842.121562] RIP: 0033:0x7f432f5bb8d7 [ 842.121958] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 842.123871] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.124663] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 842.125403] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 842.126146] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 842.126880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 842.127616] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 842.128370] [ 842.129007] FAULT_INJECTION: forcing a failure. [ 842.129007] name failslab, interval 1, probability 0, space 0, times 0 [ 842.130219] CPU: 1 PID: 7906 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 842.131212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 842.131707] loop0: detected capacity change from 0 to 128 [ 842.132412] Call Trace: [ 842.132417] [ 842.134010] dump_stack_lvl+0x8b/0xb3 [ 842.134418] should_fail.cold+0x5/0xa [ 842.134827] ? __kernfs_new_node+0xd4/0x8b0 [ 842.135282] should_failslab+0x5/0x10 [ 842.135691] kmem_cache_alloc+0x5b/0x480 [ 842.136116] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.136607] __kernfs_new_node+0xd4/0x8b0 [ 842.137039] ? lock_acquire+0x41c/0x4d0 [ 842.137452] ? kernfs_path_from_node+0x60/0x60 [ 842.137939] ? lock_release+0x505/0x6f0 [ 842.138353] ? kernfs_add_one+0x3c6/0x550 [ 842.138803] ? lock_downgrade+0x6d0/0x6d0 [ 842.139245] ? down_write+0xde/0x150 [ 842.139644] ? down_write_killable_nested+0x180/0x180 [ 842.140202] ? down_write+0xde/0x150 [ 842.140593] kernfs_new_node+0x93/0x120 [ 842.141010] __kernfs_create_file+0x51/0x350 [ 842.141476] sysfs_add_file_mode_ns+0x218/0x430 [ 842.141965] ? component_del+0x4c0/0x4c0 [ 842.142392] internal_create_group+0x322/0xb20 [ 842.142875] ? sysfs_remove_group+0x170/0x170 [ 842.143346] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 842.143874] ? __loop_update_dio+0x2a3/0x620 [ 842.144335] loop_configure+0xe87/0x1950 [ 842.144763] lo_ioctl+0x782/0x1860 [ 842.145139] ? avc_has_extended_perms+0x7e8/0xeb0 [ 842.145653] ? loop_set_status_old+0x1b0/0x1b0 [ 842.146142] ? fsnotify+0xb4f/0x1250 [ 842.146255] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 842.146531] ? avc_ss_reset+0x180/0x180 [ 842.148687] ? fsnotify_first_mark+0x1f0/0x1f0 [ 842.149165] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.149658] ? lock_acquire+0x41c/0x4d0 [ 842.150073] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.150568] ? lock_release+0x505/0x6f0 [ 842.150993] ? find_and_remove_object+0xe4/0x120 [ 842.151497] ? __delete_object+0xb3/0x100 [ 842.151945] ? lock_downgrade+0x6d0/0x6d0 [ 842.152380] ? rwlock_bug.part.0+0x90/0x90 [ 842.152821] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.153332] ? selinux_inode_getsecctx+0x90/0x90 [ 842.153828] ? rcu_read_lock_sched_held+0xd/0x70 [ 842.154318] ? loop_set_status_old+0x1b0/0x1b0 [ 842.154797] blkdev_ioctl+0x362/0x7f0 [ 842.155192] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.155693] ? __x64_sys_ioctl+0x97/0x210 [ 842.156129] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 842.156704] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 842.157206] __x64_sys_ioctl+0x196/0x210 [ 842.157628] do_syscall_64+0x3b/0x90 [ 842.158030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 842.158585] RIP: 0033:0x7f22ed51d8d7 [ 842.158975] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 842.160911] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.161713] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 842.162456] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 842.163255] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 842.164058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 842.164856] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 842.165641] 08:07:26 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x349242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x1}, 0x1c) 08:07:26 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 842.186053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:07:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:26 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 842.253586] loop5: detected capacity change from 0 to 128 [ 842.261727] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 842.280870] loop5: detected capacity change from 0 to 128 [ 842.283711] ISOFS: Unable to identify CD-ROM format. [ 842.299557] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 842.304179] ISOFS: Unable to identify CD-ROM format. [ 852.455463] FAULT_INJECTION: forcing a failure. [ 852.455463] name failslab, interval 1, probability 0, space 0, times 0 [ 852.456028] loop5: detected capacity change from 0 to 128 [ 852.457839] CPU: 0 PID: 7934 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 852.460389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.462352] FAULT_INJECTION: forcing a failure. [ 852.462352] name failslab, interval 1, probability 0, space 0, times 0 [ 852.462735] Call Trace: [ 852.462744] [ 852.462753] dump_stack_lvl+0x8b/0xb3 [ 852.465642] should_fail.cold+0x5/0xa [ 852.466440] ? kobject_get_path+0xc0/0x1d0 [ 852.467327] should_failslab+0x5/0x10 [ 852.468128] __kmalloc+0x72/0x440 [ 852.468859] kobject_get_path+0xc0/0x1d0 [ 852.469711] kobject_uevent_env+0x25c/0xfa0 [ 852.470618] ? _raw_spin_unlock+0x24/0x40 [ 852.471496] disk_event_uevent+0x17b/0x1e0 [ 852.472391] ? disk_events_async_show+0x10/0x10 [ 852.473492] ? __fget_files+0x28d/0x470 [ 852.474388] disk_force_media_change+0x1e/0xc0 [ 852.475359] loop_configure+0x75b/0x1950 [ 852.476248] ? putname+0xfe/0x140 [ 852.476995] lo_ioctl+0x782/0x1860 [ 852.477743] ? avc_has_extended_perms+0x7e8/0xeb0 [ 852.478804] ? loop_set_status_old+0x1b0/0x1b0 [ 852.479763] ? fsnotify+0xb4f/0x1250 [ 852.480557] ? avc_ss_reset+0x180/0x180 [ 852.481410] ? fsnotify_first_mark+0x1f0/0x1f0 [ 852.482383] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.483381] ? lock_acquire+0x41c/0x4d0 [ 852.484240] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.485249] ? lock_release+0x505/0x6f0 [ 852.486093] ? find_and_remove_object+0xe4/0x120 [ 852.487102] ? __delete_object+0xb3/0x100 [ 852.488002] ? lock_downgrade+0x6d0/0x6d0 [ 852.488888] ? rwlock_bug.part.0+0x90/0x90 [ 852.489784] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.490820] ? selinux_inode_getsecctx+0x90/0x90 [ 852.491838] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.492842] ? loop_set_status_old+0x1b0/0x1b0 [ 852.493817] blkdev_ioctl+0x362/0x7f0 [ 852.494612] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.495604] ? __x64_sys_ioctl+0x97/0x210 [ 852.496504] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.497667] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.498677] __x64_sys_ioctl+0x196/0x210 [ 852.499542] do_syscall_64+0x3b/0x90 [ 852.500358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.501437] RIP: 0033:0x7f432f5bb8d7 [ 852.502225] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.506063] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.507672] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 852.509184] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 852.510690] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 852.512190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 852.513672] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 852.515197] [ 852.515683] CPU: 1 PID: 7937 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 852.516718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.517923] Call Trace: [ 852.518192] [ 852.518432] dump_stack_lvl+0x8b/0xb3 [ 852.518851] should_fail.cold+0x5/0xa [ 852.519257] ? create_object.isra.0+0x3a/0xa20 [ 852.519745] should_failslab+0x5/0x10 [ 852.520186] kmem_cache_alloc+0x5b/0x480 [ 852.520638] ? lock_acquire+0x41c/0x4d0 [ 852.521074] create_object.isra.0+0x3a/0xa20 [ 852.521554] ? kasan_unpoison+0x23/0x50 [ 852.521997] kmem_cache_alloc+0x239/0x480 [ 852.522450] skb_clone+0x170/0x3c0 [ 852.522848] netlink_broadcast+0x9ae/0xd60 [ 852.523314] ? alloc_uevent_skb+0x1c2/0x210 [ 852.523773] kobject_uevent_env+0xa6b/0xfa0 [ 852.524253] ? _raw_spin_unlock+0x24/0x40 [ 852.524717] disk_event_uevent+0x17b/0x1e0 [ 852.525179] ? disk_events_async_show+0x10/0x10 [ 852.525687] ? __fget_files+0x28d/0x470 [ 852.526118] disk_force_media_change+0x1e/0xc0 [ 852.526616] loop_configure+0x75b/0x1950 [ 852.527070] ? putname+0xfe/0x140 [ 852.527460] lo_ioctl+0x782/0x1860 [ 852.527840] ? avc_has_extended_perms+0x7e8/0xeb0 [ 852.528375] ? loop_set_status_old+0x1b0/0x1b0 [ 852.528861] ? fsnotify+0xb4f/0x1250 [ 852.529290] ? avc_ss_reset+0x180/0x180 [ 852.529747] ? fsnotify_first_mark+0x1f0/0x1f0 [ 852.530250] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.530783] ? lock_acquire+0x41c/0x4d0 [ 852.531216] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.531735] ? lock_release+0x505/0x6f0 [ 852.532166] ? find_and_remove_object+0xe4/0x120 [ 852.532708] ? __delete_object+0xb3/0x100 [ 852.533185] ? lock_downgrade+0x6d0/0x6d0 [ 852.533644] ? rwlock_bug.part.0+0x90/0x90 [ 852.534084] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.534633] ? selinux_inode_getsecctx+0x90/0x90 [ 852.535134] ? loop_set_status_old+0x1b0/0x1b0 [ 852.535659] blkdev_ioctl+0x362/0x7f0 [ 852.536060] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.536604] ? __x64_sys_ioctl+0x97/0x210 [ 852.537128] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.537887] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.538503] __x64_sys_ioctl+0x196/0x210 [ 852.539142] do_syscall_64+0x3b/0x90 [ 852.539546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.540142] RIP: 0033:0x7faf15eb38d7 [ 852.540530] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.542648] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.543502] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 852.544306] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 852.545110] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 852.545917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 852.546737] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 852.547556] [ 852.549199] FAULT_INJECTION: forcing a failure. [ 852.549199] name failslab, interval 1, probability 0, space 0, times 0 [ 852.550494] CPU: 1 PID: 7938 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 852.551513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.552665] Call Trace: [ 852.552925] [ 852.553150] dump_stack_lvl+0x8b/0xb3 [ 852.553549] should_fail.cold+0x5/0xa [ 852.553940] ? create_object.isra.0+0x3a/0xa20 [ 852.554409] should_failslab+0x5/0x10 [ 852.554797] kmem_cache_alloc+0x5b/0x480 [ 852.555213] create_object.isra.0+0x3a/0xa20 [ 852.555661] ? kasan_unpoison+0x23/0x50 [ 852.556095] kmem_cache_alloc+0x239/0x480 [ 852.556522] __kernfs_new_node+0xd4/0x8b0 [ 852.556961] ? lock_acquire+0x41c/0x4d0 [ 852.557369] ? kernfs_path_from_node+0x60/0x60 [ 852.557851] ? lock_release+0x505/0x6f0 [ 852.558266] ? kernfs_add_one+0x3c6/0x550 [ 852.558713] ? lock_downgrade+0x6d0/0x6d0 [ 852.559152] ? down_write+0xde/0x150 [ 852.559546] ? down_write_killable_nested+0x180/0x180 [ 852.560111] ? down_write+0xde/0x150 [ 852.560511] kernfs_new_node+0x93/0x120 [ 852.560935] __kernfs_create_file+0x51/0x350 [ 852.561407] sysfs_add_file_mode_ns+0x218/0x430 [ 852.561912] ? component_del+0x4c0/0x4c0 [ 852.562326] internal_create_group+0x322/0xb20 [ 852.562813] ? sysfs_remove_group+0x170/0x170 [ 852.563300] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 852.563834] ? __loop_update_dio+0x2a3/0x620 [ 852.564309] loop_configure+0xe87/0x1950 [ 852.564741] lo_ioctl+0x782/0x1860 [ 852.565111] ? avc_has_extended_perms+0x7e8/0xeb0 [ 852.565621] ? loop_set_status_old+0x1b0/0x1b0 [ 852.566105] ? fsnotify+0xb4f/0x1250 [ 852.566489] ? avc_ss_reset+0x180/0x180 [ 852.566921] ? fsnotify_first_mark+0x1f0/0x1f0 [ 852.567387] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.567891] ? lock_acquire+0x41c/0x4d0 [ 852.568304] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.568797] ? lock_release+0x505/0x6f0 [ 852.569212] ? find_and_remove_object+0xe4/0x120 [ 852.569714] ? __delete_object+0xb3/0x100 [ 852.570149] ? lock_downgrade+0x6d0/0x6d0 [ 852.570584] ? rwlock_bug.part.0+0x90/0x90 [ 852.571032] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.571532] ? selinux_inode_getsecctx+0x90/0x90 [ 852.572040] ? rcu_read_lock_sched_held+0xd/0x70 [ 852.572536] ? loop_set_status_old+0x1b0/0x1b0 [ 852.573019] blkdev_ioctl+0x362/0x7f0 [ 852.573415] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.573910] ? __x64_sys_ioctl+0x97/0x210 [ 852.574560] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.575220] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 852.575949] __x64_sys_ioctl+0x196/0x210 [ 852.576377] do_syscall_64+0x3b/0x90 [ 852.576779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.577309] RIP: 0033:0x7f22ed51d8d7 [ 852.577697] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.579590] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.580386] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 852.581121] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 852.581840] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 852.582587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 852.583326] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 852.584058] 08:07:36 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 48) 08:07:36 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) 08:07:36 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 37) 08:07:36 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 48) 08:07:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x20, 0xff, 0x9, 0x9, 0xfffffff8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:07:36 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 852.590275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.602288] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 852.610033] loop5: detected capacity change from 0 to 128 [ 852.619038] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 852.644305] loop0: detected capacity change from 0 to 128 [ 852.654477] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 852.656804] ISOFS: Unable to identify CD-ROM format. [ 852.675222] ISOFS: Unable to identify CD-ROM format. [ 862.904644] FAULT_INJECTION: forcing a failure. 08:07:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) 08:07:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 38) 08:07:46 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:46 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 49) 08:07:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 49) [ 862.904644] name failslab, interval 1, probability 0, space 0, times 0 [ 862.907139] CPU: 1 PID: 7957 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 862.909058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 862.911313] Call Trace: [ 862.911822] [ 862.912275] dump_stack_lvl+0x8b/0xb3 [ 862.913054] should_fail.cold+0x5/0xa [ 862.913818] ? __kernfs_new_node+0xd4/0x8b0 [ 862.914675] should_failslab+0x5/0x10 [ 862.915434] kmem_cache_alloc+0x5b/0x480 [ 862.916274] __kernfs_new_node+0xd4/0x8b0 [ 862.917101] ? kernfs_path_from_node+0x60/0x60 [ 862.918004] ? selinux_sb_statfs+0x1ba/0x250 [ 862.918890] ? call_rcu+0x4da/0xa20 [ 862.919630] ? kasan_quarantine_put+0x87/0x1e0 08:07:46 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'veth1_to_bridge\x00', {0x9dd1}, 0x3ff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141040, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0xfd9, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x10, 0x0, 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0xfffffffffffffff7, 0x9, 0x4, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) lseek(r1, 0x0, 0x4) [ 862.920560] ? trace_hardirqs_on+0x5b/0x190 [ 862.921515] ? kasan_quarantine_put+0x87/0x1e0 [ 862.922481] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 862.923628] ? shmem_statfs+0x1b3/0x3e0 [ 862.924451] kernfs_create_dir_ns+0x9c/0x220 [ 862.925342] internal_create_group+0x782/0xb20 [ 862.926253] ? sysfs_remove_group+0x170/0x170 [ 862.927161] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 862.928184] ? __loop_update_dio+0x2a3/0x620 [ 862.929064] loop_configure+0xe87/0x1950 [ 862.929888] lo_ioctl+0x782/0x1860 [ 862.930604] ? avc_has_extended_perms+0x7e8/0xeb0 [ 862.931583] ? loop_set_status_old+0x1b0/0x1b0 [ 862.932512] ? fsnotify+0xb4f/0x1250 [ 862.933255] ? avc_ss_reset+0x180/0x180 [ 862.934057] ? fsnotify_first_mark+0x1f0/0x1f0 [ 862.934962] ? rcu_read_lock_sched_held+0xd/0x70 [ 862.935904] ? lock_acquire+0x41c/0x4d0 [ 862.936705] ? rcu_read_lock_sched_held+0xd/0x70 [ 862.937656] ? lock_release+0x505/0x6f0 [ 862.938448] ? find_and_remove_object+0xe4/0x120 [ 862.939392] ? __delete_object+0xb3/0x100 [ 862.940236] ? lock_downgrade+0x6d0/0x6d0 [ 862.941060] ? rwlock_bug.part.0+0x90/0x90 [ 862.941911] ? rcu_read_lock_sched_held+0xd/0x70 [ 862.942860] ? selinux_inode_getsecctx+0x90/0x90 [ 862.943812] ? loop_set_status_old+0x1b0/0x1b0 [ 862.944732] blkdev_ioctl+0x362/0x7f0 [ 862.945482] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 862.946416] ? __x64_sys_ioctl+0x97/0x210 [ 862.947235] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 862.948336] ? blkdev_common_ioctl+0x16d0/0x16d0 08:07:46 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 862.949270] __x64_sys_ioctl+0x196/0x210 [ 862.950212] do_syscall_64+0x3b/0x90 [ 862.951095] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 862.952317] RIP: 0033:0x7faf15eb38d7 [ 862.953173] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 862.957542] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.959298] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 862.960956] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 862.962604] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 862.964267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 862.965917] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 862.967575] [ 862.968412] loop0: detected capacity change from 0 to 128 [ 862.986876] FAULT_INJECTION: forcing a failure. [ 862.986876] name failslab, interval 1, probability 0, space 0, times 0 [ 862.989156] CPU: 1 PID: 7974 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 862.991056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 862.993332] Call Trace: [ 862.993844] [ 862.994288] dump_stack_lvl+0x8b/0xb3 [ 862.995061] should_fail.cold+0x5/0xa [ 862.995826] ? create_object.isra.0+0x3a/0xa20 [ 862.996772] should_failslab+0x5/0x10 [ 862.997534] kmem_cache_alloc+0x5b/0x480 [ 862.998353] create_object.isra.0+0x3a/0xa20 [ 862.999239] ? kasan_unpoison+0x23/0x50 [ 863.000069] __kmalloc+0x25b/0x440 [ 863.000784] kobject_get_path+0xc0/0x1d0 [ 863.001599] kobject_uevent_env+0x25c/0xfa0 [ 863.002471] ? _raw_spin_unlock+0x24/0x40 [ 863.003317] disk_event_uevent+0x17b/0x1e0 [ 863.004190] ? disk_events_async_show+0x10/0x10 [ 863.005127] ? __fget_files+0x28d/0x470 [ 863.005924] disk_force_media_change+0x1e/0xc0 [ 863.006837] loop_configure+0x75b/0x1950 [ 863.007654] ? putname+0xfe/0x140 [ 863.008384] lo_ioctl+0x782/0x1860 [ 863.009094] ? avc_has_extended_perms+0x7e8/0xeb0 [ 863.010065] ? loop_set_status_old+0x1b0/0x1b0 [ 863.010978] ? fsnotify+0xb4f/0x1250 [ 863.011725] ? avc_ss_reset+0x180/0x180 [ 863.012546] ? fsnotify_first_mark+0x1f0/0x1f0 [ 863.013453] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.014401] ? lock_acquire+0x41c/0x4d0 [ 863.015197] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.016150] ? lock_release+0x505/0x6f0 [ 863.016944] ? find_and_remove_object+0xe4/0x120 [ 863.017894] ? __delete_object+0xb3/0x100 [ 863.018729] ? lock_downgrade+0x6d0/0x6d0 [ 863.019556] ? rwlock_bug.part.0+0x90/0x90 [ 863.020419] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.021381] ? selinux_inode_getsecctx+0x90/0x90 [ 863.022333] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.023278] ? loop_set_status_old+0x1b0/0x1b0 [ 863.024218] blkdev_ioctl+0x362/0x7f0 [ 863.024977] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 863.025917] ? __x64_sys_ioctl+0x97/0x210 [ 863.026746] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 863.027849] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 863.028811] __x64_sys_ioctl+0x196/0x210 [ 863.029621] do_syscall_64+0x3b/0x90 [ 863.030376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 863.031406] RIP: 0033:0x7f432f5bb8d7 [ 863.032150] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.035818] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.037363] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 863.038774] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 863.040192] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 863.041598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 863.042998] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 863.044439] [ 863.046419] loop5: detected capacity change from 0 to 128 [ 863.052091] FAULT_INJECTION: forcing a failure. [ 863.052091] name failslab, interval 1, probability 0, space 0, times 0 [ 863.054444] CPU: 1 PID: 7973 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 863.056370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 863.058640] Call Trace: [ 863.059157] [ 863.059605] dump_stack_lvl+0x8b/0xb3 [ 863.060400] should_fail.cold+0x5/0xa 08:07:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) getpeername(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) lseek(r1, 0x2a, 0x1) 08:07:46 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 863.061167] ? __kernfs_new_node+0xd4/0x8b0 [ 863.062232] should_failslab+0x5/0x10 [ 863.062998] kmem_cache_alloc+0x5b/0x480 [ 863.063819] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.064796] __kernfs_new_node+0xd4/0x8b0 [ 863.065619] ? lock_acquire+0x41c/0x4d0 [ 863.066503] ? kernfs_path_from_node+0x60/0x60 [ 863.067424] ? lock_release+0x505/0x6f0 [ 863.068248] ? kernfs_add_one+0x3c6/0x550 [ 863.069080] ? lock_downgrade+0x6d0/0x6d0 [ 863.069911] ? down_write+0xde/0x150 [ 863.070665] ? down_write_killable_nested+0x180/0x180 [ 863.071706] ? down_write+0xde/0x150 [ 863.072503] kernfs_new_node+0x93/0x120 [ 863.073298] __kernfs_create_file+0x51/0x350 [ 863.074178] sysfs_add_file_mode_ns+0x218/0x430 [ 863.075107] ? component_del+0x4c0/0x4c0 [ 863.075913] internal_create_group+0x322/0xb20 [ 863.076841] ? sysfs_remove_group+0x170/0x170 [ 863.077737] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 863.078732] ? __loop_update_dio+0x2a3/0x620 [ 863.079617] loop_configure+0xe87/0x1950 [ 863.080454] lo_ioctl+0x782/0x1860 [ 863.081169] ? avc_has_extended_perms+0x7e8/0xeb0 [ 863.082144] ? loop_set_status_old+0x1b0/0x1b0 [ 863.083054] ? fsnotify+0xb4f/0x1250 [ 863.083797] ? avc_ss_reset+0x180/0x180 [ 863.084607] ? fsnotify_first_mark+0x1f0/0x1f0 [ 863.085511] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.086449] ? lock_acquire+0x41c/0x4d0 [ 863.087241] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.088193] ? lock_release+0x505/0x6f0 [ 863.088986] ? find_and_remove_object+0xe4/0x120 [ 863.089937] ? __delete_object+0xb3/0x100 [ 863.090769] ? lock_downgrade+0x6d0/0x6d0 [ 863.091597] ? rwlock_bug.part.0+0x90/0x90 [ 863.092456] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.093412] ? selinux_inode_getsecctx+0x90/0x90 [ 863.094363] ? rcu_read_lock_sched_held+0xd/0x70 [ 863.095319] ? loop_set_status_old+0x1b0/0x1b0 [ 863.096244] blkdev_ioctl+0x362/0x7f0 [ 863.096999] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 863.097938] ? __x64_sys_ioctl+0x97/0x210 [ 863.098761] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 863.099861] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 863.100843] __x64_sys_ioctl+0x196/0x210 [ 863.101661] do_syscall_64+0x3b/0x90 [ 863.102411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 863.103435] RIP: 0033:0x7f22ed51d8d7 [ 863.104183] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.107894] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.109410] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 863.110847] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 08:07:46 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 863.112280] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 863.113826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 863.115235] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 863.116664] [ 863.123366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.127738] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 863.138666] loop5: detected capacity change from 0 to 128 [ 863.145772] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 863.157402] ISOFS: Unable to identify CD-ROM format. 08:07:47 executing program 7: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0300000000003fa0b49e24dfca772ad5"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x10, 0x0, 0x2) lseek(r1, 0x0, 0x4) 08:07:47 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 863.183420] ISOFS: Unable to identify CD-ROM format. 08:07:47 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:47 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 863.251566] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 863.256141] loop5: detected capacity change from 0 to 128 [ 863.269364] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 863.276708] loop5: detected capacity change from 0 to 128 [ 863.296987] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 872.127029] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'. [ 872.134671] loop5: detected capacity change from 0 to 128 [ 872.136147] FAULT_INJECTION: forcing a failure. [ 872.136147] name failslab, interval 1, probability 0, space 0, times 0 [ 872.138484] CPU: 1 PID: 8006 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 872.139331] FAULT_INJECTION: forcing a failure. [ 872.139331] name failslab, interval 1, probability 0, space 0, times 0 [ 872.140400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.140419] Call Trace: [ 872.144395] [ 872.144844] dump_stack_lvl+0x8b/0xb3 [ 872.145624] should_fail.cold+0x5/0xa [ 872.146397] ? create_object.isra.0+0x3a/0xa20 [ 872.147331] should_failslab+0x5/0x10 [ 872.148119] kmem_cache_alloc+0x5b/0x480 [ 872.148942] create_object.isra.0+0x3a/0xa20 [ 872.149841] ? kasan_unpoison+0x23/0x50 [ 872.150641] kmem_cache_alloc+0x239/0x480 [ 872.151475] __kernfs_new_node+0xd4/0x8b0 [ 872.152310] ? lock_acquire+0x41c/0x4d0 [ 872.153108] ? kernfs_path_from_node+0x60/0x60 [ 872.154016] ? lock_release+0x505/0x6f0 [ 872.154803] ? kernfs_add_one+0x3c6/0x550 [ 872.155627] ? lock_downgrade+0x6d0/0x6d0 [ 872.156461] ? down_write+0xde/0x150 [ 872.157213] ? down_write_killable_nested+0x180/0x180 [ 872.158247] ? down_write+0xde/0x150 [ 872.158997] kernfs_new_node+0x93/0x120 [ 872.159794] __kernfs_create_file+0x51/0x350 [ 872.160709] sysfs_add_file_mode_ns+0x218/0x430 [ 872.161650] ? component_del+0x4c0/0x4c0 [ 872.162469] internal_create_group+0x322/0xb20 [ 872.163381] ? sysfs_remove_group+0x170/0x170 [ 872.164284] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 872.165278] ? __loop_update_dio+0x2a3/0x620 [ 872.166181] loop_configure+0xe87/0x1950 [ 872.167000] lo_ioctl+0x782/0x1860 [ 872.167711] ? avc_has_extended_perms+0x7e8/0xeb0 [ 872.168706] ? loop_set_status_old+0x1b0/0x1b0 [ 872.169621] ? fsnotify+0xb4f/0x1250 [ 872.170363] ? avc_ss_reset+0x180/0x180 [ 872.171174] ? fsnotify_first_mark+0x1f0/0x1f0 [ 872.172082] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.173041] ? lock_acquire+0x41c/0x4d0 [ 872.173841] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.174786] ? lock_release+0x505/0x6f0 [ 872.175578] ? find_and_remove_object+0xe4/0x120 [ 872.176542] ? __delete_object+0xb3/0x100 [ 872.177379] ? lock_downgrade+0x6d0/0x6d0 [ 872.178198] ? rwlock_bug.part.0+0x90/0x90 [ 872.179044] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.180000] ? selinux_inode_getsecctx+0x90/0x90 [ 872.180973] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.181912] ? loop_set_status_old+0x1b0/0x1b0 [ 872.182833] blkdev_ioctl+0x362/0x7f0 [ 872.183586] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.184535] ? __x64_sys_ioctl+0x97/0x210 [ 872.185360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.186461] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.187400] __x64_sys_ioctl+0x196/0x210 [ 872.188215] do_syscall_64+0x3b/0x90 [ 872.188965] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.189992] RIP: 0033:0x7f22ed51d8d7 [ 872.190729] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.194411] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.195927] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 872.197344] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.198760] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.200185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.201600] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 872.203025] [ 872.203485] CPU: 0 PID: 8015 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 872.204504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.205673] Call Trace: [ 872.205940] [ 872.206179] dump_stack_lvl+0x8b/0xb3 [ 872.206448] FAULT_INJECTION: forcing a failure. [ 872.206448] name failslab, interval 1, probability 0, space 0, times 0 [ 872.206583] should_fail.cold+0x5/0xa [ 872.209165] ? create_object.isra.0+0x3a/0xa20 [ 872.209646] should_failslab+0x5/0x10 [ 872.210042] kmem_cache_alloc+0x5b/0x480 [ 872.210468] create_object.isra.0+0x3a/0xa20 [ 872.210923] ? kasan_unpoison+0x23/0x50 [ 872.211344] kmem_cache_alloc+0x239/0x480 [ 872.211773] __kernfs_new_node+0xd4/0x8b0 [ 872.212218] ? kernfs_path_from_node+0x60/0x60 [ 872.212687] ? selinux_sb_statfs+0x1ba/0x250 [ 872.213143] ? call_rcu+0x4da/0xa20 [ 872.213525] ? kasan_quarantine_put+0x87/0x1e0 [ 872.214003] ? trace_hardirqs_on+0x5b/0x190 [ 872.214453] ? kasan_quarantine_put+0x87/0x1e0 [ 872.214932] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.215501] ? shmem_statfs+0x1b3/0x3e0 [ 872.215924] kernfs_create_dir_ns+0x9c/0x220 [ 872.216388] internal_create_group+0x782/0xb20 [ 872.216869] ? sysfs_remove_group+0x170/0x170 [ 872.217334] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 872.217856] ? __loop_update_dio+0x2a3/0x620 [ 872.218312] loop_configure+0xe87/0x1950 [ 872.218734] lo_ioctl+0x782/0x1860 [ 872.219109] ? avc_has_extended_perms+0x7e8/0xeb0 [ 872.219624] ? loop_set_status_old+0x1b0/0x1b0 [ 872.220092] ? fsnotify+0xb4f/0x1250 [ 872.220500] ? avc_ss_reset+0x180/0x180 [ 872.220927] ? fsnotify_first_mark+0x1f0/0x1f0 [ 872.221397] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.221882] ? lock_acquire+0x41c/0x4d0 [ 872.222299] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.222785] ? lock_release+0x505/0x6f0 [ 872.223192] ? find_and_remove_object+0xe4/0x120 [ 872.223688] ? __delete_object+0xb3/0x100 [ 872.224122] ? lock_downgrade+0x6d0/0x6d0 [ 872.224546] ? rwlock_bug.part.0+0x90/0x90 [ 872.224984] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.225476] ? selinux_inode_getsecctx+0x90/0x90 [ 872.225973] ? loop_set_status_old+0x1b0/0x1b0 [ 872.226445] blkdev_ioctl+0x362/0x7f0 [ 872.226850] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.227334] ? __x64_sys_ioctl+0x97/0x210 [ 872.227763] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.228332] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.228828] __x64_sys_ioctl+0x196/0x210 [ 872.229246] do_syscall_64+0x3b/0x90 [ 872.229647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.230175] RIP: 0033:0x7faf15eb38d7 [ 872.230553] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.232451] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.233228] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 872.233948] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.234669] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.235391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.236123] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 872.236856] [ 872.237094] CPU: 1 PID: 8013 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 872.237557] loop0: detected capacity change from 0 to 128 [ 872.239016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.239035] Call Trace: [ 872.242345] [ 872.242788] dump_stack_lvl+0x8b/0xb3 [ 872.243253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.7'. [ 872.243564] should_fail.cold+0x5/0xa [ 872.245207] ? __alloc_skb+0x211/0x340 [ 872.245994] should_failslab+0x5/0x10 [ 872.246753] kmem_cache_alloc_node+0x55/0x490 [ 872.247651] __alloc_skb+0x211/0x340 [ 872.248410] alloc_uevent_skb+0x7b/0x210 [ 872.249230] kobject_uevent_env+0xaa4/0xfa0 [ 872.250092] ? _raw_spin_unlock+0x24/0x40 [ 872.250933] disk_event_uevent+0x17b/0x1e0 [ 872.251775] ? disk_events_async_show+0x10/0x10 [ 872.252715] ? __fget_files+0x28d/0x470 [ 872.253510] disk_force_media_change+0x1e/0xc0 [ 872.254423] loop_configure+0x75b/0x1950 [ 872.255244] ? putname+0xfe/0x140 [ 872.255944] lo_ioctl+0x782/0x1860 [ 872.256677] ? avc_has_extended_perms+0x7e8/0xeb0 [ 872.257651] ? loop_set_status_old+0x1b0/0x1b0 [ 872.258563] ? fsnotify+0xb4f/0x1250 [ 872.259306] ? avc_ss_reset+0x180/0x180 [ 872.260115] ? fsnotify_first_mark+0x1f0/0x1f0 [ 872.261033] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.261974] ? lock_acquire+0x41c/0x4d0 [ 872.262769] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.263709] ? lock_release+0x505/0x6f0 [ 872.264509] ? find_and_remove_object+0xe4/0x120 [ 872.265458] ? __delete_object+0xb3/0x100 [ 872.266291] ? lock_downgrade+0x6d0/0x6d0 [ 872.267114] ? rwlock_bug.part.0+0x90/0x90 [ 872.267955] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.268927] ? selinux_inode_getsecctx+0x90/0x90 [ 872.269873] ? rcu_read_lock_sched_held+0xd/0x70 08:07:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) 08:07:55 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:07:55 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:55 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 39) 08:07:55 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 50) 08:07:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 50) 08:07:55 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:55 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000003dfc4424ffd34b7f226fd54", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3d36be0026006c09000077b6f3176c83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3621adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c8953f337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) lseek(r1, 0x0, 0x3) 08:07:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x82100, 0x0) getdents64(r2, &(0x7f0000000140)=""/108, 0x6c) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r3 = fcntl$dupfd(r1, 0x406, r1) getdents(r3, &(0x7f00000001c0)=""/213, 0xd5) pwrite64(r1, &(0x7f0000000000)="74778c2db883fd61ff91f54ef8e3d8bc8a6c82ed8581e3bb87c4ff18287b378a75f2d93b55693c58498583acf3332c74cf6b789a0c8eaec20329e76f22a42c4278e1758206fab27be3b260edad8ac7516b051ee59cefb2577c4f0fda3edadcf20713b53cf0cd406bc9b32217f6d5", 0x6e, 0x1800000000000) [ 872.270816] ? loop_set_status_old+0x1b0/0x1b0 [ 872.271962] blkdev_ioctl+0x362/0x7f0 [ 872.272733] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.273676] ? __x64_sys_ioctl+0x97/0x210 [ 872.274498] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.275596] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.276545] __x64_sys_ioctl+0x196/0x210 [ 872.277366] do_syscall_64+0x3b/0x90 [ 872.278124] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.279150] RIP: 0033:0x7f432f5bb8d7 [ 872.279889] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.283552] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:07:56 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat(r0, &(0x7f0000001240)='./file1\x00', 0x2080, 0xd2) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r3 = accept$unix(r1, 0x0, &(0x7f0000001280)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="030000000000d0d9097b189f8a7700002e"]) r4 = syz_open_dev$loop(&(0x7f0000001340), 0x3, 0x40082) r5 = socket(0x5, 0x800, 0x5) io_submit(0x0, 0x9, &(0x7f00000016c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000040)="c17366343e58777a81dbf479aee24aea114e7c5ac350bfb537ddbe99a7c1fec2276aa3a8ff849af75aa26ec48e4e4f5bf426122477053c815a31219a10b231ae8a8e40cdf7582998bfea", 0x4a, 0x7f, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3e7affbc06b15bf4, 0x8, 0xffffffffffffffff, &(0x7f00000013c0)="b8a242af9612b7e87485aa92985d8c3d60", 0x11, 0x4e059421, 0x0, 0x2, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f00000001c0)="9b8da7c3241ac7970a451bfcd339cffb26e85ae25db3dc05b72f43", 0x1b, 0x9, 0x0, 0x2, r1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000240)="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", 0x1000, 0x54081ae3}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0x3ff, r3, &(0x7f00000012c0), 0x0, 0xfffffffffffffffd, 0x0, 0x1}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000001380)="bd81ccf0f0910aa49f513a4fe885360d0dea80a79f81efb3a88ebeec2aecc7f176a6d44a486fe567dcd29bdddca9a6018543a8e687510a1456d0", 0x3a, 0x9, 0x0, 0x2, r0}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x5, 0x45cd, r5, &(0x7f0000001400)="668499963ea43e93b0a48a02dedf3e", 0xf, 0xfffffffffffffffa, 0x0, 0x3, r0}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f0000001480)="2639a272b42667cb0de4dfe62e0538cc343403ac580885b2922e4bf001d2726ab8c1624e4f4305aa6aa75269e69db320873fcd706ec1c56df492efce06edcc02e47ad420b1e61315ef1fa562e84de3b8241ee2111cb751f1a051dfc225ee57ec788389accdfce31f93ba17e5da6b235a35dee7cc0a1aa89b69ae4f83aebb0bb24b0ac250d4a094ae27b4863f6360f5e60aea8c4437d5aa2cbf82c5bab7c419ae976b96f27fffa0ca0bdeb8054f21bd0f2ed7fcbd81c472efeef7aa", 0xbb, 0x800, 0x0, 0x2, r1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0xe2, r0, &(0x7f0000001580)="f752d7c05f0fa6661a5a66264d54ddfd35c0bef90fbf31ac7070e30cf247dec382d136fab31bc6c4863dc83eda0ac1a7de32faf9102bb40d3641ace229c92f896fed1824bdf17b7fe129f0c9739f86904aa503a58a7920d59a902fd13722f6473fc817e0fa19ed17aea6a251d3b1ac90700c62294a7d10426ecbc3d8053946ee4634117ff41a96ae9db2fc50cd8fba259ca6cb026b9239e46df299ba02c10970baa1cd1f36608070d9b51aac2a72e6521868dea3266426b4faf439d00e7b648fa2490692796a6a1a5a286b3e04f09c8a783a8adf3edb1ec78dc82664c42a3de0300187d608c9da411cbb0a", 0xeb, 0x7, 0x0, 0x1}]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) [ 872.285073] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 872.286746] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.288218] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.289647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.291062] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 872.292505] [ 872.297388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:07:56 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 872.331745] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 872.334384] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 872.347661] loop5: detected capacity change from 0 to 128 [ 872.351721] ISOFS: Unable to identify CD-ROM format. 08:07:56 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:07:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 51) [ 872.366161] ISOFS: Unable to identify CD-ROM format. [ 872.368444] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:07:56 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 872.401981] FAULT_INJECTION: forcing a failure. [ 872.401981] name failslab, interval 1, probability 0, space 0, times 0 [ 872.403300] CPU: 0 PID: 8034 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 872.404309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.405582] Call Trace: [ 872.405851] [ 872.406101] dump_stack_lvl+0x8b/0xb3 [ 872.406530] should_fail.cold+0x5/0xa [ 872.406963] ? lock_release+0x505/0x6f0 [ 872.407412] ? radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 872.408052] should_failslab+0x5/0x10 [ 872.408457] kmem_cache_alloc+0x5b/0x480 [ 872.408910] radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 872.409490] idr_get_free+0x4b5/0x8f0 [ 872.409915] idr_alloc_u32+0x170/0x2d0 [ 872.410324] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 872.410861] ? lock_release+0x505/0x6f0 [ 872.411280] ? stack_trace_save+0x8c/0xc0 [ 872.411749] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.412258] ? lock_acquire+0x41c/0x4d0 [ 872.412714] idr_alloc_cyclic+0x102/0x230 [ 872.413140] ? idr_alloc+0x130/0x130 [ 872.413556] ? rwlock_bug.part.0+0x90/0x90 [ 872.413998] __kernfs_new_node+0x117/0x8b0 [ 872.414475] ? kernfs_path_from_node+0x60/0x60 [ 872.414949] ? selinux_sb_statfs+0x1ba/0x250 [ 872.415437] ? call_rcu+0x4da/0xa20 [ 872.415822] ? kasan_quarantine_put+0x87/0x1e0 [ 872.416341] ? trace_hardirqs_on+0x5b/0x190 [ 872.416798] ? kasan_quarantine_put+0x87/0x1e0 [ 872.417317] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 872.417891] ? shmem_statfs+0x1b3/0x3e0 [ 872.418334] kernfs_create_dir_ns+0x9c/0x220 [ 872.418793] internal_create_group+0x782/0xb20 [ 872.419303] ? sysfs_remove_group+0x170/0x170 [ 872.419774] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 872.420342] ? __loop_update_dio+0x2a3/0x620 [ 872.420801] loop_configure+0xe87/0x1950 [ 872.421261] lo_ioctl+0x782/0x1860 [ 872.421633] ? avc_has_extended_perms+0x7e8/0xeb0 [ 872.422185] ? loop_set_status_old+0x1b0/0x1b0 [ 872.422659] ? fsnotify+0xb4f/0x1250 [ 872.423080] ? avc_ss_reset+0x180/0x180 [ 872.423501] ? fsnotify_first_mark+0x1f0/0x1f0 [ 872.423998] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.424497] ? lock_acquire+0x41c/0x4d0 [ 872.424939] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.425439] ? lock_release+0x505/0x6f0 [ 872.425888] ? find_and_remove_object+0xe4/0x120 [ 872.426384] ? __delete_object+0xb3/0x100 [ 872.426845] ? lock_downgrade+0x6d0/0x6d0 [ 872.427275] ? rwlock_bug.part.0+0x90/0x90 [ 872.427751] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.428266] ? selinux_inode_getsecctx+0x90/0x90 [ 872.428797] ? loop_set_status_old+0x1b0/0x1b0 [ 872.429280] blkdev_ioctl+0x362/0x7f0 [ 872.429695] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.430186] ? __x64_sys_ioctl+0x97/0x210 [ 872.430650] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.431219] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.431748] __x64_sys_ioctl+0x196/0x210 [ 872.432176] do_syscall_64+0x3b/0x90 [ 872.432594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.433127] RIP: 0033:0x7faf15eb38d7 [ 872.433529] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.435417] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.436260] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 872.437003] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.437734] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.438461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.439191] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 872.439929] 08:07:56 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 40) 08:07:56 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 872.456868] loop0: detected capacity change from 0 to 128 [ 872.468563] FAULT_INJECTION: forcing a failure. [ 872.468563] name failslab, interval 1, probability 0, space 0, times 0 [ 872.469855] CPU: 0 PID: 8041 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 872.470933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 872.472125] Call Trace: [ 872.472409] [ 872.472654] dump_stack_lvl+0x8b/0xb3 [ 872.473089] should_fail.cold+0x5/0xa [ 872.473518] ? create_object.isra.0+0x3a/0xa20 [ 872.474033] should_failslab+0x5/0x10 [ 872.474461] kmem_cache_alloc+0x5b/0x480 [ 872.474922] create_object.isra.0+0x3a/0xa20 [ 872.475389] ? kasan_unpoison+0x23/0x50 [ 872.475834] kmem_cache_alloc_node+0x248/0x490 [ 872.476331] __alloc_skb+0x211/0x340 [ 872.476766] alloc_uevent_skb+0x7b/0x210 [ 872.477210] kobject_uevent_env+0xaa4/0xfa0 [ 872.477270] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 872.477705] ? _raw_spin_unlock+0x24/0x40 [ 872.477731] disk_event_uevent+0x17b/0x1e0 [ 872.480060] ? disk_events_async_show+0x10/0x10 [ 872.480608] ? __fget_files+0x28d/0x470 [ 872.481033] disk_force_media_change+0x1e/0xc0 [ 872.481544] loop_configure+0x75b/0x1950 [ 872.481982] ? avc_has_extended_perms+0x66b/0xeb0 [ 872.482534] lo_ioctl+0x782/0x1860 [ 872.482910] ? avc_has_extended_perms+0x7e8/0xeb0 [ 872.483450] ? loop_set_status_old+0x1b0/0x1b0 [ 872.483933] ? fsnotify+0xb4f/0x1250 [ 872.484354] ? avc_ss_reset+0x180/0x180 [ 872.484781] ? fsnotify_first_mark+0x1f0/0x1f0 [ 872.485290] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.485789] ? lock_acquire+0x41c/0x4d0 [ 872.486231] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.486729] ? lock_release+0x505/0x6f0 [ 872.487175] ? find_and_remove_object+0xe4/0x120 [ 872.487676] ? __delete_object+0xb3/0x100 [ 872.488151] ? lock_downgrade+0x6d0/0x6d0 [ 872.488591] ? rwlock_bug.part.0+0x90/0x90 [ 872.489065] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.489569] ? selinux_inode_getsecctx+0x90/0x90 [ 872.490101] ? rcu_read_lock_sched_held+0xd/0x70 [ 872.490595] ? loop_set_status_old+0x1b0/0x1b0 [ 872.491112] blkdev_ioctl+0x362/0x7f0 [ 872.491510] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.492040] ? __x64_sys_ioctl+0x97/0x210 [ 872.492485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 872.493101] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 872.493602] __x64_sys_ioctl+0x196/0x210 [ 872.494049] do_syscall_64+0x3b/0x90 [ 872.494448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 872.495016] RIP: 0033:0x7f432f5bb8d7 [ 872.495401] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.497438] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 872.498225] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 872.498964] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 872.499705] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 872.500448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 872.501187] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 872.501926] [ 872.534764] ISOFS: Unable to identify CD-ROM format. [ 883.309897] FAULT_INJECTION: forcing a failure. [ 883.309897] name failslab, interval 1, probability 0, space 0, times 0 [ 883.311128] CPU: 1 PID: 8056 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 883.312133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 883.313334] Call Trace: [ 883.313610] [ 883.313846] dump_stack_lvl+0x8b/0xb3 [ 883.314258] should_fail.cold+0x5/0xa [ 883.314664] ? __kernfs_new_node+0xd4/0x8b0 [ 883.314881] FAULT_INJECTION: forcing a failure. [ 883.314881] name failslab, interval 1, probability 0, space 0, times 0 [ 883.315120] should_failslab+0x5/0x10 [ 883.317062] kmem_cache_alloc+0x5b/0x480 [ 883.317495] __kernfs_new_node+0xd4/0x8b0 [ 883.317949] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.318448] ? kernfs_add_one+0x3c6/0x550 [ 883.318885] ? kernfs_path_from_node+0x60/0x60 [ 883.319363] ? down_write+0xde/0x150 [ 883.319769] ? down_write+0xde/0x150 [ 883.320169] ? up_write+0x148/0x460 [ 883.320566] ? kernfs_activate+0x1c4/0x240 [ 883.321015] kernfs_new_node+0x93/0x120 [ 883.321443] __kernfs_create_file+0x51/0x350 [ 883.321916] sysfs_add_file_mode_ns+0x218/0x430 [ 883.322406] ? component_del+0x4c0/0x4c0 [ 883.322845] internal_create_group+0x322/0xb20 [ 883.323336] ? sysfs_remove_group+0x170/0x170 [ 883.323821] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 883.324369] ? __loop_update_dio+0x2a3/0x620 [ 883.324840] loop_configure+0xe87/0x1950 [ 883.325286] lo_ioctl+0x782/0x1860 [ 883.325669] ? avc_has_extended_perms+0x7e8/0xeb0 [ 883.326199] ? loop_set_status_old+0x1b0/0x1b0 [ 883.326694] ? fsnotify+0xb4f/0x1250 [ 883.327091] ? avc_ss_reset+0x180/0x180 [ 883.327524] ? fsnotify_first_mark+0x1f0/0x1f0 [ 883.328010] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.328533] ? lock_acquire+0x41c/0x4d0 [ 883.328953] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.329461] ? lock_release+0x505/0x6f0 [ 883.329888] ? find_and_remove_object+0xe4/0x120 [ 883.330400] ? __delete_object+0xb3/0x100 [ 883.330846] ? lock_downgrade+0x6d0/0x6d0 [ 883.331293] ? rwlock_bug.part.0+0x90/0x90 [ 883.331746] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.332263] ? selinux_inode_getsecctx+0x90/0x90 [ 883.332781] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.333292] ? loop_set_status_old+0x1b0/0x1b0 [ 883.333782] blkdev_ioctl+0x362/0x7f0 [ 883.334184] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.334689] ? __x64_sys_ioctl+0x97/0x210 [ 883.335131] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 883.335720] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.336220] __x64_sys_ioctl+0x196/0x210 [ 883.336665] do_syscall_64+0x3b/0x90 [ 883.337066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 883.337623] RIP: 0033:0x7f22ed51d8d7 [ 883.338017] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.339982] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.340795] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 883.341557] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 883.342321] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 883.343077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 883.343841] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 883.344608] [ 883.344856] CPU: 0 PID: 8058 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 883.346941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 883.346997] loop5: detected capacity change from 0 to 128 08:08:07 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 41) 08:08:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) 08:08:07 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 51) 08:08:07 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 52) 08:08:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1b0) fallocate(r1, 0x10, 0x0, 0x2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x1, 0x3, 0x1f, 0xfffffffb, 0xa, "07ae95b1d876a86ed004b135a121c0c82f9b4a"}) lseek(r0, 0x0, 0x4) 08:08:07 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 883.349325] Call Trace: [ 883.349337] [ 883.349348] dump_stack_lvl+0x8b/0xb3 [ 883.351901] should_fail.cold+0x5/0xa [ 883.352720] ? create_object.isra.0+0x3a/0xa20 [ 883.353731] should_failslab+0x5/0x10 [ 883.354527] kmem_cache_alloc+0x5b/0x480 [ 883.355386] create_object.isra.0+0x3a/0xa20 [ 883.356341] ? kasan_unpoison+0x23/0x50 [ 883.357193] kmem_cache_alloc+0x239/0x480 [ 883.358070] __kernfs_new_node+0xd4/0x8b0 [ 883.358945] ? lock_acquire+0x41c/0x4d0 [ 883.359792] ? kernfs_path_from_node+0x60/0x60 [ 883.360765] ? lock_release+0x505/0x6f0 [ 883.361640] ? kernfs_add_one+0x3c6/0x550 [ 883.362509] ? lock_downgrade+0x6d0/0x6d0 [ 883.363415] ? down_write+0xde/0x150 [ 883.364207] ? down_write_killable_nested+0x180/0x180 [ 883.365306] ? down_write+0xde/0x150 [ 883.366096] kernfs_new_node+0x93/0x120 [ 883.366934] __kernfs_create_file+0x51/0x350 [ 883.367860] sysfs_add_file_mode_ns+0x218/0x430 [ 883.368857] ? component_del+0x4c0/0x4c0 [ 883.369714] internal_create_group+0x322/0xb20 [ 883.370727] ? sysfs_remove_group+0x170/0x170 [ 883.371674] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 883.372763] ? __loop_update_dio+0x2a3/0x620 [ 883.373693] loop_configure+0xe87/0x1950 [ 883.374610] lo_ioctl+0x782/0x1860 [ 883.375362] ? avc_has_extended_perms+0x7e8/0xeb0 [ 883.376411] ? loop_set_status_old+0x1b0/0x1b0 [ 883.376871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.377376] ? fsnotify+0xb4f/0x1250 [ 883.379154] ? avc_ss_reset+0x180/0x180 [ 883.380009] ? fsnotify_first_mark+0x1f0/0x1f0 [ 883.380983] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.381988] ? lock_acquire+0x41c/0x4d0 [ 883.382831] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.383824] ? lock_release+0x505/0x6f0 [ 883.384670] ? find_and_remove_object+0xe4/0x120 [ 883.385676] ? __delete_object+0xb3/0x100 [ 883.386575] ? lock_downgrade+0x6d0/0x6d0 [ 883.387453] ? rwlock_bug.part.0+0x90/0x90 [ 883.388409] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.389427] ? selinux_inode_getsecctx+0x90/0x90 [ 883.390487] ? loop_set_status_old+0x1b0/0x1b0 [ 883.391462] blkdev_ioctl+0x362/0x7f0 [ 883.392296] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.393327] ? __x64_sys_ioctl+0x97/0x210 [ 883.394222] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 883.395426] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.396472] __x64_sys_ioctl+0x196/0x210 [ 883.397381] do_syscall_64+0x3b/0x90 [ 883.398192] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 883.399296] RIP: 0033:0x7faf15eb38d7 [ 883.400116] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.401494] FAULT_INJECTION: forcing a failure. [ 883.401494] name failslab, interval 1, probability 0, space 0, times 0 [ 883.404086] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.406923] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 883.408438] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 883.410011] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 883.411514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 883.413093] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 883.414601] [ 883.415090] CPU: 1 PID: 8065 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 883.416150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 883.417457] Call Trace: [ 883.417731] [ 883.417970] dump_stack_lvl+0x8b/0xb3 [ 883.418386] should_fail.cold+0x5/0xa [ 883.418796] should_failslab+0x5/0x10 [ 883.419198] __kmalloc_node_track_caller+0x7e/0x440 [ 883.419730] ? alloc_uevent_skb+0x7b/0x210 [ 883.420184] __alloc_skb+0xe3/0x340 [ 883.420588] alloc_uevent_skb+0x7b/0x210 [ 883.421025] kobject_uevent_env+0xaa4/0xfa0 [ 883.421488] ? _raw_spin_unlock+0x24/0x40 [ 883.421945] disk_event_uevent+0x17b/0x1e0 [ 883.422398] ? disk_events_async_show+0x10/0x10 [ 883.422901] ? __fget_files+0x28d/0x470 [ 883.423336] disk_force_media_change+0x1e/0xc0 [ 883.423829] loop_configure+0x75b/0x1950 [ 883.424277] ? putname+0xfe/0x140 [ 883.424658] lo_ioctl+0x782/0x1860 [ 883.425037] ? avc_has_extended_perms+0x7e8/0xeb0 [ 883.425564] ? loop_set_status_old+0x1b0/0x1b0 [ 883.426052] ? fsnotify+0xb4f/0x1250 [ 883.426457] ? avc_ss_reset+0x180/0x180 [ 883.426893] ? fsnotify_first_mark+0x1f0/0x1f0 [ 883.427377] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.427888] ? lock_acquire+0x41c/0x4d0 [ 883.428326] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.428830] ? lock_release+0x505/0x6f0 [ 883.429252] ? find_and_remove_object+0xe4/0x120 [ 883.429759] ? __delete_object+0xb3/0x100 [ 883.430203] ? lock_downgrade+0x6d0/0x6d0 [ 883.430642] ? rwlock_bug.part.0+0x90/0x90 [ 883.431097] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.431608] ? selinux_inode_getsecctx+0x90/0x90 [ 883.432118] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.432626] ? loop_set_status_old+0x1b0/0x1b0 [ 883.433123] blkdev_ioctl+0x362/0x7f0 [ 883.433525] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.434024] ? __x64_sys_ioctl+0x97/0x210 [ 883.434459] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 883.435041] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.435541] __x64_sys_ioctl+0x196/0x210 [ 883.435979] do_syscall_64+0x3b/0x90 [ 883.436387] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 883.436932] RIP: 0033:0x7f432f5bb8d7 [ 883.437321] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.439256] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.440068] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 883.440832] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 883.441593] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 883.442351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 883.443113] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 883.443876] [ 883.446442] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 883.461870] ISOFS: Unable to identify CD-ROM format. 08:08:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:07 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:07 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:07 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x6, 0x0, &(0x7f0000000140), 0x200810, &(0x7f0000000180)={[{@dmode={'dmode', 0x3d, 0x8001}}, {@utf8}, {@utf8}, {@nocompress}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x31, 0x66, 0x61, 0x31, 0x35, 0x65, 0x31], 0x2d, [0x32, 0x62, 0x65, 0x37], 0x2d, [0x62, 0x30, 0x35, 0x30], 0x2d, [0x39, 0x38, 0x37, 0x64], 0x2d, [0x37, 0x64, 0x34, 0x30, 0x62, 0x66, 0x30, 0x34]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%,\'+'}}, {@permit_directio}]}) openat(r2, &(0x7f0000000280)='./file1\x00', 0x4402, 0x120) lseek(r0, 0x0, 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x1a}}, {0xa, 0x4e20, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1000, [0x6, 0x5, 0x7ff, 0x9, 0x3f, 0x0, 0x4b38, 0xffff]}, 0x5c) 08:08:07 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:07 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:07 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 883.567585] loop5: detected capacity change from 0 to 128 [ 883.571165] loop0: detected capacity change from 0 to 128 08:08:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 52) [ 883.578873] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 883.599365] ISOFS: Unable to identify CD-ROM format. [ 883.622108] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 883.629072] FAULT_INJECTION: forcing a failure. [ 883.629072] name failslab, interval 1, probability 0, space 0, times 0 [ 883.630318] CPU: 1 PID: 8088 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 883.631323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 883.632544] Call Trace: [ 883.632819] [ 883.633059] dump_stack_lvl+0x8b/0xb3 [ 883.633483] should_fail.cold+0x5/0xa [ 883.633896] ? create_object.isra.0+0x3a/0xa20 [ 883.634384] should_failslab+0x5/0x10 [ 883.634784] kmem_cache_alloc+0x5b/0x480 [ 883.635230] create_object.isra.0+0x3a/0xa20 [ 883.635717] ? kasan_unpoison+0x23/0x50 [ 883.636152] kmem_cache_alloc+0x239/0x480 [ 883.636622] __kernfs_new_node+0xd4/0x8b0 [ 883.637055] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.637567] ? kernfs_add_one+0x3c6/0x550 [ 883.638021] ? kernfs_path_from_node+0x60/0x60 [ 883.638511] ? down_write+0xde/0x150 [ 883.638908] ? down_write+0xde/0x150 [ 883.639323] ? up_write+0x148/0x460 [ 883.639715] ? kernfs_activate+0x1c4/0x240 [ 883.640173] kernfs_new_node+0x93/0x120 [ 883.640611] __kernfs_create_file+0x51/0x350 [ 883.641094] sysfs_add_file_mode_ns+0x218/0x430 [ 883.641596] ? component_del+0x4c0/0x4c0 [ 883.642040] internal_create_group+0x322/0xb20 [ 883.642546] ? sysfs_remove_group+0x170/0x170 [ 883.643037] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 883.643577] ? __loop_update_dio+0x2a3/0x620 [ 883.644055] loop_configure+0xe87/0x1950 [ 883.644513] lo_ioctl+0x782/0x1860 [ 883.644910] ? avc_has_extended_perms+0x7e8/0xeb0 [ 883.645447] ? loop_set_status_old+0x1b0/0x1b0 [ 883.645934] ? fsnotify+0xb4f/0x1250 [ 883.646329] ? avc_ss_reset+0x180/0x180 [ 883.646765] ? fsnotify_first_mark+0x1f0/0x1f0 [ 883.647257] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.647772] ? lock_acquire+0x41c/0x4d0 [ 883.648207] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.648731] ? lock_release+0x505/0x6f0 [ 883.649159] ? find_and_remove_object+0xe4/0x120 [ 883.649676] ? __delete_object+0xb3/0x100 [ 883.650129] ? lock_downgrade+0x6d0/0x6d0 [ 883.650583] ? rwlock_bug.part.0+0x90/0x90 [ 883.651047] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.651562] ? selinux_inode_getsecctx+0x90/0x90 [ 883.652076] ? rcu_read_lock_sched_held+0xd/0x70 [ 883.652620] ? loop_set_status_old+0x1b0/0x1b0 [ 883.653129] blkdev_ioctl+0x362/0x7f0 [ 883.653540] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.654045] ? __x64_sys_ioctl+0x97/0x210 [ 883.654489] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 883.655082] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 883.655599] __x64_sys_ioctl+0x196/0x210 [ 883.656037] do_syscall_64+0x3b/0x90 [ 883.656456] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 883.657009] RIP: 0033:0x7f22ed51d8d7 [ 883.657408] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 883.659372] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.660182] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 883.660955] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 883.661722] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 883.662488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 883.663255] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 883.664023] [ 883.673231] ISOFS: Unable to identify CD-ROM format. [ 892.286029] FAULT_INJECTION: forcing a failure. [ 892.286029] name failslab, interval 1, probability 0, space 0, times 0 [ 892.287206] CPU: 1 PID: 8096 Comm: syz-executor.0 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 892.288131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 892.289232] Call Trace: [ 892.289486] [ 892.289712] dump_stack_lvl+0x8b/0xb3 [ 892.290095] should_fail.cold+0x5/0xa [ 892.290471] ? __kernfs_new_node+0xd4/0x8b0 [ 892.290896] should_failslab+0x5/0x10 [ 892.291270] kmem_cache_alloc+0x5b/0x480 [ 892.291670] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.292141] __kernfs_new_node+0xd4/0x8b0 [ 892.292609] ? lock_acquire+0x41c/0x4d0 [ 892.293003] ? kernfs_path_from_node+0x60/0x60 [ 892.293510] ? lock_release+0x505/0x6f0 [ 892.293903] ? kernfs_add_one+0x3c6/0x550 [ 892.294361] ? lock_downgrade+0x6d0/0x6d0 [ 892.294818] ? down_write+0xde/0x150 [ 892.295230] ? down_write_killable_nested+0x180/0x180 [ 892.295797] ? down_write+0xde/0x150 [ 892.296211] kernfs_new_node+0x93/0x120 [ 892.296660] __kernfs_create_file+0x51/0x350 [ 892.297136] sysfs_add_file_mode_ns+0x218/0x430 [ 892.297648] ? component_del+0x4c0/0x4c0 [ 892.298096] internal_create_group+0x322/0xb20 [ 892.298603] ? sysfs_remove_group+0x170/0x170 [ 892.299064] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 892.299599] ? __loop_update_dio+0x2a3/0x620 [ 892.300073] loop_configure+0xe87/0x1950 [ 892.300528] lo_ioctl+0x782/0x1860 [ 892.300920] ? avc_has_extended_perms+0x7e8/0xeb0 [ 892.301462] ? loop_set_status_old+0x1b0/0x1b0 [ 892.301961] ? fsnotify+0xb4f/0x1250 [ 892.302367] ? avc_ss_reset+0x180/0x180 [ 892.302810] ? fsnotify_first_mark+0x1f0/0x1f0 [ 892.303309] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.303824] ? lock_acquire+0x41c/0x4d0 [ 892.304259] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.304748] ? lock_release+0x505/0x6f0 [ 892.305175] ? find_and_remove_object+0xe4/0x120 [ 892.305699] ? __delete_object+0xb3/0x100 [ 892.306154] ? lock_downgrade+0x6d0/0x6d0 [ 892.306611] ? rwlock_bug.part.0+0x90/0x90 [ 892.307071] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.307595] ? selinux_inode_getsecctx+0x90/0x90 [ 892.308112] ? loop_set_status_old+0x1b0/0x1b0 [ 892.308431] FAULT_INJECTION: forcing a failure. [ 892.308431] name failslab, interval 1, probability 0, space 0, times 0 [ 892.308630] blkdev_ioctl+0x362/0x7f0 [ 892.308645] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.308658] ? __x64_sys_ioctl+0x97/0x210 [ 892.312290] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 892.312902] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.313420] __x64_sys_ioctl+0x196/0x210 [ 892.313864] do_syscall_64+0x3b/0x90 [ 892.314271] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.314791] RIP: 0033:0x7faf15eb38d7 [ 892.315159] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.317164] RSP: 002b:00007faf13428f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.317985] RAX: ffffffffffffffda RBX: 00007faf15efd970 RCX: 00007faf15eb38d7 [ 892.318762] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 892.319540] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 892.320322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 892.321109] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 892.321900] [ 892.322153] CPU: 0 PID: 8101 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 892.324094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 892.326388] Call Trace: [ 892.326909] [ 892.327358] dump_stack_lvl+0x8b/0xb3 [ 892.328144] should_fail.cold+0x5/0xa [ 892.328935] ? create_object.isra.0+0x3a/0xa20 [ 892.329864] should_failslab+0x5/0x10 [ 892.330625] kmem_cache_alloc+0x5b/0x480 [ 892.331445] create_object.isra.0+0x3a/0xa20 [ 892.332337] ? kasan_unpoison+0x23/0x50 [ 892.333156] __kmalloc_node_track_caller+0x269/0x440 [ 892.334175] ? alloc_uevent_skb+0x7b/0x210 [ 892.335035] __alloc_skb+0xe3/0x340 [ 892.335781] alloc_uevent_skb+0x7b/0x210 [ 892.336623] kobject_uevent_env+0xaa4/0xfa0 [ 892.337502] ? _raw_spin_unlock+0x24/0x40 [ 892.338347] disk_event_uevent+0x17b/0x1e0 [ 892.339200] ? disk_events_async_show+0x10/0x10 [ 892.340143] ? __fget_files+0x28d/0x470 08:08:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 53) 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 53) 08:08:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:16 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000001800000099c3b12fd13b5792d85d5c370281dffcc66ad8817f000000e6aa85fcf699cdec159695222c540af6d7166deabcb8e90100b142e6c6db09a6eadd2ee0d4cb28ee23d2853c5cc4fe1361b90244484b8a87a972828a634efbb1f0df831b6f73d7f8555e9573110834af59", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00800000000000002e00"]) fallocate(r1, 0x10, 0x0, 0x2) lseek(0xffffffffffffffff, 0x0, 0x4) r2 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="454c6e22e81c0a97015c4f8f76e3855fc94eb4d19f7fa6b494f6f3a0d36e6c1439c0dec0a67cdfb6bd61558f79d3a6a5f71fd88119cc1dfdda5073368db4ae3a0299e74274b9e3b6f6cf45f11816ecbe2adeb79e303d4130864bf09fa64afd15e7477ef918a0358c5a94bb85d4a8d73f5fe8140921268f138cbd850c25c428b796dd811fda9b4b699555bd0b70e093850d23cc6ffb62950d83ded1e5e4053a505d96e8ef28cc3dac92b2e1a1536eee29fea24e936985cf48903cdf1244f767b2", 0xc0, 0x80}, {&(0x7f00000002c0)="53277affbf68801af2d232d75f859cb7e42550e7663b1701beb38b693944414da0cb93125d0100e10b7edf21ec4ce59631c262bd14d965b2661fecf2776ee13338c2a5aaf760c70e487c4b8e4b8f8d6fe392b2ec81271f024db4950108f9d1aace6012f414aeeeb8f46f9a161500a695fdd4f7f47e9141b01e9863beee6032f9ef7eada138dc38be52d8938b3d48c544f6591b3c55ceae47e6c0e68cd5ebe66cb28245ee", 0xa4, 0x1000}, {&(0x7f0000000080)="abc5878a9b4afbd994d9b60e6b5202bf762a88e27e510dfb3e0fbcb7ed6f4a4173c0dac20725ff8190aac9c9978ed765cfe7cc096006fe622e4494e42faca0589e7804258b3e008b71eaef697acf84014b742f3b", 0x54, 0x10001}], 0xa8020, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f00000004c0)="aab92d5eb95db608b5e9aaf88d289e9a536fa6427c391e493c4a95ca8e391b0949b9e40a972f03747408ae96b373ccb45aa5dad0a7af1c4d7f10055f2860914681c67139743a669e147ce76f25d5c03192dca3d25c1583a25b5fe07c568d7edffe3e3673a2bde87d8b168affb1ed15b2", 0x70, r3}, 0x68) 08:08:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 42) 08:08:16 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) [ 892.340948] disk_force_media_change+0x1e/0xc0 [ 892.342080] loop_configure+0x75b/0x1950 [ 892.342900] ? putname+0xfe/0x140 [ 892.343605] lo_ioctl+0x782/0x1860 [ 892.344317] ? avc_has_extended_perms+0x7e8/0xeb0 [ 892.345323] ? loop_set_status_old+0x1b0/0x1b0 [ 892.346237] ? fsnotify+0xb4f/0x1250 [ 892.346984] ? avc_ss_reset+0x180/0x180 [ 892.347791] ? fsnotify_first_mark+0x1f0/0x1f0 [ 892.348703] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.349654] ? lock_acquire+0x41c/0x4d0 [ 892.350306] loop0: detected capacity change from 0 to 128 [ 892.350445] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.351969] ? lock_release+0x505/0x6f0 [ 892.352362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.352764] ? find_and_remove_object+0xe4/0x120 [ 892.354654] ? __delete_object+0xb3/0x100 [ 892.355479] ? lock_downgrade+0x6d0/0x6d0 [ 892.356296] ? rwlock_bug.part.0+0x90/0x90 [ 892.357149] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.358095] ? selinux_inode_getsecctx+0x90/0x90 [ 892.359043] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.359983] ? loop_set_status_old+0x1b0/0x1b0 [ 892.360897] blkdev_ioctl+0x362/0x7f0 [ 892.361646] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.362571] ? __x64_sys_ioctl+0x97/0x210 [ 892.363385] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 892.364483] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.365416] __x64_sys_ioctl+0x196/0x210 [ 892.366215] do_syscall_64+0x3b/0x90 [ 892.366954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.367963] RIP: 0033:0x7f432f5bb8d7 [ 892.368696] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.372384] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.374067] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 892.375625] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 892.377191] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 892.378749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 892.380309] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 892.381893] [ 892.390763] FAULT_INJECTION: forcing a failure. [ 892.390763] name failslab, interval 1, probability 0, space 0, times 0 [ 892.392039] CPU: 1 PID: 8102 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 892.393119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 892.394380] Call Trace: [ 892.394653] [ 892.394901] dump_stack_lvl+0x8b/0xb3 [ 892.395332] should_fail.cold+0x5/0xa [ 892.395764] ? __kernfs_new_node+0xd4/0x8b0 [ 892.396240] should_failslab+0x5/0x10 [ 892.396674] kmem_cache_alloc+0x5b/0x480 [ 892.397127] __kernfs_new_node+0xd4/0x8b0 [ 892.397538] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.398069] ? kernfs_add_one+0x3c6/0x550 [ 892.398526] ? kernfs_path_from_node+0x60/0x60 [ 892.398974] ? down_write+0xde/0x150 [ 892.399384] ? down_write+0xde/0x150 [ 892.399801] ? up_write+0x148/0x460 [ 892.400164] ? kernfs_activate+0x1c4/0x240 [ 892.400639] kernfs_new_node+0x93/0x120 [ 892.401081] __kernfs_create_file+0x51/0x350 [ 892.401562] sysfs_add_file_mode_ns+0x218/0x430 [ 892.402073] ? component_del+0x4c0/0x4c0 [ 892.402520] internal_create_group+0x322/0xb20 [ 892.403026] ? sysfs_remove_group+0x170/0x170 [ 892.403518] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 892.404072] ? __loop_update_dio+0x2a3/0x620 [ 892.404582] loop_configure+0xe87/0x1950 [ 892.404993] lo_ioctl+0x782/0x1860 [ 892.405388] ? avc_has_extended_perms+0x7e8/0xeb0 [ 892.405927] ? loop_set_status_old+0x1b0/0x1b0 [ 892.406434] ? fsnotify+0xb4f/0x1250 [ 892.406851] ? avc_ss_reset+0x180/0x180 [ 892.407288] ? fsnotify_first_mark+0x1f0/0x1f0 [ 892.407794] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.408324] ? lock_acquire+0x41c/0x4d0 [ 892.408774] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.409295] ? lock_release+0x505/0x6f0 [ 892.409733] ? find_and_remove_object+0xe4/0x120 [ 892.410259] ? __delete_object+0xb3/0x100 [ 892.410714] ? lock_downgrade+0x6d0/0x6d0 [ 892.411173] ? rwlock_bug.part.0+0x90/0x90 [ 892.411637] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.412169] ? selinux_inode_getsecctx+0x90/0x90 [ 892.412700] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.413193] ? loop_set_status_old+0x1b0/0x1b0 [ 892.413671] blkdev_ioctl+0x362/0x7f0 [ 892.414074] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.414572] ? __x64_sys_ioctl+0x97/0x210 [ 892.414995] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 892.415568] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.416038] __x64_sys_ioctl+0x196/0x210 [ 892.416482] do_syscall_64+0x3b/0x90 [ 892.416876] entry_SYSCALL_64_after_hwframe+0x44/0xae 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 892.417567] RIP: 0033:0x7f22ed51d8d7 [ 892.418143] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.420140] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.420954] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 892.421744] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 892.422523] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 892.423295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 892.424076] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 892.424876] [ 892.425308] loop7: detected capacity change from 0 to 256 [ 892.428274] loop5: detected capacity change from 0 to 128 [ 892.432456] loop7: detected capacity change from 0 to 256 [ 892.434330] ISOFS: Unable to identify CD-ROM format. [ 892.440262] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 892.446495] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 892.453576] loop5: detected capacity change from 0 to 128 08:08:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) (fail_nth: 54) 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 892.475741] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file1\x00'}) pwrite64(r2, &(0x7f0000000040)="d77ee46fe29031c4012c0998a7df5ee9afb0a00003e666bb3bbf942f4cf1e94d54d1db61376a23ca7bcacb815536fb14fdd5a4e305c606824f7be69539e501bc81ad345d346d15ae389d6ed71cfaaec881cff4b4b078c7584bb76db3f782c642f665d21441f599c08cf9362df0555e1e3d7811f946ccdbb23f3b4087b16ef8f4eb713b86bf9002a9c362727f19b69316fb696cb64eac7506b608cc3c3c9d0284659ea5cbc4bbe0adacbeb0459cf91b49f4a6b0ee2c9b5bf3d8c68d5c6414", 0xbe, 0x6) 08:08:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 892.515543] loop0: detected capacity change from 0 to 128 08:08:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:16 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 43) [ 892.522893] ISOFS: Unable to identify CD-ROM format. [ 892.526320] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 892.555464] loop5: detected capacity change from 0 to 128 [ 892.564229] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:16 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 892.574393] loop5: detected capacity change from 0 to 128 [ 892.576950] FAULT_INJECTION: forcing a failure. [ 892.576950] name failslab, interval 1, probability 0, space 0, times 0 [ 892.578112] CPU: 1 PID: 8131 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 892.579117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 892.580222] Call Trace: [ 892.580499] [ 892.580727] dump_stack_lvl+0x8b/0xb3 [ 892.581140] should_fail.cold+0x5/0xa [ 892.581542] ? skb_clone+0x170/0x3c0 [ 892.581945] should_failslab+0x5/0x10 [ 892.582345] kmem_cache_alloc+0x5b/0x480 [ 892.582776] skb_clone+0x170/0x3c0 [ 892.583148] netlink_broadcast+0x9ae/0xd60 [ 892.583597] ? alloc_uevent_skb+0x1c2/0x210 [ 892.584055] kobject_uevent_env+0xa6b/0xfa0 [ 892.584501] ? _raw_spin_unlock+0x24/0x40 [ 892.584948] disk_event_uevent+0x17b/0x1e0 [ 892.585392] ? disk_events_async_show+0x10/0x10 [ 892.585880] ? __fget_files+0x28d/0x470 [ 892.586297] disk_force_media_change+0x1e/0xc0 [ 892.586781] loop_configure+0x75b/0x1950 [ 892.587212] ? putname+0xfe/0x140 [ 892.587579] lo_ioctl+0x782/0x1860 [ 892.587932] ? avc_has_extended_perms+0x7e8/0xeb0 [ 892.588461] ? loop_set_status_old+0x1b0/0x1b0 [ 892.588935] ? fsnotify+0xb4f/0x1250 [ 892.589315] ? avc_ss_reset+0x180/0x180 [ 892.589733] ? fsnotify_first_mark+0x1f0/0x1f0 [ 892.590213] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.590715] ? lock_acquire+0x41c/0x4d0 [ 892.591115] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.591605] ? lock_release+0x505/0x6f0 [ 892.592003] ? find_and_remove_object+0xe4/0x120 [ 892.592514] ? __delete_object+0xb3/0x100 [ 892.592959] ? lock_downgrade+0x6d0/0x6d0 [ 892.593389] ? rwlock_bug.part.0+0x90/0x90 [ 892.593841] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.594340] ? selinux_inode_getsecctx+0x90/0x90 [ 892.594838] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.595332] ? loop_set_status_old+0x1b0/0x1b0 [ 892.595814] blkdev_ioctl+0x362/0x7f0 [ 892.596215] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.596682] ? __x64_sys_ioctl+0x97/0x210 [ 892.597117] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 892.597693] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.598194] __x64_sys_ioctl+0x196/0x210 [ 892.598621] do_syscall_64+0x3b/0x90 [ 892.599014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.599554] RIP: 0033:0x7f432f5bb8d7 [ 892.599939] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.601728] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.602515] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 892.603261] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 892.603999] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 892.604743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 892.605490] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 892.606234] [ 892.614747] loop0: detected capacity change from 0 to 128 [ 892.619889] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) fallocate(r0, 0xc, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) lseek(r1, 0x0, 0x4) creat(&(0x7f0000000000)='./file1\x00', 0x40) lsetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)='*\x00', 0x2, 0x3) [ 892.628567] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:08:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 54) 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:16 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x0) [ 892.654399] FAULT_INJECTION: forcing a failure. [ 892.654399] name failslab, interval 1, probability 0, space 0, times 0 [ 892.656841] CPU: 0 PID: 8140 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 892.658869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 892.661276] Call Trace: [ 892.661819] [ 892.662286] dump_stack_lvl+0x8b/0xb3 [ 892.663111] should_fail.cold+0x5/0xa [ 892.663919] ? create_object.isra.0+0x3a/0xa20 [ 892.664918] should_failslab+0x5/0x10 [ 892.665718] kmem_cache_alloc+0x5b/0x480 [ 892.666582] create_object.isra.0+0x3a/0xa20 [ 892.667519] ? kasan_unpoison+0x23/0x50 [ 892.668368] kmem_cache_alloc+0x239/0x480 08:08:16 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) [ 892.669266] __kernfs_new_node+0xd4/0x8b0 [ 892.670216] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.671223] ? kernfs_add_one+0x3c6/0x550 [ 892.672095] ? kernfs_path_from_node+0x60/0x60 [ 892.673078] ? down_write+0xde/0x150 [ 892.673398] loop5: detected capacity change from 0 to 128 [ 892.673865] ? down_write+0xde/0x150 [ 892.675229] ? up_write+0x148/0x460 [ 892.675991] ? kernfs_activate+0x1c4/0x240 [ 892.676891] kernfs_new_node+0x93/0x120 [ 892.677738] __kernfs_create_file+0x51/0x350 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 892.678680] sysfs_add_file_mode_ns+0x218/0x430 [ 892.679698] ? component_del+0x4c0/0x4c0 [ 892.680568] internal_create_group+0x322/0xb20 [ 892.681533] ? sysfs_remove_group+0x170/0x170 [ 892.682477] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 892.683529] ? __loop_update_dio+0x2a3/0x620 [ 892.684230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.684461] loop_configure+0xe87/0x1950 [ 892.686225] lo_ioctl+0x782/0x1860 [ 892.686997] ? avc_has_extended_perms+0x7e8/0xeb0 [ 892.688024] ? loop_set_status_old+0x1b0/0x1b0 [ 892.689008] ? fsnotify+0xb4f/0x1250 [ 892.689798] ? avc_ss_reset+0x180/0x180 [ 892.690646] ? fsnotify_first_mark+0x1f0/0x1f0 [ 892.691600] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.692618] ? lock_acquire+0x41c/0x4d0 [ 892.693452] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.694438] ? lock_release+0x505/0x6f0 [ 892.695265] ? find_and_remove_object+0xe4/0x120 [ 892.696267] ? __delete_object+0xb3/0x100 [ 892.697155] ? lock_downgrade+0x6d0/0x6d0 [ 892.698029] ? rwlock_bug.part.0+0x90/0x90 [ 892.698922] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.699932] ? selinux_inode_getsecctx+0x90/0x90 [ 892.700935] ? rcu_read_lock_sched_held+0xd/0x70 [ 892.701930] ? loop_set_status_old+0x1b0/0x1b0 [ 892.702890] blkdev_ioctl+0x362/0x7f0 [ 892.703689] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.704691] ? __x64_sys_ioctl+0x97/0x210 [ 892.705570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 892.706731] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 892.707724] __x64_sys_ioctl+0x196/0x210 [ 892.708586] do_syscall_64+0x3b/0x90 [ 892.709389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 892.710469] RIP: 0033:0x7f22ed51d8d7 [ 892.711247] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.715116] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.716716] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 892.718209] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 892.719702] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 892.721200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 892.722692] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 892.724196] 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 892.732052] loop0: detected capacity change from 0 to 128 [ 892.735882] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 892.741426] loop5: detected capacity change from 0 to 128 [ 892.743818] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 892.752762] ISOFS: Unable to identify CD-ROM format. [ 892.754710] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:16 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) fcntl$notify(r2, 0x402, 0x4) 08:08:16 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 892.808014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 892.813452] loop0: detected capacity change from 0 to 128 08:08:16 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x0) [ 892.816215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 892.825209] loop5: detected capacity change from 0 to 128 [ 892.830426] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 892.838724] loop0: detected capacity change from 0 to 128 [ 892.843108] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 892.860464] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 892.886358] ISOFS: Unable to identify CD-ROM format. 08:08:26 executing program 2: syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[], 0x10) 08:08:26 executing program 7: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @llc={0x1a, 0xffd7, 0xfe, 0x0, 0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @llc={0x1a, 0x302, 0x3f, 0x0, 0x2, 0x8, @random="070200000080"}, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, 0x3, 0x0, 0x0, 0x0, 0xcff, 0x0, 0x7, 0x1, 0x3ff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:08:26 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 55) 08:08:26 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:26 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:26 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:26 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 44) 08:08:26 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 902.999925] FAULT_INJECTION: forcing a failure. [ 902.999925] name failslab, interval 1, probability 0, space 0, times 0 [ 903.001158] CPU: 0 PID: 8175 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 903.002110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.003237] Call Trace: [ 903.003497] [ 903.003724] dump_stack_lvl+0x8b/0xb3 [ 903.004121] should_fail.cold+0x5/0xa [ 903.004508] ? create_object.isra.0+0x3a/0xa20 [ 903.004978] should_failslab+0x5/0x10 [ 903.005357] kmem_cache_alloc+0x5b/0x480 [ 903.005769] ? lock_acquire+0x41c/0x4d0 [ 903.006171] create_object.isra.0+0x3a/0xa20 [ 903.006615] ? kasan_unpoison+0x23/0x50 [ 903.007021] kmem_cache_alloc+0x239/0x480 [ 903.007438] skb_clone+0x170/0x3c0 [ 903.007798] netlink_broadcast+0x9ae/0xd60 [ 903.008223] ? alloc_uevent_skb+0x1c2/0x210 [ 903.008687] kobject_uevent_env+0xa6b/0xfa0 [ 903.009124] ? _raw_spin_unlock+0x24/0x40 [ 903.009550] disk_event_uevent+0x17b/0x1e0 [ 903.010002] ? disk_events_async_show+0x10/0x10 [ 903.010497] ? __fget_files+0x28d/0x470 [ 903.010923] disk_force_media_change+0x1e/0xc0 [ 903.011410] loop_configure+0x75b/0x1950 [ 903.011853] ? putname+0xfe/0x140 [ 903.012228] lo_ioctl+0x782/0x1860 [ 903.012599] ? avc_has_extended_perms+0x7e8/0xeb0 [ 903.013122] ? loop_set_status_old+0x1b0/0x1b0 [ 903.013582] ? fsnotify+0xb4f/0x1250 [ 903.013982] ? avc_ss_reset+0x180/0x180 [ 903.014395] ? fsnotify_first_mark+0x1f0/0x1f0 [ 903.014888] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.015367] ? lock_acquire+0x41c/0x4d0 [ 903.015792] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.016269] ? lock_release+0x505/0x6f0 [ 903.016707] ? find_and_remove_object+0xe4/0x120 [ 903.017218] ? __delete_object+0xb3/0x100 [ 903.017658] ? lock_downgrade+0x6d0/0x6d0 [ 903.018096] ? rwlock_bug.part.0+0x90/0x90 [ 903.018547] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.019060] ? selinux_inode_getsecctx+0x90/0x90 [ 903.019570] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.020078] ? loop_set_status_old+0x1b0/0x1b0 [ 903.020580] blkdev_ioctl+0x362/0x7f0 [ 903.020991] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 903.021490] ? __x64_sys_ioctl+0x97/0x210 [ 903.021931] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.022511] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 903.023011] __x64_sys_ioctl+0x196/0x210 [ 903.023437] do_syscall_64+0x3b/0x90 [ 903.023835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.024384] RIP: 0033:0x7f432f5bb8d7 [ 903.024803] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.026721] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.027518] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 903.028278] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 903.029038] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 903.029765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 903.030498] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 903.031242] [ 903.032178] loop0: detected capacity change from 0 to 128 [ 903.035327] loop5: detected capacity change from 0 to 128 [ 903.038853] FAULT_INJECTION: forcing a failure. [ 903.038853] name failslab, interval 1, probability 0, space 0, times 0 [ 903.041155] CPU: 1 PID: 8180 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 903.043066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 903.045364] Call Trace: [ 903.045871] [ 903.046313] dump_stack_lvl+0x8b/0xb3 [ 903.047091] should_fail.cold+0x5/0xa [ 903.047852] ? __kernfs_new_node+0xd4/0x8b0 [ 903.048715] should_failslab+0x5/0x10 [ 903.049471] kmem_cache_alloc+0x5b/0x480 [ 903.050285] __kernfs_new_node+0xd4/0x8b0 [ 903.051102] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.052058] ? kernfs_add_one+0x3c6/0x550 [ 903.052899] ? kernfs_path_from_node+0x60/0x60 [ 903.053811] ? down_write+0xde/0x150 [ 903.054572] ? down_write+0xde/0x150 [ 903.055325] ? up_write+0x148/0x460 [ 903.056044] ? kernfs_activate+0x1c4/0x240 [ 903.056890] kernfs_new_node+0x93/0x120 [ 903.057678] __kernfs_create_file+0x51/0x350 [ 903.058557] sysfs_add_file_mode_ns+0x218/0x430 [ 903.059488] ? component_del+0x4c0/0x4c0 [ 903.060297] internal_create_group+0x322/0xb20 [ 903.061233] ? sysfs_remove_group+0x170/0x170 [ 903.062130] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 903.063123] ? __loop_update_dio+0x2a3/0x620 [ 903.063999] loop_configure+0xe87/0x1950 [ 903.064824] lo_ioctl+0x782/0x1860 [ 903.065532] ? avc_has_extended_perms+0x7e8/0xeb0 [ 903.066503] ? loop_set_status_old+0x1b0/0x1b0 [ 903.067409] ? fsnotify+0xb4f/0x1250 [ 903.068145] ? avc_ss_reset+0x180/0x180 [ 903.068976] ? fsnotify_first_mark+0x1f0/0x1f0 [ 903.069891] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.070830] ? lock_acquire+0x41c/0x4d0 [ 903.071620] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.072573] ? lock_release+0x505/0x6f0 [ 903.073363] ? find_and_remove_object+0xe4/0x120 [ 903.074318] ? __delete_object+0xb3/0x100 [ 903.075153] ? lock_downgrade+0x6d0/0x6d0 [ 903.075994] ? rwlock_bug.part.0+0x90/0x90 [ 903.076845] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.077801] ? selinux_inode_getsecctx+0x90/0x90 [ 903.078760] ? rcu_read_lock_sched_held+0xd/0x70 [ 903.079702] ? loop_set_status_old+0x1b0/0x1b0 [ 903.080618] blkdev_ioctl+0x362/0x7f0 [ 903.081372] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 903.082305] ? __x64_sys_ioctl+0x97/0x210 [ 903.083127] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 903.084236] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 903.085196] __x64_sys_ioctl+0x196/0x210 [ 903.086006] do_syscall_64+0x3b/0x90 [ 903.086751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 903.087775] RIP: 0033:0x7f22ed51d8d7 [ 903.088502] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 903.092151] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.093689] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 903.093707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.095109] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 903.095125] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 903.098864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 903.100286] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 903.101722] 08:08:26 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) sendfile(r1, r0, &(0x7f0000000000)=0x5, 0x6) lseek(r0, 0x0, 0x4) 08:08:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000001, 0x42}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 08:08:26 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x0) [ 903.117496] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 903.129403] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:26 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) [ 903.160862] ISOFS: Unable to identify CD-ROM format. 08:08:27 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r1, &(0x7f0000001140)={{0xcc, 0x7, 0x40, 0x38b, 0x322, 0x6, 0x6c, 0xeb3}, "1002fb264f46fdde9ae4dde75d579305ab42878d7d45529569041a63865ad8dc45a591277f87d7bef899185dd40ab628d0caa27e37c2ca9d30fe95da71e1ff66752a2e164a0771661f765f346578adba7e073d34251080cbcb114aee2804efffa5832d880dc612a8fe5f19be53a0aa5ca0fe4aeb23eddd6ae68291cf2e53f4bb1587dc5c8dd2d509281fbebaac9acee403c3a97d7c383761715fc06d", ['\x00', '\x00', '\x00']}, 0x3bc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = openat(r1, &(0x7f0000001500)='./file1\x00', 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x114}, {0xffffffffffffffff, 0xc}, {r6, 0x184}], 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000140)={{r0}, 0x0, 0x2, @unused=[0x1, 0x3, 0x30, 0x2], @name="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"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001540)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff}}, './file1\x00'}) openat(r7, &(0x7f0000001580)='./file0\x00', 0x80400, 0xd0) 08:08:27 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 903.216169] loop0: detected capacity change from 0 to 128 [ 903.232508] ISOFS: Unable to identify CD-ROM format. [ 903.242909] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 903.250589] loop0: detected capacity change from 0 to 128 [ 903.262476] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:08:35 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 45) 08:08:35 executing program 2: syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[], 0x10) 08:08:35 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:35 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 56) 08:08:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x18, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r2, 0x400, 0x1) openat(r2, &(0x7f0000000000)='./file1\x00', 0xa401, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006b2328f9df097fe0c317cca1fa3c427cd1aca177fb3d8f295953d398155d25ab246a66af432d45bd3775f98a2dd6dea6eb810f715fc22ae58b6f1ab78abbd6a4382e959ffaae851c4ec3d3aed75a0d8a4494427dfe8cc007b71b272526dad233a6f0fd27ddb5190e316064e51f9b031a60b79f484b1297a9e1b558c2e1f3774901000000400ccdd26a6bdcd0bbbd1b5aff94103d9ab476ea06eb00bfbdb96657ef5df48f6e5c9cfa8b9b6f6fb2d498a169aeb4f9b97211e5b66d", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="f3393a197d470d96d3945109138b5628995d08fddef78ad00a181914b1f3df6325db2be5ea8aef8cdc39501c89473c68e6a79c4461b6f141f85d6e422b754dc1f78981d7d04694b5304c3d83188521ffbbe6e83834400ad414ed6a2e6173f3bb3fe630fde412c5078da5a946c46c51b024328335d3fd99db69d3176905f69e7f2fb59ac4df695b95e86c3afddb6200a66711ddebeca70c4200dbc269b8f6a30404074c980b5d3695eece60b8397c672bd683be5a9fef814f759916a4109acb34d70886cbb6d94c097de7de300bdb1f3660"], 0x1c}}, 0x0) syncfs(r4) ioctl$RTC_UIE_ON(r3, 0x7003) lseek(r0, 0x0, 0x4) pwrite64(r0, &(0x7f0000000140)="3495fdcfc1b97bf9f58c6b8139500a18d40cd8854f25d652293ac381692a6386f01889b557818acb42cd41f342c0fb4e57a6b5849f72fa908990e97b48941f31482fbd1ac9c20a4c3ec90e39521a02ec4f6a6bff7d5034ca0cb3cb3222fa04eb4f0c52b4b8d7ccacf4d56ea240dd24e2bc55aa5af5453f3473e972", 0x7b, 0xf4e) 08:08:35 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:35 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x0) [ 912.133545] loop0: detected capacity change from 0 to 128 [ 912.138652] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 912.140569] FAULT_INJECTION: forcing a failure. [ 912.140569] name failslab, interval 1, probability 0, space 0, times 0 [ 912.141784] CPU: 1 PID: 8219 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 912.141781] loop5: detected capacity change from 0 to 128 [ 912.142831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 912.142843] Call Trace: [ 912.142848] [ 912.142852] dump_stack_lvl+0x8b/0xb3 [ 912.146084] should_fail.cold+0x5/0xa [ 912.146520] ? create_object.isra.0+0x3a/0xa20 [ 912.147035] should_failslab+0x5/0x10 [ 912.147454] kmem_cache_alloc+0x5b/0x480 [ 912.147897] create_object.isra.0+0x3a/0xa20 [ 912.148381] ? kasan_unpoison+0x23/0x50 [ 912.148841] kmem_cache_alloc+0x239/0x480 [ 912.149312] __kernfs_new_node+0xd4/0x8b0 [ 912.149767] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.150306] ? kernfs_add_one+0x3c6/0x550 [ 912.150771] ? kernfs_path_from_node+0x60/0x60 [ 912.151260] ? down_write+0xde/0x150 [ 912.151662] ? down_write+0xde/0x150 [ 912.152059] ? up_write+0x148/0x460 [ 912.152443] ? kernfs_activate+0x1c4/0x240 [ 912.152906] kernfs_new_node+0x93/0x120 [ 912.153356] __kernfs_create_file+0x51/0x350 [ 912.153858] sysfs_add_file_mode_ns+0x218/0x430 [ 912.154376] ? component_del+0x4c0/0x4c0 [ 912.154834] internal_create_group+0x322/0xb20 [ 912.155312] ? sysfs_remove_group+0x170/0x170 [ 912.155821] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 912.156387] ? __loop_update_dio+0x2a3/0x620 [ 912.156876] loop_configure+0xe87/0x1950 [ 912.157311] lo_ioctl+0x782/0x1860 [ 912.157682] ? avc_has_extended_perms+0x7e8/0xeb0 [ 912.158226] ? loop_set_status_old+0x1b0/0x1b0 [ 912.158700] ? fsnotify+0xb4f/0x1250 [ 912.159089] ? avc_ss_reset+0x180/0x180 [ 912.159541] ? fsnotify_first_mark+0x1f0/0x1f0 [ 912.160056] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.160587] ? lock_acquire+0x41c/0x4d0 [ 912.161056] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.161572] ? lock_release+0x505/0x6f0 [ 912.161995] ? find_and_remove_object+0xe4/0x120 [ 912.162489] ? __delete_object+0xb3/0x100 [ 912.162959] ? lock_downgrade+0x6d0/0x6d0 [ 912.163422] ? rwlock_bug.part.0+0x90/0x90 [ 912.163909] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.164442] ? selinux_inode_getsecctx+0x90/0x90 [ 912.164968] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.165505] ? loop_set_status_old+0x1b0/0x1b0 [ 912.166027] blkdev_ioctl+0x362/0x7f0 [ 912.166432] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.166967] ? __x64_sys_ioctl+0x97/0x210 [ 912.167435] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 912.167836] FAULT_INJECTION: forcing a failure. [ 912.167836] name failslab, interval 1, probability 0, space 0, times 0 [ 912.168052] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.170249] __x64_sys_ioctl+0x196/0x210 [ 912.170704] do_syscall_64+0x3b/0x90 [ 912.171099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 912.171669] RIP: 0033:0x7f22ed51d8d7 [ 912.172056] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.173985] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.174780] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 912.175530] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 912.176274] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 912.177031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 912.177770] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 912.178525] [ 912.178793] CPU: 0 PID: 8226 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 912.180280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 912.182007] Call Trace: [ 912.182410] [ 912.182757] dump_stack_lvl+0x8b/0xb3 [ 912.183358] should_fail.cold+0x5/0xa [ 912.184161] ? __kernfs_new_node+0xd4/0x8b0 [ 912.184850] should_failslab+0x5/0x10 [ 912.185424] kmem_cache_alloc+0x5b/0x480 [ 912.186055] __kernfs_new_node+0xd4/0x8b0 [ 912.186689] ? kernfs_path_from_node+0x60/0x60 [ 912.187390] ? selinux_sb_statfs+0x1ba/0x250 [ 912.188049] ? call_rcu+0x4da/0xa20 [ 912.188624] ? kasan_quarantine_put+0x87/0x1e0 [ 912.189336] ? trace_hardirqs_on+0x5b/0x190 [ 912.189999] ? kasan_quarantine_put+0x87/0x1e0 [ 912.190693] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 912.191515] ? shmem_statfs+0x1b3/0x3e0 [ 912.192120] kernfs_create_dir_ns+0x9c/0x220 [ 912.192822] internal_create_group+0x782/0xb20 [ 912.193528] ? sysfs_remove_group+0x170/0x170 [ 912.194202] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 912.194963] ? __loop_update_dio+0x2a3/0x620 [ 912.195649] loop_configure+0xe87/0x1950 [ 912.196283] lo_ioctl+0x782/0x1860 [ 912.196833] ? avc_has_extended_perms+0x7e8/0xeb0 [ 912.197569] ? loop_set_status_old+0x1b0/0x1b0 [ 912.198269] ? fsnotify+0xb4f/0x1250 [ 912.198826] ? avc_ss_reset+0x180/0x180 [ 912.199443] ? fsnotify_first_mark+0x1f0/0x1f0 [ 912.200119] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.200866] ? lock_acquire+0x41c/0x4d0 [ 912.201480] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.202182] ? lock_release+0x505/0x6f0 [ 912.202776] ? find_and_remove_object+0xe4/0x120 [ 912.203496] ? __delete_object+0xb3/0x100 [ 912.204120] ? lock_downgrade+0x6d0/0x6d0 [ 912.204769] ? rwlock_bug.part.0+0x90/0x90 [ 912.205412] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.206122] ? selinux_inode_getsecctx+0x90/0x90 [ 912.206847] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.207554] ? loop_set_status_old+0x1b0/0x1b0 [ 912.207831] ISOFS: Unable to identify CD-ROM format. [ 912.208253] blkdev_ioctl+0x362/0x7f0 [ 912.209370] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.210064] ? __x64_sys_ioctl+0x97/0x210 [ 912.210855] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 912.211949] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.212904] __x64_sys_ioctl+0x196/0x210 [ 912.213728] do_syscall_64+0x3b/0x90 [ 912.214350] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 912.215120] RIP: 0033:0x7f432f5bb8d7 [ 912.215680] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.218422] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.219562] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 912.220632] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 912.221729] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 912.222805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 912.223878] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 912.224967] [ 912.227437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:08:36 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:36 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 912.237877] loop0: detected capacity change from 0 to 128 [ 912.239494] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 912.244882] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 912.248946] loop5: detected capacity change from 0 to 128 [ 912.259123] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:36 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x0) 08:08:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 57) 08:08:36 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:08:36 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 912.294012] FAULT_INJECTION: forcing a failure. [ 912.294012] name failslab, interval 1, probability 0, space 0, times 0 [ 912.295323] CPU: 1 PID: 8238 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 912.296328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 912.297533] Call Trace: [ 912.297806] [ 912.298045] dump_stack_lvl+0x8b/0xb3 [ 912.298456] should_fail.cold+0x5/0xa [ 912.298861] ? __kernfs_new_node+0xd4/0x8b0 [ 912.299310] should_failslab+0x5/0x10 [ 912.299706] kmem_cache_alloc+0x5b/0x480 [ 912.300142] __kernfs_new_node+0xd4/0x8b0 [ 912.300574] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.301085] ? kernfs_add_one+0x3c6/0x550 [ 912.301520] ? kernfs_path_from_node+0x60/0x60 [ 912.302008] ? down_write+0xde/0x150 [ 912.302410] ? down_write+0xde/0x150 [ 912.302806] ? up_write+0x148/0x460 [ 912.303190] ? kernfs_activate+0x1c4/0x240 [ 912.303629] kernfs_new_node+0x93/0x120 [ 912.304046] __kernfs_create_file+0x51/0x350 [ 912.304519] sysfs_add_file_mode_ns+0x218/0x430 [ 912.305014] ? component_del+0x4c0/0x4c0 [ 912.305450] internal_create_group+0x322/0xb20 [ 912.305928] ? sysfs_remove_group+0x170/0x170 [ 912.306404] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 912.306945] ? __loop_update_dio+0x2a3/0x620 [ 912.307413] loop_configure+0xe87/0x1950 [ 912.307860] lo_ioctl+0x782/0x1860 [ 912.308239] ? avc_has_extended_perms+0x7e8/0xeb0 [ 912.308762] ? loop_set_status_old+0x1b0/0x1b0 [ 912.309241] ? fsnotify+0xb4f/0x1250 [ 912.309639] ? avc_ss_reset+0x180/0x180 [ 912.310067] ? fsnotify_first_mark+0x1f0/0x1f0 [ 912.310545] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.311051] ? lock_acquire+0x41c/0x4d0 [ 912.311464] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.311972] ? lock_release+0x505/0x6f0 [ 912.312395] ? find_and_remove_object+0xe4/0x120 [ 912.312905] ? __delete_object+0xb3/0x100 [ 912.313342] ? lock_downgrade+0x6d0/0x6d0 [ 912.313776] ? rwlock_bug.part.0+0x90/0x90 [ 912.314219] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.314715] ? selinux_inode_getsecctx+0x90/0x90 [ 912.315215] ? rcu_read_lock_sched_held+0xd/0x70 [ 912.315716] ? loop_set_status_old+0x1b0/0x1b0 [ 912.316191] blkdev_ioctl+0x362/0x7f0 [ 912.316591] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.317088] ? __x64_sys_ioctl+0x97/0x210 [ 912.317521] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 912.318100] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 912.318592] __x64_sys_ioctl+0x196/0x210 [ 912.319016] do_syscall_64+0x3b/0x90 [ 912.319416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 912.319961] RIP: 0033:0x7f22ed51d8d7 [ 912.320350] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.322314] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.323099] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 912.323851] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 912.324605] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 912.325344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 912.326078] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 912.326831] 08:08:36 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:36 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 912.346783] loop5: detected capacity change from 0 to 128 [ 912.363225] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 912.372326] loop5: detected capacity change from 0 to 128 [ 912.378732] ISOFS: Unable to identify CD-ROM format. [ 912.388398] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 912.403597] ISOFS: Unable to identify CD-ROM format. 08:08:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 46) 08:08:46 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 922.690649] FAULT_INJECTION: forcing a failure. [ 922.690649] name failslab, interval 1, probability 0, space 0, times 0 [ 922.693795] CPU: 1 PID: 8257 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 922.695893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 922.698387] Call Trace: [ 922.698943] 08:08:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 58) 08:08:46 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:46 executing program 2: syz_80211_inject_frame(0x0, &(0x7f0000000240)=ANY=[], 0x10) 08:08:46 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 922.699428] dump_stack_lvl+0x8b/0xb3 [ 922.700453] should_fail.cold+0x5/0xa [ 922.701296] ? __kernfs_new_node+0xd4/0x8b0 [ 922.702235] should_failslab+0x5/0x10 [ 922.703061] kmem_cache_alloc+0x5b/0x480 [ 922.703955] __kernfs_new_node+0xd4/0x8b0 [ 922.704844] ? kernfs_path_from_node+0x60/0x60 [ 922.705830] ? selinux_sb_statfs+0x1ba/0x250 [ 922.706786] ? call_rcu+0x4da/0xa20 [ 922.707585] ? kasan_quarantine_put+0x87/0x1e0 [ 922.708582] ? trace_hardirqs_on+0x5b/0x190 [ 922.709541] ? kasan_quarantine_put+0x87/0x1e0 [ 922.710541] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 08:08:46 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x0) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 922.711739] ? shmem_statfs+0x1b3/0x3e0 [ 922.712710] kernfs_create_dir_ns+0x9c/0x220 [ 922.713675] internal_create_group+0x782/0xb20 [ 922.714658] ? sysfs_remove_group+0x170/0x170 [ 922.715634] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 922.716700] ? __loop_update_dio+0x2a3/0x620 [ 922.717656] loop_configure+0xe87/0x1950 [ 922.718533] lo_ioctl+0x782/0x1860 [ 922.719290] ? avc_has_extended_perms+0x7e8/0xeb0 [ 922.720332] ? loop_set_status_old+0x1b0/0x1b0 [ 922.721320] ? fsnotify+0xb4f/0x1250 [ 922.722118] ? avc_ss_reset+0x180/0x180 [ 922.722976] ? fsnotify_first_mark+0x1f0/0x1f0 [ 922.723938] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.724965] ? lock_acquire+0x41c/0x4d0 [ 922.725822] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.726818] ? lock_release+0x505/0x6f0 [ 922.727651] ? find_and_remove_object+0xe4/0x120 [ 922.728678] ? __delete_object+0xb3/0x100 [ 922.729586] ? lock_downgrade+0x6d0/0x6d0 [ 922.730465] ? rwlock_bug.part.0+0x90/0x90 [ 922.731361] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.732380] ? selinux_inode_getsecctx+0x90/0x90 [ 922.733407] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.734406] ? loop_set_status_old+0x1b0/0x1b0 [ 922.735372] blkdev_ioctl+0x362/0x7f0 [ 922.736169] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 922.737175] ? __x64_sys_ioctl+0x97/0x210 [ 922.738059] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 922.739216] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 922.740177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.740220] __x64_sys_ioctl+0x196/0x210 [ 922.741779] loop0: detected capacity change from 0 to 128 [ 922.742032] do_syscall_64+0x3b/0x90 [ 922.743377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 922.744456] RIP: 0033:0x7f432f5bb8d7 [ 922.745243] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.745275] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 922.749101] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 922.749128] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 922.752972] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 922.754464] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 922.755958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 922.757477] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 922.759002] [ 922.760930] FAULT_INJECTION: forcing a failure. [ 922.760930] name failslab, interval 1, probability 0, space 0, times 0 [ 922.763299] CPU: 1 PID: 8267 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 922.765347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 922.767761] Call Trace: [ 922.768304] [ 922.768778] dump_stack_lvl+0x8b/0xb3 [ 922.769603] should_fail.cold+0x5/0xa [ 922.770424] ? create_object.isra.0+0x3a/0xa20 [ 922.771406] should_failslab+0x5/0x10 [ 922.772007] ISOFS: Unable to identify CD-ROM format. [ 922.772214] kmem_cache_alloc+0x5b/0x480 [ 922.773616] create_object.isra.0+0x3a/0xa20 [ 922.774546] ? kasan_unpoison+0x23/0x50 [ 922.775414] kmem_cache_alloc+0x239/0x480 08:08:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 922.776286] __kernfs_new_node+0xd4/0x8b0 [ 922.777341] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.778355] ? kernfs_add_one+0x3c6/0x550 [ 922.779236] ? kernfs_path_from_node+0x60/0x60 [ 922.780200] ? down_write+0xde/0x150 [ 922.781025] ? down_write+0xde/0x150 [ 922.781816] ? up_write+0x148/0x460 [ 922.782590] ? kernfs_activate+0x1c4/0x240 [ 922.783546] kernfs_new_node+0x93/0x120 [ 922.784391] __kernfs_create_file+0x51/0x350 [ 922.785330] sysfs_add_file_mode_ns+0x218/0x430 [ 922.786311] ? component_del+0x4c0/0x4c0 [ 922.787159] internal_create_group+0x322/0xb20 [ 922.788124] ? sysfs_remove_group+0x170/0x170 [ 922.789075] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 922.790127] ? __loop_update_dio+0x2a3/0x620 [ 922.791071] loop_configure+0xe87/0x1950 [ 922.791953] lo_ioctl+0x782/0x1860 [ 922.792714] ? avc_has_extended_perms+0x7e8/0xeb0 [ 922.793777] ? loop_set_status_old+0x1b0/0x1b0 [ 922.794749] ? fsnotify+0xb4f/0x1250 [ 922.795533] ? avc_ss_reset+0x180/0x180 [ 922.796382] ? fsnotify_first_mark+0x1f0/0x1f0 [ 922.797351] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.798344] ? lock_acquire+0x41c/0x4d0 [ 922.799172] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.800157] ? lock_release+0x505/0x6f0 [ 922.800999] ? find_and_remove_object+0xe4/0x120 [ 922.802003] ? __delete_object+0xb3/0x100 [ 922.802891] ? lock_downgrade+0x6d0/0x6d0 [ 922.803769] ? rwlock_bug.part.0+0x90/0x90 [ 922.804649] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.805680] ? selinux_inode_getsecctx+0x90/0x90 [ 922.806703] ? rcu_read_lock_sched_held+0xd/0x70 [ 922.807704] ? loop_set_status_old+0x1b0/0x1b0 [ 922.808661] blkdev_ioctl+0x362/0x7f0 [ 922.809466] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 922.810473] ? __x64_sys_ioctl+0x97/0x210 [ 922.811349] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 922.812501] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 922.813512] __x64_sys_ioctl+0x196/0x210 [ 922.814360] do_syscall_64+0x3b/0x90 [ 922.815151] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 922.816224] RIP: 0033:0x7f22ed51d8d7 [ 922.817021] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 922.820890] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 922.822463] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 922.823941] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 922.825444] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 922.826964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 922.828473] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 922.830004] [ 922.850683] loop5: detected capacity change from 0 to 128 [ 922.870859] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 922.879334] loop5: detected capacity change from 0 to 128 [ 922.900290] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 922.902427] ISOFS: Unable to identify CD-ROM format. 08:08:46 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x20, 0xff, 0x9, 0x9, 0xfffffff8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x10, 0x0, 0x2) lseek(r0, 0x0, 0x4) 08:08:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:46 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:46 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 922.963895] loop5: detected capacity change from 0 to 128 [ 922.982497] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 922.991875] loop5: detected capacity change from 0 to 128 [ 922.997724] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:08:57 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:57 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 47) 08:08:57 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), 0x0, 0x10) [ 933.414913] FAULT_INJECTION: forcing a failure. [ 933.414913] name failslab, interval 1, probability 0, space 0, times 0 [ 933.417400] CPU: 0 PID: 8300 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 933.419428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 933.421895] Call Trace: [ 933.422457] [ 933.422940] dump_stack_lvl+0x8b/0xb3 [ 933.423781] should_fail.cold+0x5/0xa [ 933.424616] ? lock_release+0x505/0x6f0 [ 933.425481] ? radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 933.426730] should_failslab+0x5/0x10 [ 933.427534] kmem_cache_alloc+0x5b/0x480 [ 933.427872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.428412] radix_tree_node_alloc.constprop.0+0x1df/0x330 [ 933.431624] idr_get_free+0x4b5/0x8f0 [ 933.432453] idr_alloc_u32+0x170/0x2d0 [ 933.433320] ? __fprop_add_percpu_max+0x1a0/0x1a0 [ 933.434359] ? lock_release+0x505/0x6f0 [ 933.435219] ? stack_trace_save+0x8c/0xc0 [ 933.436124] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.437153] ? lock_acquire+0x41c/0x4d0 [ 933.438026] idr_alloc_cyclic+0x102/0x230 [ 933.438924] ? idr_alloc+0x130/0x130 [ 933.439730] ? rwlock_bug.part.0+0x90/0x90 [ 933.440652] __kernfs_new_node+0x117/0x8b0 [ 933.441577] ? kernfs_path_from_node+0x60/0x60 [ 933.442556] ? selinux_sb_statfs+0x1ba/0x250 [ 933.443512] ? call_rcu+0x4da/0xa20 [ 933.444305] ? kasan_quarantine_put+0x87/0x1e0 [ 933.445320] ? trace_hardirqs_on+0x5b/0x190 [ 933.446256] ? kasan_quarantine_put+0x87/0x1e0 [ 933.447246] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 933.448434] ? shmem_statfs+0x1b3/0x3e0 [ 933.449321] kernfs_create_dir_ns+0x9c/0x220 [ 933.450271] internal_create_group+0x782/0xb20 [ 933.451264] ? sysfs_remove_group+0x170/0x170 [ 933.452237] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 933.453323] ? __loop_update_dio+0x2a3/0x620 [ 933.454277] loop_configure+0xe87/0x1950 [ 933.455158] lo_ioctl+0x782/0x1860 [ 933.455926] ? avc_has_extended_perms+0x7e8/0xeb0 [ 933.456975] ? loop_set_status_old+0x1b0/0x1b0 [ 933.457982] ? fsnotify+0xb4f/0x1250 [ 933.458784] ? avc_ss_reset+0x180/0x180 [ 933.459648] ? fsnotify_first_mark+0x1f0/0x1f0 [ 933.460634] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.461667] ? lock_acquire+0x41c/0x4d0 [ 933.462532] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.463546] ? lock_release+0x505/0x6f0 08:08:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:57 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:08:57 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 59) 08:08:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) [ 933.464404] ? find_and_remove_object+0xe4/0x120 [ 933.465646] ? __delete_object+0xb3/0x100 [ 933.466561] ? lock_downgrade+0x6d0/0x6d0 [ 933.467457] ? rwlock_bug.part.0+0x90/0x90 [ 933.468381] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.469432] ? selinux_inode_getsecctx+0x90/0x90 [ 933.470471] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.471497] ? loop_set_status_old+0x1b0/0x1b0 [ 933.472496] blkdev_ioctl+0x362/0x7f0 [ 933.473323] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 933.474349] ? __x64_sys_ioctl+0x97/0x210 [ 933.475241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 933.476430] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 933.477466] __x64_sys_ioctl+0x196/0x210 [ 933.478346] do_syscall_64+0x3b/0x90 [ 933.479159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 933.480259] RIP: 0033:0x7f432f5bb8d7 [ 933.481071] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.485035] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.486669] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 933.488196] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 933.489753] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 933.491283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 933.492810] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 933.494362] [ 933.496391] loop0: detected capacity change from 0 to 128 [ 933.520493] FAULT_INJECTION: forcing a failure. [ 933.520493] name failslab, interval 1, probability 0, space 0, times 0 [ 933.522983] CPU: 1 PID: 8311 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 933.523316] loop5: detected capacity change from 0 to 128 [ 933.524988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 933.525008] Call Trace: [ 933.529169] [ 933.529639] dump_stack_lvl+0x8b/0xb3 [ 933.530457] should_fail.cold+0x5/0xa [ 933.531274] ? kobject_uevent_env+0x236/0xfa0 [ 933.532233] should_failslab+0x5/0x10 [ 933.533047] kmem_cache_alloc_trace+0x55/0x3c0 [ 933.534020] ? _raw_spin_unlock+0x24/0x40 [ 933.534908] kobject_uevent_env+0x236/0xfa0 [ 933.535827] ? dev_uevent_filter+0xd0/0xd0 [ 933.536725] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 933.537802] ? __loop_update_dio+0x2a3/0x620 [ 933.538726] loop_configure+0x14e8/0x1950 [ 933.539606] lo_ioctl+0x782/0x1860 [ 933.540344] ? avc_has_extended_perms+0x7e8/0xeb0 [ 933.541373] ? loop_set_status_old+0x1b0/0x1b0 [ 933.542320] ? fsnotify+0xb4f/0x1250 [ 933.543094] ? avc_ss_reset+0x180/0x180 [ 933.543927] ? fsnotify_first_mark+0x1f0/0x1f0 [ 933.544878] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.545881] ? lock_acquire+0x41c/0x4d0 [ 933.546708] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.547701] ? lock_release+0x505/0x6f0 [ 933.548518] ? find_and_remove_object+0xe4/0x120 [ 933.549519] ? __delete_object+0xb3/0x100 [ 933.550389] ? lock_downgrade+0x6d0/0x6d0 [ 933.551252] ? rwlock_bug.part.0+0x90/0x90 [ 933.552131] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.553129] ? selinux_inode_getsecctx+0x90/0x90 [ 933.553949] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 933.554106] ? rcu_read_lock_sched_held+0xd/0x70 [ 933.556589] ? loop_set_status_old+0x1b0/0x1b0 [ 933.556883] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:08:57 executing program 6: shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 933.557550] blkdev_ioctl+0x362/0x7f0 08:08:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 933.560021] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 933.561103] ? __x64_sys_ioctl+0x97/0x210 [ 933.561962] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 933.563089] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 933.564066] __x64_sys_ioctl+0x196/0x210 [ 933.564899] do_syscall_64+0x3b/0x90 [ 933.565699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 933.566746] RIP: 0033:0x7f22ed51d8d7 [ 933.567500] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.571310] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 933.572853] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 933.574312] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 933.575762] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 933.577222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 933.578658] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 933.580094] [ 933.601393] loop0: detected capacity change from 0 to 128 [ 933.603197] loop5: detected capacity change from 0 to 128 [ 933.605142] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 933.607558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.627870] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 933.629775] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 933.645919] ISOFS: Unable to identify CD-ROM format. 08:08:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="2aad8c647dbedc27cc2c3c8b3ef723168d5c5a73c55ecc871321ab710385a02ed9eb96f0b23766d645055549b975d5a7adb3ff3a5ea82ce6085bc6e1427ffb4351d331dbca6835cdca742f333320c02362e221f8e32fa64e2d413deb52200d188c9d8c297a158a8b4f973c60aeb4d786cac8533b4bb8232dfe6708af735b96408192eda73f679f99919b97f426450e9e1175b3651a5d90df34edf5b98bee3e44d330182b1f1f178a3564232b00"/182], 0x1c}}, 0x0) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="28368fc28913cb7dafc8cd21b0e894d9bafc4065c8", 0x15}, {&(0x7f0000000040)="fa233980be18d58fa708f15bc583f2dd34392c14915150b184c17cc1b2fd4cb9c2752853c3a7f29fcdebf2d6b1205cdedc076c8eb53f4adb4813d55f2872a5045b5cc3bf90b81f9c8ec03eeaffcf9a14128ec26ec303905d56f9e78e4076bc8f2d5b64d18df688eeef", 0x69}, {&(0x7f0000000140)="ea992ffb7617a05f672e392963de99a5d226ac1d718a264a46f444759638a1083d9930deeddd9eb00ddc882dd1c9963bc49461c0b5cb74b35cabed09069ed4603d02afb57bdd9b80f123b7bce6214d066b0ffa4673a5b9ff4d98f31eb98c7d1f990bab2bb71ff5cdd489bfbd335de8f920710b86a563192410966fb12c108ce7724b9b102fb1e2af11ecde27a3a6e0acf9a710eb4de6ad2ba1e435b2719164f80559599fe5f713fbf8f8262797b7a3ad6292fe2008f5989fd804462239421feba35818c6cd07c4e55c73690384fc444d", 0xd0}, {&(0x7f00000000c0)="bbd8cdce7b34facfe244bcc97dfb6836ef7e4ac78d6b2b3fe9bc6b3b00eacc79b3dbf4b68adc098f7d84b5578c9665f07219118ce70efcf5e958a35906541d67", 0x40}], 0x4, &(0x7f0000000280)=[{0x60, 0x101, 0x4, "036eadfa12d3a752462d4f638979d5cc1e5e6341f24a051db49e2d896dfef0038c104a1229d11fd0cb71d44002b8c97458bb73daf738c3cdd4923e2e09ec33c8f793e0b8681fabefd379"}, {0x98, 0x111, 0xd3, "5373df516360df0473959a57ec0bca494ebb669b58021644ddd489e5793227f2a981f9e5d7c148aa8b4376eeb3bd4740ee50edfc3790b9069a91cbe2b01309f2f5f9d63844bb5efeb1ad224dbad61974e0617f624f300f94640934deb0ed28abf54c278989923a14bfce60d696ef84a6ee7e64c8d489df8422925afbd13113b8cb85a540bae7f2ae"}, {0x58, 0x101, 0x6, "db2cbb143f00760989e31eb2e841654f8e019cc3d54b7a0b27b1fc43e02ee649623743ac4c9303e6bda8730857d593380a66c9dd23c864d59bb87275cfb4b9c92045fc8482548c"}, {0xd8, 0x102, 0x9, "5360c462e188b40d88b7e9f197972bfb0dbca20da29206efa4b052438f6af1e318ef2904e064790d4f40f76cc5396050677f342976403829fc18a1d63efcab6753a45ea0eaa51ad7389af50fc3739ba5b0a1bde296b0f7527034276201403be8e01bf01d3725349d770d6732fec0c98395f5781846f8d11e2dd45f3a3298f0f7ee137c409b7cd654d0efe09f0a5a063905b02c381bc1b87571c2e4d631d19063997b451a437c27ebb39ab72826b3c37dcc67529e965b289381fdb2a486a7e14c214ff5565fec1a"}], 0x228}, 0x4c8d4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r8, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ad}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ee}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x57432758}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x16f3}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x91}, 0x400c815) fallocate(r4, 0x10, 0x0, 0x2) lseek(r3, 0x0, 0x4) 08:08:57 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:08:57 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 933.725183] ISOFS: Unable to identify CD-ROM format. [ 933.740024] loop5: detected capacity change from 0 to 128 [ 933.749261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 933.772325] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 933.805625] loop5: detected capacity change from 0 to 128 [ 933.822173] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 941.465658] Bluetooth: hci6: command 0x0406 tx timeout 08:09:08 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:08 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:08 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 48) 08:09:08 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:08 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 60) 08:09:08 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:08 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), 0x0, 0x10) [ 945.024286] FAULT_INJECTION: forcing a failure. [ 945.024286] name failslab, interval 1, probability 0, space 0, times 0 [ 945.025514] CPU: 1 PID: 8338 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 945.026525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 945.027629] Call Trace: [ 945.027897] [ 945.028123] dump_stack_lvl+0x8b/0xb3 [ 945.028537] should_fail.cold+0x5/0xa [ 945.028953] ? create_object.isra.0+0x3a/0xa20 [ 945.029460] should_failslab+0x5/0x10 [ 945.029861] kmem_cache_alloc+0x5b/0x480 [ 945.030301] create_object.isra.0+0x3a/0xa20 [ 945.030770] ? kasan_unpoison+0x23/0x50 [ 945.031197] kmem_cache_alloc+0x239/0x480 [ 945.031609] __kernfs_new_node+0xd4/0x8b0 [ 945.032062] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.032560] ? kernfs_add_one+0x3c6/0x550 [ 945.032976] ? kernfs_path_from_node+0x60/0x60 [ 945.033442] ? down_write+0xde/0x150 [ 945.033813] ? down_write+0xde/0x150 [ 945.034154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.034182] ? up_write+0x148/0x460 [ 945.036535] ? kernfs_activate+0x1c4/0x240 [ 945.036954] kernfs_new_node+0x93/0x120 [ 945.037397] __kernfs_create_file+0x51/0x350 [ 945.037832] sysfs_add_file_mode_ns+0x218/0x430 [ 945.038288] ? component_del+0x4c0/0x4c0 [ 945.038687] internal_create_group+0x322/0xb20 [ 945.039183] ? sysfs_remove_group+0x170/0x170 [ 945.039625] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 945.040120] ? __loop_update_dio+0x2a3/0x620 [ 945.040200] FAULT_INJECTION: forcing a failure. [ 945.040200] name failslab, interval 1, probability 0, space 0, times 0 [ 945.040553] loop_configure+0xe87/0x1950 [ 945.043379] lo_ioctl+0x782/0x1860 [ 945.043752] ? avc_has_extended_perms+0x7e8/0xeb0 [ 945.044250] ? loop_set_status_old+0x1b0/0x1b0 [ 945.044719] ? fsnotify+0xb4f/0x1250 [ 945.045100] ? avc_ss_reset+0x180/0x180 [ 945.045520] ? fsnotify_first_mark+0x1f0/0x1f0 [ 945.045980] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.046455] ? lock_acquire+0x41c/0x4d0 [ 945.046864] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.047378] ? lock_release+0x505/0x6f0 [ 945.047789] ? find_and_remove_object+0xe4/0x120 [ 945.048273] ? __delete_object+0xb3/0x100 [ 945.048708] ? lock_downgrade+0x6d0/0x6d0 [ 945.049138] ? rwlock_bug.part.0+0x90/0x90 [ 945.049583] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.050071] ? selinux_inode_getsecctx+0x90/0x90 [ 945.050556] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.051037] ? loop_set_status_old+0x1b0/0x1b0 [ 945.051510] blkdev_ioctl+0x362/0x7f0 [ 945.051932] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 945.052410] ? __x64_sys_ioctl+0x97/0x210 [ 945.052835] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 945.053449] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 945.053926] __x64_sys_ioctl+0x196/0x210 [ 945.054340] do_syscall_64+0x3b/0x90 [ 945.054726] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 945.055250] RIP: 0033:0x7f22ed51d8d7 [ 945.055669] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.057532] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.058354] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 945.059116] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 945.059869] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 945.060628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 945.061394] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 945.062160] [ 945.062407] CPU: 0 PID: 8343 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 945.064497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 945.066974] Call Trace: [ 945.067531] [ 945.068016] dump_stack_lvl+0x8b/0xb3 [ 945.068865] should_fail.cold+0x5/0xa [ 945.069717] ? create_object.isra.0+0x3a/0xa20 [ 945.070721] should_failslab+0x5/0x10 [ 945.071566] kmem_cache_alloc+0x5b/0x480 [ 945.072479] create_object.isra.0+0x3a/0xa20 [ 945.073483] ? kasan_unpoison+0x23/0x50 [ 945.074388] kmem_cache_alloc+0x239/0x480 [ 945.075322] __kernfs_new_node+0xd4/0x8b0 [ 945.076243] ? lock_acquire+0x41c/0x4d0 [ 945.077132] ? kernfs_path_from_node+0x60/0x60 [ 945.078153] ? lock_release+0x505/0x6f0 [ 945.079047] ? kernfs_add_one+0x3c6/0x550 [ 945.079975] ? lock_downgrade+0x6d0/0x6d0 [ 945.080909] ? down_write+0xde/0x150 [ 945.081766] ? down_write_killable_nested+0x180/0x180 [ 945.082933] ? down_write+0xde/0x150 [ 945.083778] kernfs_new_node+0x93/0x120 [ 945.084672] __kernfs_create_file+0x51/0x350 [ 945.085669] sysfs_add_file_mode_ns+0x218/0x430 [ 945.086711] ? component_del+0x4c0/0x4c0 [ 945.087619] internal_create_group+0x322/0xb20 [ 945.088645] ? sysfs_remove_group+0x170/0x170 [ 945.089658] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 945.090775] ? __loop_update_dio+0x2a3/0x620 [ 945.091761] loop_configure+0xe87/0x1950 [ 945.092678] lo_ioctl+0x782/0x1860 [ 945.093495] ? avc_has_extended_perms+0x7e8/0xeb0 [ 945.094571] ? loop_set_status_old+0x1b0/0x1b0 [ 945.095583] ? fsnotify+0xb4f/0x1250 [ 945.096404] ? avc_ss_reset+0x180/0x180 [ 945.097297] ? fsnotify_first_mark+0x1f0/0x1f0 [ 945.098302] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.099343] ? lock_acquire+0x41c/0x4d0 [ 945.100222] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.101270] ? lock_release+0x505/0x6f0 [ 945.102146] ? find_and_remove_object+0xe4/0x120 [ 945.103195] ? __delete_object+0xb3/0x100 [ 945.104117] ? lock_downgrade+0x6d0/0x6d0 [ 945.105031] ? rwlock_bug.part.0+0x90/0x90 [ 945.105983] ? rcu_read_lock_sched_held+0xd/0x70 [ 945.107041] ? selinux_inode_getsecctx+0x90/0x90 [ 945.108092] ? loop_set_status_old+0x1b0/0x1b0 [ 945.109101] blkdev_ioctl+0x362/0x7f0 [ 945.109945] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 945.110983] ? __x64_sys_ioctl+0x97/0x210 [ 945.111895] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 945.113106] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 945.114164] __x64_sys_ioctl+0x196/0x210 [ 945.115060] do_syscall_64+0x3b/0x90 [ 945.115882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 945.117006] RIP: 0033:0x7f432f5bb8d7 [ 945.117820] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 945.121828] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.123470] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 945.125021] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 945.126598] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 945.128139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 945.129692] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 945.131245] [ 945.141873] loop5: detected capacity change from 0 to 128 [ 945.158463] ISOFS: Unable to identify CD-ROM format. [ 945.159292] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 945.170021] ISOFS: Unable to identify CD-ROM format. 08:09:18 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), 0x0, 0x10) 08:09:18 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 49) [ 954.723835] loop1: detected capacity change from 0 to 128 [ 954.731343] FAULT_INJECTION: forcing a failure. [ 954.731343] name failslab, interval 1, probability 0, space 0, times 0 [ 954.732574] CPU: 1 PID: 8360 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 954.732888] loop5: detected capacity change from 0 to 128 [ 954.733619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 954.733630] Call Trace: [ 954.733635] [ 954.733639] dump_stack_lvl+0x8b/0xb3 [ 954.736871] should_fail.cold+0x5/0xa [ 954.737275] ? __kernfs_new_node+0xd4/0x8b0 [ 954.737736] should_failslab+0x5/0x10 [ 954.738141] kmem_cache_alloc+0x5b/0x480 [ 954.738568] __kernfs_new_node+0xd4/0x8b0 [ 954.739008] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.739514] ? kernfs_add_one+0x3c6/0x550 [ 954.739959] ? kernfs_path_from_node+0x60/0x60 [ 954.740457] ? down_write+0xde/0x150 [ 954.740860] ? down_write+0xde/0x150 [ 954.741258] ? up_write+0x148/0x460 [ 954.741660] ? kernfs_activate+0x1c4/0x240 [ 954.742106] kernfs_new_node+0x93/0x120 [ 954.742536] __kernfs_create_file+0x51/0x350 [ 954.743006] sysfs_add_file_mode_ns+0x218/0x430 [ 954.743500] ? component_del+0x4c0/0x4c0 [ 954.743941] internal_create_group+0x322/0xb20 [ 954.744437] ? sysfs_remove_group+0x170/0x170 [ 954.744919] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 954.745175] loop0: detected capacity change from 0 to 128 [ 954.745452] ? __loop_update_dio+0x2a3/0x620 [ 954.747024] loop_configure+0xe87/0x1950 [ 954.747455] lo_ioctl+0x782/0x1860 [ 954.747839] ? avc_has_extended_perms+0x7e8/0xeb0 [ 954.748370] ? loop_set_status_old+0x1b0/0x1b0 [ 954.748859] ? fsnotify+0xb4f/0x1250 [ 954.749257] ? avc_ss_reset+0x180/0x180 [ 954.749722] ? fsnotify_first_mark+0x1f0/0x1f0 [ 954.750205] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.750434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.750724] ? lock_acquire+0x41c/0x4d0 [ 954.750739] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.753430] ? lock_release+0x505/0x6f0 [ 954.753855] ? find_and_remove_object+0xe4/0x120 08:09:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:18 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:18 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:18 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 61) [ 954.754364] ? __delete_object+0xb3/0x100 [ 954.755057] ? lock_downgrade+0x6d0/0x6d0 [ 954.755502] ? rwlock_bug.part.0+0x90/0x90 [ 954.755971] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.756493] ? selinux_inode_getsecctx+0x90/0x90 [ 954.757020] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.757536] ? loop_set_status_old+0x1b0/0x1b0 [ 954.758024] blkdev_ioctl+0x362/0x7f0 [ 954.758433] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 954.758932] ? __x64_sys_ioctl+0x97/0x210 [ 954.759370] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 954.759955] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 954.760461] __x64_sys_ioctl+0x196/0x210 [ 954.760897] do_syscall_64+0x3b/0x90 [ 954.761298] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 954.761851] RIP: 0033:0x7f432f5bb8d7 [ 954.762246] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.764225] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.765054] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 954.765829] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 954.766606] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 954.767381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 954.768150] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 954.768930] [ 954.770288] FAULT_INJECTION: forcing a failure. [ 954.770288] name failslab, interval 1, probability 0, space 0, times 0 [ 954.771526] CPU: 1 PID: 8364 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 954.772566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 954.773812] Call Trace: [ 954.774088] [ 954.774335] dump_stack_lvl+0x8b/0xb3 [ 954.774761] should_fail.cold+0x5/0xa [ 954.775180] ? kobject_get_path+0xc0/0x1d0 [ 954.775649] should_failslab+0x5/0x10 [ 954.776062] __kmalloc+0x72/0x440 [ 954.776440] kobject_get_path+0xc0/0x1d0 [ 954.776890] kobject_uevent_env+0x25c/0xfa0 [ 954.777374] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 954.777920] ? __loop_update_dio+0x2a3/0x620 [ 954.778397] loop_configure+0x14e8/0x1950 [ 954.778868] lo_ioctl+0x782/0x1860 [ 954.779263] ? avc_has_extended_perms+0x7e8/0xeb0 [ 954.779800] ? loop_set_status_old+0x1b0/0x1b0 [ 954.780298] ? fsnotify+0xb4f/0x1250 [ 954.780713] ? avc_ss_reset+0x180/0x180 [ 954.781148] ? fsnotify_first_mark+0x1f0/0x1f0 [ 954.781660] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.782173] ? lock_acquire+0x41c/0x4d0 [ 954.782607] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.783129] ? lock_release+0x505/0x6f0 [ 954.783547] ? find_and_remove_object+0xe4/0x120 [ 954.784069] ? __delete_object+0xb3/0x100 [ 954.784522] ? lock_downgrade+0x6d0/0x6d0 [ 954.784979] ? rwlock_bug.part.0+0x90/0x90 [ 954.785451] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.785976] ? selinux_inode_getsecctx+0x90/0x90 [ 954.786496] ? rcu_read_lock_sched_held+0xd/0x70 [ 954.787023] ? loop_set_status_old+0x1b0/0x1b0 [ 954.787584] blkdev_ioctl+0x362/0x7f0 [ 954.788165] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 954.788687] ? __x64_sys_ioctl+0x97/0x210 [ 954.789123] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 954.789740] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 954.790250] __x64_sys_ioctl+0x196/0x210 [ 954.790777] do_syscall_64+0x3b/0x90 [ 954.791251] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 954.791799] RIP: 0033:0x7f22ed51d8d7 [ 954.792255] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.794524] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 954.794850] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 954.795363] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 954.797677] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 954.798444] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 954.799220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 954.799982] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 954.800750] [ 954.806510] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 954.812551] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64 [ 954.824357] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 954.832284] loop0: detected capacity change from 0 to 128 [ 954.840951] loop5: detected capacity change from 0 to 128 [ 954.846781] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 954.861999] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:09:18 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(0x0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:18 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001100)={&(0x7f0000000fc0), 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="01000000000000000000070000000a0004007770616e330000000c0006000000000000000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x2, 0x200, 0x7fff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll={{}, @default, @initial, @broadcast}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 08:09:18 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:18 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 954.990378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.003301] ISOFS: Unable to identify CD-ROM format. [ 955.004639] ISOFS: Unable to identify CD-ROM format. [ 955.018346] loop0: detected capacity change from 0 to 128 [ 955.024365] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:09:18 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 955.029486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.034706] loop0: detected capacity change from 0 to 128 [ 955.037280] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:09:29 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:29 executing program 6: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 50) 08:09:29 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 965.807462] FAULT_INJECTION: forcing a failure. [ 965.807462] name failslab, interval 1, probability 0, space 0, times 0 [ 965.809849] CPU: 1 PID: 8393 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 965.811822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 965.812783] FAULT_INJECTION: forcing a failure. [ 965.812783] name failslab, interval 1, probability 0, space 0, times 0 [ 965.814155] Call Trace: [ 965.814165] [ 965.814174] dump_stack_lvl+0x8b/0xb3 [ 965.817926] should_fail.cold+0x5/0xa [ 965.818683] ? create_object.isra.0+0x3a/0xa20 [ 965.819592] should_failslab+0x5/0x10 [ 965.820336] kmem_cache_alloc+0x5b/0x480 [ 965.821153] create_object.isra.0+0x3a/0xa20 [ 965.822066] ? kasan_unpoison+0x23/0x50 [ 965.822875] kmem_cache_alloc+0x239/0x480 [ 965.823703] __kernfs_new_node+0xd4/0x8b0 [ 965.824532] ? lock_acquire+0x41c/0x4d0 [ 965.825329] ? kernfs_path_from_node+0x60/0x60 [ 965.826238] ? lock_release+0x505/0x6f0 [ 965.827031] ? kernfs_add_one+0x3c6/0x550 [ 965.827865] ? lock_downgrade+0x6d0/0x6d0 [ 965.828714] ? down_write+0xde/0x150 [ 965.829469] ? down_write_killable_nested+0x180/0x180 [ 965.830759] ? down_write+0xde/0x150 [ 965.831561] kernfs_new_node+0x93/0x120 [ 965.832352] __kernfs_create_file+0x51/0x350 [ 965.833233] sysfs_add_file_mode_ns+0x218/0x430 [ 965.834173] ? component_del+0x4c0/0x4c0 [ 965.834985] internal_create_group+0x322/0xb20 [ 965.835903] ? sysfs_remove_group+0x170/0x170 [ 965.836796] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 965.837819] ? __loop_update_dio+0x2a3/0x620 [ 965.838699] loop_configure+0xe87/0x1950 [ 965.839506] lo_ioctl+0x782/0x1860 [ 965.840210] ? avc_has_extended_perms+0x7e8/0xeb0 [ 965.841181] ? loop_set_status_old+0x1b0/0x1b0 [ 965.842112] ? fsnotify+0xb4f/0x1250 [ 965.842850] ? avc_ss_reset+0x180/0x180 [ 965.843656] ? fsnotify_first_mark+0x1f0/0x1f0 [ 965.844571] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.845510] ? lock_acquire+0x41c/0x4d0 [ 965.846302] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.847244] ? lock_release+0x505/0x6f0 [ 965.848045] ? find_and_remove_object+0xe4/0x120 [ 965.848998] ? __delete_object+0xb3/0x100 [ 965.849856] ? lock_downgrade+0x6d0/0x6d0 [ 965.850685] ? rwlock_bug.part.0+0x90/0x90 [ 965.851510] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.852472] ? selinux_inode_getsecctx+0x90/0x90 [ 965.853440] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.854433] ? loop_set_status_old+0x1b0/0x1b0 [ 965.855630] blkdev_ioctl+0x362/0x7f0 [ 965.856627] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 965.857865] ? __x64_sys_ioctl+0x97/0x210 [ 965.858887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 965.859975] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 965.860937] __x64_sys_ioctl+0x196/0x210 [ 965.861752] do_syscall_64+0x3b/0x90 [ 965.862513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 965.863536] RIP: 0033:0x7f432f5bb8d7 [ 965.864284] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.867928] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.869422] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 965.870861] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 965.872262] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 965.873674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 965.875072] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 965.876485] [ 965.876951] CPU: 0 PID: 8394 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 965.878630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 965.880569] Call Trace: [ 965.881010] [ 965.881388] dump_stack_lvl+0x8b/0xb3 [ 965.882090] should_fail.cold+0x5/0xa [ 965.882742] ? create_object.isra.0+0x3a/0xa20 [ 965.883534] should_failslab+0x5/0x10 [ 965.884202] kmem_cache_alloc+0x5b/0x480 [ 965.884901] create_object.isra.0+0x3a/0xa20 [ 965.885680] ? kasan_unpoison+0x23/0x50 [ 965.886372] __kmalloc+0x25b/0x440 [ 965.886988] kobject_get_path+0xc0/0x1d0 [ 965.887689] kobject_uevent_env+0x25c/0xfa0 [ 965.888447] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 965.889289] ? __loop_update_dio+0x2a3/0x620 [ 965.890085] loop_configure+0x14e8/0x1950 [ 965.890814] lo_ioctl+0x782/0x1860 [ 965.891432] ? avc_has_extended_perms+0x7e8/0xeb0 [ 965.892278] ? loop_set_status_old+0x1b0/0x1b0 [ 965.893093] ? fsnotify+0xb4f/0x1250 [ 965.893765] ? avc_ss_reset+0x180/0x180 [ 965.894446] ? fsnotify_first_mark+0x1f0/0x1f0 [ 965.895242] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.896059] ? lock_acquire+0x41c/0x4d0 [ 965.896738] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.896868] loop5: detected capacity change from 0 to 128 [ 965.897551] ? lock_release+0x505/0x6f0 [ 965.899347] ? find_and_remove_object+0xe4/0x120 [ 965.900170] ? __delete_object+0xb3/0x100 [ 965.900883] ? lock_downgrade+0x6d0/0x6d0 [ 965.901627] ? rwlock_bug.part.0+0x90/0x90 [ 965.902350] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.903173] ? selinux_inode_getsecctx+0x90/0x90 [ 965.904010] ? rcu_read_lock_sched_held+0xd/0x70 [ 965.904830] ? loop_set_status_old+0x1b0/0x1b0 [ 965.905635] blkdev_ioctl+0x362/0x7f0 [ 965.906281] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 965.907077] ? __x64_sys_ioctl+0x97/0x210 08:09:29 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:29 executing program 2: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) 08:09:29 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 62) [ 965.907781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 965.908911] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 965.909767] __x64_sys_ioctl+0x196/0x210 [ 965.910472] do_syscall_64+0x3b/0x90 [ 965.911120] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 965.912035] RIP: 0033:0x7f22ed51d8d7 [ 965.912664] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.915843] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 965.917152] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 965.918268] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 965.918396] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 965.921045] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 965.922254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 965.923440] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 965.924630] [ 965.928437] loop0: detected capacity change from 0 to 128 [ 965.941730] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 965.942234] loop5: detected capacity change from 0 to 128 [ 965.951928] loop0: detected capacity change from 0 to 128 08:09:29 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 965.965892] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 965.976239] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:09:29 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) [ 966.016001] ISOFS: Unable to identify CD-ROM format. 08:09:29 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:29 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 966.036219] loop0: detected capacity change from 0 to 128 08:09:29 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 1) [ 966.053106] loop6: detected capacity change from 0 to 128 [ 966.058022] ISOFS: Unable to identify CD-ROM format. 08:09:29 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 966.073700] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 966.075701] isofs_fill_super: bread failed, dev=loop6, iso_blknum=32, block=64 [ 966.076069] FAULT_INJECTION: forcing a failure. [ 966.076069] name failslab, interval 1, probability 0, space 0, times 0 [ 966.079064] CPU: 1 PID: 8414 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.080983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.083228] Call Trace: [ 966.083765] [ 966.084202] dump_stack_lvl+0x8b/0xb3 [ 966.084992] should_fail.cold+0x5/0xa [ 966.085798] ? sock_alloc_inode+0x18/0x1c0 [ 966.086693] should_failslab+0x5/0x10 [ 966.087455] kmem_cache_alloc+0x5b/0x480 [ 966.088281] ? sock_free_inode+0x20/0x20 [ 966.089117] sock_alloc_inode+0x18/0x1c0 [ 966.089985] ? sock_free_inode+0x20/0x20 [ 966.090827] alloc_inode+0x63/0x230 [ 966.091576] new_inode_pseudo+0x14/0xe0 [ 966.092388] sock_alloc+0x3c/0x260 [ 966.093131] __sock_create+0xb9/0x750 [ 966.093944] __sys_socket+0xef/0x200 [ 966.094713] ? compat_sock_ioctl+0x590/0x590 [ 966.095595] ? ksys_write+0x1a5/0x250 [ 966.096391] __x64_sys_socket+0x6f/0xb0 [ 966.097196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.098255] do_syscall_64+0x3b/0x90 [ 966.099022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.100073] RIP: 0033:0x7f2f141ab197 [ 966.100824] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.104561] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 966.106106] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 966.107542] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 966.108992] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.110435] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 966.111881] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 966.113329] [ 966.114439] socket: no more sockets [ 966.135176] loop0: detected capacity change from 0 to 128 08:09:29 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 1) 08:09:29 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 1) 08:09:29 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 51) [ 966.149337] loop5: detected capacity change from 0 to 128 [ 966.160784] FAULT_INJECTION: forcing a failure. [ 966.160784] name failslab, interval 1, probability 0, space 0, times 0 [ 966.162428] CPU: 0 PID: 8422 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.163777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.165356] Call Trace: [ 966.165720] [ 966.166030] dump_stack_lvl+0x8b/0xb3 [ 966.166580] should_fail.cold+0x5/0xa [ 966.167117] ? do_shmat+0x558/0x10d0 [ 966.167653] should_failslab+0x5/0x10 [ 966.168193] kmem_cache_alloc_trace+0x55/0x3c0 [ 966.168845] do_shmat+0x558/0x10d0 [ 966.169343] ? compat_ksys_old_shmctl+0x30/0x30 [ 966.170018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.170787] ? vfs_write+0x428/0xad0 [ 966.171312] __x64_sys_shmat+0xcc/0x160 [ 966.171876] ? __ia32_compat_sys_shmat+0x160/0x160 [ 966.172145] FAULT_INJECTION: forcing a failure. [ 966.172145] name failslab, interval 1, probability 0, space 0, times 0 [ 966.172562] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 966.175717] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 966.176450] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.177158] ? trace_hardirqs_on+0x5b/0x190 [ 966.177777] do_syscall_64+0x3b/0x90 [ 966.178293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.178998] RIP: 0033:0x7fb5d96b3b19 [ 966.179507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.182090] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 966.183128] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 966.184097] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 000000000000004e [ 966.185062] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.186054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.187030] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 966.188012] [ 966.188332] CPU: 1 PID: 8423 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.190301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.192495] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 966.192586] Call Trace: [ 966.192597] [ 966.192606] dump_stack_lvl+0x8b/0xb3 [ 966.195309] should_fail.cold+0x5/0xa [ 966.196097] ? do_shmat+0x558/0x10d0 [ 966.196865] should_failslab+0x5/0x10 [ 966.197660] kmem_cache_alloc_trace+0x55/0x3c0 [ 966.198580] do_shmat+0x558/0x10d0 [ 966.199314] ? compat_ksys_old_shmctl+0x30/0x30 [ 966.200276] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.201392] ? vfs_write+0x428/0xad0 [ 966.202166] __x64_sys_shmat+0xcc/0x160 [ 966.202987] ? __ia32_compat_sys_shmat+0x160/0x160 [ 966.203991] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 966.205012] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 966.206107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.207152] ? trace_hardirqs_on+0x5b/0x190 [ 966.208040] do_syscall_64+0x3b/0x90 [ 966.208816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.209879] RIP: 0033:0x7f6302981b19 [ 966.210617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.214346] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 966.215889] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 966.217331] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 966.218785] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.220254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.221776] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 966.223255] [ 966.228170] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:09:30 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 2) 08:09:30 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 63) [ 966.234789] loop5: detected capacity change from 0 to 128 08:09:30 executing program 6: prctl$PR_CAPBSET_READ(0x17, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_b}, @vht_op_mode_ntf}}]}, 0x3c}}, 0x0) [ 966.247166] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 966.252248] FAULT_INJECTION: forcing a failure. [ 966.252248] name failslab, interval 1, probability 0, space 0, times 0 [ 966.253758] CPU: 0 PID: 8419 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.255000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.256501] Call Trace: [ 966.256834] [ 966.257124] dump_stack_lvl+0x8b/0xb3 [ 966.257661] should_fail.cold+0x5/0xa [ 966.258175] ? __kernfs_new_node+0xd4/0x8b0 [ 966.258739] should_failslab+0x5/0x10 [ 966.259246] kmem_cache_alloc+0x5b/0x480 [ 966.259782] __kernfs_new_node+0xd4/0x8b0 [ 966.260330] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.260957] ? kernfs_add_one+0x3c6/0x550 [ 966.261510] ? kernfs_path_from_node+0x60/0x60 [ 966.262112] ? down_write+0xde/0x150 [ 966.262602] ? down_write+0xde/0x150 [ 966.263084] ? up_write+0x148/0x460 [ 966.263551] ? kernfs_activate+0x1c4/0x240 [ 966.264108] kernfs_new_node+0x93/0x120 [ 966.264618] __kernfs_create_file+0x51/0x350 [ 966.265203] sysfs_add_file_mode_ns+0x218/0x430 [ 966.265818] ? component_del+0x4c0/0x4c0 [ 966.266364] internal_create_group+0x322/0xb20 [ 966.266957] ? sysfs_remove_group+0x170/0x170 [ 966.267565] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 966.268216] ? __loop_update_dio+0x2a3/0x620 [ 966.268807] loop_configure+0xe87/0x1950 [ 966.269339] lo_ioctl+0x782/0x1860 [ 966.269838] ? avc_has_extended_perms+0x7e8/0xeb0 [ 966.270490] ? loop_set_status_old+0x1b0/0x1b0 [ 966.271072] ? fsnotify+0xb4f/0x1250 [ 966.271569] ? avc_ss_reset+0x180/0x180 [ 966.272108] ? fsnotify_first_mark+0x1f0/0x1f0 [ 966.272718] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.273345] ? lock_acquire+0x41c/0x4d0 [ 966.273880] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.274508] ? lock_release+0x505/0x6f0 [ 966.275050] ? find_and_remove_object+0xe4/0x120 [ 966.275683] ? __delete_object+0xb3/0x100 [ 966.276235] ? lock_downgrade+0x6d0/0x6d0 [ 966.276429] FAULT_INJECTION: forcing a failure. [ 966.276429] name failslab, interval 1, probability 0, space 0, times 0 [ 966.276787] ? rwlock_bug.part.0+0x90/0x90 [ 966.276808] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.276834] ? selinux_inode_getsecctx+0x90/0x90 [ 966.281179] ? loop_set_status_old+0x1b0/0x1b0 [ 966.281805] blkdev_ioctl+0x362/0x7f0 [ 966.282310] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 966.282941] ? __x64_sys_ioctl+0x97/0x210 [ 966.283491] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.284230] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 966.284858] __x64_sys_ioctl+0x196/0x210 [ 966.285400] do_syscall_64+0x3b/0x90 [ 966.285911] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.286579] RIP: 0033:0x7f432f5bb8d7 [ 966.287065] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.289485] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.290513] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 966.291464] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 966.292397] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 966.293337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 966.294278] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 966.295218] [ 966.295526] CPU: 1 PID: 8428 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.297501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.298346] FAULT_INJECTION: forcing a failure. [ 966.298346] name failslab, interval 1, probability 0, space 0, times 0 [ 966.299797] Call Trace: [ 966.299810] [ 966.299819] dump_stack_lvl+0x8b/0xb3 [ 966.302958] should_fail.cold+0x5/0xa [ 966.303736] ? __alloc_skb+0x211/0x340 [ 966.304535] should_failslab+0x5/0x10 [ 966.305316] kmem_cache_alloc_node+0x55/0x490 [ 966.306226] __alloc_skb+0x211/0x340 [ 966.306978] alloc_uevent_skb+0x7b/0x210 [ 966.307787] kobject_uevent_env+0xaa4/0xfa0 [ 966.308649] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 966.309653] ? __loop_update_dio+0x2a3/0x620 [ 966.310523] loop_configure+0x14e8/0x1950 [ 966.311356] lo_ioctl+0x782/0x1860 [ 966.312062] ? avc_has_extended_perms+0x7e8/0xeb0 [ 966.313031] ? loop_set_status_old+0x1b0/0x1b0 [ 966.313952] ? fsnotify+0xb4f/0x1250 [ 966.314684] ? avc_ss_reset+0x180/0x180 [ 966.315487] ? fsnotify_first_mark+0x1f0/0x1f0 [ 966.316390] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.317331] ? lock_acquire+0x41c/0x4d0 [ 966.318127] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.319064] ? lock_release+0x505/0x6f0 [ 966.319848] ? find_and_remove_object+0xe4/0x120 [ 966.320782] ? __delete_object+0xb3/0x100 [ 966.321624] ? lock_downgrade+0x6d0/0x6d0 [ 966.322445] ? rwlock_bug.part.0+0x90/0x90 [ 966.323282] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.324234] ? selinux_inode_getsecctx+0x90/0x90 [ 966.325173] ? rcu_read_lock_sched_held+0xd/0x70 [ 966.326117] ? loop_set_status_old+0x1b0/0x1b0 [ 966.327020] blkdev_ioctl+0x362/0x7f0 [ 966.327770] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 966.328696] ? __x64_sys_ioctl+0x97/0x210 [ 966.329524] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.330607] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 966.331542] __x64_sys_ioctl+0x196/0x210 [ 966.332341] do_syscall_64+0x3b/0x90 [ 966.333081] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.334125] RIP: 0033:0x7f22ed51d8d7 [ 966.334857] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.338478] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.339968] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 966.341368] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 966.342787] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 966.344195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 966.345609] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 966.347023] [ 966.347482] CPU: 0 PID: 8429 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.348697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.350116] Call Trace: [ 966.350416] [ 966.350676] dump_stack_lvl+0x8b/0xb3 [ 966.351132] should_fail.cold+0x5/0xa [ 966.351583] ? create_object.isra.0+0x3a/0xa20 [ 966.352128] should_failslab+0x5/0x10 [ 966.352570] kmem_cache_alloc+0x5b/0x480 [ 966.353057] create_object.isra.0+0x3a/0xa20 [ 966.353589] ? kasan_unpoison+0x23/0x50 [ 966.354070] kmem_cache_alloc_trace+0x22e/0x3c0 [ 966.354625] do_shmat+0x558/0x10d0 [ 966.355054] ? compat_ksys_old_shmctl+0x30/0x30 [ 966.355621] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.356272] ? vfs_write+0x428/0xad0 [ 966.356713] __x64_sys_shmat+0xcc/0x160 [ 966.357193] ? __ia32_compat_sys_shmat+0x160/0x160 [ 966.357795] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 966.358380] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 966.359006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.359614] ? trace_hardirqs_on+0x5b/0x190 [ 966.360136] do_syscall_64+0x3b/0x90 [ 966.360581] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.361224] RIP: 0033:0x7fb5d96b3b19 [ 966.361685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.363950] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 966.364891] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 966.365784] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 000000000000004f [ 966.366670] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.367552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.368442] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 966.369328] 08:09:30 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 966.388763] loop0: detected capacity change from 0 to 128 [ 966.396063] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 966.404534] loop0: detected capacity change from 0 to 128 08:09:30 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 966.413958] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 966.430307] ISOFS: Unable to identify CD-ROM format. [ 966.435875] ISOFS: Unable to identify CD-ROM format. 08:09:30 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 3) [ 966.442009] loop5: detected capacity change from 0 to 128 [ 966.459165] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 966.470410] loop5: detected capacity change from 0 to 128 [ 966.471498] FAULT_INJECTION: forcing a failure. [ 966.471498] name failslab, interval 1, probability 0, space 0, times 0 [ 966.472730] CPU: 0 PID: 8437 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 966.473777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 966.475002] Call Trace: [ 966.475278] [ 966.475520] dump_stack_lvl+0x8b/0xb3 [ 966.475943] should_fail.cold+0x5/0xa [ 966.476367] ? __alloc_file+0x21/0x240 [ 966.476793] should_failslab+0x5/0x10 [ 966.477206] kmem_cache_alloc+0x5b/0x480 [ 966.477661] __alloc_file+0x21/0x240 [ 966.478065] alloc_empty_file+0x6d/0x170 [ 966.478506] alloc_file+0x59/0x590 [ 966.478892] alloc_file_clone+0x22/0xc0 [ 966.479327] do_shmat+0x5d3/0x10d0 [ 966.479718] ? compat_ksys_old_shmctl+0x30/0x30 [ 966.480223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 966.480820] ? vfs_write+0x428/0xad0 [ 966.481225] __x64_sys_shmat+0xcc/0x160 [ 966.481695] ? __ia32_compat_sys_shmat+0x160/0x160 [ 966.482255] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 966.482812] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 966.483410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.483993] ? trace_hardirqs_on+0x5b/0x190 [ 966.484478] do_syscall_64+0x3b/0x90 [ 966.484905] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 966.485490] RIP: 0033:0x7fb5d96b3b19 [ 966.485913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.487982] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 966.488832] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 966.489642] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000050 [ 966.490437] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.491234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.492036] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 966.492839] [ 966.496427] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:09:39 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 2) 08:09:39 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 4) 08:09:39 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 2) 08:09:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:39 executing program 6: r0 = epoll_create(0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9d9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000040000000098ea1defd86c978f09df0037e1d7fcc5afeb9f824265b49e79df5d01b551a8d9b66acd6ba5d2b02b74d456baef5d5f584c49cadb4358e2cde57a44339469967bb1ba", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x2) read$hiddev(r1, &(0x7f0000000000)=""/109, 0x6d) 08:09:39 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 52) 08:09:39 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 976.150865] FAULT_INJECTION: forcing a failure. [ 976.150865] name failslab, interval 1, probability 0, space 0, times 0 [ 976.152180] CPU: 1 PID: 8446 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.153243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.154537] Call Trace: [ 976.154839] [ 976.155096] dump_stack_lvl+0x8b/0xb3 [ 976.155547] should_fail.cold+0x5/0xa [ 976.155986] ? create_object.isra.0+0x3a/0xa20 [ 976.156514] should_failslab+0x5/0x10 [ 976.156948] kmem_cache_alloc+0x5b/0x480 [ 976.157411] create_object.isra.0+0x3a/0xa20 [ 976.157949] ? kasan_unpoison+0x23/0x50 [ 976.158426] kmem_cache_alloc+0x239/0x480 [ 976.158917] ? sock_free_inode+0x20/0x20 [ 976.159404] sock_alloc_inode+0x18/0x1c0 [ 976.159879] ? sock_free_inode+0x20/0x20 [ 976.160365] alloc_inode+0x63/0x230 [ 976.160781] new_inode_pseudo+0x14/0xe0 [ 976.161245] sock_alloc+0x3c/0x260 [ 976.161677] __sock_create+0xb9/0x750 [ 976.162131] __sys_socket+0xef/0x200 [ 976.162566] ? compat_sock_ioctl+0x590/0x590 [ 976.163084] ? ksys_write+0x1a5/0x250 [ 976.163541] __x64_sys_socket+0x6f/0xb0 [ 976.164017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.164627] do_syscall_64+0x3b/0x90 [ 976.165073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.165706] RIP: 0033:0x7f2f141ab197 [ 976.166148] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.168278] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 08:09:39 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 64) [ 976.169167] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 976.170133] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 976.170963] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.171798] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 976.172627] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 976.173472] [ 976.175799] FAULT_INJECTION: forcing a failure. [ 976.175799] name failslab, interval 1, probability 0, space 0, times 0 [ 976.177106] CPU: 1 PID: 8449 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.178234] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.179512] Call Trace: [ 976.179818] [ 976.180075] dump_stack_lvl+0x8b/0xb3 [ 976.180514] should_fail.cold+0x5/0xa [ 976.180964] ? create_object.isra.0+0x3a/0xa20 [ 976.181501] should_failslab+0x5/0x10 [ 976.181952] kmem_cache_alloc+0x5b/0x480 [ 976.182435] create_object.isra.0+0x3a/0xa20 [ 976.182953] ? kasan_unpoison+0x23/0x50 [ 976.183433] __kmalloc+0x25b/0x440 [ 976.183852] kobject_get_path+0xc0/0x1d0 [ 976.184337] kobject_uevent_env+0x25c/0xfa0 [ 976.184844] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 976.185426] ? __loop_update_dio+0x2a3/0x620 [ 976.185948] loop_configure+0x14e8/0x1950 [ 976.186441] lo_ioctl+0x782/0x1860 [ 976.186864] ? avc_has_extended_perms+0x7e8/0xeb0 [ 976.187438] ? loop_set_status_old+0x1b0/0x1b0 [ 976.187983] ? fsnotify+0xb4f/0x1250 [ 976.188418] ? avc_ss_reset+0x180/0x180 [ 976.188890] ? fsnotify_first_mark+0x1f0/0x1f0 [ 976.189428] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.189994] ? lock_acquire+0x41c/0x4d0 [ 976.190451] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.191010] ? lock_release+0x505/0x6f0 [ 976.191481] ? find_and_remove_object+0xe4/0x120 [ 976.192036] ? __delete_object+0xb3/0x100 [ 976.192534] ? lock_downgrade+0x6d0/0x6d0 [ 976.193026] ? rwlock_bug.part.0+0x90/0x90 [ 976.193515] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.194097] ? selinux_inode_getsecctx+0x90/0x90 [ 976.194657] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.195212] ? loop_set_status_old+0x1b0/0x1b0 [ 976.195748] blkdev_ioctl+0x362/0x7f0 [ 976.196131] FAULT_INJECTION: forcing a failure. [ 976.196131] name failslab, interval 1, probability 0, space 0, times 0 [ 976.196199] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 976.199060] ? __x64_sys_ioctl+0x97/0x210 [ 976.199548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 976.200203] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 976.200761] __x64_sys_ioctl+0x196/0x210 [ 976.201243] do_syscall_64+0x3b/0x90 [ 976.201706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.202315] RIP: 0033:0x7f22ed51d8d7 [ 976.202740] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.204891] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.205797] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 976.206643] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 976.207475] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 976.208302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 976.209136] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 976.209992] [ 976.210266] CPU: 0 PID: 8456 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.212241] loop0: detected capacity change from 0 to 128 [ 976.212293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.214019] loop5: detected capacity change from 0 to 128 [ 976.215309] Call Trace: [ 976.215317] [ 976.215325] dump_stack_lvl+0x8b/0xb3 [ 976.217729] should_fail.cold+0x5/0xa [ 976.218529] ? __kernfs_new_node+0xd4/0x8b0 [ 976.219429] should_failslab+0x5/0x10 [ 976.220221] kmem_cache_alloc+0x5b/0x480 [ 976.221076] __kernfs_new_node+0xd4/0x8b0 [ 976.221961] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.222973] ? kernfs_add_one+0x3c6/0x550 [ 976.223836] ? kernfs_path_from_node+0x60/0x60 [ 976.224797] ? down_write+0xde/0x150 [ 976.225593] ? down_write+0xde/0x150 [ 976.226004] FAULT_INJECTION: forcing a failure. [ 976.226004] name failslab, interval 1, probability 0, space 0, times 0 [ 976.226403] ? up_write+0x148/0x460 [ 976.228389] ? kernfs_activate+0x1c4/0x240 [ 976.229276] kernfs_new_node+0x93/0x120 [ 976.230131] __kernfs_create_file+0x51/0x350 [ 976.231056] sysfs_add_file_mode_ns+0x218/0x430 [ 976.232047] ? component_del+0x4c0/0x4c0 [ 976.232918] internal_create_group+0x322/0xb20 [ 976.233904] ? sysfs_remove_group+0x170/0x170 [ 976.234856] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 976.235924] ? __loop_update_dio+0x2a3/0x620 [ 976.236844] loop_configure+0xe87/0x1950 [ 976.237726] lo_ioctl+0x782/0x1860 [ 976.238472] ? avc_has_extended_perms+0x7e8/0xeb0 [ 976.239502] ? loop_set_status_old+0x1b0/0x1b0 [ 976.240470] ? fsnotify+0xb4f/0x1250 [ 976.241248] ? avc_ss_reset+0x180/0x180 [ 976.242103] ? fsnotify_first_mark+0x1f0/0x1f0 [ 976.243056] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.244052] ? lock_acquire+0x41c/0x4d0 [ 976.244884] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.245899] ? lock_release+0x505/0x6f0 [ 976.246733] ? find_and_remove_object+0xe4/0x120 [ 976.247741] ? __delete_object+0xb3/0x100 [ 976.248617] ? lock_downgrade+0x6d0/0x6d0 [ 976.249493] ? rwlock_bug.part.0+0x90/0x90 [ 976.250390] ? rcu_read_lock_sched_held+0xd/0x70 [ 976.251417] ? selinux_inode_getsecctx+0x90/0x90 [ 976.252415] ? loop_set_status_old+0x1b0/0x1b0 [ 976.253394] blkdev_ioctl+0x362/0x7f0 [ 976.254200] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 976.255206] ? __x64_sys_ioctl+0x97/0x210 [ 976.256071] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 976.257249] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 976.258262] __x64_sys_ioctl+0x196/0x210 [ 976.259127] do_syscall_64+0x3b/0x90 [ 976.259928] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.261011] RIP: 0033:0x7f432f5bb8d7 [ 976.261797] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.265686] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.267307] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 976.268807] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 976.270309] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 976.271808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 976.273299] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 976.274831] [ 976.275319] CPU: 1 PID: 8459 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.276459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.277800] Call Trace: [ 976.278105] [ 976.278364] dump_stack_lvl+0x8b/0xb3 [ 976.278824] should_fail.cold+0x5/0xa [ 976.279274] ? create_object.isra.0+0x3a/0xa20 [ 976.279822] should_failslab+0x5/0x10 [ 976.280265] kmem_cache_alloc+0x5b/0x480 [ 976.280751] create_object.isra.0+0x3a/0xa20 [ 976.281277] ? kasan_unpoison+0x23/0x50 [ 976.281762] kmem_cache_alloc_trace+0x22e/0x3c0 [ 976.282321] do_shmat+0x558/0x10d0 [ 976.282749] ? compat_ksys_old_shmctl+0x30/0x30 [ 976.283303] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 976.283961] ? vfs_write+0x428/0xad0 [ 976.284407] __x64_sys_shmat+0xcc/0x160 [ 976.284883] ? __ia32_compat_sys_shmat+0x160/0x160 [ 976.285457] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 976.286016] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 976.286645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.287249] ? trace_hardirqs_on+0x5b/0x190 [ 976.287761] do_syscall_64+0x3b/0x90 [ 976.288210] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.288817] RIP: 0033:0x7f6302981b19 [ 976.289247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.291417] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 976.292326] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 976.293156] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 976.294005] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.294844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.295697] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 976.296540] [ 976.304564] FAULT_INJECTION: forcing a failure. [ 976.304564] name failslab, interval 1, probability 0, space 0, times 0 [ 976.305964] CPU: 1 PID: 8460 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.307088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.308432] Call Trace: [ 976.308738] [ 976.309002] dump_stack_lvl+0x8b/0xb3 [ 976.309454] should_fail.cold+0x5/0xa [ 976.309905] ? create_object.isra.0+0x3a/0xa20 [ 976.310442] should_failslab+0x5/0x10 [ 976.310887] kmem_cache_alloc+0x5b/0x480 [ 976.311370] create_object.isra.0+0x3a/0xa20 [ 976.311888] ? kasan_unpoison+0x23/0x50 [ 976.312374] kmem_cache_alloc+0x239/0x480 [ 976.312877] __alloc_file+0x21/0x240 [ 976.313316] alloc_empty_file+0x6d/0x170 [ 976.313794] alloc_file+0x59/0x590 [ 976.314223] alloc_file_clone+0x22/0xc0 [ 976.314704] do_shmat+0x5d3/0x10d0 [ 976.315130] ? compat_ksys_old_shmctl+0x30/0x30 [ 976.315684] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 976.316342] ? vfs_write+0x428/0xad0 [ 976.316788] __x64_sys_shmat+0xcc/0x160 [ 976.317265] ? __ia32_compat_sys_shmat+0x160/0x160 [ 976.317865] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 976.318437] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 976.319071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.319652] ? trace_hardirqs_on+0x5b/0x190 [ 976.320172] do_syscall_64+0x3b/0x90 [ 976.320616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.321221] RIP: 0033:0x7fb5d96b3b19 [ 976.321657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.323763] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 976.324660] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 976.325509] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000051 [ 976.326352] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.327198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.328042] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 976.328893] [ 976.329873] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 976.332380] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 976.334100] ISOFS: Unable to identify CD-ROM format. [ 976.337905] loop0: detected capacity change from 0 to 128 [ 976.340454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.344868] loop5: detected capacity change from 0 to 128 [ 976.348600] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 976.350763] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 08:09:40 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x48, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 976.402518] ISOFS: Unable to identify CD-ROM format. 08:09:40 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 5) [ 976.423943] loop0: detected capacity change from 0 to 128 [ 976.428796] FAULT_INJECTION: forcing a failure. [ 976.428796] name failslab, interval 1, probability 0, space 0, times 0 [ 976.430181] CPU: 1 PID: 8468 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 976.431270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 976.432532] Call Trace: [ 976.432827] [ 976.433089] dump_stack_lvl+0x8b/0xb3 [ 976.433529] should_fail.cold+0x5/0xa [ 976.433992] ? security_file_alloc+0x34/0x170 [ 976.434498] should_failslab+0x5/0x10 [ 976.434925] kmem_cache_alloc+0x5b/0x480 [ 976.435389] security_file_alloc+0x34/0x170 [ 976.435875] __alloc_file+0xb6/0x240 [ 976.436300] alloc_empty_file+0x6d/0x170 [ 976.436773] alloc_file+0x59/0x590 [ 976.437187] alloc_file_clone+0x22/0xc0 [ 976.437633] do_shmat+0x5d3/0x10d0 [ 976.438061] ? compat_ksys_old_shmctl+0x30/0x30 [ 976.438587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 976.439221] ? vfs_write+0x428/0xad0 [ 976.439649] __x64_sys_shmat+0xcc/0x160 [ 976.440103] ? __ia32_compat_sys_shmat+0x160/0x160 [ 976.440658] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 976.441239] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 976.441854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 976.442447] ? trace_hardirqs_on+0x5b/0x190 [ 976.442961] do_syscall_64+0x3b/0x90 [ 976.443399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 976.444009] RIP: 0033:0x7fb5d96b3b19 [ 976.444441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 976.444684] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 976.446579] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 976.446594] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 976.446603] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000052 [ 976.446613] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 976.446620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.452265] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 976.453103] [ 976.471688] loop0: detected capacity change from 0 to 128 [ 976.478224] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:09:49 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 3) 08:09:49 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:49 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xa00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:49 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 3) 08:09:49 executing program 6: r0 = epoll_create(0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9d9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000040000000098ea1defd86c978f09df0037e1d7fcc5afeb9f824265b49e79df5d01b551a8d9b66acd6ba5d2b02b74d456baef5d5f584c49cadb4358e2cde57a44339469967bb1ba", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x2) read$hiddev(r1, &(0x7f0000000000)=""/109, 0x6d) 08:09:49 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 53) 08:09:49 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 65) 08:09:49 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 6) [ 986.151862] loop5: detected capacity change from 0 to 128 [ 986.153853] loop0: detected capacity change from 0 to 128 [ 986.161497] FAULT_INJECTION: forcing a failure. [ 986.161497] name failslab, interval 1, probability 0, space 0, times 0 [ 986.163904] CPU: 0 PID: 8482 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.165933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.168326] Call Trace: [ 986.168874] [ 986.169337] dump_stack_lvl+0x8b/0xb3 [ 986.170165] should_fail.cold+0x5/0xa [ 986.170967] ? __kernfs_new_node+0xd4/0x8b0 [ 986.171887] should_failslab+0x5/0x10 [ 986.172681] kmem_cache_alloc+0x5b/0x480 [ 986.173543] __kernfs_new_node+0xd4/0x8b0 [ 986.174425] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.175434] ? kernfs_add_one+0x3c6/0x550 [ 986.176297] ? kernfs_path_from_node+0x60/0x60 [ 986.177253] ? down_write+0xde/0x150 [ 986.178044] ? down_write+0xde/0x150 [ 986.178834] ? up_write+0x148/0x460 [ 986.179594] ? kernfs_activate+0x1c4/0x240 [ 986.180490] kernfs_new_node+0x93/0x120 [ 986.181327] __kernfs_create_file+0x51/0x350 [ 986.182263] sysfs_add_file_mode_ns+0x218/0x430 [ 986.183246] ? component_del+0x4c0/0x4c0 [ 986.184103] internal_create_group+0x322/0xb20 [ 986.185070] ? sysfs_remove_group+0x170/0x170 [ 986.185160] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 986.186033] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 986.187889] ? __loop_update_dio+0x2a3/0x620 [ 986.188822] loop_configure+0xe87/0x1950 [ 986.189692] lo_ioctl+0x782/0x1860 [ 986.190462] ? avc_has_extended_perms+0x7e8/0xeb0 [ 986.191492] ? loop_set_status_old+0x1b0/0x1b0 [ 986.192455] ? fsnotify+0xb4f/0x1250 [ 986.193240] ? avc_ss_reset+0x180/0x180 [ 986.194090] ? fsnotify_first_mark+0x1f0/0x1f0 [ 986.195052] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.196056] ? lock_acquire+0x41c/0x4d0 [ 986.196897] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.197913] ? lock_release+0x505/0x6f0 [ 986.198773] ? find_and_remove_object+0xe4/0x120 [ 986.199781] ? __delete_object+0xb3/0x100 [ 986.200663] ? lock_downgrade+0x6d0/0x6d0 08:09:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 986.201536] ? rwlock_bug.part.0+0x90/0x90 [ 986.202602] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.203617] ? selinux_inode_getsecctx+0x90/0x90 [ 986.204623] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.205619] ? loop_set_status_old+0x1b0/0x1b0 [ 986.206607] blkdev_ioctl+0x362/0x7f0 [ 986.207412] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.208412] ? __x64_sys_ioctl+0x97/0x210 [ 986.208897] FAULT_INJECTION: forcing a failure. [ 986.208897] name failslab, interval 1, probability 0, space 0, times 0 [ 986.209284] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.211611] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.212618] __x64_sys_ioctl+0x196/0x210 [ 986.213479] do_syscall_64+0x3b/0x90 [ 986.214296] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.215379] RIP: 0033:0x7f432f5bb8d7 [ 986.216156] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.220028] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.221621] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 986.223136] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 986.224649] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 986.226158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 986.227651] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 986.229154] [ 986.229640] CPU: 1 PID: 8483 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.230769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.231945] Call Trace: [ 986.232215] [ 986.232451] dump_stack_lvl+0x8b/0xb3 [ 986.232856] should_fail.cold+0x5/0xa [ 986.233252] ? security_inode_alloc+0x34/0x160 [ 986.233725] should_failslab+0x5/0x10 [ 986.234131] kmem_cache_alloc+0x5b/0x480 [ 986.234570] security_inode_alloc+0x34/0x160 [ 986.235031] inode_init_always+0x52e/0xc50 [ 986.235481] ? __init_waitqueue_head+0x6b/0xd0 [ 986.235961] alloc_inode+0x84/0x230 [ 986.236349] new_inode_pseudo+0x14/0xe0 [ 986.236759] sock_alloc+0x3c/0x260 [ 986.237139] __sock_create+0xb9/0x750 [ 986.237539] __sys_socket+0xef/0x200 [ 986.237941] ? compat_sock_ioctl+0x590/0x590 [ 986.238400] ? ksys_write+0x1a5/0x250 [ 986.238803] __x64_sys_socket+0x6f/0xb0 [ 986.239220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.239758] do_syscall_64+0x3b/0x90 [ 986.240154] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.240701] RIP: 0033:0x7f2f141ab197 [ 986.241089] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.243024] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 986.243832] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 986.244591] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 986.245326] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.246089] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 986.246822] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 986.247563] [ 986.247871] socket: no more sockets [ 986.248969] FAULT_INJECTION: forcing a failure. [ 986.248969] name failslab, interval 1, probability 0, space 0, times 0 [ 986.250189] CPU: 1 PID: 8493 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.251288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.252576] Call Trace: [ 986.252842] [ 986.253089] dump_stack_lvl+0x8b/0xb3 [ 986.253518] should_fail.cold+0x5/0xa [ 986.253958] should_failslab+0x5/0x10 [ 986.254392] __kmalloc_node_track_caller+0x7e/0x440 [ 986.254978] ? alloc_uevent_skb+0x7b/0x210 [ 986.255467] __alloc_skb+0xe3/0x340 [ 986.255852] alloc_uevent_skb+0x7b/0x210 [ 986.256318] kobject_uevent_env+0xaa4/0xfa0 [ 986.256806] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 986.257322] ? __loop_update_dio+0x2a3/0x620 [ 986.257836] loop_configure+0x14e8/0x1950 [ 986.258280] lo_ioctl+0x782/0x1860 [ 986.258662] ? avc_has_extended_perms+0x7e8/0xeb0 [ 986.259170] ? loop_set_status_old+0x1b0/0x1b0 [ 986.259686] ? fsnotify+0xb4f/0x1250 [ 986.260077] ? avc_ss_reset+0x180/0x180 [ 986.260528] ? fsnotify_first_mark+0x1f0/0x1f0 [ 986.261006] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.261531] ? lock_acquire+0x41c/0x4d0 [ 986.261953] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.262477] ? lock_release+0x505/0x6f0 [ 986.262931] ? find_and_remove_object+0xe4/0x120 [ 986.263476] ? __delete_object+0xb3/0x100 [ 986.263914] ? lock_downgrade+0x6d0/0x6d0 [ 986.264382] ? rwlock_bug.part.0+0x90/0x90 [ 986.264858] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.265405] ? selinux_inode_getsecctx+0x90/0x90 [ 986.265963] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.266503] ? loop_set_status_old+0x1b0/0x1b0 [ 986.266987] blkdev_ioctl+0x362/0x7f0 [ 986.267421] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.267917] ? __x64_sys_ioctl+0x97/0x210 [ 986.268382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.269005] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.269498] __x64_sys_ioctl+0x196/0x210 [ 986.269961] do_syscall_64+0x3b/0x90 [ 986.270351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.270939] RIP: 0033:0x7f22ed51d8d7 [ 986.271322] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.273420] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.274214] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 986.274956] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 986.275696] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 986.276428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 986.277162] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 986.277921] [ 986.278549] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 986.289610] FAULT_INJECTION: forcing a failure. [ 986.289610] name failslab, interval 1, probability 0, space 0, times 0 [ 986.290478] FAULT_INJECTION: forcing a failure. [ 986.290478] name failslab, interval 1, probability 0, space 0, times 0 [ 986.290791] CPU: 1 PID: 8494 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.294185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.295357] Call Trace: [ 986.295644] [ 986.295876] dump_stack_lvl+0x8b/0xb3 [ 986.296314] should_fail.cold+0x5/0xa [ 986.296737] ? create_object.isra.0+0x3a/0xa20 [ 986.297254] should_failslab+0x5/0x10 [ 986.297681] kmem_cache_alloc+0x5b/0x480 [ 986.298109] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 986.298691] create_object.isra.0+0x3a/0xa20 [ 986.299150] ? kasan_unpoison+0x23/0x50 [ 986.299608] kmem_cache_alloc+0x239/0x480 [ 986.300038] security_file_alloc+0x34/0x170 [ 986.300539] __alloc_file+0xb6/0x240 [ 986.300929] alloc_empty_file+0x6d/0x170 [ 986.301395] alloc_file+0x59/0x590 [ 986.301766] alloc_file_clone+0x22/0xc0 [ 986.302222] do_shmat+0x5d3/0x10d0 [ 986.302623] ? compat_ksys_old_shmctl+0x30/0x30 [ 986.303149] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.303718] ? vfs_write+0x428/0xad0 [ 986.304137] __x64_sys_shmat+0xcc/0x160 [ 986.304555] ? __ia32_compat_sys_shmat+0x160/0x160 [ 986.305119] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 986.305635] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 986.306259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.306792] ? trace_hardirqs_on+0x5b/0x190 [ 986.307292] do_syscall_64+0x3b/0x90 [ 986.307682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.308275] RIP: 0033:0x7fb5d96b3b19 [ 986.308694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.310811] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 986.311600] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 986.312333] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000053 [ 986.313136] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.313954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.314760] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 986.315574] [ 986.315845] CPU: 0 PID: 8487 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.318161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.320807] Call Trace: [ 986.321409] [ 986.321951] dump_stack_lvl+0x8b/0xb3 [ 986.322859] should_fail.cold+0x5/0xa [ 986.323667] ? __alloc_file+0x21/0x240 [ 986.324445] should_failslab+0x5/0x10 [ 986.325198] kmem_cache_alloc+0x5b/0x480 [ 986.326020] __alloc_file+0x21/0x240 [ 986.326775] alloc_empty_file+0x6d/0x170 [ 986.327584] alloc_file+0x59/0x590 [ 986.328293] alloc_file_clone+0x22/0xc0 [ 986.329081] do_shmat+0x5d3/0x10d0 [ 986.329822] ? compat_ksys_old_shmctl+0x30/0x30 [ 986.330751] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.331838] ? vfs_write+0x428/0xad0 [ 986.332578] __x64_sys_shmat+0xcc/0x160 [ 986.333376] ? __ia32_compat_sys_shmat+0x160/0x160 [ 986.334366] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 986.335369] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 986.336430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.337445] ? trace_hardirqs_on+0x5b/0x190 [ 986.338326] do_syscall_64+0x3b/0x90 [ 986.339073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.340087] RIP: 0033:0x7f6302981b19 [ 986.340814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.344454] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 986.345959] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 986.347356] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 986.348761] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.350175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.351578] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 986.352987] [ 986.355429] loop0: detected capacity change from 0 to 128 [ 986.363047] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 986.379409] ISOFS: Unable to identify CD-ROM format. 08:09:50 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 7) 08:09:50 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x68, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:50 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 66) 08:09:50 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xc00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:09:50 executing program 6: r0 = epoll_create(0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fdinfo/3\x00') fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9d9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500000000040000000098ea1defd86c978f09df0037e1d7fcc5afeb9f824265b49e79df5d01b551a8d9b66acd6ba5d2b02b74d456baef5d5f584c49cadb4358e2cde57a44339469967bb1ba", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f00000000c0)=0x2) read$hiddev(r1, &(0x7f0000000000)=""/109, 0x6d) [ 986.434931] ISOFS: Unable to identify CD-ROM format. 08:09:50 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 4) [ 986.444674] FAULT_INJECTION: forcing a failure. [ 986.444674] name failslab, interval 1, probability 0, space 0, times 0 [ 986.445906] CPU: 1 PID: 8500 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.446987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.448194] Call Trace: [ 986.448478] [ 986.448732] dump_stack_lvl+0x8b/0xb3 [ 986.449175] should_fail.cold+0x5/0xa [ 986.449611] ? create_object.isra.0+0x3a/0xa20 [ 986.450175] should_failslab+0x5/0x10 [ 986.450613] kmem_cache_alloc+0x5b/0x480 [ 986.451092] create_object.isra.0+0x3a/0xa20 [ 986.451603] ? kasan_unpoison+0x23/0x50 [ 986.452076] kmem_cache_alloc_node+0x248/0x490 [ 986.452607] __alloc_skb+0x211/0x340 [ 986.453060] alloc_uevent_skb+0x7b/0x210 [ 986.453504] kobject_uevent_env+0xaa4/0xfa0 [ 986.454023] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 986.454609] ? __loop_update_dio+0x2a3/0x620 [ 986.455121] loop_configure+0x14e8/0x1950 [ 986.455600] lo_ioctl+0x782/0x1860 [ 986.456020] ? avc_has_extended_perms+0x7e8/0xeb0 [ 986.456343] FAULT_INJECTION: forcing a failure. [ 986.456343] name failslab, interval 1, probability 0, space 0, times 0 [ 986.456582] ? loop_set_status_old+0x1b0/0x1b0 [ 986.456599] ? fsnotify+0xb4f/0x1250 [ 986.456614] ? avc_ss_reset+0x180/0x180 [ 986.460144] ? fsnotify_first_mark+0x1f0/0x1f0 [ 986.460626] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.461177] ? lock_acquire+0x41c/0x4d0 [ 986.461611] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.462136] ? lock_release+0x505/0x6f0 [ 986.462594] ? find_and_remove_object+0xe4/0x120 [ 986.463137] ? __delete_object+0xb3/0x100 [ 986.463615] ? lock_downgrade+0x6d0/0x6d0 [ 986.464096] ? rwlock_bug.part.0+0x90/0x90 [ 986.464581] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.465140] ? selinux_inode_getsecctx+0x90/0x90 [ 986.465692] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.466198] ? loop_set_status_old+0x1b0/0x1b0 [ 986.466720] blkdev_ioctl+0x362/0x7f0 [ 986.467147] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.467694] ? __x64_sys_ioctl+0x97/0x210 [ 986.468168] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.468808] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 986.469319] __x64_sys_ioctl+0x196/0x210 [ 986.469778] do_syscall_64+0x3b/0x90 [ 986.470193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.470780] RIP: 0033:0x7f22ed51d8d7 [ 986.471172] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.473283] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.474079] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 986.474875] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 986.475674] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 986.476488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 986.477306] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 986.478131] [ 986.478398] CPU: 0 PID: 8501 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.480295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.482542] Call Trace: [ 986.483049] [ 986.483460] FAULT_INJECTION: forcing a failure. [ 986.483460] name failslab, interval 1, probability 0, space 0, times 0 [ 986.483484] dump_stack_lvl+0x8b/0xb3 [ 986.485423] should_fail.cold+0x5/0xa [ 986.486192] ? vm_area_dup+0x7f/0x220 [ 986.486958] should_failslab+0x5/0x10 [ 986.487718] kmem_cache_alloc+0x5b/0x480 [ 986.488533] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.489471] vm_area_dup+0x7f/0x220 [ 986.490215] ? unwind_next_frame+0xc8b/0x2250 [ 986.491111] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.492170] ? __is_insn_slot_addr+0x144/0x250 [ 986.493081] ? kernel_text_address+0x53/0xb0 [ 986.493982] ? __kernel_text_address+0x9/0x30 [ 986.494876] ? unwind_get_return_address+0x51/0x90 [ 986.495846] ? create_prof_cpu_mask+0x20/0x20 [ 986.496735] ? arch_stack_walk+0x99/0xf0 [ 986.497549] ? vm_area_alloc+0xf0/0xf0 [ 986.498342] ? stack_trace_save+0x8c/0xc0 [ 986.499163] ? filter_irq_stacks+0x90/0x90 [ 986.500001] ? __stack_depot_save+0x35/0x450 [ 986.500879] ? shm_may_split+0xc1/0xf0 [ 986.501662] ? shm_fault+0xf0/0xf0 [ 986.502376] __split_vma+0xa2/0x540 [ 986.503100] ? lock_release+0x505/0x6f0 [ 986.503887] do_mas_align_munmap.constprop.0+0x25e/0xc00 [ 986.504963] ? __split_vma+0x540/0x540 [ 986.505736] ? mas_walk+0x48a/0x670 [ 986.506457] ? mas_find+0x203/0xdd0 [ 986.507168] ? rcu_read_lock_sched_held+0xd/0x70 [ 986.508104] ? inode_has_perm+0x171/0x1d0 [ 986.508919] ? lock_release+0x6f0/0x6f0 [ 986.509703] do_mas_munmap+0x1ed/0x2c0 [ 986.510487] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 986.511563] mmap_region+0x21c/0x1a80 [ 986.512331] ? lock_release+0x6f0/0x6f0 [ 986.513120] ? do_munmap+0x100/0x100 [ 986.513866] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.514951] ? security_mmap_addr+0x79/0xa0 [ 986.515809] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 986.516891] ? get_unmapped_area+0x2f0/0x3d0 [ 986.517759] do_mmap+0x82a/0xf60 [ 986.518450] do_shmat+0xe42/0x10d0 [ 986.519163] ? compat_ksys_old_shmctl+0x30/0x30 [ 986.520086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.521187] ? vfs_write+0x428/0xad0 [ 986.521941] __x64_sys_shmat+0xcc/0x160 [ 986.522735] ? __ia32_compat_sys_shmat+0x160/0x160 [ 986.523713] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 986.524691] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 986.525741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.526761] ? trace_hardirqs_on+0x5b/0x190 [ 986.527628] do_syscall_64+0x3b/0x90 [ 986.528365] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.529378] RIP: 0033:0x7fb5d96b3b19 [ 986.530125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.533755] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 986.535258] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 986.536661] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000054 [ 986.538080] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.539481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.540883] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 986.542305] [ 986.542762] CPU: 1 PID: 8503 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 986.543759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 986.544925] Call Trace: [ 986.545189] [ 986.545420] dump_stack_lvl+0x8b/0xb3 [ 986.545830] should_fail.cold+0x5/0xa [ 986.546227] ? create_object.isra.0+0x3a/0xa20 [ 986.546712] should_failslab+0x5/0x10 [ 986.547105] kmem_cache_alloc+0x5b/0x480 [ 986.547527] create_object.isra.0+0x3a/0xa20 [ 986.547985] ? kasan_unpoison+0x23/0x50 [ 986.548401] kmem_cache_alloc+0x239/0x480 [ 986.548830] __alloc_file+0x21/0x240 [ 986.549222] alloc_empty_file+0x6d/0x170 [ 986.549645] alloc_file+0x59/0x590 [ 986.550030] alloc_file_clone+0x22/0xc0 [ 986.550453] do_shmat+0x5d3/0x10d0 [ 986.550833] ? compat_ksys_old_shmctl+0x30/0x30 [ 986.551319] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 986.551889] ? vfs_write+0x428/0xad0 [ 986.552277] __x64_sys_shmat+0xcc/0x160 [ 986.552697] ? __ia32_compat_sys_shmat+0x160/0x160 [ 986.553208] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 986.553730] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 986.554314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 986.554847] ? trace_hardirqs_on+0x5b/0x190 [ 986.555345] do_syscall_64+0x3b/0x90 [ 986.555745] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 986.556328] RIP: 0033:0x7f6302981b19 [ 986.556710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 986.558812] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 986.559676] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 986.560491] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 986.561299] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 986.562103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.562908] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 986.563720] [ 986.588868] loop0: detected capacity change from 0 to 128 [ 986.601910] ISOFS: Unable to identify CD-ROM format. [ 986.608172] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 986.625689] loop5: detected capacity change from 0 to 128 [ 986.629269] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 986.631297] loop0: detected capacity change from 0 to 128 [ 986.638899] loop5: detected capacity change from 0 to 128 [ 986.641641] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 986.661282] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:10:00 executing program 6: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000300)="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", 0x620, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r1, r0, 0x0, 0x100000001) 08:10:00 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 4) 08:10:00 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6c, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 54) 08:10:00 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 8) 08:10:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 67) 08:10:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xd00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:00 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 5) [ 996.337682] FAULT_INJECTION: forcing a failure. [ 996.337682] name failslab, interval 1, probability 0, space 0, times 0 [ 996.337749] FAULT_INJECTION: forcing a failure. [ 996.337749] name failslab, interval 1, probability 0, space 0, times 0 [ 996.338955] CPU: 0 PID: 8520 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.338973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.343534] Call Trace: [ 996.343822] [ 996.344058] dump_stack_lvl+0x8b/0xb3 [ 996.344478] should_fail.cold+0x5/0xa [ 996.344897] should_failslab+0x5/0x10 [ 996.345312] __kmalloc_node_track_caller+0x7e/0x440 [ 996.345859] ? alloc_uevent_skb+0x7b/0x210 [ 996.346331] __alloc_skb+0xe3/0x340 [ 996.346743] alloc_uevent_skb+0x7b/0x210 [ 996.347187] kobject_uevent_env+0xaa4/0xfa0 [ 996.347665] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 996.348223] ? __loop_update_dio+0x2a3/0x620 [ 996.348687] loop_configure+0x14e8/0x1950 [ 996.349143] lo_ioctl+0x782/0x1860 [ 996.349536] ? avc_has_extended_perms+0x7e8/0xeb0 [ 996.350090] ? loop_set_status_old+0x1b0/0x1b0 [ 996.350591] ? fsnotify+0xb4f/0x1250 [ 996.350990] ? avc_ss_reset+0x180/0x180 [ 996.351429] ? fsnotify_first_mark+0x1f0/0x1f0 [ 996.351913] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.352433] ? lock_acquire+0x41c/0x4d0 [ 996.352869] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.353358] ? lock_release+0x505/0x6f0 [ 996.353787] ? find_and_remove_object+0xe4/0x120 [ 996.354304] ? __delete_object+0xb3/0x100 [ 996.354765] ? lock_downgrade+0x6d0/0x6d0 [ 996.355214] ? rwlock_bug.part.0+0x90/0x90 [ 996.355669] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.356185] ? selinux_inode_getsecctx+0x90/0x90 [ 996.356700] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.357211] ? loop_set_status_old+0x1b0/0x1b0 [ 996.357704] blkdev_ioctl+0x362/0x7f0 [ 996.358109] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.358620] ? __x64_sys_ioctl+0x97/0x210 [ 996.359070] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.359662] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.360172] __x64_sys_ioctl+0x196/0x210 [ 996.360610] do_syscall_64+0x3b/0x90 [ 996.361013] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.361570] RIP: 0033:0x7f22ed51d8d7 [ 996.361975] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.363946] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.364771] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 996.365540] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 996.366337] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 996.367105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 996.367864] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 996.368635] [ 996.368884] CPU: 1 PID: 8517 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.370915] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.371112] FAULT_INJECTION: forcing a failure. [ 996.371112] name failslab, interval 1, probability 0, space 0, times 0 [ 996.373287] Call Trace: [ 996.373296] [ 996.373306] dump_stack_lvl+0x8b/0xb3 [ 996.376234] should_fail.cold+0x5/0xa [ 996.377044] ? create_object.isra.0+0x3a/0xa20 [ 996.378025] should_failslab+0x5/0x10 [ 996.378825] kmem_cache_alloc+0x5b/0x480 [ 996.379687] create_object.isra.0+0x3a/0xa20 [ 996.380623] ? kasan_unpoison+0x23/0x50 [ 996.381471] kmem_cache_alloc+0x239/0x480 [ 996.382355] __kernfs_new_node+0xd4/0x8b0 [ 996.383228] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.384230] ? kernfs_add_one+0x3c6/0x550 [ 996.385102] ? kernfs_path_from_node+0x60/0x60 [ 996.386080] ? down_write+0xde/0x150 [ 996.386876] ? down_write+0xde/0x150 [ 996.387668] ? up_write+0x148/0x460 [ 996.388430] ? kernfs_activate+0x1c4/0x240 [ 996.389326] kernfs_new_node+0x93/0x120 [ 996.390170] __kernfs_create_file+0x51/0x350 [ 996.391099] sysfs_add_file_mode_ns+0x218/0x430 [ 996.392084] ? component_del+0x4c0/0x4c0 [ 996.392938] internal_create_group+0x322/0xb20 [ 996.393906] ? sysfs_remove_group+0x170/0x170 [ 996.394873] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 996.395930] ? __loop_update_dio+0x2a3/0x620 [ 996.396864] loop_configure+0xe87/0x1950 [ 996.397731] lo_ioctl+0x782/0x1860 [ 996.398492] ? avc_has_extended_perms+0x7e8/0xeb0 [ 996.399523] ? loop_set_status_old+0x1b0/0x1b0 [ 996.400489] ? fsnotify+0xb4f/0x1250 [ 996.401274] ? avc_ss_reset+0x180/0x180 [ 996.402141] ? fsnotify_first_mark+0x1f0/0x1f0 [ 996.403109] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.404106] ? lock_acquire+0x41c/0x4d0 [ 996.404946] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.405944] ? lock_release+0x505/0x6f0 [ 996.406791] ? find_and_remove_object+0xe4/0x120 [ 996.407799] ? __delete_object+0xb3/0x100 [ 996.408680] ? lock_downgrade+0x6d0/0x6d0 [ 996.409573] ? rwlock_bug.part.0+0x90/0x90 [ 996.410489] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.411501] ? selinux_inode_getsecctx+0x90/0x90 [ 996.412518] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.413505] ? loop_set_status_old+0x1b0/0x1b0 [ 996.414490] blkdev_ioctl+0x362/0x7f0 [ 996.415288] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.416289] ? __x64_sys_ioctl+0x97/0x210 [ 996.417151] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.418321] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.419316] __x64_sys_ioctl+0x196/0x210 [ 996.420173] do_syscall_64+0x3b/0x90 [ 996.420971] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.422067] RIP: 0033:0x7f432f5bb8d7 [ 996.422847] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.426702] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.428287] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 996.429773] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 996.431272] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 996.432761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 996.434255] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 996.435754] [ 996.436237] CPU: 0 PID: 8521 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.437326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.438589] Call Trace: [ 996.438875] [ 996.439122] dump_stack_lvl+0x8b/0xb3 [ 996.439548] should_fail.cold+0x5/0xa [ 996.439974] ? security_file_alloc+0x34/0x170 [ 996.440476] should_failslab+0x5/0x10 [ 996.440889] kmem_cache_alloc+0x5b/0x480 [ 996.441365] security_file_alloc+0x34/0x170 [ 996.441843] __alloc_file+0xb6/0x240 [ 996.442274] alloc_empty_file+0x6d/0x170 [ 996.442732] alloc_file+0x59/0x590 [ 996.443130] alloc_file_clone+0x22/0xc0 [ 996.443573] do_shmat+0x5d3/0x10d0 [ 996.443978] ? compat_ksys_old_shmctl+0x30/0x30 [ 996.444509] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.445139] ? vfs_write+0x428/0xad0 [ 996.445558] __x64_sys_shmat+0xcc/0x160 [ 996.446019] ? __ia32_compat_sys_shmat+0x160/0x160 [ 996.446572] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 996.447136] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 996.447741] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.448324] ? trace_hardirqs_on+0x5b/0x190 [ 996.448812] do_syscall_64+0x3b/0x90 [ 996.449237] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.449803] RIP: 0033:0x7f6302981b19 [ 996.450225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.451446] FAULT_INJECTION: forcing a failure. [ 996.451446] name failslab, interval 1, probability 0, space 0, times 0 [ 996.452272] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 996.452287] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 996.452297] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 996.457001] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.457787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.458578] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 996.459372] [ 996.459630] CPU: 1 PID: 8515 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.461647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.464030] Call Trace: [ 996.464634] [ 996.464933] FAULT_INJECTION: forcing a failure. [ 996.464933] name failslab, interval 1, probability 0, space 0, times 0 [ 996.465104] dump_stack_lvl+0x8b/0xb3 [ 996.467112] should_fail.cold+0x5/0xa [ 996.467918] ? create_object.isra.0+0x3a/0xa20 [ 996.468889] should_failslab+0x5/0x10 [ 996.469685] kmem_cache_alloc+0x5b/0x480 [ 996.470552] create_object.isra.0+0x3a/0xa20 [ 996.471484] ? kasan_unpoison+0x23/0x50 [ 996.472332] kmem_cache_alloc+0x239/0x480 [ 996.473208] vm_area_dup+0x7f/0x220 [ 996.473999] ? unwind_next_frame+0xc8b/0x2250 [ 996.474943] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.476062] ? __is_insn_slot_addr+0x144/0x250 [ 996.477028] ? kernel_text_address+0x53/0xb0 [ 996.477971] ? __kernel_text_address+0x9/0x30 [ 996.478923] ? unwind_get_return_address+0x51/0x90 [ 996.479951] ? create_prof_cpu_mask+0x20/0x20 [ 996.480900] ? arch_stack_walk+0x99/0xf0 [ 996.481760] ? vm_area_alloc+0xf0/0xf0 [ 996.482592] ? stack_trace_save+0x8c/0xc0 [ 996.483467] ? filter_irq_stacks+0x90/0x90 [ 996.484361] ? __stack_depot_save+0x35/0x450 [ 996.485300] ? shm_may_split+0xc1/0xf0 [ 996.486163] ? shm_fault+0xf0/0xf0 [ 996.486925] __split_vma+0xa2/0x540 [ 996.487697] ? lock_release+0x505/0x6f0 [ 996.488538] do_mas_align_munmap.constprop.0+0x25e/0xc00 [ 996.489684] ? __split_vma+0x540/0x540 [ 996.490529] ? mas_walk+0x48a/0x670 [ 996.491294] ? mas_find+0x203/0xdd0 [ 996.492060] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.493058] ? inode_has_perm+0x171/0x1d0 [ 996.493924] ? lock_release+0x6f0/0x6f0 [ 996.494786] do_mas_munmap+0x1ed/0x2c0 [ 996.495610] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 996.496765] mmap_region+0x21c/0x1a80 [ 996.497573] ? lock_release+0x6f0/0x6f0 [ 996.498421] ? do_munmap+0x100/0x100 [ 996.499209] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.500377] ? security_mmap_addr+0x79/0xa0 [ 996.501287] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 996.502455] ? get_unmapped_area+0x2f0/0x3d0 [ 996.503382] do_mmap+0x82a/0xf60 [ 996.504106] do_shmat+0xe42/0x10d0 [ 996.504868] ? compat_ksys_old_shmctl+0x30/0x30 [ 996.505866] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.507041] ? vfs_write+0x428/0xad0 [ 996.507837] __x64_sys_shmat+0xcc/0x160 [ 996.508685] ? __ia32_compat_sys_shmat+0x160/0x160 [ 996.509734] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 996.510802] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 996.511932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.513018] ? trace_hardirqs_on+0x5b/0x190 [ 996.513933] do_syscall_64+0x3b/0x90 [ 996.514752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.515836] RIP: 0033:0x7fb5d96b3b19 [ 996.516614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.520484] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 996.522092] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 996.523578] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000055 [ 996.525058] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.526550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.528028] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 996.529516] [ 996.530006] CPU: 0 PID: 8526 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.531132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.532395] Call Trace: [ 996.532681] [ 996.532934] dump_stack_lvl+0x8b/0xb3 [ 996.533363] should_fail.cold+0x5/0xa [ 996.533781] ? create_object.isra.0+0x3a/0xa20 [ 996.534294] should_failslab+0x5/0x10 [ 996.534701] kmem_cache_alloc+0x5b/0x480 [ 996.535140] create_object.isra.0+0x3a/0xa20 [ 996.535629] ? kasan_unpoison+0x23/0x50 [ 996.536064] kmem_cache_alloc+0x239/0x480 [ 996.536517] security_inode_alloc+0x34/0x160 [ 996.536995] inode_init_always+0x52e/0xc50 [ 996.537452] ? __init_waitqueue_head+0x6b/0xd0 [ 996.537959] alloc_inode+0x84/0x230 [ 996.538362] new_inode_pseudo+0x14/0xe0 [ 996.538791] sock_alloc+0x3c/0x260 [ 996.539185] __sock_create+0xb9/0x750 [ 996.539594] __sys_socket+0xef/0x200 [ 996.539997] ? compat_sock_ioctl+0x590/0x590 [ 996.540468] ? ksys_write+0x1a5/0x250 [ 996.540869] __x64_sys_socket+0x6f/0xb0 [ 996.541299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.541853] do_syscall_64+0x3b/0x90 [ 996.542263] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.542841] RIP: 0033:0x7f2f141ab197 [ 996.543209] ISOFS: Unable to identify CD-ROM format. [ 996.543244] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.545012] loop0: detected capacity change from 0 to 128 [ 996.546293] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 996.546307] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 996.546316] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 996.546326] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.550557] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 996.551317] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 996.552104] [ 996.553216] loop5: detected capacity change from 0 to 128 [ 996.567418] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.572197] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 996.574596] loop5: detected capacity change from 0 to 128 [ 996.583554] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.584355] loop0: detected capacity change from 0 to 128 [ 996.593922] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:10:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xe00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141403, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x8000000, 0xfff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0884fa83ccea79abcb989fe06bc25ba0d54521bb10bcb6b06a02005a91ebbbca3f6a680882e8a71b65ee7ac4a11fac2b10f06bc5e5ff2c7200d7e0d577c6e642e3042f9dd2f77f4ab7ca86305a419194a4d9587c6079fcb89a7d03cfb69eb33cf34ee6906c6bb3609f414ad3ca4c1ef422dc00e7902c2926d58f6ade784eff36ddbc8e"], 0x1c}}, 0x4000080) fstatfs(r2, &(0x7f0000000400)=""/166) sendfile(r1, r5, 0x0, 0xffffffff001) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 996.624346] loop5: detected capacity change from 0 to 128 [ 996.633993] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.639317] ISOFS: Unable to identify CD-ROM format. [ 996.642318] loop5: detected capacity change from 0 to 128 [ 996.653657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 996.662330] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.664321] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:10:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 68) 08:10:00 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x74, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 996.678041] FAULT_INJECTION: forcing a failure. [ 996.678041] name failslab, interval 1, probability 0, space 0, times 0 [ 996.680496] CPU: 1 PID: 8540 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.682428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.684704] Call Trace: [ 996.685212] [ 996.685654] dump_stack_lvl+0x8b/0xb3 [ 996.686456] should_fail.cold+0x5/0xa [ 996.687221] ? create_object.isra.0+0x3a/0xa20 [ 996.688143] should_failslab+0x5/0x10 [ 996.688893] kmem_cache_alloc+0x5b/0x480 [ 996.689708] ? lock_acquire+0x41c/0x4d0 [ 996.690523] create_object.isra.0+0x3a/0xa20 [ 996.691406] ? kasan_unpoison+0x23/0x50 [ 996.692205] kmem_cache_alloc+0x239/0x480 [ 996.693030] skb_clone+0x170/0x3c0 [ 996.693740] netlink_broadcast+0x9ae/0xd60 [ 996.694645] ? alloc_uevent_skb+0x1c2/0x210 [ 996.695621] kobject_uevent_env+0xa6b/0xfa0 [ 996.696578] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 996.697704] ? __loop_update_dio+0x2a3/0x620 [ 996.698682] loop_configure+0x14e8/0x1950 [ 996.699625] lo_ioctl+0x782/0x1860 [ 996.700408] ? avc_has_extended_perms+0x7e8/0xeb0 [ 996.701498] ? loop_set_status_old+0x1b0/0x1b0 [ 996.702552] ? fsnotify+0xb4f/0x1250 [ 996.703367] ? avc_ss_reset+0x180/0x180 [ 996.704173] ? fsnotify_first_mark+0x1f0/0x1f0 [ 996.705079] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.706028] ? lock_acquire+0x41c/0x4d0 [ 996.706818] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.707769] ? lock_release+0x505/0x6f0 [ 996.708559] ? find_and_remove_object+0xe4/0x120 [ 996.709509] ? __delete_object+0xb3/0x100 [ 996.710357] ? lock_downgrade+0x6d0/0x6d0 [ 996.711181] ? rwlock_bug.part.0+0x90/0x90 [ 996.712025] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.712976] ? selinux_inode_getsecctx+0x90/0x90 [ 996.713931] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.714891] ? loop_set_status_old+0x1b0/0x1b0 [ 996.715798] blkdev_ioctl+0x362/0x7f0 [ 996.716552] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.717483] ? __x64_sys_ioctl+0x97/0x210 [ 996.718307] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.719400] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.720335] __x64_sys_ioctl+0x196/0x210 [ 996.721135] do_syscall_64+0x3b/0x90 [ 996.721879] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.722909] RIP: 0033:0x7f22ed51d8d7 [ 996.723637] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.727261] RSP: 002b:00007f22eaa92f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.728750] RAX: ffffffffffffffda RBX: 00007f22ed567970 RCX: 00007f22ed51d8d7 [ 996.730161] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 996.731566] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 996.732963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 996.734374] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 996.735784] [ 996.738185] loop0: detected capacity change from 0 to 128 [ 996.745306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.755253] loop5: detected capacity change from 0 to 128 08:10:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141403, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1, 0x8000000, 0xfff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRES64, @ANYRES32=r7, @ANYBLOB="0884fa83ccea79abcb989fe06bc25ba0d54521bb10bcb6b06a02005a91ebbbca3f6a680882e8a71b65ee7ac4a11fac2b10f06bc5e5ff2c7200d7e0d577c6e642e3042f9dd2f77f4ab7ca86305a419194a4d9587c6079fcb89a7d03cfb69eb33cf34ee6906c6bb3609f414ad3ca4c1ef422dc00e7902c2926d58f6ade784eff36ddbc8e"], 0x1c}}, 0x4000080) fstatfs(r2, &(0x7f0000000400)=""/166) sendfile(r1, r5, 0x0, 0xffffffff001) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 08:10:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xf00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 996.765668] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.774108] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 08:10:00 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 55) 08:10:00 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 6) [ 996.790291] loop5: detected capacity change from 0 to 128 [ 996.794303] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.812985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:10:00 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1020, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 996.823877] loop0: detected capacity change from 0 to 128 [ 996.835347] ISOFS: Unable to identify CD-ROM format. [ 996.841238] FAULT_INJECTION: forcing a failure. [ 996.841238] name failslab, interval 1, probability 0, space 0, times 0 [ 996.842453] CPU: 0 PID: 8548 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.843450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.844644] Call Trace: [ 996.844923] [ 996.845159] dump_stack_lvl+0x8b/0xb3 [ 996.845563] should_fail.cold+0x5/0xa [ 996.845983] ? create_object.isra.0+0x3a/0xa20 [ 996.846476] should_failslab+0x5/0x10 [ 996.846881] kmem_cache_alloc+0x5b/0x480 [ 996.847315] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 996.847872] create_object.isra.0+0x3a/0xa20 [ 996.848346] ? kasan_unpoison+0x23/0x50 [ 996.848769] kmem_cache_alloc+0x239/0x480 [ 996.849205] security_file_alloc+0x34/0x170 [ 996.849667] __alloc_file+0xb6/0x240 [ 996.850071] alloc_empty_file+0x6d/0x170 [ 996.850514] alloc_file+0x59/0x590 [ 996.850896] alloc_file_clone+0x22/0xc0 [ 996.851326] do_shmat+0x5d3/0x10d0 [ 996.851716] ? compat_ksys_old_shmctl+0x30/0x30 [ 996.852207] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.852787] ? vfs_write+0x428/0xad0 [ 996.853186] __x64_sys_shmat+0xcc/0x160 [ 996.853612] ? __ia32_compat_sys_shmat+0x160/0x160 [ 996.854133] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 996.854655] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 996.855206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 996.855746] ? trace_hardirqs_on+0x5b/0x190 [ 996.856197] do_syscall_64+0x3b/0x90 [ 996.856594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.857126] RIP: 0033:0x7f6302981b19 [ 996.857509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.859421] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 996.860202] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 996.860940] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 996.861677] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.862411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.863145] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 996.863886] [ 996.866026] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 996.876932] loop5: detected capacity change from 0 to 128 [ 996.904784] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.918479] loop5: detected capacity change from 0 to 128 [ 996.934763] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 996.943365] FAULT_INJECTION: forcing a failure. [ 996.943365] name failslab, interval 1, probability 0, space 0, times 0 [ 996.944691] CPU: 0 PID: 8552 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 996.945698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 996.946891] Call Trace: [ 996.947165] [ 996.947393] dump_stack_lvl+0x8b/0xb3 [ 996.947809] should_fail.cold+0x5/0xa [ 996.948208] ? __kernfs_new_node+0xd4/0x8b0 [ 996.948661] should_failslab+0x5/0x10 [ 996.949066] kmem_cache_alloc+0x5b/0x480 [ 996.949492] __kernfs_new_node+0xd4/0x8b0 [ 996.949927] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.950436] ? kernfs_add_one+0x3c6/0x550 [ 996.950873] ? kernfs_path_from_node+0x60/0x60 [ 996.951339] ? down_write+0xde/0x150 [ 996.951733] ? down_write+0xde/0x150 [ 996.952129] ? up_write+0x148/0x460 [ 996.952514] ? kernfs_activate+0x1c4/0x240 [ 996.952955] kernfs_new_node+0x93/0x120 [ 996.953368] __kernfs_create_file+0x51/0x350 [ 996.953831] sysfs_add_file_mode_ns+0x218/0x430 [ 996.954328] ? component_del+0x4c0/0x4c0 [ 996.954762] internal_create_group+0x322/0xb20 [ 996.955236] ? sysfs_remove_group+0x170/0x170 [ 996.955710] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 996.956234] ? __loop_update_dio+0x2a3/0x620 [ 996.956698] loop_configure+0xe87/0x1950 [ 996.957126] lo_ioctl+0x782/0x1860 [ 996.957499] ? avc_has_extended_perms+0x7e8/0xeb0 [ 996.958019] ? loop_set_status_old+0x1b0/0x1b0 [ 996.958493] ? fsnotify+0xb4f/0x1250 [ 996.958879] ? avc_ss_reset+0x180/0x180 [ 996.959300] ? fsnotify_first_mark+0x1f0/0x1f0 [ 996.959779] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.960272] ? lock_acquire+0x41c/0x4d0 [ 996.960690] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.961175] ? lock_release+0x505/0x6f0 [ 996.961589] ? find_and_remove_object+0xe4/0x120 [ 996.962091] ? __delete_object+0xb3/0x100 [ 996.962524] ? lock_downgrade+0x6d0/0x6d0 [ 996.962956] ? rwlock_bug.part.0+0x90/0x90 [ 996.963390] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.963893] ? selinux_inode_getsecctx+0x90/0x90 [ 996.964384] ? rcu_read_lock_sched_held+0xd/0x70 [ 996.964871] ? loop_set_status_old+0x1b0/0x1b0 [ 996.965343] blkdev_ioctl+0x362/0x7f0 [ 996.965742] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.966243] ? __x64_sys_ioctl+0x97/0x210 [ 996.966672] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 996.967237] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 996.967735] __x64_sys_ioctl+0x196/0x210 [ 996.968157] do_syscall_64+0x3b/0x90 [ 996.968546] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 996.969089] RIP: 0033:0x7f432f5bb8d7 [ 996.969472] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 996.971370] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.972158] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 996.972886] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 996.973614] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 996.974359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 996.975097] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 996.975837] [ 997.001105] ISOFS: Unable to identify CD-ROM format. 08:10:10 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 56) 08:10:10 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 5) 08:10:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 69) 08:10:10 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 9) 08:10:10 executing program 6: keyctl$revoke(0x3, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "d7e2d3cbe5c367ba293ee3aa99f1919f78259746aa0dfbe73584469bcda36be4fbaecbca41599a81551a4e2a4d513f5e014a561763ace94fcd0910d437287c84", 0x13}, 0x48, r0) keyctl$revoke(0x3, r0) r1 = add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=ANY=[]) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='rxrpc\x00', &(0x7f00000002c0)=@secondary) 08:10:10 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 7) 08:10:10 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:10 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1100, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 1006.914661] loop5: detected capacity change from 0 to 128 [ 1006.932301] FAULT_INJECTION: forcing a failure. [ 1006.932301] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.934942] CPU: 0 PID: 8567 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1006.937063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1006.939597] Call Trace: [ 1006.940161] [ 1006.940422] loop0: detected capacity change from 0 to 128 [ 1006.940653] dump_stack_lvl+0x8b/0xb3 [ 1006.942137] should_fail.cold+0x5/0xa [ 1006.943003] ? create_object.isra.0+0x3a/0xa20 [ 1006.944030] should_failslab+0x5/0x10 [ 1006.944865] kmem_cache_alloc+0x5b/0x480 [ 1006.945744] create_object.isra.0+0x3a/0xa20 [ 1006.946734] ? kasan_unpoison+0x23/0x50 [ 1006.947606] kmem_cache_alloc+0x239/0x480 [ 1006.948512] __kernfs_new_node+0xd4/0x8b0 [ 1006.949421] ? rcu_read_lock_sched_held+0xd/0x70 [ 1006.950465] ? kernfs_add_one+0x3c6/0x550 [ 1006.951275] FAULT_INJECTION: forcing a failure. [ 1006.951275] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.951374] ? kernfs_path_from_node+0x60/0x60 [ 1006.953511] ? down_write+0xde/0x150 [ 1006.954334] ? down_write+0xde/0x150 [ 1006.955150] ? up_write+0x148/0x460 [ 1006.955940] ? kernfs_activate+0x1c4/0x240 [ 1006.956860] kernfs_new_node+0x93/0x120 [ 1006.957721] __kernfs_create_file+0x51/0x350 [ 1006.958698] sysfs_add_file_mode_ns+0x218/0x430 [ 1006.959718] ? component_del+0x4c0/0x4c0 [ 1006.960598] internal_create_group+0x322/0xb20 [ 1006.961595] ? sysfs_remove_group+0x170/0x170 [ 1006.962580] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1006.963672] ? __loop_update_dio+0x2a3/0x620 [ 1006.964636] loop_configure+0xe87/0x1950 [ 1006.965528] lo_ioctl+0x782/0x1860 [ 1006.966316] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1006.967374] ? loop_set_status_old+0x1b0/0x1b0 [ 1006.968356] ? fsnotify+0xb4f/0x1250 [ 1006.969156] ? avc_ss_reset+0x180/0x180 [ 1006.970014] ? fsnotify_first_mark+0x1f0/0x1f0 [ 1006.971015] ? rcu_read_lock_sched_held+0xd/0x70 [ 1006.972031] ? lock_acquire+0x41c/0x4d0 [ 1006.972887] ? rcu_read_lock_sched_held+0xd/0x70 [ 1006.973901] ? lock_release+0x505/0x6f0 [ 1006.974766] ? find_and_remove_object+0xe4/0x120 [ 1006.975789] ? __delete_object+0xb3/0x100 [ 1006.976689] ? lock_downgrade+0x6d0/0x6d0 [ 1006.977578] ? rwlock_bug.part.0+0x90/0x90 [ 1006.978509] ? rcu_read_lock_sched_held+0xd/0x70 [ 1006.979541] ? selinux_inode_getsecctx+0x90/0x90 [ 1006.980565] ? rcu_read_lock_sched_held+0xd/0x70 [ 1006.981579] ? loop_set_status_old+0x1b0/0x1b0 [ 1006.982573] blkdev_ioctl+0x362/0x7f0 [ 1006.983387] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1006.984399] ? __x64_sys_ioctl+0x97/0x210 [ 1006.985286] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1006.986486] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1006.987513] __x64_sys_ioctl+0x196/0x210 [ 1006.988372] do_syscall_64+0x3b/0x90 [ 1006.989179] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1006.990264] RIP: 0033:0x7f432f5bb8d7 [ 1006.991062] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1006.994919] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.996525] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 1006.998019] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1006.999536] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1007.001039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1007.002563] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1007.004086] [ 1007.004579] CPU: 1 PID: 8572 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.005576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.006841] Call Trace: [ 1007.007356] [ 1007.007585] dump_stack_lvl+0x8b/0xb3 [ 1007.007993] should_fail.cold+0x5/0xa [ 1007.008391] ? vm_area_dup+0x7f/0x220 [ 1007.008790] should_failslab+0x5/0x10 [ 1007.009186] kmem_cache_alloc+0x5b/0x480 [ 1007.009612] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.010254] vm_area_dup+0x7f/0x220 [ 1007.010641] ? unwind_next_frame+0xc8b/0x2250 [ 1007.011106] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.011704] ? __is_insn_slot_addr+0x144/0x250 [ 1007.012269] ? kernel_text_address+0x53/0xb0 [ 1007.012732] ? __kernel_text_address+0x9/0x30 [ 1007.013249] ? unwind_get_return_address+0x51/0x90 [ 1007.013830] ? create_prof_cpu_mask+0x20/0x20 [ 1007.014305] ? arch_stack_walk+0x99/0xf0 [ 1007.014740] ? vm_area_alloc+0xf0/0xf0 [ 1007.015269] ? stack_trace_save+0x8c/0xc0 [ 1007.015708] ? filter_irq_stacks+0x90/0x90 [ 1007.016148] ? __stack_depot_save+0x35/0x450 [ 1007.016615] ? shm_may_split+0xc1/0xf0 [ 1007.017049] ? shm_fault+0xf0/0xf0 [ 1007.017531] __split_vma+0xa2/0x540 [ 1007.017911] ? lock_release+0x505/0x6f0 [ 1007.018346] do_mas_align_munmap.constprop.0+0x25e/0xc00 [ 1007.018916] ? __split_vma+0x540/0x540 [ 1007.019325] ? mas_walk+0x48a/0x670 [ 1007.019832] ? mas_find+0x203/0xdd0 [ 1007.020208] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.020699] ? inode_has_perm+0x171/0x1d0 [ 1007.021130] ? lock_release+0x6f0/0x6f0 [ 1007.021467] FAULT_INJECTION: forcing a failure. [ 1007.021467] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.021543] do_mas_munmap+0x1ed/0x2c0 [ 1007.024263] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.024833] mmap_region+0x21c/0x1a80 [ 1007.025232] ? lock_release+0x6f0/0x6f0 [ 1007.025653] ? do_munmap+0x100/0x100 [ 1007.026042] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.026642] ? security_mmap_addr+0x79/0xa0 [ 1007.027092] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.027685] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.028146] do_mmap+0x82a/0xf60 [ 1007.028516] do_shmat+0xe42/0x10d0 [ 1007.028890] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.029388] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.029960] ? vfs_write+0x428/0xad0 [ 1007.030384] __x64_sys_shmat+0xcc/0x160 [ 1007.030806] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.031325] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.031842] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.032415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.032956] ? trace_hardirqs_on+0x5b/0x190 [ 1007.033411] do_syscall_64+0x3b/0x90 [ 1007.033810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.034360] RIP: 0033:0x7f6302981b19 [ 1007.034742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.036636] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.037417] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 1007.038164] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 1007.038889] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.039631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.040359] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 1007.041088] [ 1007.041328] CPU: 0 PID: 8576 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.042206] FAULT_INJECTION: forcing a failure. [ 1007.042206] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.043355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.043374] Call Trace: [ 1007.043383] [ 1007.047848] dump_stack_lvl+0x8b/0xb3 [ 1007.048648] should_fail.cold+0x5/0xa [ 1007.049445] ? mas_alloc_nodes+0x2f4/0x600 [ 1007.050325] should_failslab+0x5/0x10 [ 1007.051112] kmem_cache_alloc+0x5b/0x480 [ 1007.051942] mas_alloc_nodes+0x2f4/0x600 [ 1007.052799] mas_node_count+0x101/0x130 [ 1007.053616] mas_root_expand.isra.0+0xe5/0xa60 [ 1007.054576] ? uprobe_apply+0x150/0x150 [ 1007.055394] mas_wr_store_entry.isra.0+0x33c/0x10e0 [ 1007.056429] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.057552] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.058718] mas_store_gfp+0xca/0x1f0 [ 1007.059502] ? mtree_store+0x30/0x30 [ 1007.060286] do_mas_align_munmap.constprop.0+0x487/0xc00 [ 1007.061426] ? __split_vma+0x540/0x540 [ 1007.062243] ? mas_walk+0x48a/0x670 [ 1007.062982] ? mas_find+0x203/0xdd0 [ 1007.063718] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.064690] ? inode_has_perm+0x171/0x1d0 [ 1007.065538] ? lock_release+0x6f0/0x6f0 [ 1007.066573] do_mas_munmap+0x1ed/0x2c0 [ 1007.067509] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.068790] mmap_region+0x21c/0x1a80 [ 1007.069688] ? lock_release+0x6f0/0x6f0 [ 1007.070649] ? do_munmap+0x100/0x100 [ 1007.071523] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.072805] ? security_mmap_addr+0x79/0xa0 [ 1007.073817] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.075109] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.076140] do_mmap+0x82a/0xf60 [ 1007.076939] do_shmat+0xe42/0x10d0 [ 1007.077792] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.078901] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.080195] ? vfs_write+0x428/0xad0 [ 1007.081071] __x64_sys_shmat+0xcc/0x160 [ 1007.082018] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.083022] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.083670] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.084380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.085061] ? trace_hardirqs_on+0x5b/0x190 [ 1007.085631] do_syscall_64+0x3b/0x90 [ 1007.086127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.086822] RIP: 0033:0x7fb5d96b3b19 [ 1007.087313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.089730] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.090736] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 1007.091676] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000056 [ 1007.092602] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.093539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.094484] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 1007.095422] [ 1007.095729] CPU: 1 PID: 8574 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.096735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.097941] FAULT_INJECTION: forcing a failure. [ 1007.097941] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.098061] Call Trace: [ 1007.098066] [ 1007.100089] dump_stack_lvl+0x8b/0xb3 [ 1007.100484] should_fail.cold+0x5/0xa [ 1007.100887] ? getname_flags.part.0+0x50/0x4f0 [ 1007.101372] should_failslab+0x5/0x10 [ 1007.101765] kmem_cache_alloc+0x5b/0x480 [ 1007.102192] getname_flags.part.0+0x50/0x4f0 [ 1007.102655] __x64_sys_mkdir+0xda/0x140 [ 1007.103074] do_syscall_64+0x3b/0x90 [ 1007.103462] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.103992] RIP: 0033:0x7f22ed51cc27 [ 1007.104387] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.106294] RSP: 002b:00007f22eaa92fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1007.107093] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f22ed51cc27 [ 1007.107839] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1007.108564] RBP: 00007f22eaa93040 R08: 0000000000000000 R09: ffffffffffffffff [ 1007.109303] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1007.110033] R13: 0000000020000080 R14: 00007f22eaa93000 R15: 0000000020000000 [ 1007.110779] [ 1007.111023] CPU: 0 PID: 8575 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.112308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.113811] Call Trace: [ 1007.114162] [ 1007.114457] dump_stack_lvl+0x8b/0xb3 [ 1007.114980] should_fail.cold+0x5/0xa [ 1007.115495] ? sk_prot_alloc+0x154/0x2e0 [ 1007.116044] should_failslab+0x5/0x10 [ 1007.116553] __kmalloc+0x72/0x440 [ 1007.117018] sk_prot_alloc+0x154/0x2e0 [ 1007.117537] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.118168] sk_alloc+0x30/0x350 [ 1007.118617] __netlink_create+0x63/0x2c0 [ 1007.119167] netlink_create+0x3b2/0x5e0 [ 1007.119685] ? genl_start+0x670/0x670 [ 1007.120183] __sock_create+0x345/0x750 [ 1007.120693] __sys_socket+0xef/0x200 [ 1007.121181] ? compat_sock_ioctl+0x590/0x590 [ 1007.121753] ? ksys_write+0x1a5/0x250 [ 1007.122265] __x64_sys_socket+0x6f/0xb0 [ 1007.122789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.123458] do_syscall_64+0x3b/0x90 [ 1007.123956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.124625] RIP: 0033:0x7f2f141ab197 [ 1007.125114] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.127551] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 1007.128539] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 1007.129468] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1007.130414] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.131345] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 1007.132287] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 1007.133232] [ 1007.140665] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1007.148887] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 1007.150240] FAT-fs (loop6): bogus number of reserved sectors [ 1007.151126] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1007.161005] ISOFS: Unable to identify CD-ROM format. [ 1007.182630] FAT-fs (loop6): bogus number of reserved sectors [ 1007.183470] FAT-fs (loop6): Can't find a valid FAT filesystem 08:10:11 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 10) 08:10:11 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 8) [ 1007.223982] FAULT_INJECTION: forcing a failure. [ 1007.223982] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.225643] CPU: 1 PID: 8581 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.227013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.228596] Call Trace: [ 1007.228912] [ 1007.229240] dump_stack_lvl+0x8b/0xb3 [ 1007.229811] should_fail.cold+0x5/0xa [ 1007.230417] ? create_object.isra.0+0x3a/0xa20 [ 1007.231032] should_failslab+0x5/0x10 [ 1007.231560] kmem_cache_alloc+0x5b/0x480 [ 1007.232123] create_object.isra.0+0x3a/0xa20 [ 1007.232750] ? kasan_unpoison+0x23/0x50 [ 1007.233282] kmem_cache_alloc+0x239/0x480 [ 1007.233741] vm_area_dup+0x7f/0x220 [ 1007.234141] ? unwind_next_frame+0xc8b/0x2250 [ 1007.234619] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.235191] ? __is_insn_slot_addr+0x144/0x250 [ 1007.235693] ? kernel_text_address+0x53/0xb0 [ 1007.236158] ? __kernel_text_address+0x9/0x30 [ 1007.236647] ? unwind_get_return_address+0x51/0x90 [ 1007.237158] ? create_prof_cpu_mask+0x20/0x20 [ 1007.237641] ? arch_stack_walk+0x99/0xf0 [ 1007.238073] ? vm_area_alloc+0xf0/0xf0 [ 1007.238499] ? stack_trace_save+0x8c/0xc0 [ 1007.238932] ? filter_irq_stacks+0x90/0x90 [ 1007.239376] ? __stack_depot_save+0x35/0x450 [ 1007.239846] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.240339] ? shm_may_split+0xc1/0xf0 [ 1007.240751] ? shm_fault+0xf0/0xf0 [ 1007.241127] __split_vma+0xa2/0x540 [ 1007.241512] ? lock_release+0x505/0x6f0 [ 1007.241931] do_mas_align_munmap.constprop.0+0x25e/0xc00 [ 1007.242516] ? __split_vma+0x540/0x540 [ 1007.242929] ? mas_walk+0x48a/0x670 [ 1007.243307] ? mas_find+0x203/0xdd0 [ 1007.243681] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.244171] ? inode_has_perm+0x171/0x1d0 [ 1007.244601] ? lock_release+0x6f0/0x6f0 [ 1007.245015] do_mas_munmap+0x1ed/0x2c0 [ 1007.245426] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.245997] mmap_region+0x21c/0x1a80 [ 1007.246405] ? lock_release+0x6f0/0x6f0 [ 1007.246818] ? do_munmap+0x100/0x100 [ 1007.247204] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.247773] ? security_mmap_addr+0x79/0xa0 [ 1007.248228] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.248795] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.249256] do_mmap+0x82a/0xf60 [ 1007.249614] do_shmat+0xe42/0x10d0 [ 1007.249993] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.250498] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.251069] ? vfs_write+0x428/0xad0 [ 1007.251457] __x64_sys_shmat+0xcc/0x160 [ 1007.251883] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.252406] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.252926] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.253477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.254011] ? trace_hardirqs_on+0x5b/0x190 [ 1007.254479] do_syscall_64+0x3b/0x90 [ 1007.254875] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.255409] RIP: 0033:0x7f6302981b19 [ 1007.255792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.257715] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.258515] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 1007.259264] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 1007.260011] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.260756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.261492] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 1007.262242] 08:10:11 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 70) 08:10:11 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 57) 08:10:11 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:11 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 1007.287969] FAULT_INJECTION: forcing a failure. [ 1007.287969] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.289229] CPU: 1 PID: 8583 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.290251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.291435] Call Trace: [ 1007.291709] [ 1007.291937] dump_stack_lvl+0x8b/0xb3 [ 1007.292343] should_fail.cold+0x5/0xa [ 1007.292746] ? create_object.isra.0+0x3a/0xa20 [ 1007.293236] should_failslab+0x5/0x10 [ 1007.293639] kmem_cache_alloc+0x5b/0x480 [ 1007.294078] ? mas_destroy+0x391/0x8d0 [ 1007.294506] create_object.isra.0+0x3a/0xa20 [ 1007.294973] ? kasan_unpoison+0x23/0x50 [ 1007.295405] kmem_cache_alloc+0x239/0x480 [ 1007.295845] mas_alloc_nodes+0x2f4/0x600 [ 1007.296279] mas_node_count+0x101/0x130 [ 1007.296708] mas_root_expand.isra.0+0xe5/0xa60 [ 1007.297201] ? uprobe_apply+0x150/0x150 [ 1007.297629] mas_wr_store_entry.isra.0+0x33c/0x10e0 [ 1007.298166] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.298751] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.299323] mas_store_gfp+0xca/0x1f0 [ 1007.299733] ? mtree_store+0x30/0x30 [ 1007.300129] do_mas_align_munmap.constprop.0+0x487/0xc00 [ 1007.300714] ? __split_vma+0x540/0x540 [ 1007.301126] ? mas_walk+0x48a/0x670 [ 1007.301503] ? mas_find+0x203/0xdd0 [ 1007.301892] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.302400] ? inode_has_perm+0x171/0x1d0 [ 1007.302838] ? lock_release+0x6f0/0x6f0 [ 1007.303258] do_mas_munmap+0x1ed/0x2c0 [ 1007.303667] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.304233] mmap_region+0x21c/0x1a80 [ 1007.304635] ? lock_release+0x6f0/0x6f0 [ 1007.305056] ? do_munmap+0x100/0x100 [ 1007.305450] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.306026] ? security_mmap_addr+0x79/0xa0 [ 1007.306489] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.307062] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.307520] do_mmap+0x82a/0xf60 [ 1007.307879] do_shmat+0xe42/0x10d0 [ 1007.308260] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.308758] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.309330] ? vfs_write+0x428/0xad0 [ 1007.309729] __x64_sys_shmat+0xcc/0x160 [ 1007.310159] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.310684] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.311207] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.311773] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.312312] ? trace_hardirqs_on+0x5b/0x190 [ 1007.312772] do_syscall_64+0x3b/0x90 [ 1007.313173] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.313708] RIP: 0033:0x7fb5d96b3b19 [ 1007.314098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.316013] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.316805] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 1007.317541] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000057 [ 1007.318291] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.319033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.319766] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 1007.320510] 08:10:11 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x60000) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="f42115320e35a227835b0b4bd4bd76f69268db48171369bf38f3e9df582f666e5a0ef83bea36a228cc1618169c980de344210e1cf959b0c744f18ed7f28cae07791c953c331f1b3f79d44b7ae18f5a5ac23addc7f56566fb004e72e26a2cceb2085317b9a283f2f1192cce180b1e70bca6af601fb8f1c398da64cc8ec49781541e1ef216e13550e36f299996b786c2c267f1c51d5aa182206d23e814527452b4285c02a1ad5151626c61c62e4f2d94b73cae932c77ad6133d24bc22aecc302e2fc4bc9ba9064b1a97c4938946bc917e5caf9029a9b8fbff05239c7e6e1e6e41e5d22b8736c50") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) close_range(r1, r4, 0x2) socket$netlink(0x10, 0x3, 0x10) r7 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$netlink(r7, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x0) [ 1007.338187] FAULT_INJECTION: forcing a failure. [ 1007.338187] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.340695] CPU: 0 PID: 8586 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.342839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.345368] Call Trace: [ 1007.345945] [ 1007.346457] dump_stack_lvl+0x8b/0xb3 [ 1007.347335] should_fail.cold+0x5/0xa [ 1007.348205] ? create_object.isra.0+0x3a/0xa20 [ 1007.349257] should_failslab+0x5/0x10 [ 1007.350138] kmem_cache_alloc+0x5b/0x480 [ 1007.351077] create_object.isra.0+0x3a/0xa20 [ 1007.352092] ? kasan_unpoison+0x23/0x50 [ 1007.353018] kmem_cache_alloc+0x239/0x480 [ 1007.353969] getname_flags.part.0+0x50/0x4f0 [ 1007.355001] __x64_sys_mkdir+0xda/0x140 [ 1007.355923] do_syscall_64+0x3b/0x90 [ 1007.356786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.357974] RIP: 0033:0x7f22ed51cc27 [ 1007.358853] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.362969] RSP: 002b:00007f22eaa92fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1007.364485] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f22ed51cc27 [ 1007.365877] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1007.367274] RBP: 00007f22eaa93040 R08: 0000000000000000 R09: ffffffffffffffff [ 1007.368662] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1007.370060] R13: 0000000020000080 R14: 00007f22eaa93000 R15: 0000000020000000 [ 1007.371495] [ 1007.382446] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:10:11 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2010, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) [ 1007.397513] loop5: detected capacity change from 0 to 128 [ 1007.399726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1007.406228] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1007.407480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1007.415868] loop5: detected capacity change from 0 to 128 [ 1007.416368] FAULT_INJECTION: forcing a failure. [ 1007.416368] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.419014] CPU: 0 PID: 8597 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.421107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.423536] Call Trace: [ 1007.424085] [ 1007.424559] dump_stack_lvl+0x8b/0xb3 [ 1007.425401] should_fail.cold+0x5/0xa [ 1007.426242] ? __kernfs_new_node+0xd4/0x8b0 [ 1007.427173] should_failslab+0x5/0x10 [ 1007.428003] kmem_cache_alloc+0x5b/0x480 [ 1007.428899] __kernfs_new_node+0xd4/0x8b0 [ 1007.429803] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.430868] ? kernfs_add_one+0x3c6/0x550 [ 1007.431780] ? kernfs_path_from_node+0x60/0x60 [ 1007.432782] ? down_write+0xde/0x150 [ 1007.433612] ? down_write+0xde/0x150 [ 1007.434454] ? up_write+0x148/0x460 [ 1007.435260] ? kernfs_activate+0x1c4/0x240 [ 1007.436203] kernfs_new_node+0x93/0x120 [ 1007.437094] __kernfs_create_file+0x51/0x350 [ 1007.438082] sysfs_add_file_mode_ns+0x218/0x430 [ 1007.439146] ? component_del+0x4c0/0x4c0 [ 1007.440063] internal_create_group+0x322/0xb20 [ 1007.441095] ? sysfs_remove_group+0x170/0x170 [ 1007.442113] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1007.443249] ? __loop_update_dio+0x2a3/0x620 [ 1007.444255] loop_configure+0xe87/0x1950 [ 1007.445191] lo_ioctl+0x782/0x1860 [ 1007.446003] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1007.447132] ? loop_set_status_old+0x1b0/0x1b0 [ 1007.448186] ? fsnotify+0xb4f/0x1250 [ 1007.449039] ? avc_ss_reset+0x180/0x180 [ 1007.449965] ? fsnotify_first_mark+0x1f0/0x1f0 [ 1007.451039] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.452136] ? lock_acquire+0x41c/0x4d0 [ 1007.453061] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.454168] ? lock_release+0x505/0x6f0 [ 1007.455014] ? find_and_remove_object+0xe4/0x120 [ 1007.455951] ? __delete_object+0xb3/0x100 [ 1007.456794] ? lock_downgrade+0x6d0/0x6d0 [ 1007.457608] ? rwlock_bug.part.0+0x90/0x90 [ 1007.458472] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.459417] ? selinux_inode_getsecctx+0x90/0x90 [ 1007.460355] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.461292] ? loop_set_status_old+0x1b0/0x1b0 [ 1007.462207] blkdev_ioctl+0x362/0x7f0 [ 1007.462953] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1007.463892] ? __x64_sys_ioctl+0x97/0x210 [ 1007.464709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.465791] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1007.466733] __x64_sys_ioctl+0x196/0x210 [ 1007.467527] do_syscall_64+0x3b/0x90 [ 1007.468272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.469274] RIP: 0033:0x7f432f5bb8d7 [ 1007.470005] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.473602] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.475113] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 1007.476502] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1007.477908] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1007.479307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1007.480702] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1007.482105] [ 1007.484553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 08:10:11 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 9) 08:10:11 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 6) 08:10:11 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 11) [ 1007.504948] FAULT_INJECTION: forcing a failure. [ 1007.504948] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.507252] CPU: 0 PID: 8601 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.509136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.511384] Call Trace: [ 1007.511885] [ 1007.512330] dump_stack_lvl+0x8b/0xb3 [ 1007.513099] should_fail.cold+0x5/0xa [ 1007.513856] ? mas_alloc_nodes+0x2f4/0x600 [ 1007.514707] should_failslab+0x5/0x10 [ 1007.515463] kmem_cache_alloc+0x5b/0x480 [ 1007.516273] mas_alloc_nodes+0x2f4/0x600 [ 1007.517085] mas_node_count+0x101/0x130 [ 1007.517878] mas_root_expand.isra.0+0xe5/0xa60 [ 1007.518802] ? uprobe_apply+0x150/0x150 [ 1007.519593] mas_wr_store_entry.isra.0+0x33c/0x10e0 [ 1007.520569] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.521654] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.522763] mas_store_gfp+0xca/0x1f0 [ 1007.523506] ? mtree_store+0x30/0x30 [ 1007.524245] do_mas_align_munmap.constprop.0+0x487/0xc00 [ 1007.525311] ? __split_vma+0x540/0x540 [ 1007.526085] ? mas_walk+0x48a/0x670 [ 1007.526812] ? mas_find+0x203/0xdd0 [ 1007.527519] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.528448] ? inode_has_perm+0x171/0x1d0 [ 1007.529260] ? lock_release+0x6f0/0x6f0 [ 1007.530043] do_mas_munmap+0x1ed/0x2c0 [ 1007.530831] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.531907] mmap_region+0x21c/0x1a80 [ 1007.532663] ? lock_release+0x6f0/0x6f0 [ 1007.533442] ? do_munmap+0x100/0x100 [ 1007.534185] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.535264] ? security_mmap_addr+0x79/0xa0 [ 1007.536116] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.537195] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.538060] do_mmap+0x82a/0xf60 [ 1007.538752] do_shmat+0xe42/0x10d0 [ 1007.539458] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.540376] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.541448] ? vfs_write+0x428/0xad0 [ 1007.542192] __x64_sys_shmat+0xcc/0x160 [ 1007.542981] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.543947] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.544925] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.545967] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.546985] ? trace_hardirqs_on+0x5b/0x190 [ 1007.547842] do_syscall_64+0x3b/0x90 [ 1007.548581] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.549586] RIP: 0033:0x7f6302981b19 [ 1007.550324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.553930] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.555430] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 1007.556827] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 1007.558224] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.559623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.561012] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 1007.562427] 08:10:11 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x60000) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="f42115320e35a227835b0b4bd4bd76f69268db48171369bf38f3e9df582f666e5a0ef83bea36a228cc1618169c980de344210e1cf959b0c744f18ed7f28cae07791c953c331f1b3f79d44b7ae18f5a5ac23addc7f56566fb004e72e26a2cceb2085317b9a283f2f1192cce180b1e70bca6af601fb8f1c398da64cc8ec49781541e1ef216e13550e36f299996b786c2c267f1c51d5aa182206d23e814527452b4285c02a1ad5151626c61c62e4f2d94b73cae932c77ad6133d24bc22aecc302e2fc4bc9ba9064b1a97c4938946bc917e5caf9029a9b8fbff05239c7e6e1e6e41e5d22b8736c50") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) close_range(r1, r4, 0x2) socket$netlink(0x10, 0x3, 0x10) r7 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$netlink(r7, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x0) [ 1007.569181] FAULT_INJECTION: forcing a failure. [ 1007.569181] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.571488] CPU: 0 PID: 8602 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.572714] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1007.573360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.576411] Call Trace: [ 1007.576912] [ 1007.577356] dump_stack_lvl+0x8b/0xb3 [ 1007.578116] should_fail.cold+0x5/0xa [ 1007.578896] ? vm_area_dup+0x7f/0x220 [ 1007.579648] should_failslab+0x5/0x10 [ 1007.580389] kmem_cache_alloc+0x5b/0x480 [ 1007.581187] vm_area_dup+0x7f/0x220 [ 1007.581899] ? kmem_cache_alloc+0x332/0x480 [ 1007.582757] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.583828] ? mas_alloc_nodes+0x33c/0x600 [ 1007.584660] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1007.585635] ? mas_is_span_wr+0x14f/0x260 [ 1007.586465] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.587542] ? mas_wr_walk+0x842/0xbd0 [ 1007.588332] ? vm_area_alloc+0xf0/0xf0 [ 1007.589095] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1007.590188] ? mas_next_nentry+0x52b/0xb30 [ 1007.591021] ? mas_find+0x203/0xdd0 [ 1007.591734] ? shm_may_split+0xc1/0xf0 [ 1007.592502] ? shm_fault+0xf0/0xf0 [ 1007.593207] __split_vma+0xa2/0x540 [ 1007.593923] do_mas_align_munmap.constprop.0+0x3d8/0xc00 [ 1007.595007] ? __split_vma+0x540/0x540 [ 1007.595776] ? mas_walk+0x48a/0x670 [ 1007.596483] ? mas_find+0x203/0xdd0 [ 1007.597190] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.598117] ? inode_has_perm+0x171/0x1d0 [ 1007.598949] ? lock_release+0x6f0/0x6f0 [ 1007.599732] do_mas_munmap+0x1ed/0x2c0 [ 1007.600500] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1007.601570] mmap_region+0x21c/0x1a80 [ 1007.602328] ? lock_release+0x6f0/0x6f0 [ 1007.603109] ? do_munmap+0x100/0x100 [ 1007.603843] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.604920] ? security_mmap_addr+0x79/0xa0 [ 1007.605768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1007.606855] ? get_unmapped_area+0x2f0/0x3d0 [ 1007.607718] do_mmap+0x82a/0xf60 [ 1007.608387] do_shmat+0xe42/0x10d0 [ 1007.609096] ? compat_ksys_old_shmctl+0x30/0x30 [ 1007.610016] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1007.611109] ? vfs_write+0x428/0xad0 [ 1007.611851] __x64_sys_shmat+0xcc/0x160 [ 1007.612639] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1007.613606] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1007.614593] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1007.615635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.616647] ? trace_hardirqs_on+0x5b/0x190 [ 1007.617506] do_syscall_64+0x3b/0x90 [ 1007.618261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.619268] RIP: 0033:0x7fb5d96b3b19 [ 1007.619997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.623588] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1007.625071] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 1007.626468] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000058 [ 1007.627856] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.629245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.630653] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 1007.632047] [ 1007.642711] FAULT_INJECTION: forcing a failure. [ 1007.642711] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.645023] CPU: 0 PID: 8605 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1007.646909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1007.648334] ISOFS: Unable to identify CD-ROM format. [ 1007.649127] Call Trace: [ 1007.649134] [ 1007.649142] dump_stack_lvl+0x8b/0xb3 [ 1007.650405] ISOFS: Unable to identify CD-ROM format. [ 1007.650691] should_fail.cold+0x5/0xa [ 1007.652836] ? create_object.isra.0+0x3a/0xa20 [ 1007.653744] should_failslab+0x5/0x10 [ 1007.654490] kmem_cache_alloc+0x5b/0x480 [ 1007.655295] create_object.isra.0+0x3a/0xa20 [ 1007.656163] ? kasan_unpoison+0x23/0x50 [ 1007.656961] __kmalloc+0x25b/0x440 [ 1007.657657] sk_prot_alloc+0x154/0x2e0 [ 1007.658431] ? rcu_read_lock_sched_held+0xd/0x70 [ 1007.659363] sk_alloc+0x30/0x350 [ 1007.660040] __netlink_create+0x63/0x2c0 [ 1007.660851] netlink_create+0x3b2/0x5e0 [ 1007.661628] ? genl_start+0x670/0x670 [ 1007.662393] __sock_create+0x345/0x750 [ 1007.663161] __sys_socket+0xef/0x200 [ 1007.663892] ? compat_sock_ioctl+0x590/0x590 [ 1007.664753] ? ksys_write+0x1a5/0x250 [ 1007.665510] __x64_sys_socket+0x6f/0xb0 [ 1007.666304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1007.667321] do_syscall_64+0x3b/0x90 [ 1007.668061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1007.669071] RIP: 0033:0x7f2f141ab197 [ 1007.669794] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1007.673399] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 1007.674892] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 1007.676288] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1007.677679] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.679102] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 1007.680494] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 1007.681896] [ 1007.688882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1007.697055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1007.734468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:10:21 executing program 2: syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0x10) (fail_nth: 7) 08:10:21 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 12) 08:10:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:21 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x60000) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="f42115320e35a227835b0b4bd4bd76f69268db48171369bf38f3e9df582f666e5a0ef83bea36a228cc1618169c980de344210e1cf959b0c744f18ed7f28cae07791c953c331f1b3f79d44b7ae18f5a5ac23addc7f56566fb004e72e26a2cceb2085317b9a283f2f1192cce180b1e70bca6af601fb8f1c398da64cc8ec49781541e1ef216e13550e36f299996b786c2c267f1c51d5aa182206d23e814527452b4285c02a1ad5151626c61c62e4f2d94b73cae932c77ad6133d24bc22aecc302e2fc4bc9ba9064b1a97c4938946bc917e5caf9029a9b8fbff05239c7e6e1e6e41e5d22b8736c50") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) close_range(r1, r4, 0x2) socket$netlink(0x10, 0x3, 0x10) r7 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$netlink(r7, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x0) 08:10:21 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 10) 08:10:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2e00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 58) 08:10:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 71) [ 1017.391781] FAULT_INJECTION: forcing a failure. [ 1017.391781] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.394189] CPU: 0 PID: 8611 Comm: syz-executor.2 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.396202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.398608] Call Trace: [ 1017.399145] [ 1017.399615] dump_stack_lvl+0x8b/0xb3 [ 1017.400439] should_fail.cold+0x5/0xa [ 1017.401247] ? selinux_sk_alloc_security+0x90/0x200 [ 1017.402328] should_failslab+0x5/0x10 [ 1017.403130] kmem_cache_alloc_trace+0x55/0x3c0 [ 1017.404103] selinux_sk_alloc_security+0x90/0x200 [ 1017.405121] security_sk_alloc+0x56/0xb0 [ 1017.405985] sk_prot_alloc+0x204/0x2e0 [ 1017.406814] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.407005] FAULT_INJECTION: forcing a failure. [ 1017.407005] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.407815] sk_alloc+0x30/0x350 [ 1017.409793] __netlink_create+0x63/0x2c0 [ 1017.410683] netlink_create+0x3b2/0x5e0 [ 1017.411517] ? genl_start+0x670/0x670 [ 1017.412317] __sock_create+0x345/0x750 [ 1017.413130] __sys_socket+0xef/0x200 [ 1017.413918] ? compat_sock_ioctl+0x590/0x590 [ 1017.414856] ? ksys_write+0x1a5/0x250 [ 1017.415680] __x64_sys_socket+0x6f/0xb0 [ 1017.416509] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.417602] do_syscall_64+0x3b/0x90 [ 1017.418419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.419493] RIP: 0033:0x7f2f141ab197 [ 1017.420282] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.424133] RSP: 002b:00007f2f1171e0c8 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 1017.425754] RAX: ffffffffffffffda RBX: 00007f2f142bcf60 RCX: 00007f2f141ab197 [ 1017.427284] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1017.428762] RBP: 00007f2f1171f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.430284] R10: 0000000000000000 R11: 0000000000000283 R12: 0000000000000001 [ 1017.431760] R13: 0000000000000010 R14: 0000000020000140 R15: 0000000000022000 [ 1017.433279] [ 1017.433760] CPU: 1 PID: 8623 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.434791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.435982] Call Trace: [ 1017.436254] [ 1017.436492] dump_stack_lvl+0x8b/0xb3 [ 1017.436913] should_fail.cold+0x5/0xa [ 1017.437325] ? create_object.isra.0+0x3a/0xa20 [ 1017.437818] should_failslab+0x5/0x10 [ 1017.438214] kmem_cache_alloc+0x5b/0x480 [ 1017.438673] ? mas_destroy+0x391/0x8d0 [ 1017.439102] create_object.isra.0+0x3a/0xa20 [ 1017.439121] ? kasan_unpoison+0x23/0x50 [ 1017.439141] kmem_cache_alloc+0x239/0x480 [ 1017.439156] mas_alloc_nodes+0x2f4/0x600 [ 1017.439176] mas_node_count+0x101/0x130 [ 1017.439194] mas_root_expand.isra.0+0xe5/0xa60 [ 1017.439214] ? uprobe_apply+0x150/0x150 [ 1017.439235] mas_wr_store_entry.isra.0+0x33c/0x10e0 [ 1017.439246] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 08:10:21 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(0x0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 11) 08:10:21 executing program 1: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000fe5000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fe6000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) shmat(r0, &(0x7f0000fee000/0x2000)=nil, 0x4000) (fail_nth: 13) [ 1017.439265] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.439282] mas_store_gfp+0xca/0x1f0 [ 1017.439294] ? mtree_store+0x30/0x30 [ 1017.439311] do_mas_align_munmap.constprop.0+0x487/0xc00 [ 1017.439335] ? __split_vma+0x540/0x540 [ 1017.439352] ? mas_walk+0x48a/0x670 [ 1017.439363] ? mas_find+0x203/0xdd0 [ 1017.439373] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.439389] ? inode_has_perm+0x171/0x1d0 [ 1017.439403] ? lock_release+0x6f0/0x6f0 [ 1017.439420] do_mas_munmap+0x1ed/0x2c0 [ 1017.439434] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1017.439455] mmap_region+0x21c/0x1a80 [ 1017.439473] ? lock_release+0x6f0/0x6f0 [ 1017.439486] ? do_munmap+0x100/0x100 [ 1017.439502] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.439518] ? security_mmap_addr+0x79/0xa0 [ 1017.439534] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.439549] ? get_unmapped_area+0x2f0/0x3d0 [ 1017.439564] do_mmap+0x82a/0xf60 [ 1017.439581] do_shmat+0xe42/0x10d0 [ 1017.439603] ? compat_ksys_old_shmctl+0x30/0x30 [ 1017.439622] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.439637] ? vfs_write+0x428/0xad0 [ 1017.439655] __x64_sys_shmat+0xcc/0x160 [ 1017.439674] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1017.439694] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1017.439709] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1017.439727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.439742] ? trace_hardirqs_on+0x5b/0x190 [ 1017.439763] do_syscall_64+0x3b/0x90 [ 1017.439782] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.439796] RIP: 0033:0x7f6302981b19 [ 1017.439806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.439818] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1017.439832] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 1017.439840] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 1017.439848] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.439857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.439864] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 1017.439877] [ 1017.439921] FAULT_INJECTION: forcing a failure. [ 1017.439921] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.439954] CPU: 0 PID: 8618 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.439981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.439997] Call Trace: [ 1017.440005] [ 1017.440014] dump_stack_lvl+0x8b/0xb3 [ 1017.440052] should_fail.cold+0x5/0xa [ 1017.440083] ? create_object.isra.0+0x3a/0xa20 [ 1017.440122] should_failslab+0x5/0x10 [ 1017.440145] kmem_cache_alloc+0x5b/0x480 [ 1017.440176] create_object.isra.0+0x3a/0xa20 [ 1017.440212] ? kasan_unpoison+0x23/0x50 [ 1017.440250] kmem_cache_alloc+0x239/0x480 [ 1017.440280] __kernfs_new_node+0xd4/0x8b0 [ 1017.440303] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.440332] ? kernfs_add_one+0x3c6/0x550 [ 1017.440357] ? kernfs_path_from_node+0x60/0x60 [ 1017.440380] ? down_write+0xde/0x150 [ 1017.440414] ? down_write+0xde/0x150 [ 1017.440448] ? up_write+0x148/0x460 [ 1017.440469] ? kernfs_activate+0x1c4/0x240 [ 1017.440496] kernfs_new_node+0x93/0x120 [ 1017.440521] __kernfs_create_file+0x51/0x350 [ 1017.440550] sysfs_add_file_mode_ns+0x218/0x430 [ 1017.440586] ? component_del+0x4c0/0x4c0 [ 1017.440611] internal_create_group+0x322/0xb20 [ 1017.440644] ? sysfs_remove_group+0x170/0x170 [ 1017.440676] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1017.440708] ? __loop_update_dio+0x2a3/0x620 [ 1017.440738] loop_configure+0xe87/0x1950 [ 1017.440774] lo_ioctl+0x782/0x1860 [ 1017.440801] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1017.440844] ? loop_set_status_old+0x1b0/0x1b0 [ 1017.440874] ? fsnotify+0xb4f/0x1250 [ 1017.440900] ? avc_ss_reset+0x180/0x180 [ 1017.440939] ? fsnotify_first_mark+0x1f0/0x1f0 [ 1017.440965] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.440992] ? lock_acquire+0x41c/0x4d0 [ 1017.441018] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.441045] ? lock_release+0x505/0x6f0 [ 1017.441071] ? find_and_remove_object+0xe4/0x120 [ 1017.441105] ? __delete_object+0xb3/0x100 [ 1017.441140] ? lock_downgrade+0x6d0/0x6d0 [ 1017.441166] ? rwlock_bug.part.0+0x90/0x90 [ 1017.441195] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.441237] ? selinux_inode_getsecctx+0x90/0x90 [ 1017.441271] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.441299] ? loop_set_status_old+0x1b0/0x1b0 [ 1017.441329] blkdev_ioctl+0x362/0x7f0 [ 1017.441352] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1017.441374] ? __x64_sys_ioctl+0x97/0x210 [ 1017.441401] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.441431] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1017.441455] __x64_sys_ioctl+0x196/0x210 [ 1017.441481] do_syscall_64+0x3b/0x90 [ 1017.441515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.441539] RIP: 0033:0x7f432f5bb8d7 [ 1017.441556] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.441579] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.441602] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 1017.441618] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1017.441633] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1017.441647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1017.441662] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1017.441685] [ 1017.442538] loop5: detected capacity change from 0 to 128 [ 1017.444355] loop0: detected capacity change from 0 to 128 [ 1017.451915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1017.453447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1017.454980] FAULT_INJECTION: forcing a failure. [ 1017.454980] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.455011] CPU: 0 PID: 8626 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.455038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.455054] Call Trace: [ 1017.455059] [ 1017.455067] dump_stack_lvl+0x8b/0xb3 [ 1017.455103] should_fail.cold+0x5/0xa [ 1017.455134] ? create_object.isra.0+0x3a/0xa20 [ 1017.455170] should_failslab+0x5/0x10 [ 1017.455191] kmem_cache_alloc+0x5b/0x480 [ 1017.455221] create_object.isra.0+0x3a/0xa20 [ 1017.455255] ? kasan_unpoison+0x23/0x50 [ 1017.455291] kmem_cache_alloc+0x239/0x480 [ 1017.455321] getname_flags.part.0+0x50/0x4f0 [ 1017.455360] __x64_sys_mkdir+0xda/0x140 [ 1017.455396] do_syscall_64+0x3b/0x90 [ 1017.455430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.455454] RIP: 0033:0x7f22ed51cc27 [ 1017.455471] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.455495] RSP: 002b:00007f22eaa92fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1017.455519] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f22ed51cc27 [ 1017.455535] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1017.455551] RBP: 00007f22eaa93040 R08: 0000000000000000 R09: ffffffffffffffff [ 1017.455572] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1017.455587] R13: 0000000020000080 R14: 00007f22eaa93000 R15: 0000000020000000 [ 1017.455612] [ 1017.461734] FAULT_INJECTION: forcing a failure. [ 1017.461734] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.461766] CPU: 0 PID: 8624 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.461793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.461808] Call Trace: [ 1017.461814] [ 1017.461821] dump_stack_lvl+0x8b/0xb3 [ 1017.461856] should_fail.cold+0x5/0xa [ 1017.461886] ? create_object.isra.0+0x3a/0xa20 [ 1017.461922] should_failslab+0x5/0x10 [ 1017.461943] kmem_cache_alloc+0x5b/0x480 [ 1017.461972] create_object.isra.0+0x3a/0xa20 [ 1017.462006] ? kasan_unpoison+0x23/0x50 [ 1017.462043] kmem_cache_alloc+0x239/0x480 [ 1017.462072] vm_area_dup+0x7f/0x220 [ 1017.462103] ? kmem_cache_alloc+0x332/0x480 [ 1017.462132] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.462162] ? mas_alloc_nodes+0x33c/0x600 [ 1017.462198] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1017.462227] ? mas_is_span_wr+0x14f/0x260 [ 1017.462263] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.462304] ? mas_wr_walk+0x842/0xbd0 [ 1017.462344] ? vm_area_alloc+0xf0/0xf0 [ 1017.462374] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.462405] ? mas_next_nentry+0x52b/0xb30 [ 1017.462433] ? mas_find+0x203/0xdd0 [ 1017.462454] ? shm_may_split+0xc1/0xf0 [ 1017.462488] ? shm_fault+0xf0/0xf0 [ 1017.462519] __split_vma+0xa2/0x540 [ 1017.462549] do_mas_align_munmap.constprop.0+0x3d8/0xc00 [ 1017.462591] ? __split_vma+0x540/0x540 [ 1017.462621] ? mas_walk+0x48a/0x670 [ 1017.462643] ? mas_find+0x203/0xdd0 [ 1017.462662] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.462691] ? inode_has_perm+0x171/0x1d0 [ 1017.462713] ? lock_release+0x6f0/0x6f0 [ 1017.462743] do_mas_munmap+0x1ed/0x2c0 [ 1017.462770] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1017.462810] mmap_region+0x21c/0x1a80 [ 1017.462843] ? lock_release+0x6f0/0x6f0 [ 1017.462869] ? do_munmap+0x100/0x100 [ 1017.462899] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.462929] ? security_mmap_addr+0x79/0xa0 [ 1017.462959] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.462988] ? get_unmapped_area+0x2f0/0x3d0 [ 1017.463016] do_mmap+0x82a/0xf60 [ 1017.463048] do_shmat+0xe42/0x10d0 [ 1017.463087] ? compat_ksys_old_shmctl+0x30/0x30 [ 1017.463125] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.463155] ? vfs_write+0x428/0xad0 [ 1017.463188] __x64_sys_shmat+0xcc/0x160 [ 1017.463225] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1017.463262] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1017.463291] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1017.463320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.463345] ? trace_hardirqs_on+0x5b/0x190 [ 1017.463385] do_syscall_64+0x3b/0x90 [ 1017.463419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.463443] RIP: 0033:0x7fb5d96b3b19 [ 1017.463460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.463483] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1017.463506] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 1017.463523] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000059 [ 1017.463538] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.463553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.463568] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 1017.463592] [ 1017.470459] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 1017.471308] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1017.487839] loop0: detected capacity change from 0 to 128 [ 1017.516798] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 1017.517916] ISOFS: Unable to identify CD-ROM format. [ 1017.533154] FAULT_INJECTION: forcing a failure. [ 1017.533154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.533177] CPU: 1 PID: 8632 Comm: syz-executor.1 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.533193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.533202] Call Trace: [ 1017.533206] [ 1017.533211] dump_stack_lvl+0x8b/0xb3 [ 1017.533236] should_fail.cold+0x5/0xa [ 1017.533253] prepare_alloc_pages+0x17b/0x500 [ 1017.533272] __alloc_pages+0x131/0x4e0 [ 1017.533288] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1017.533306] ? lock_acquire+0x41c/0x4d0 [ 1017.533322] ? lock_release+0x6f0/0x6f0 [ 1017.533337] ? lock_release+0x505/0x6f0 [ 1017.533350] ? unlock_page_memcg+0xed/0x310 [ 1017.533369] ? lock_downgrade+0x6d0/0x6d0 [ 1017.533384] alloc_pages+0x1a0/0x2f0 [ 1017.533403] __get_free_pages+0xc/0xa0 [ 1017.533416] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.533434] __tlb_remove_page_size+0x253/0x420 [ 1017.533453] unmap_page_range+0x116c/0x2680 [ 1017.533478] ? vm_normal_page+0x2d0/0x2d0 [ 1017.533496] ? mas_find+0x203/0xdd0 [ 1017.533509] ? uprobe_munmap+0x1c/0x550 [ 1017.533529] unmap_single_vma+0x192/0x300 [ 1017.533549] unmap_vmas+0x1f0/0x340 [ 1017.533571] ? folio_lruvec_lock_irq+0x180/0x2d0 [ 1017.533587] ? unmap_mapping_range+0x270/0x270 [ 1017.533606] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.533623] ? lock_downgrade+0x6d0/0x6d0 [ 1017.533640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.533657] unmap_region+0x1dc/0x2f0 [ 1017.533671] ? remove_vma+0x130/0x130 [ 1017.533684] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.533704] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.533719] ? __split_vma+0x3b5/0x540 [ 1017.533735] do_mas_align_munmap.constprop.0+0x69b/0xc00 [ 1017.533754] ? __split_vma+0x540/0x540 [ 1017.533770] ? mas_walk+0x48a/0x670 [ 1017.533781] ? mas_find+0x203/0xdd0 [ 1017.533792] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.533807] ? inode_has_perm+0x171/0x1d0 [ 1017.533820] ? lock_release+0x6f0/0x6f0 [ 1017.533835] do_mas_munmap+0x1ed/0x2c0 [ 1017.533850] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1017.533871] mmap_region+0x21c/0x1a80 [ 1017.533887] ? lock_release+0x6f0/0x6f0 [ 1017.533902] ? do_munmap+0x100/0x100 [ 1017.533918] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.533933] ? security_mmap_addr+0x79/0xa0 [ 1017.533949] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.533965] ? get_unmapped_area+0x2f0/0x3d0 [ 1017.533980] do_mmap+0x82a/0xf60 [ 1017.533996] do_shmat+0xe42/0x10d0 [ 1017.534019] ? compat_ksys_old_shmctl+0x30/0x30 [ 1017.534038] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.534054] ? vfs_write+0x428/0xad0 [ 1017.534072] __x64_sys_shmat+0xcc/0x160 [ 1017.534091] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1017.534110] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1017.534126] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1017.534141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.534156] ? trace_hardirqs_on+0x5b/0x190 [ 1017.534178] do_syscall_64+0x3b/0x90 [ 1017.534197] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.534211] RIP: 0033:0x7fb5d96b3b19 [ 1017.534221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.534233] RSP: 002b:00007fb5d6c29188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1017.534247] RAX: ffffffffffffffda RBX: 00007fb5d97c6f60 RCX: 00007fb5d96b3b19 [ 1017.534256] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 000000000000005a [ 1017.534264] RBP: 00007fb5d6c291d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.534287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.534295] R13: 00007ffd9159d1ff R14: 00007fb5d6c29300 R15: 0000000000022000 [ 1017.534303] ISOFS: Unable to identify CD-ROM format. [ 1017.534308] [ 1017.535172] FAULT_INJECTION: forcing a failure. [ 1017.535172] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.535189] CPU: 1 PID: 8633 Comm: syz-executor.7 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.535203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.535211] Call Trace: [ 1017.535214] [ 1017.535218] dump_stack_lvl+0x8b/0xb3 [ 1017.535235] should_fail.cold+0x5/0xa [ 1017.535251] ? vm_area_dup+0x7f/0x220 [ 1017.535269] should_failslab+0x5/0x10 [ 1017.535281] kmem_cache_alloc+0x5b/0x480 [ 1017.535297] vm_area_dup+0x7f/0x220 [ 1017.535312] ? kmem_cache_alloc+0x332/0x480 [ 1017.535327] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.535343] ? mas_alloc_nodes+0x33c/0x600 [ 1017.535362] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1017.535377] ? mas_is_span_wr+0x14f/0x260 [ 1017.535395] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.535411] ? mas_wr_walk+0x842/0xbd0 [ 1017.535432] ? vm_area_alloc+0xf0/0xf0 [ 1017.535448] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1017.535464] ? mas_next_nentry+0x52b/0xb30 [ 1017.535478] ? mas_find+0x203/0xdd0 [ 1017.535494] ? shm_may_split+0xc1/0xf0 [ 1017.535511] ? shm_fault+0xf0/0xf0 [ 1017.535528] __split_vma+0xa2/0x540 [ 1017.535545] do_mas_align_munmap.constprop.0+0x3d8/0xc00 [ 1017.535564] ? __split_vma+0x540/0x540 [ 1017.535580] ? mas_walk+0x48a/0x670 [ 1017.535595] ? mas_find+0x203/0xdd0 [ 1017.535605] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.535620] ? inode_has_perm+0x171/0x1d0 [ 1017.535632] ? lock_release+0x6f0/0x6f0 [ 1017.535647] do_mas_munmap+0x1ed/0x2c0 [ 1017.535661] ? arch_get_unmapped_area_topdown+0xbd/0x530 [ 1017.535681] mmap_region+0x21c/0x1a80 [ 1017.706214] ? lock_release+0x6f0/0x6f0 [ 1017.706669] ? do_munmap+0x100/0x100 [ 1017.707088] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.707686] ? security_mmap_addr+0x79/0xa0 [ 1017.708160] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.708756] ? get_unmapped_area+0x2f0/0x3d0 [ 1017.709249] do_mmap+0x82a/0xf60 [ 1017.709626] do_shmat+0xe42/0x10d0 [ 1017.710034] ? compat_ksys_old_shmctl+0x30/0x30 [ 1017.710578] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.711197] ? vfs_write+0x428/0xad0 [ 1017.711625] __x64_sys_shmat+0xcc/0x160 [ 1017.712086] ? __ia32_compat_sys_shmat+0x160/0x160 [ 1017.712652] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 1017.713212] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 1017.713821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1017.714404] ? trace_hardirqs_on+0x5b/0x190 [ 1017.714906] do_syscall_64+0x3b/0x90 [ 1017.715335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.715914] RIP: 0033:0x7f6302981b19 [ 1017.716327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.718417] RSP: 002b:00007f62ffef7188 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 1017.719283] RAX: ffffffffffffffda RBX: 00007f6302a94f60 RCX: 00007f6302981b19 [ 1017.720091] RDX: 0000000000004000 RSI: 0000000020fee000 RDI: 0000000000000000 [ 1017.720888] RBP: 00007f62ffef71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1017.721691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1017.722517] R13: 00007fffb8456d2f R14: 00007f62ffef7300 R15: 0000000000022000 [ 1017.723321] [ 1017.792214] loop5: detected capacity change from 0 to 128 [ 1017.797578] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1017.805626] FAULT_INJECTION: forcing a failure. [ 1017.805626] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.806865] CPU: 1 PID: 8639 Comm: syz-executor.4 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.807868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.809050] Call Trace: [ 1017.809317] [ 1017.809551] dump_stack_lvl+0x8b/0xb3 [ 1017.809961] should_fail.cold+0x5/0xa [ 1017.810371] ? __d_alloc+0x2a/0x990 [ 1017.810758] should_failslab+0x5/0x10 [ 1017.811160] kmem_cache_alloc+0x5b/0x480 [ 1017.811600] __d_alloc+0x2a/0x990 [ 1017.811971] d_alloc+0x46/0x1c0 [ 1017.812317] __lookup_hash+0xc8/0x190 [ 1017.812727] filename_create+0x184/0x480 [ 1017.813173] ? filename_parentat+0x5a0/0x5a0 [ 1017.813642] ? lock_downgrade+0x6d0/0x6d0 [ 1017.814085] ? lock_downgrade+0x6d0/0x6d0 [ 1017.814530] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.815132] ? __virt_addr_valid+0xe9/0x310 [ 1017.815660] do_mkdirat+0x92/0x2e0 [ 1017.816092] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.816722] ? do_file_open_root+0x590/0x590 [ 1017.817222] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.817850] ? getname_flags.part.0+0x1dd/0x4f0 [ 1017.818392] __x64_sys_mkdir+0xf2/0x140 [ 1017.818825] do_syscall_64+0x3b/0x90 [ 1017.819253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.819794] RIP: 0033:0x7f22ed51cc27 08:10:21 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 72) 08:10:21 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3f00, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[]) 08:10:21 executing program 3: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@session}]}) (fail_nth: 59) 08:10:21 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x60000) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="f42115320e35a227835b0b4bd4bd76f69268db48171369bf38f3e9df582f666e5a0ef83bea36a228cc1618169c980de344210e1cf959b0c744f18ed7f28cae07791c953c331f1b3f79d44b7ae18f5a5ac23addc7f56566fb004e72e26a2cceb2085317b9a283f2f1192cce180b1e70bca6af601fb8f1c398da64cc8ec49781541e1ef216e13550e36f299996b786c2c267f1c51d5aa182206d23e814527452b4285c02a1ad5151626c61c62e4f2d94b73cae932c77ad6133d24bc22aecc302e2fc4bc9ba9064b1a97c4938946bc917e5caf9029a9b8fbff05239c7e6e1e6e41e5d22b8736c50") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202010000009254e37a3db6be455593dcd388880026006c09000077b6f3176e83d848f4b2098ae8a41e7b51194b8f0bca40a9b576abc1f9abe58d09f1d04f3221adb46687a554091419d0466100dd2380fd51b123a5552abd1c8c9eedc0ed03d1c89537337883e42144209dcbee072c14aa1a0d09deb74e69f61a27792c0cfbeaafe07fe87f00"/153], 0x30}}, 0x0) close_range(r1, r4, 0x2) socket$netlink(0x10, 0x3, 0x10) r7 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$netlink(r7, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0x4, 0x11}]}, 0x18}], 0x1}, 0x0) [ 1017.820203] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.822629] RSP: 002b:00007f22eaa92fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1017.822643] RAX: ffffffffffffffda RBX: 0000000020000440 RCX: 00007f22ed51cc27 [ 1017.822652] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1017.822660] RBP: 00007f22eaa93040 R08: 0000000000000000 R09: ffffffffffffffff [ 1017.822668] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1017.822677] R13: 0000000020000080 R14: 00007f22eaa93000 R15: 0000000020000000 [ 1017.822689] [ 1017.827858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1017.832364] loop5: detected capacity change from 0 to 128 [ 1017.835976] loop0: detected capacity change from 0 to 128 [ 1017.836727] isofs_fill_super: bread failed, dev=loop5, iso_blknum=32, block=64 [ 1017.845800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1017.850403] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 1017.870115] loop0: detected capacity change from 0 to 128 [ 1017.898428] isofs_fill_super: bread failed, dev=loop0, iso_blknum=32, block=64 [ 1017.952798] FAULT_INJECTION: forcing a failure. [ 1017.952798] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.954074] CPU: 1 PID: 8644 Comm: syz-executor.3 Tainted: G B 5.17.0-rc5-next-20220225 #1 [ 1017.955102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1017.956322] Call Trace: [ 1017.956592] [ 1017.956829] dump_stack_lvl+0x8b/0xb3 [ 1017.957247] should_fail.cold+0x5/0xa [ 1017.957657] ? __kernfs_new_node+0xd4/0x8b0 [ 1017.958123] should_failslab+0x5/0x10 [ 1017.958530] kmem_cache_alloc+0x5b/0x480 [ 1017.958969] __kernfs_new_node+0xd4/0x8b0 [ 1017.959408] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.959927] ? kernfs_add_one+0x3c6/0x550 [ 1017.960370] ? kernfs_path_from_node+0x60/0x60 [ 1017.960865] ? down_write+0xde/0x150 [ 1017.961268] ? down_write+0xde/0x150 [ 1017.961669] ? up_write+0x148/0x460 [ 1017.962056] ? kernfs_activate+0x1c4/0x240 [ 1017.962513] kernfs_new_node+0x93/0x120 [ 1017.962950] __kernfs_create_file+0x51/0x350 [ 1017.963431] sysfs_add_file_mode_ns+0x218/0x430 [ 1017.963955] ? component_del+0x4c0/0x4c0 [ 1017.964406] internal_create_group+0x322/0xb20 [ 1017.964921] ? sysfs_remove_group+0x170/0x170 [ 1017.965422] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1017.965984] ? __loop_update_dio+0x2a3/0x620 [ 1017.966498] loop_configure+0xe87/0x1950 [ 1017.966956] lo_ioctl+0x782/0x1860 [ 1017.967347] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1017.967888] ? loop_set_status_old+0x1b0/0x1b0 [ 1017.968395] ? fsnotify+0xb4f/0x1250 [ 1017.968813] ? avc_ss_reset+0x180/0x180 [ 1017.969262] ? fsnotify_first_mark+0x1f0/0x1f0 [ 1017.969763] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.970273] ? lock_acquire+0x41c/0x4d0 [ 1017.970729] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.971251] ? lock_release+0x505/0x6f0 [ 1017.971688] ? find_and_remove_object+0xe4/0x120 [ 1017.972216] ? __delete_object+0xb3/0x100 [ 1017.972682] ? lock_downgrade+0x6d0/0x6d0 [ 1017.973125] ? rwlock_bug.part.0+0x90/0x90 [ 1017.973591] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.974112] ? selinux_inode_getsecctx+0x90/0x90 [ 1017.974661] ? rcu_read_lock_sched_held+0xd/0x70 [ 1017.975182] ? loop_set_status_old+0x1b0/0x1b0 [ 1017.975696] blkdev_ioctl+0x362/0x7f0 [ 1017.976117] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1017.976634] ? __x64_sys_ioctl+0x97/0x210 [ 1017.977095] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.977704] ? blkdev_common_ioctl+0x16d0/0x16d0 [ 1017.978231] __x64_sys_ioctl+0x196/0x210 [ 1017.978692] do_syscall_64+0x3b/0x90 [ 1017.979106] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1017.979672] RIP: 0033:0x7f432f5bb8d7 [ 1017.980075] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1017.982094] RSP: 002b:00007f432cb30f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1017.982946] RAX: ffffffffffffffda RBX: 00007f432f605970 RCX: 00007f432f5bb8d7 [ 1017.983738] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1017.984526] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1017.985324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1017.986110] R13: 0000000000000004 R14: 0000000020000440 R15: 0000000000000000 [ 1017.986910] [ 1018.010476] ISOFS: Unable to identify CD-ROM format. [ 1023.723924] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1028.717770] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888017b34600 (size 256): comm "syz-executor.1", pid 8602, jiffies 4295674423 (age 27.028s) hex dump (first 32 bytes): 09 7b 76 45 80 88 ff ff ff df fe 20 00 00 00 00 .{vE....... .... ff ef fe 20 00 00 00 00 ff ff fe 20 00 00 00 00 ... ....... .... backtrace: [<00000000aea1b3e5>] mas_alloc_nodes+0x2f4/0x600 [<00000000aab6268d>] mas_node_count+0x101/0x130 [<000000003e147570>] mas_root_expand.isra.0+0xe5/0xa60 [<00000000b09cdd99>] mas_wr_store_entry.isra.0+0x33c/0x10e0 [<00000000cd702252>] mas_store_gfp+0xca/0x1f0 [<00000000cd5da663>] do_mas_align_munmap.constprop.0+0x487/0xc00 [<000000001494df37>] do_mas_munmap+0x1ed/0x2c0 [<000000006082c4c7>] mmap_region+0x21c/0x1a80 [<00000000e05afdcf>] do_mmap+0x82a/0xf60 [<00000000a8207450>] do_shmat+0xe42/0x10d0 [<00000000093f4779>] __x64_sys_shmat+0xcc/0x160 [<00000000e2e78598>] do_syscall_64+0x3b/0x90 [<00000000d12ef0f7>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff888040a5ac00 (size 256): comm "syz-executor.7", pid 8633, jiffies 4295684389 (age 17.062s) hex dump (first 32 bytes): 09 fb dd 44 80 88 ff ff ff df fe 20 00 00 00 00 ...D....... .... ff ef fe 20 00 00 00 00 ff ff fe 20 00 00 00 00 ... ....... .... backtrace: [<00000000aea1b3e5>] mas_alloc_nodes+0x2f4/0x600 [<00000000aab6268d>] mas_node_count+0x101/0x130 [<000000003e147570>] mas_root_expand.isra.0+0xe5/0xa60 [<00000000b09cdd99>] mas_wr_store_entry.isra.0+0x33c/0x10e0 [<00000000cd702252>] mas_store_gfp+0xca/0x1f0 [<00000000cd5da663>] do_mas_align_munmap.constprop.0+0x487/0xc00 [<000000001494df37>] do_mas_munmap+0x1ed/0x2c0 [<000000006082c4c7>] mmap_region+0x21c/0x1a80 [<00000000e05afdcf>] do_mmap+0x82a/0xf60 [<00000000a8207450>] do_shmat+0xe42/0x10d0 [<00000000093f4779>] __x64_sys_shmat+0xcc/0x160 [<00000000e2e78598>] do_syscall_64+0x3b/0x90 [<00000000d12ef0f7>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: leak checking failed VM DIAGNOSIS: 08:10:38 Registers: info registers vcpu 0 RAX=ffffffff841032c0 RBX=ffffffff85032800 RCX=ffffffff840e5b71 RDX=ffffed100d9c719b RSI=0000000000000001 RDI=ffffffff8410367f RBP=0000000000000000 RSP=ffffffff85007e40 R8 =0000000000000000 R9 =ffff88806ce38cd3 R10=ffffed100d9c719a R11=0000000000000001 R12=fffffbfff0a06500 R13=ffffffff858cc390 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff841032cb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056476b9c0648 CR3=0000000017c16000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0a64656c69616620 676e696b63656863 YMM02=0000000000000000 0000000000000000 31636e75662e6e75 522e6c697475736f YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 6b61656c22202272 6f7475636578652d YMM05=0000000000000000 0000000000000000 73646572635f6572 6170657270222022 YMM06=0000000000000000 0000000000000000 22737365636f7270 5f79706f63222022 YMM07=0000000000000000 0000000000000000 3120737574617473 2074697865203a5d YMM08=0000000000000000 0000000000000000 3e30373537343165 3330303030303030 YMM09=0000000000000000 0000000000000000 6e617078655f746f 6f725f73616d205d YMM10=0000000000000000 0000000000000000 78302f356578302b 302e617273692e64 YMM11=0000000000000000 0000000000000000 3030303030303c5b 202020200a303661 YMM12=0000000000000000 0000000000000000 73616d205d3e3939 6464633930623030 YMM13=0000000000000000 0000000000000000 696d20636578650d 0065676169727420 YMM14=0000000000000000 0000000000000000 6e69682063657865 0a00657a696d696e YMM15=0000000000000000 0000000000000000 0000736465657320 636578650a007374 info registers vcpu 1 RAX=ffffffff841032c0 RBX=ffff8880081ccf80 RCX=ffffffff840e5b71 RDX=ffffed100d9e719b RSI=0000000000000001 RDI=ffffffff8410367f RBP=0000000000000001 RSP=ffff888008207e78 R8 =0000000000000000 R9 =ffff88806cf38cd3 R10=ffffed100d9e719a R11=0000000000000001 R12=ffffed10010399f0 R13=ffffffff858cc390 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff841032cb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe44e657a0 CR3=0000000017c16000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4184f61b00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000