tag#0 unaligned transfer
[ 312.046587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.047321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.048004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.048688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.049319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.050018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.050699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.051375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.052075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.052803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.053436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.054148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.054827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.055536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.056182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.056863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.057528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.058235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.058967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.059653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.060303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.061003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.061668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.062258] FAULT_INJECTION: forcing a failure.
[ 312.062258] name failslab, interval 1, probability 0, space 0, times 0
[ 312.062332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.064718] CPU: 1 PID: 4758 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 312.065230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.066788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 312.066807] Call Trace:
[ 312.066814]
[ 312.067526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.069651] dump_stack_lvl+0x8b/0xb3
[ 312.070034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.070399] should_fail.cold+0x5/0xa
[ 312.071088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.071725] ? create_user_ns+0x1ac/0xe90
[ 312.072399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.073060] should_failslab+0x5/0x10
[ 312.073729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.074446] kmem_cache_alloc+0x5b/0x480
[ 312.075129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.075790] create_user_ns+0x1ac/0xe90
[ 312.076466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.077157] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 312.077814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.078497] ? prepare_creds+0x519/0x6f0
[ 312.079242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.080185] copy_creds+0x545/0xb20
[ 312.080851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.081567] copy_process+0xe3f/0x6d10
[ 312.082224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.082891] ? __cleanup_sighand+0xb0/0xb0
[ 312.083541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.084217] ? lock_is_held_type+0xd7/0x130
[ 312.084874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.085610] ? find_held_lock+0x2c/0x110
[ 312.086270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.087046] ? kernel_clone+0xc4/0xa60
[ 312.087717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.088418] kernel_clone+0xe7/0xa60
[ 312.089071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.089747] ? create_io_thread+0xf0/0xf0
[ 312.090466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.091063] ? find_held_lock+0x2c/0x110
[ 312.091731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.092456] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 312.093119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.093833] ? bit_wait_io_timeout+0x160/0x160
[ 312.094514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.095383] __do_sys_clone+0xc8/0x110
[ 312.096035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.096828] ? __do_sys_vfork+0xd0/0xd0
[ 312.097512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.098171] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 312.098819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.099506] ? vfs_write+0x428/0xad0
[ 312.100157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.101179] ? syscall_enter_from_user_mode+0x1d/0x50
[ 312.101862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.102471] do_syscall_64+0x3b/0x90
[ 312.103113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.104048] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 312.104706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.105341] RIP: 0033:0x7fa70862cb19
[ 312.105989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.106913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 312.107596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.108223] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246
[ 312.108891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.112466] ORIG_RAX: 0000000000000038
[ 312.112477] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 312.113136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.114095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 312.114112] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 312.114797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.115468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 312.115484] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 312.116386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.117318]
[ 312.118156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.122948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.123561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 312.162036] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 312.163141] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 312.163858] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 312.164528] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
12:39:09 executing program 2:
clone3(&(0x7f0000000640)={0x123363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2)
12:39:09 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:09 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
stat(0x0, 0x0)
mkdirat(r0, &(0x7f0000001580)='./file0\x00', 0x20)
r1 = signalfd(r0, &(0x7f00000015c0), 0x8)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000001600)='$-', &(0x7f0000001640)='./file0\x00', r0)
12:39:09 executing program 4:
r0 = creat(&(0x7f0000001a00)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
setxattr$security_capability(&(0x7f0000001b80)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0xfffffffe, 0x5c5}, {0x7, 0x3f}], 0xffffffffffffffff}, 0x18, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x8)
r2 = accept4(0xffffffffffffffff, &(0x7f0000001540)=@pptp, &(0x7f00000015c0)=0x80, 0x800)
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="9f0100001c00200028bd7000fddbdf256c08000c000000000028001a0000000000000000000000000000000000ac1efd010000000000000000000000000a000c0850001100fc0100000000000000000000000000010a010100000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000002b030000ff34000002000a0008001d0001000000e8001100ac1e01010000000000000000000000007f000001000000000000000000000000e0000001000000000000000000000000ac1e00010000000000000000000000002b000000063500000a000a007f000003000000000000000000000000fc010000000000000000000000000000ac1414bb000000000000000000000000fe880000000000000000000000000101320100000135000002000a00ac1414aa000000000000000000000000fe880000000000000000000000000101fc020000000000000000000000000000ac1414aa000000000004000000000000ff0000000235000002000a00050019006c00000030001700050000002dbd70002dbd700026bd700025bd700005000000000000b000000000010000003ffeffff590000000800180001ffffff000000"], 0x1c4}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
pread64(r3, &(0x7f0000000540)=""/4096, 0x1000, 0x39)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="c5", 0x1}], 0x1, 0x0, 0x0)
[ 327.685217] FAULT_INJECTION: forcing a failure.
[ 327.685217] name failslab, interval 1, probability 0, space 0, times 0
[ 327.686540] CPU: 0 PID: 4775 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 327.687414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 327.688594] Call Trace:
[ 327.688861]
[ 327.689095] dump_stack_lvl+0x8b/0xb3
[ 327.689511] should_fail.cold+0x5/0xa
[ 327.689917] ? security_prepare_creds+0x10a/0x180
[ 327.690430] should_failslab+0x5/0x10
[ 327.690835] __kmalloc+0x72/0x440
[ 327.691209] security_prepare_creds+0x10a/0x180
[ 327.691701] prepare_creds+0x505/0x6f0
[ 327.692120] copy_creds+0x76/0xb20
[ 327.692507] copy_process+0xe3f/0x6d10
[ 327.692928] ? __cleanup_sighand+0xb0/0xb0
[ 327.693380] ? lock_is_held_type+0xd7/0x130
[ 327.693839] ? find_held_lock+0x2c/0x110
[ 327.694290] ? kernel_clone+0xc4/0xa60
[ 327.694704] kernel_clone+0xe7/0xa60
[ 327.695117] ? create_io_thread+0xf0/0xf0
[ 327.695557] ? find_held_lock+0x2c/0x110
[ 327.695980] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 327.696489] ? bit_wait_io_timeout+0x160/0x160
[ 327.696969] __do_sys_clone+0xc8/0x110
[ 327.697374] ? __do_sys_vfork+0xd0/0xd0
[ 327.697792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 327.698389] ? vfs_write+0x428/0xad0
[ 327.698795] ? syscall_enter_from_user_mode+0x1d/0x50
[ 327.699349] do_syscall_64+0x3b/0x90
[ 327.699740] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 327.700276] RIP: 0033:0x7f71bf82bb19
[ 327.700669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 327.702600] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 327.703416] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 327.704155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 327.704915] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 327.705652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 327.706402] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 327.707166]
[ 327.709901] loop5: detected capacity change from 0 to 240
12:39:09 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)
12:39:09 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
epoll_create(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000006c0)=0xfffffffc, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:09 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
epoll_create(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000006c0)=0xfffffffc, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:09 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6)
[ 327.728086] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 327.729101] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current]
[ 327.729928] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 327.730618] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 327.731403] blk_print_req_error: 668 callbacks suppressed
[ 327.731411] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0
[ 327.733265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.733892] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.734754] buffer_io_error: 686 callbacks suppressed
[ 327.734761] Buffer I/O error on dev sr0, logical block 0, async page read
[ 327.737350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.737977] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.738912] Buffer I/O error on dev sr0, logical block 1, async page read
[ 327.739934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.740531] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.741577] Buffer I/O error on dev sr0, logical block 2, async page read
[ 327.743066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.743670] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.744592] Buffer I/O error on dev sr0, logical block 3, async page read
[ 327.745473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.745937] FAULT_INJECTION: forcing a failure.
[ 327.745937] name failslab, interval 1, probability 0, space 0, times 0
[ 327.746019] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.748715] CPU: 1 PID: 4783 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 327.748746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 327.749605] Buffer I/O error on dev sr0, logical block 4, async page read
[ 327.751435] Call Trace:
[ 327.751445]
[ 327.751455] dump_stack_lvl+0x8b/0xb3
[ 327.752725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.754141] should_fail.cold+0x5/0xa
[ 327.754182] ? create_object.isra.0+0x3a/0xa20
[ 327.754474] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.754956] should_failslab+0x5/0x10
[ 327.755355] Buffer I/O error on dev sr0, logical block 5, async page read
[ 327.756504] kmem_cache_alloc+0x5b/0x480
[ 327.756989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.757900] ? obj_cgroup_charge+0x247/0x740
[ 327.758772] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.759594] create_object.isra.0+0x3a/0xa20
[ 327.760299] Buffer I/O error on dev sr0, logical block 6, async page read
[ 327.761183] ? kasan_unpoison+0x23/0x50
[ 327.761831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.762699] kmem_cache_alloc+0x239/0x480
[ 327.763594] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.764564] create_user_ns+0x1ac/0xe90
[ 327.765280] Buffer I/O error on dev sr0, logical block 7, async page read
[ 327.766154] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 327.767075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.767627] ? prepare_creds+0x519/0x6f0
[ 327.768513] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 327.769356] copy_creds+0x545/0xb20
[ 327.770079] Buffer I/O error on dev sr0, logical block 0, async page read
[ 327.771294] copy_process+0xe3f/0x6d10
[ 327.771940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.772773] ? __cleanup_sighand+0xb0/0xb0
[ 327.773635] Buffer I/O error on dev sr0, logical block 1, async page read
[ 327.774414] ? lock_is_held_type+0xd7/0x130
[ 327.775204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.775956] ? find_held_lock+0x2c/0x110
[ 327.776627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.777445] ? kernel_clone+0xc4/0xa60
[ 327.778267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.779108] kernel_clone+0xe7/0xa60
[ 327.779791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.780562] ? create_io_thread+0xf0/0xf0
[ 327.781229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.781951] ? find_held_lock+0x2c/0x110
[ 327.782629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.783344] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 327.784057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.784782] ? bit_wait_io_timeout+0x160/0x160
[ 327.785467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.786220] __do_sys_clone+0xc8/0x110
[ 327.786875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.787825] ? __do_sys_vfork+0xd0/0xd0
[ 327.788509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.789381] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 327.790038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.790760] ? vfs_write+0x428/0xad0
[ 327.791465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.792219] ? syscall_enter_from_user_mode+0x1d/0x50
[ 327.792865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.793958] do_syscall_64+0x3b/0x90
[ 327.794624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.795335] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 327.796039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.796981] RIP: 0033:0x7fa70862cb19
[ 327.797004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 327.797657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.798337] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246
[ 327.799014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.799993] ORIG_RAX: 0000000000000038
[ 327.800006] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 327.800672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.801352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 327.803360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.804351] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 327.804369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 327.805033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.806038] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 327.806083]
[ 327.806586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.814629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.815810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.818215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.819661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.821067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.822533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.823946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.825343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.826747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.828252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.829668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7)
[ 327.831158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.832701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.834113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.835836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.837266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.838816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.840310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.841709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.843122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.844599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.844609] FAULT_INJECTION: forcing a failure.
[ 327.844609] name failslab, interval 1, probability 0, space 0, times 0
[ 327.845956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.847079] CPU: 0 PID: 4787 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 327.848367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.849035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 327.849054] Call Trace:
[ 327.849061]
[ 327.850379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.851454] dump_stack_lvl+0x8b/0xb3
[ 327.851493] should_fail.cold+0x5/0xa
[ 327.852213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.852290] ? create_object.isra.0+0x3a/0xa20
[ 327.853748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.853801] should_failslab+0x5/0x10
[ 327.854824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.855200] kmem_cache_alloc+0x5b/0x480
[ 327.856380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.856727] ? obj_cgroup_charge+0x247/0x740
[ 327.856749] create_object.isra.0+0x3a/0xa20
[ 327.857814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.858138] ? kasan_unpoison+0x23/0x50
[ 327.859245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.859626] __kmalloc+0x25b/0x440
[ 327.859647] security_prepare_creds+0x10a/0x180
[ 327.860817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.861095] prepare_creds+0x505/0x6f0
[ 327.862501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.862671] copy_creds+0x76/0xb20
[ 327.864045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.864227] copy_process+0xe3f/0x6d10
[ 327.865571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.865807] ? __cleanup_sighand+0xb0/0xb0
[ 327.866845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.867225] ? lock_is_held_type+0xd7/0x130
[ 327.868242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.868554] ? find_held_lock+0x2c/0x110
[ 327.868574] ? kernel_clone+0xc4/0xa60
[ 327.871056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.871438] kernel_clone+0xe7/0xa60
[ 327.871462] ? create_io_thread+0xf0/0xf0
[ 327.873488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.874019] ? find_held_lock+0x2c/0x110
[ 327.874040] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 327.875078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.875330] ? bit_wait_io_timeout+0x160/0x160
[ 327.876696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.876921] __do_sys_clone+0xc8/0x110
[ 327.878659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.879032] ? __do_sys_vfork+0xd0/0xd0
[ 327.880509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.880587] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 327.881961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.882157] ? vfs_write+0x428/0xad0
[ 327.883633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.883895] ? syscall_enter_from_user_mode+0x1d/0x50
[ 327.886544] do_syscall_64+0x3b/0x90
[ 327.886963] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 327.887543] RIP: 0033:0x7f71bf82bb19
[ 327.887934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 327.888674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.889895] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 327.889911] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 327.889920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 327.889929] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 327.891326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.891906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 327.891916] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 327.891938]
[ 327.893731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.896215] loop0: detected capacity change from 0 to 264192
[ 327.898135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.903156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.904715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.906256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.908291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.913733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.916245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.917828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.919715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.921274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.922921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.924745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.926101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.927678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.928376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.929051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.929738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.930507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.931203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.931903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.932588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.933322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.933990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.934673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.935345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.936061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.936734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.937403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.938087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.938826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.939546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.940224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.940930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.941634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.942276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.942961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.943667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.944399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.945070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.945772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.946421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.947091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.947792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.948481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.949114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.949875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.950558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.951266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.951953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.952647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.953284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.953972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.954654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.955383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.956081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.956807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.957545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.958227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.958938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.959619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.960305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.961060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.961768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.962484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.963157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.963841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.964573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.965253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.965943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.966711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.967409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.968094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.968280] nfs: Unknown parameter '$-'
[ 327.968778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.970266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.970940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.971620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.972256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.972971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.973648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.974327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.975001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.975694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.976364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.977052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.977730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.978477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.979134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.979833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.980510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.981191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.981861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.982559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.983239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.984000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.984722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.985750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.986416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.987130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.987987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.988743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.989413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.990207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.990915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.991636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.992293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.992990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.993684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 5:
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8)
[ 327.995786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.996473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.997196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.997888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 327.998813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.000678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.001998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.003342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.004702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.006118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.007809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.009145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.010847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.013389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.014742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.016026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.017305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.018628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.022414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.023991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.026109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.027481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.028795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.030142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.031557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.032824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.034262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.035687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.036999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.038512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.039813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.041121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.042374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.043718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.045236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.046628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 328.047921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.049205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f00000006c0)=0xfffffffc, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 328.050589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.053651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.054963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.056270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.057676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.058985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.060282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.061731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.066495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.067867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.069917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.071320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.072800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.074118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.075543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.076915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.078268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.079676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.080993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.082420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.086157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.087598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.088941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.090252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.091653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.093004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.094276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8)
[ 328.112832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.119007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.120860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.123230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.124810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.126221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.127630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.129033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.131907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.136725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.138225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.139853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.141431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.143709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.145077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.146650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)
[ 328.148209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.149958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.151395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.152844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.154276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.155747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.157179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.158634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.160160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.161627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.161714] loop3: detected capacity change from 0 to 240
[ 328.163067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.165662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.167103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.168630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.170028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.171430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.172987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.174523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.175983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.177396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.178816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.180258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.181721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.183125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.184687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.185997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.188684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.190112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.191626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.193018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.194505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.195924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.197316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.198736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.200241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.201671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.203097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.204574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.206004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.207418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.208862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.210263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.211756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.213208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.214666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.216128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.219960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.221361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.222765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.224176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.225576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.226824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.228085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.229294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.230568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.231863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.233103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.234352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.235921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.237207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.238642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.239930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.241204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
stat(0x0, 0x0)
mkdirat(r0, &(0x7f0000001580)='./file0\x00', 0x20)
signalfd(r0, &(0x7f00000015c0), 0x8)
[ 328.244664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.245924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.247244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.248588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.250039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.251321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.254423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.255852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.257148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.258542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.259861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.261257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.262622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.263888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.265162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.266486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.267782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.269068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.270379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.271759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.273068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.274378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.275728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.277027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.278347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.279680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.280986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.282353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.283681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 5:
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8)
[ 328.284963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.286773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.291602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.292896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.294580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.296084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.297930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.299226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.300686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.301951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.303371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.304647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.305956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.307255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.308658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.309914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.311225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.312570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.313838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.315123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.316381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.317664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.320756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.322287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.323586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.324862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.326108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.327369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.328851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.330119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.331559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.332843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.334100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.335399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.336661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.337947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.339365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.340752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.342237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.352859] FAULT_INJECTION: forcing a failure.
[ 328.352859] name failslab, interval 1, probability 0, space 0, times 0
[ 328.355107] CPU: 0 PID: 4801 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 328.356725] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 328.358948] Call Trace:
[ 328.359451]
[ 328.359889] dump_stack_lvl+0x8b/0xb3
[ 328.360656] should_fail.cold+0x5/0xa
[ 328.361020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.361417] should_failslab+0x5/0x10
[ 328.362884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.363348] __kmalloc_track_caller+0x79/0x430
[ 328.364932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.365358] ? setup_userns_sysctls+0x4d/0x180
[ 328.366721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.367393] kmemdup+0x23/0x50
[ 328.368742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.369136] setup_userns_sysctls+0x4d/0x180
[ 328.370558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.371133] create_user_ns+0x95a/0xe90
[ 328.372509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.373031] copy_creds+0x545/0xb20
[ 328.374560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.374845] copy_process+0xe3f/0x6d10
[ 328.376200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.376741] ? __cleanup_sighand+0xb0/0xb0
[ 328.378068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.378680] ? lock_is_held_type+0xd7/0x130
[ 328.380106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.380673] ? find_held_lock+0x2c/0x110
[ 328.380706] ? kernel_clone+0xc4/0xa60
[ 328.382035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.382607] kernel_clone+0xe7/0xa60
[ 328.383680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.384489] ? create_io_thread+0xf0/0xf0
[ 328.384522] ? find_held_lock+0x2c/0x110
[ 328.385576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.386343] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 328.387494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.388032] ? bit_wait_io_timeout+0x160/0x160
[ 328.389519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.390132] __do_sys_clone+0xc8/0x110
[ 328.391527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.392149] ? __do_sys_vfork+0xd0/0xd0
[ 328.393503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.394013] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 328.395378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.395895] ? vfs_write+0x428/0xad0
[ 328.395946] ? syscall_enter_from_user_mode+0x1d/0x50
[ 328.397240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.398093] do_syscall_64+0x3b/0x90
[ 328.399504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.399962] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 328.401277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.402060] RIP: 0033:0x7fa70862cb19
[ 328.402079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 328.403092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.403888] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 328.403917] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 328.405332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.406015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 328.406031] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 328.406046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 328.407071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.410406] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 328.410446]
[ 328.424236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.428881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.430156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.432432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.433761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.435173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.436642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.438105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.439622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.441144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.442620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.444026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.445338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.446641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.447967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.449909] FAULT_INJECTION: forcing a failure.
[ 328.449909] name failslab, interval 1, probability 0, space 0, times 0
[ 328.452199] CPU: 0 PID: 4802 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 328.453823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 328.456059] Call Trace:
[ 328.456563]
[ 328.457005] dump_stack_lvl+0x8b/0xb3
[ 328.457770] should_fail.cold+0x5/0xa
[ 328.458531] ? create_user_ns+0x1ac/0xe90
[ 328.459379] should_failslab+0x5/0x10
[ 328.460134] kmem_cache_alloc+0x5b/0x480
[ 328.460945] create_user_ns+0x1ac/0xe90
[ 328.461742] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 328.462833] ? prepare_creds+0x519/0x6f0
[ 328.463662] copy_creds+0x545/0xb20
[ 328.464403] copy_process+0xe3f/0x6d10
[ 328.465211] ? __cleanup_sighand+0xb0/0xb0
[ 328.466069] ? lock_is_held_type+0xd7/0x130
[ 328.466929] ? find_held_lock+0x2c/0x110
[ 328.467733] ? kernel_clone+0xc4/0xa60
[ 328.468518] kernel_clone+0xe7/0xa60
[ 328.469264] ? create_io_thread+0xf0/0xf0
[ 328.470094] ? find_held_lock+0x2c/0x110
[ 328.470919] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 328.471904] ? bit_wait_io_timeout+0x160/0x160
[ 328.472814] __do_sys_clone+0xc8/0x110
[ 328.473596] ? __do_sys_vfork+0xd0/0xd0
[ 328.474393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 328.475493] ? vfs_write+0x428/0xad0
[ 328.476247] ? syscall_enter_from_user_mode+0x1d/0x50
[ 328.477277] do_syscall_64+0x3b/0x90
[ 328.478021] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 328.479065] RIP: 0033:0x7f71bf82bb19
[ 328.479801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 328.483443] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 328.483989] loop0: detected capacity change from 0 to 264192
[ 328.484941] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 328.484958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 328.484971] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 328.484987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 328.487652] nfs: Unknown parameter '$-'
[ 328.489006] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 328.489045]
[ 328.494786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.496080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.497512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.498869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.500171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.501517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.510091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.520803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.522215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.523670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.525533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.529240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.530609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.531994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.535306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.536673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.538025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 328.539464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:39:10 executing program 2:
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0})
setresuid(0x0, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400)
syslog(0x0, 0x0, 0x0)
12:39:10 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00'})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x101000, 0x90)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x355, 0x6, 0x92, 0xfffffde5}, {0x7ff, 0x3, 0x1, 0x4}, {0x4, 0x2}, {0x1f, 0x2, 0x8, 0x2}]})
dup3(r1, r0, 0x0)
12:39:10 executing program 5:
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:10 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00')
mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x125)
12:39:10 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:10 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)
[ 328.763907] FAULT_INJECTION: forcing a failure.
[ 328.763907] name failslab, interval 1, probability 0, space 0, times 0
[ 328.766351] CPU: 0 PID: 4820 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 328.768010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 328.770240] Call Trace:
[ 328.770747]
[ 328.771224] dump_stack_lvl+0x8b/0xb3
[ 328.772031] should_fail.cold+0x5/0xa
[ 328.772808] ? create_object.isra.0+0x3a/0xa20
[ 328.773735] should_failslab+0x5/0x10
[ 328.774498] kmem_cache_alloc+0x5b/0x480
[ 328.775322] create_object.isra.0+0x3a/0xa20
[ 328.776212] ? kasan_unpoison+0x23/0x50
[ 328.777027] __kmalloc_track_caller+0x25e/0x430
[ 328.777967] ? setup_userns_sysctls+0x4d/0x180
[ 328.778883] kmemdup+0x23/0x50
[ 328.779554] setup_userns_sysctls+0x4d/0x180
[ 328.780439] create_user_ns+0x95a/0xe90
[ 328.781256] copy_creds+0x545/0xb20
[ 328.782008] copy_process+0xe3f/0x6d10
[ 328.782789] ? __lock_acquire+0x164e/0x6120
[ 328.783692] ? __cleanup_sighand+0xb0/0xb0
[ 328.784553] ? lock_is_held_type+0xd7/0x130
[ 328.785416] ? find_held_lock+0x2c/0x110
[ 328.786248] ? kernel_clone+0xc4/0xa60
[ 328.787034] kernel_clone+0xe7/0xa60
[ 328.787802] ? create_io_thread+0xf0/0xf0
[ 328.788628] ? finish_task_switch.isra.0+0x226/0x870
[ 328.789656] ? lockdep_hardirqs_on+0x79/0x100
[ 328.790539] ? finish_task_switch.isra.0+0x226/0x870
[ 328.791589] __do_sys_clone+0xc8/0x110
[ 328.792361] ? __do_sys_vfork+0xd0/0xd0
[ 328.793184] ? syscall_enter_from_user_mode+0x1d/0x50
[ 328.794199] do_syscall_64+0x3b/0x90
[ 328.794959] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 328.796003] RIP: 0033:0x7fa70862cb19
[ 328.796745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 328.800414] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 328.801921] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 328.803343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 328.804751] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 328.806163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 328.807591] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 328.809028]
[ 342.440613] FAULT_INJECTION: forcing a failure.
[ 342.440613] name failslab, interval 1, probability 0, space 0, times 0
[ 342.442942] CPU: 1 PID: 4833 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 342.444607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 342.446884] Call Trace:
[ 342.447407]
[ 342.447861] dump_stack_lvl+0x8b/0xb3
[ 342.448656] should_fail.cold+0x5/0xa
[ 342.449429] ? create_object.isra.0+0x3a/0xa20
[ 342.450361] should_failslab+0x5/0x10
[ 342.451257] kmem_cache_alloc+0x5b/0x480
[ 342.452215] create_object.isra.0+0x3a/0xa20
[ 342.453249] ? kasan_unpoison+0x23/0x50
[ 342.454197] __kmalloc_track_caller+0x25e/0x430
[ 342.455321] ? setup_userns_sysctls+0x4d/0x180
[ 342.456397] kmemdup+0x23/0x50
[ 342.457158] setup_userns_sysctls+0x4d/0x180
[ 342.458191] create_user_ns+0x95a/0xe90
[ 342.459154] copy_creds+0x545/0xb20
[ 342.460031] copy_process+0xe3f/0x6d10
[ 342.460997] ? __cleanup_sighand+0xb0/0xb0
[ 342.462009] ? lock_is_held_type+0xd7/0x130
[ 342.463030] ? find_held_lock+0x2c/0x110
[ 342.464009] ? kernel_clone+0xc4/0xa60
[ 342.464941] kernel_clone+0xe7/0xa60
[ 342.465825] ? create_io_thread+0xf0/0xf0
[ 342.466794] ? find_held_lock+0x2c/0x110
[ 342.467751] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 342.468908] ? bit_wait_io_timeout+0x160/0x160
12:39:24 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
stat(0x0, 0x0)
mkdirat(r0, &(0x7f0000001580)='./file0\x00', 0x20)
[ 342.469980] __do_sys_clone+0xc8/0x110
12:39:24 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)
12:39:24 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00'})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x101000, 0x90)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x355, 0x6, 0x92, 0xfffffde5}, {0x7ff, 0x3, 0x1, 0x4}, {0x4, 0x2}, {0x1f, 0x2, 0x8, 0x2}]})
dup3(r1, r0, 0x0)
12:39:24 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:24 executing program 5:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:24 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9)
12:39:24 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:24 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat\x00')
mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
openat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x125)
[ 342.471235] ? __do_sys_vfork+0xd0/0xd0
12:39:24 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 342.472312] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 342.473618] ? vfs_write+0x428/0xad0
[ 342.474514] ? syscall_enter_from_user_mode+0x1d/0x50
[ 342.475736] do_syscall_64+0x3b/0x90
[ 342.476616] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 342.477824] RIP: 0033:0x7fa70862cb19
[ 342.478679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 342.482900] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 342.484652] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 342.486283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 342.487918] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 342.489548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 342.491188] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 342.492849]
[ 342.495319] loop0: detected capacity change from 0 to 264192
[ 342.495931] FAULT_INJECTION: forcing a failure.
[ 342.495931] name failslab, interval 1, probability 0, space 0, times 0
[ 342.497354] nfs: Unknown parameter '$-'
[ 342.498519] CPU: 1 PID: 4838 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 342.498549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 342.503431] Call Trace:
[ 342.504016]
[ 342.504524] dump_stack_lvl+0x8b/0xb3
[ 342.505403] should_fail.cold+0x5/0xa
[ 342.506280] ? create_object.isra.0+0x3a/0xa20
[ 342.507355] should_failslab+0x5/0x10
[ 342.508224] kmem_cache_alloc+0x5b/0x480
[ 342.509153] ? obj_cgroup_charge+0x247/0x740
[ 342.510171] create_object.isra.0+0x3a/0xa20
[ 342.511199] ? kasan_unpoison+0x23/0x50
[ 342.512119] kmem_cache_alloc+0x239/0x480
[ 342.513066] create_user_ns+0x1ac/0xe90
[ 342.513970] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 342.515220] ? prepare_creds+0x519/0x6f0
[ 342.516150] copy_creds+0x545/0xb20
[ 342.516995] copy_process+0xe3f/0x6d10
[ 342.517914] ? __cleanup_sighand+0xb0/0xb0
[ 342.518882] ? lock_is_held_type+0xd7/0x130
[ 342.519859] ? find_held_lock+0x2c/0x110
[ 342.520783] ? kernel_clone+0xc4/0xa60
[ 342.521675] kernel_clone+0xe7/0xa60
[ 342.522530] ? create_io_thread+0xf0/0xf0
[ 342.523488] ? find_held_lock+0x2c/0x110
[ 342.524416] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 342.525536] ? bit_wait_io_timeout+0x160/0x160
[ 342.526567] __do_sys_clone+0xc8/0x110
[ 342.527456] ? __do_sys_vfork+0xd0/0xd0
[ 342.528353] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 342.529580] ? vfs_write+0x428/0xad0
[ 342.530440] ? syscall_enter_from_user_mode+0x1d/0x50
[ 342.531616] do_syscall_64+0x3b/0x90
[ 342.532456] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 342.533615] RIP: 0033:0x7f71bf82bb19
[ 342.534438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 342.538516] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 342.540239] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 342.541814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 342.543398] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 342.544963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 342.546541] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 342.548141]
[ 342.573598] loop5: detected capacity change from 0 to 240
12:39:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)
12:39:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:39:37 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10)
12:39:37 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
stat(0x0, 0x0)
12:39:37 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x39a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00'})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x101000, 0x90)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x355, 0x6, 0x92, 0xfffffde5}, {0x7ff, 0x3, 0x1, 0x4}, {0x4, 0x2}, {0x1f, 0x2, 0x8, 0x2}]})
dup3(r1, r0, 0x0)
12:39:37 executing program 5:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:37 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 355.086123] FAULT_INJECTION: forcing a failure.
[ 355.086123] name failslab, interval 1, probability 0, space 0, times 0
[ 355.087373] CPU: 1 PID: 4864 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.088241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.089413] Call Trace:
[ 355.089679]
[ 355.089912] dump_stack_lvl+0x8b/0xb3
[ 355.090322] should_fail.cold+0x5/0xa
[ 355.090722] ? create_object.isra.0+0x3a/0xa20
[ 355.091223] should_failslab+0x5/0x10
[ 355.091639] kmem_cache_alloc+0x5b/0x480
[ 355.092069] create_object.isra.0+0x3a/0xa20
[ 355.092529] ? kasan_unpoison+0x23/0x50
[ 355.092960] __kmalloc+0x25b/0x440
[ 355.093339] __register_sysctl_table+0x112/0x1090
[ 355.093851] ? proc_sys_evict_inode+0x180/0x180
[ 355.094356] ? trace_kmalloc+0x29/0xd0
[ 355.094761] ? __kmalloc_track_caller+0x213/0x430
[ 355.095260] ? setup_userns_sysctls+0x4d/0x180
[ 355.095749] ? memcpy+0x39/0x60
[ 355.096106] setup_userns_sysctls+0xc2/0x180
[ 355.096571] create_user_ns+0x95a/0xe90
[ 355.096996] copy_creds+0x545/0xb20
[ 355.097393] copy_process+0xe3f/0x6d10
[ 355.097822] ? __cleanup_sighand+0xb0/0xb0
[ 355.098272] ? lock_is_held_type+0xd7/0x130
[ 355.098732] ? find_held_lock+0x2c/0x110
[ 355.099162] ? kernel_clone+0xc4/0xa60
[ 355.099595] kernel_clone+0xe7/0xa60
[ 355.099987] ? create_io_thread+0xf0/0xf0
[ 355.100423] ? find_held_lock+0x2c/0x110
[ 355.100858] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.101374] ? bit_wait_io_timeout+0x160/0x160
[ 355.101863] __do_sys_clone+0xc8/0x110
[ 355.102273] ? __do_sys_vfork+0xd0/0xd0
[ 355.102698] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.103275] ? vfs_write+0x428/0xad0
[ 355.103691] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.104260] do_syscall_64+0x3b/0x90
[ 355.104653] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.105199] RIP: 0033:0x7fa70862cb19
[ 355.105580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.107521] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.108304] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 355.109050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.109792] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.110537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.111273] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 355.112037]
[ 355.119910] FAULT_INJECTION: forcing a failure.
[ 355.119910] name failslab, interval 1, probability 0, space 0, times 0
[ 355.121120] CPU: 1 PID: 4869 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.121973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.123245] Call Trace:
[ 355.123530]
[ 355.123772] dump_stack_lvl+0x8b/0xb3
[ 355.124203] should_fail.cold+0x5/0xa
[ 355.124635] should_failslab+0x5/0x10
[ 355.125049] __kmalloc_track_caller+0x79/0x430
[ 355.125686] ? setup_userns_sysctls+0x4d/0x180
[ 355.126193] kmemdup+0x23/0x50
[ 355.126542] setup_userns_sysctls+0x4d/0x180
[ 355.127033] create_user_ns+0x95a/0xe90
[ 355.127465] copy_creds+0x545/0xb20
[ 355.127881] copy_process+0xe3f/0x6d10
[ 355.128328] ? __cleanup_sighand+0xb0/0xb0
[ 355.128783] ? lock_is_held_type+0xd7/0x130
[ 355.129266] ? find_held_lock+0x2c/0x110
[ 355.129689] ? kernel_clone+0xc4/0xa60
[ 355.130126] kernel_clone+0xe7/0xa60
[ 355.130555] ? create_io_thread+0xf0/0xf0
[ 355.130994] ? find_held_lock+0x2c/0x110
[ 355.131461] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.131993] ? bit_wait_io_timeout+0x160/0x160
[ 355.132505] __do_sys_clone+0xc8/0x110
[ 355.132917] ? __do_sys_vfork+0xd0/0xd0
[ 355.133361] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.133937] ? vfs_write+0x428/0xad0
[ 355.134360] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.134905] do_syscall_64+0x3b/0x90
[ 355.135320] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.135869] RIP: 0033:0x7f71bf82bb19
[ 355.136286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.138210] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.139066] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 355.139827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.140577] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.141324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.142068] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 355.142825]
[ 355.146688] loop0: detected capacity change from 0 to 264192
[ 355.154328] nfs: Unknown parameter '$-'
[ 355.154872] loop5: detected capacity change from 0 to 240
12:39:37 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
12:39:37 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:37 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11)
12:39:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)
[ 355.288218] FAULT_INJECTION: forcing a failure.
[ 355.288218] name failslab, interval 1, probability 0, space 0, times 0
12:39:37 executing program 5:
r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 355.290489] CPU: 0 PID: 4884 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.292205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.294416] Call Trace:
[ 355.294918]
[ 355.295382] dump_stack_lvl+0x8b/0xb3
[ 355.296148] should_fail.cold+0x5/0xa
[ 355.296905] ? create_object.isra.0+0x3a/0xa20
[ 355.297820] should_failslab+0x5/0x10
[ 355.298571] kmem_cache_alloc+0x5b/0x480
[ 355.299419] create_object.isra.0+0x3a/0xa20
[ 355.300302] ? kasan_unpoison+0x23/0x50
[ 355.301120] __kmalloc_track_caller+0x25e/0x430
[ 355.302048] ? setup_userns_sysctls+0x4d/0x180
[ 355.302965] kmemdup+0x23/0x50
[ 355.303614] setup_userns_sysctls+0x4d/0x180
[ 355.304490] create_user_ns+0x95a/0xe90
[ 355.305299] copy_creds+0x545/0xb20
[ 355.306042] copy_process+0xe3f/0x6d10
[ 355.306856] ? __cleanup_sighand+0xb0/0xb0
[ 355.307743] ? lock_is_held_type+0xd7/0x130
[ 355.308600] ? find_held_lock+0x2c/0x110
[ 355.309414] ? kernel_clone+0xc4/0xa60
[ 355.310199] kernel_clone+0xe7/0xa60
[ 355.310956] ? create_io_thread+0xf0/0xf0
[ 355.311794] ? find_held_lock+0x2c/0x110
[ 355.312611] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.313595] ? bit_wait_io_timeout+0x160/0x160
[ 355.314514] __do_sys_clone+0xc8/0x110
[ 355.315312] ? __do_sys_vfork+0xd0/0xd0
[ 355.316109] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.317202] ? vfs_write+0x428/0xad0
[ 355.317966] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.318994] do_syscall_64+0x3b/0x90
[ 355.319783] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.320825] RIP: 0033:0x7f71bf82bb19
[ 355.321549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.325189] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.326674] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 355.328095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.329499] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.330904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.331243] FAULT_INJECTION: forcing a failure.
[ 355.331243] name failslab, interval 1, probability 0, space 0, times 0
[ 355.332320] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 355.332361]
[ 355.335394] CPU: 1 PID: 4887 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.336340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.337534] Call Trace:
[ 355.337803]
[ 355.338035] dump_stack_lvl+0x8b/0xb3
[ 355.338455] should_fail.cold+0x5/0xa
[ 355.338859] ? __register_sysctl_table+0x9e2/0x1090
[ 355.339408] should_failslab+0x5/0x10
[ 355.339808] __kmalloc+0x72/0x440
[ 355.340179] __register_sysctl_table+0x9e2/0x1090
[ 355.340695] ? proc_sys_evict_inode+0x180/0x180
[ 355.341182] ? trace_kmalloc+0x29/0xd0
[ 355.341593] ? __kmalloc_track_caller+0x213/0x430
[ 355.342115] ? setup_userns_sysctls+0x4d/0x180
[ 355.342629] ? memcpy+0x39/0x60
[ 355.343000] setup_userns_sysctls+0xc2/0x180
[ 355.343502] create_user_ns+0x95a/0xe90
[ 355.343953] copy_creds+0x545/0xb20
[ 355.344374] copy_process+0xe3f/0x6d10
[ 355.344827] ? __cleanup_sighand+0xb0/0xb0
[ 355.345300] ? lock_is_held_type+0xd7/0x130
[ 355.345779] ? find_held_lock+0x2c/0x110
[ 355.346237] ? kernel_clone+0xc4/0xa60
[ 355.346674] kernel_clone+0xe7/0xa60
[ 355.347098] ? create_io_thread+0xf0/0xf0
[ 355.347577] ? find_held_lock+0x2c/0x110
[ 355.348025] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.348575] ? bit_wait_io_timeout+0x160/0x160
[ 355.349092] __do_sys_clone+0xc8/0x110
[ 355.349526] ? __do_sys_vfork+0xd0/0xd0
[ 355.349971] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.350574] ? vfs_write+0x428/0xad0
[ 355.350998] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.351588] do_syscall_64+0x3b/0x90
[ 355.352004] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.352576] RIP: 0033:0x7fa70862cb19
[ 355.352985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.354987] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.355826] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 355.356610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.357392] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.358182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.358954] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 355.359755]
[ 355.360400] sysctl could not get directory: /user -12
[ 355.361654] CPU: 1 PID: 4887 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.362556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.363807] Call Trace:
[ 355.364089]
[ 355.364336] dump_stack_lvl+0x8b/0xb3
[ 355.364759] __register_sysctl_table+0xde7/0x1090
[ 355.365293] ? proc_sys_evict_inode+0x180/0x180
[ 355.365807] ? trace_kmalloc+0x29/0xd0
[ 355.366237] ? __kmalloc_track_caller+0x213/0x430
[ 355.366763] ? setup_userns_sysctls+0x4d/0x180
[ 355.367266] ? memcpy+0x39/0x60
[ 355.367654] setup_userns_sysctls+0xc2/0x180
[ 355.368154] create_user_ns+0x95a/0xe90
[ 355.368602] copy_creds+0x545/0xb20
[ 355.369011] copy_process+0xe3f/0x6d10
[ 355.369463] ? __cleanup_sighand+0xb0/0xb0
[ 355.369933] ? lock_is_held_type+0xd7/0x130
[ 355.370402] ? find_held_lock+0x2c/0x110
[ 355.370854] ? kernel_clone+0xc4/0xa60
[ 355.371282] kernel_clone+0xe7/0xa60
[ 355.371702] ? create_io_thread+0xf0/0xf0
[ 355.372161] ? find_held_lock+0x2c/0x110
[ 355.372617] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.373158] ? bit_wait_io_timeout+0x160/0x160
[ 355.373671] __do_sys_clone+0xc8/0x110
[ 355.374106] ? __do_sys_vfork+0xd0/0xd0
[ 355.374550] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.375151] ? vfs_write+0x428/0xad0
[ 355.375590] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.376155] do_syscall_64+0x3b/0x90
[ 355.376570] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.377145] RIP: 0033:0x7fa70862cb19
[ 355.377548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.379548] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.380382] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 355.381156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.381923] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.382697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.383474] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 355.384253]
[ 355.391090] loop0: detected capacity change from 0 to 264192
12:39:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
epoll_create(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 355.408422] nfs: Unknown parameter '$-'
12:39:37 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000000b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7edebdbda41a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2c734ec52477"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
pread64(r3, &(0x7f0000000580)=""/137, 0x89, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x102001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x3, 0x0, {0xe69, 0x3, 0x0, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x5}}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x1840}, 0x80)
r8 = memfd_create(&(0x7f0000000340)='\x00', 0x1)
fcntl$getownex(r8, 0x10, &(0x7f0000000380))
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="8600330080800000080211000001080211000000505050505050000000000000000000000000000000000000000601010101010101010004060000000000000606000025030000002a01003c04000000002d1a000000000000000000000000000000000000000000000000000072060303030303"], 0xa4}}, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000540))
12:39:37 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:39:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
epoll_create(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 355.491725] loop5: detected capacity change from 0 to 240
12:39:37 executing program 0:
rmdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:39:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
epoll_create(0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)
[ 355.650258] FAULT_INJECTION: forcing a failure.
[ 355.650258] name failslab, interval 1, probability 0, space 0, times 0
[ 355.652566] CPU: 0 PID: 4912 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 355.654194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 355.656413] Call Trace:
[ 355.656920]
[ 355.657358] dump_stack_lvl+0x8b/0xb3
[ 355.658128] should_fail.cold+0x5/0xa
[ 355.658883] ? create_object.isra.0+0x3a/0xa20
[ 355.659819] should_failslab+0x5/0x10
[ 355.660570] kmem_cache_alloc+0x5b/0x480
[ 355.661383] create_object.isra.0+0x3a/0xa20
[ 355.662260] ? kasan_unpoison+0x23/0x50
[ 355.663060] __kmalloc+0x25b/0x440
[ 355.663781] __register_sysctl_table+0x9e2/0x1090
[ 355.664754] ? proc_sys_evict_inode+0x180/0x180
[ 355.665680] ? trace_kmalloc+0x29/0xd0
[ 355.666448] ? __kmalloc_track_caller+0x213/0x430
[ 355.667408] ? setup_userns_sysctls+0x4d/0x180
[ 355.668314] ? memcpy+0x39/0x60
[ 355.668982] setup_userns_sysctls+0xc2/0x180
[ 355.669854] create_user_ns+0x95a/0xe90
[ 355.670658] copy_creds+0x545/0xb20
[ 355.671413] copy_process+0xe3f/0x6d10
[ 355.672219] ? __cleanup_sighand+0xb0/0xb0
[ 355.673070] ? lock_is_held_type+0xd7/0x130
[ 355.673921] ? find_held_lock+0x2c/0x110
[ 355.674721] ? kernel_clone+0xc4/0xa60
[ 355.675514] kernel_clone+0xe7/0xa60
[ 355.676265] ? create_io_thread+0xf0/0xf0
[ 355.677094] ? find_held_lock+0x2c/0x110
[ 355.677903] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 355.678886] ? bit_wait_io_timeout+0x160/0x160
[ 355.679817] __do_sys_clone+0xc8/0x110
[ 355.680599] ? __do_sys_vfork+0xd0/0xd0
[ 355.681393] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 355.682483] ? vfs_write+0x428/0xad0
[ 355.683241] ? syscall_enter_from_user_mode+0x1d/0x50
[ 355.684274] do_syscall_64+0x3b/0x90
[ 355.685020] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 355.686052] RIP: 0033:0x7fa70862cb19
[ 355.686784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 355.690412] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 355.691924] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 355.693331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 355.694735] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 355.696147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 355.697552] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 355.698977]
[ 355.710082] loop0: detected capacity change from 0 to 264192
[ 355.714116] nfs: Unknown parameter '$-'
[ 370.455048] loop5: detected capacity change from 0 to 240
[ 370.456752] loop0: detected capacity change from 0 to 264192
[ 370.458122] nfs: Unknown parameter '$-'
[ 370.468598] FAULT_INJECTION: forcing a failure.
[ 370.468598] name failslab, interval 1, probability 0, space 0, times 0
[ 370.469733] CPU: 0 PID: 4930 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 370.470534] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 370.471647] Call Trace:
[ 370.471896]
[ 370.472115] dump_stack_lvl+0x8b/0xb3
[ 370.472504] should_fail.cold+0x5/0xa
[ 370.472880] ? alloc_ucounts+0x1c5/0x660
[ 370.473280] should_failslab+0x5/0x10
[ 370.473657] kmem_cache_alloc_trace+0x55/0x3c0
[ 370.474114] alloc_ucounts+0x1c5/0x660
[ 370.474497] ? get_ucounts+0x60/0x60
[ 370.474861] ? key_put+0x9/0x30
[ 370.475188] ? create_user_ns+0x13b/0xe90
[ 370.475616] copy_creds+0x629/0xb20
[ 370.475988] copy_process+0xe3f/0x6d10
[ 370.476390] ? __cleanup_sighand+0xb0/0xb0
[ 370.476811] ? lock_is_held_type+0xd7/0x130
[ 370.477235] ? find_held_lock+0x2c/0x110
[ 370.477641] ? kernel_clone+0xc4/0xa60
[ 370.478027] kernel_clone+0xe7/0xa60
[ 370.478407] ? create_io_thread+0xf0/0xf0
[ 370.478836] ? find_held_lock+0x2c/0x110
[ 370.479264] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 370.479786] ? bit_wait_io_timeout+0x160/0x160
[ 370.480263] __do_sys_clone+0xc8/0x110
[ 370.480664] ? __do_sys_vfork+0xd0/0xd0
[ 370.481076] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 370.481845] ? vfs_write+0x428/0xad0
12:39:52 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)
12:39:52 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:52 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000000b)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x8c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7edebdbda41a"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2c734ec52477"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
pread64(r3, &(0x7f0000000580)=""/137, 0x89, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x102001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x3, 0x0, {0xe69, 0x3, 0x0, 0x20, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x10000, 0x5}}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x1840}, 0x80)
r8 = memfd_create(&(0x7f0000000340)='\x00', 0x1)
fcntl$getownex(r8, 0x10, &(0x7f0000000380))
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="8600330080800000080211000001080211000000505050505050000000000000000000000000000000000000000601010101010101010004060000000000000606000025030000002a01003c04000000002d1a000000000000000000000000000000000000000000000000000072060303030303"], 0xa4}}, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000540))
12:39:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:52 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12)
12:39:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:52 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 370.482241] ? syscall_enter_from_user_mode+0x1d/0x50
[ 370.483054] do_syscall_64+0x3b/0x90
[ 370.483461] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 370.484015] RIP: 0033:0x7fa70862cb19
[ 370.484400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 370.486258] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 370.487030] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 370.487767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 370.488490] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 370.489213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 370.489937] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 370.490665]
[ 370.505018] FAULT_INJECTION: forcing a failure.
[ 370.505018] name failslab, interval 1, probability 0, space 0, times 0
[ 370.507502] CPU: 1 PID: 4934 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 370.509219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 370.511576] Call Trace:
[ 370.512108]
[ 370.512574] dump_stack_lvl+0x8b/0xb3
[ 370.513381] should_fail.cold+0x5/0xa
[ 370.514241] ? __register_sysctl_table+0x112/0x1090
[ 370.515566] should_failslab+0x5/0x10
[ 370.516558] __kmalloc+0x72/0x440
[ 370.517329] ? lock_downgrade+0x6d0/0x6d0
[ 370.518423] __register_sysctl_table+0x112/0x1090
[ 370.519509] ? proc_sys_evict_inode+0x180/0x180
[ 370.520747] ? trace_kmalloc+0x29/0xd0
[ 370.521613] ? __kmalloc_track_caller+0x213/0x430
[ 370.522812] ? setup_userns_sysctls+0x4d/0x180
[ 370.523789] ? memcpy+0x39/0x60
[ 370.524495] setup_userns_sysctls+0xc2/0x180
[ 370.525421] create_user_ns+0x95a/0xe90
[ 370.526270] copy_creds+0x545/0xb20
[ 370.527049] copy_process+0xe3f/0x6d10
[ 370.527916] ? __cleanup_sighand+0xb0/0xb0
[ 370.528815] ? lock_is_held_type+0xd7/0x130
[ 370.529716] ? find_held_lock+0x2c/0x110
[ 370.530568] ? kernel_clone+0xc4/0xa60
[ 370.531414] kernel_clone+0xe7/0xa60
[ 370.532229] ? create_io_thread+0xf0/0xf0
[ 370.533101] ? find_held_lock+0x2c/0x110
[ 370.533947] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 370.534977] ? bit_wait_io_timeout+0x160/0x160
[ 370.535946] __do_sys_clone+0xc8/0x110
[ 370.536767] ? __do_sys_vfork+0xd0/0xd0
[ 370.537598] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 370.538745] ? vfs_write+0x428/0xad0
[ 370.539552] ? syscall_enter_from_user_mode+0x1d/0x50
[ 370.540654] do_syscall_64+0x3b/0x90
[ 370.541444] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 370.542558] RIP: 0033:0x7f71bf82bb19
[ 370.543329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 370.547173] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 370.548759] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 370.550236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 370.551725] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 370.553199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 370.554677] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 370.556185]
12:39:52 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)
12:39:52 executing program 0:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
[ 370.609013] loop0: detected capacity change from 0 to 264192
[ 370.622153] FAULT_INJECTION: forcing a failure.
[ 370.622153] name failslab, interval 1, probability 0, space 0, times 0
[ 370.624464] CPU: 1 PID: 4944 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 370.626017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 370.628190] Call Trace:
[ 370.628681]
[ 370.629102] dump_stack_lvl+0x8b/0xb3
[ 370.629844] should_fail.cold+0x5/0xa
[ 370.630575] ? alloc_ucounts+0x1c5/0x660
[ 370.631347] should_failslab+0x5/0x10
[ 370.632076] kmem_cache_alloc_trace+0x55/0x3c0
[ 370.632947] alloc_ucounts+0x1c5/0x660
[ 370.633684] ? get_ucounts+0x60/0x60
[ 370.634375] ? key_put+0x9/0x30
[ 370.634996] ? create_user_ns+0x13b/0xe90
[ 370.635821] copy_creds+0x629/0xb20
[ 370.636517] copy_process+0xe3f/0x6d10
[ 370.637286] ? __cleanup_sighand+0xb0/0xb0
[ 370.638191] ? lock_is_held_type+0xd7/0x130
[ 370.639027] ? find_held_lock+0x2c/0x110
[ 370.639806] ? kernel_clone+0xc4/0xa60
[ 370.640554] kernel_clone+0xe7/0xa60
[ 370.641270] ? create_io_thread+0xf0/0xf0
[ 370.642061] ? find_held_lock+0x2c/0x110
[ 370.642839] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 370.643797] ? bit_wait_io_timeout+0x160/0x160
[ 370.644671] __do_sys_clone+0xc8/0x110
[ 370.645418] ? __do_sys_vfork+0xd0/0xd0
[ 370.646179] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 370.647225] ? vfs_write+0x428/0xad0
[ 370.647959] ? syscall_enter_from_user_mode+0x1d/0x50
[ 370.648942] do_syscall_64+0x3b/0x90
[ 370.649654] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 370.650642] RIP: 0033:0x7fa70862cb19
[ 370.651347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 370.654846] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 370.656310] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 370.657667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 370.659025] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 370.660386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 370.661743] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 370.663124]
12:39:52 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:39:52 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13)
12:39:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:39:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 370.712025] FAULT_INJECTION: forcing a failure.
[ 370.712025] name failslab, interval 1, probability 0, space 0, times 0
12:39:52 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)
12:39:52 executing program 0:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
[ 370.714884] CPU: 1 PID: 4949 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 370.716532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 370.718769] Call Trace:
[ 370.719274]
[ 370.719737] dump_stack_lvl+0x8b/0xb3
[ 370.720506] should_fail.cold+0x5/0xa
[ 370.721267] ? create_object.isra.0+0x3a/0xa20
[ 370.722182] should_failslab+0x5/0x10
[ 370.722937] kmem_cache_alloc+0x5b/0x480
[ 370.723756] create_object.isra.0+0x3a/0xa20
[ 370.724632] ? kasan_unpoison+0x23/0x50
[ 370.725432] __kmalloc+0x25b/0x440
[ 370.726144] __register_sysctl_table+0x112/0x1090
[ 370.727113] ? proc_sys_evict_inode+0x180/0x180
[ 370.728045] ? trace_kmalloc+0x29/0xd0
[ 370.728810] ? __kmalloc_track_caller+0x213/0x430
[ 370.729762] ? setup_userns_sysctls+0x4d/0x180
[ 370.730665] ? memcpy+0x39/0x60
[ 370.731341] setup_userns_sysctls+0xc2/0x180
[ 370.732230] create_user_ns+0x95a/0xe90
[ 370.733041] copy_creds+0x545/0xb20
[ 370.733779] copy_process+0xe3f/0x6d10
[ 370.734584] ? __cleanup_sighand+0xb0/0xb0
[ 370.735445] ? lock_is_held_type+0xd7/0x130
[ 370.736303] ? find_held_lock+0x2c/0x110
[ 370.737120] ? kernel_clone+0xc4/0xa60
[ 370.737905] kernel_clone+0xe7/0xa60
[ 370.738655] ? create_io_thread+0xf0/0xf0
[ 370.739482] ? find_held_lock+0x2c/0x110
[ 370.740300] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 370.741286] ? bit_wait_io_timeout+0x160/0x160
12:39:53 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r5 = epoll_create(0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 370.742198] __do_sys_clone+0xc8/0x110
[ 370.743114] ? __do_sys_vfork+0xd0/0xd0
[ 370.743916] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 370.745005] ? vfs_write+0x428/0xad0
[ 370.745776] ? syscall_enter_from_user_mode+0x1d/0x50
[ 370.746800] do_syscall_64+0x3b/0x90
[ 370.747555] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 370.748586] RIP: 0033:0x7f71bf82bb19
[ 370.749324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 370.752958] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 370.754475] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 370.755890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 370.757295] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 370.758693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 370.760128] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 370.761577]
[ 370.784205] loop5: detected capacity change from 0 to 240
[ 370.787350] FAULT_INJECTION: forcing a failure.
[ 370.787350] name failslab, interval 1, probability 0, space 0, times 0
[ 370.788612] CPU: 0 PID: 4959 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 370.789451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 370.790605] Call Trace:
[ 370.790862]
[ 370.791093] dump_stack_lvl+0x8b/0xb3
[ 370.791514] should_fail.cold+0x5/0xa
[ 370.791914] ? create_object.isra.0+0x3a/0xa20
[ 370.792396] should_failslab+0x5/0x10
[ 370.792804] kmem_cache_alloc+0x5b/0x480
[ 370.793234] create_object.isra.0+0x3a/0xa20
[ 370.793695] ? kasan_unpoison+0x23/0x50
[ 370.794117] kmem_cache_alloc_trace+0x22e/0x3c0
[ 370.794603] alloc_ucounts+0x1c5/0x660
[ 370.795023] ? get_ucounts+0x60/0x60
[ 370.795413] ? key_put+0x9/0x30
[ 370.795789] ? create_user_ns+0x13b/0xe90
[ 370.796237] copy_creds+0x629/0xb20
[ 370.796638] copy_process+0xe3f/0x6d10
[ 370.797081] ? __cleanup_sighand+0xb0/0xb0
[ 370.797534] ? lock_is_held_type+0xd7/0x130
[ 370.798002] ? find_held_lock+0x2c/0x110
[ 370.798435] ? kernel_clone+0xc4/0xa60
[ 370.798863] kernel_clone+0xe7/0xa60
[ 370.799260] ? create_io_thread+0xf0/0xf0
[ 370.799735] ? find_held_lock+0x2c/0x110
[ 370.800159] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 370.800683] ? bit_wait_io_timeout+0x160/0x160
[ 370.801176] __do_sys_clone+0xc8/0x110
[ 370.801607] ? __do_sys_vfork+0xd0/0xd0
[ 370.802033] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 370.802631] ? vfs_write+0x428/0xad0
[ 370.803047] ? syscall_enter_from_user_mode+0x1d/0x50
[ 370.803619] do_syscall_64+0x3b/0x90
[ 370.804009] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 370.804567] RIP: 0033:0x7fa70862cb19
[ 370.804949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 370.806937] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 370.807729] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 370.808441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 370.809145] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 370.809855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 370.810585] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 370.811329]
12:40:08 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14)
12:40:08 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)
12:40:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:08 executing program 0:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:08 executing program 3:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
12:40:08 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 385.972824] FAULT_INJECTION: forcing a failure.
[ 385.972824] name failslab, interval 1, probability 0, space 0, times 0
[ 385.975051] CPU: 1 PID: 4971 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 385.976597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 385.978676] Call Trace:
[ 385.979145]
[ 385.979553] dump_stack_lvl+0x8b/0xb3
[ 385.980280] should_fail.cold+0x5/0xa
[ 385.980985] ? __register_sysctl_table+0x9e2/0x1090
[ 385.981915] should_failslab+0x5/0x10
[ 385.982614] __kmalloc+0x72/0x440
[ 385.983262] __register_sysctl_table+0x9e2/0x1090
[ 385.984175] ? proc_sys_evict_inode+0x180/0x180
[ 385.985040] ? trace_kmalloc+0x29/0xd0
12:40:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 385.985752] ? __kmalloc_track_caller+0x213/0x430
[ 385.986815] ? setup_userns_sysctls+0x4d/0x180
[ 385.987668] ? memcpy+0x39/0x60
[ 385.988407] setup_userns_sysctls+0xc2/0x180
[ 385.989254] create_user_ns+0x95a/0xe90
[ 385.990091] copy_creds+0x545/0xb20
[ 385.990784] copy_process+0xe3f/0x6d10
[ 385.991539] ? __cleanup_sighand+0xb0/0xb0
[ 385.992358] ? lock_is_held_type+0xd7/0x130
[ 385.993151] ? find_held_lock+0x2c/0x110
[ 385.993903] ? kernel_clone+0xc4/0xa60
[ 385.994632] kernel_clone+0xe7/0xa60
[ 385.995327] ? create_io_thread+0xf0/0xf0
[ 385.996193] ? find_held_lock+0x2c/0x110
[ 385.996955] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 385.997874] ? bit_wait_io_timeout+0x160/0x160
[ 385.998808] __do_sys_clone+0xc8/0x110
[ 385.999634] ? __do_sys_vfork+0xd0/0xd0
[ 386.000450] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 386.001461] ? vfs_write+0x428/0xad0
[ 386.002163] ? syscall_enter_from_user_mode+0x1d/0x50
[ 386.003108] do_syscall_64+0x3b/0x90
[ 386.003845] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 386.004800] RIP: 0033:0x7f71bf82bb19
[ 386.005522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 386.009098] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 386.010566] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 386.011966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 386.013381] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 386.014717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 386.016066] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 386.017554]
[ 386.018255] sysctl could not get directory: /user -12
[ 386.019266] CPU: 1 PID: 4971 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 386.020791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 386.022991] Call Trace:
[ 386.023460]
[ 386.023871] dump_stack_lvl+0x8b/0xb3
[ 386.024571] __register_sysctl_table+0xde7/0x1090
[ 386.025460] ? proc_sys_evict_inode+0x180/0x180
[ 386.026414] ? trace_kmalloc+0x29/0xd0
[ 386.027155] ? __kmalloc_track_caller+0x213/0x430
[ 386.028040] ? setup_userns_sysctls+0x4d/0x180
[ 386.028867] ? memcpy+0x39/0x60
[ 386.029573] setup_userns_sysctls+0xc2/0x180
[ 386.030438] create_user_ns+0x95a/0xe90
[ 386.031243] copy_creds+0x545/0xb20
[ 386.031977] copy_process+0xe3f/0x6d10
[ 386.032790] ? __cleanup_sighand+0xb0/0xb0
[ 386.033573] ? lock_is_held_type+0xd7/0x130
[ 386.034361] ? find_held_lock+0x2c/0x110
[ 386.035110] ? kernel_clone+0xc4/0xa60
[ 386.035849] kernel_clone+0xe7/0xa60
[ 386.036547] ? create_io_thread+0xf0/0xf0
[ 386.037417] ? find_held_lock+0x2c/0x110
[ 386.038159] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 386.039136] ? bit_wait_io_timeout+0x160/0x160
[ 386.039985] __do_sys_clone+0xc8/0x110
[ 386.040793] ? __do_sys_vfork+0xd0/0xd0
[ 386.041605] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 386.042689] ? vfs_write+0x428/0xad0
[ 386.043477] ? syscall_enter_from_user_mode+0x1d/0x50
[ 386.044544] do_syscall_64+0x3b/0x90
[ 386.045303] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 386.046249] RIP: 0033:0x7f71bf82bb19
[ 386.046930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 386.050655] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 386.052113] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 386.053542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 386.054911] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 386.056324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 386.057755] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 386.059062]
[ 386.072540] loop0: detected capacity change from 0 to 264192
[ 386.074785] loop5: detected capacity change from 0 to 240
[ 386.105637] FAULT_INJECTION: forcing a failure.
[ 386.105637] name failslab, interval 1, probability 0, space 0, times 0
[ 386.107609] CPU: 1 PID: 4983 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 386.109073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 386.111031] Call Trace:
[ 386.111486]
[ 386.111893] dump_stack_lvl+0x8b/0xb3
[ 386.112574] should_fail.cold+0x5/0xa
[ 386.113242] ? create_object.isra.0+0x3a/0xa20
[ 386.114052] should_failslab+0x5/0x10
[ 386.114719] kmem_cache_alloc+0x5b/0x480
[ 386.115434] create_object.isra.0+0x3a/0xa20
[ 386.116224] ? kasan_unpoison+0x23/0x50
[ 386.116934] kmem_cache_alloc+0x239/0x480
[ 386.117671] dup_fd+0x89/0xca0
[ 386.118229] ? audit_filter_inodes+0x40/0x40
[ 386.119006] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 386.119977] ? security_task_alloc+0xe6/0x260
[ 386.120783] copy_process+0x1fd8/0x6d10
[ 386.121510] ? __cleanup_sighand+0xb0/0xb0
[ 386.122262] ? lock_is_held_type+0xd7/0x130
[ 386.123009] ? find_held_lock+0x2c/0x110
[ 386.123731] ? kernel_clone+0xc4/0xa60
[ 386.124443] kernel_clone+0xe7/0xa60
[ 386.125111] ? create_io_thread+0xf0/0xf0
[ 386.125825] ? find_held_lock+0x2c/0x110
[ 386.126543] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 386.127402] ? bit_wait_io_timeout+0x160/0x160
[ 386.128200] __do_sys_clone+0xc8/0x110
[ 386.128872] ? __do_sys_vfork+0xd0/0xd0
[ 386.129561] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 386.130505] ? vfs_write+0x428/0xad0
[ 386.131162] ? syscall_enter_from_user_mode+0x1d/0x50
[ 386.132058] do_syscall_64+0x3b/0x90
[ 386.132706] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 386.133600] RIP: 0033:0x7fa70862cb19
[ 386.134236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 386.137401] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 386.138702] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 386.139931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 386.141151] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 386.142370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 386.143584] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 386.144816]
[ 386.155582] loop3: detected capacity change from 0 to 264192
12:40:08 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15)
[ 386.161597] nfs: Unknown parameter '$-'
12:40:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180))
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:08 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
[ 386.246361] FAULT_INJECTION: forcing a failure.
[ 386.246361] name failslab, interval 1, probability 0, space 0, times 0
[ 386.248778] CPU: 0 PID: 4989 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 386.250411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 386.252673] Call Trace:
[ 386.253174]
[ 386.253618] dump_stack_lvl+0x8b/0xb3
[ 386.254392] should_fail.cold+0x5/0xa
[ 386.255159] ? create_object.isra.0+0x3a/0xa20
[ 386.256087] should_failslab+0x5/0x10
[ 386.256840] kmem_cache_alloc+0x5b/0x480
[ 386.257650] create_object.isra.0+0x3a/0xa20
[ 386.258544] ? kasan_unpoison+0x23/0x50
[ 386.259342] __kmalloc+0x25b/0x440
[ 386.260060] __register_sysctl_table+0x9e2/0x1090
[ 386.261031] ? proc_sys_evict_inode+0x180/0x180
[ 386.261965] ? trace_kmalloc+0x29/0xd0
[ 386.262735] ? __kmalloc_track_caller+0x213/0x430
[ 386.263695] ? setup_userns_sysctls+0x4d/0x180
[ 386.264617] ? memcpy+0x39/0x60
[ 386.265283] setup_userns_sysctls+0xc2/0x180
[ 386.266155] create_user_ns+0x95a/0xe90
[ 386.266959] copy_creds+0x545/0xb20
[ 386.267696] copy_process+0xe3f/0x6d10
[ 386.268514] ? __cleanup_sighand+0xb0/0xb0
[ 386.269361] ? lock_is_held_type+0xd7/0x130
[ 386.270224] ? find_held_lock+0x2c/0x110
[ 386.271034] ? kernel_clone+0xc4/0xa60
[ 386.271833] kernel_clone+0xe7/0xa60
[ 386.272586] ? create_io_thread+0xf0/0xf0
[ 386.273413] ? find_held_lock+0x2c/0x110
[ 386.274224] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 386.275203] ? bit_wait_io_timeout+0x160/0x160
[ 386.276123] __do_sys_clone+0xc8/0x110
[ 386.276902] ? __do_sys_vfork+0xd0/0xd0
[ 386.277697] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 386.278788] ? vfs_write+0x428/0xad0
[ 386.279546] ? syscall_enter_from_user_mode+0x1d/0x50
[ 386.280604] do_syscall_64+0x3b/0x90
[ 386.281089] loop0: detected capacity change from 0 to 264192
[ 386.281353] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 386.283273] RIP: 0033:0x7f71bf82bb19
[ 386.284012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 386.287647] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 386.289155] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 386.290559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 386.291975] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 386.293383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 386.294785] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 386.296222]
12:40:08 executing program 3:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
12:40:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:08 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
[ 386.387992] loop3: detected capacity change from 0 to 264192
[ 386.395828] nfs: Unknown parameter '$-'
[ 386.427737] loop0: detected capacity change from 0 to 264192
12:40:21 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16)
12:40:21 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:21 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)
12:40:21 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:21 executing program 3:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
mkdirat(r0, &(0x7f0000001480)='./file0\x00', 0x100)
12:40:21 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:21 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:21 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 399.656587] FAULT_INJECTION: forcing a failure.
[ 399.656587] name failslab, interval 1, probability 0, space 0, times 0
[ 399.659073] CPU: 1 PID: 5016 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 399.660727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 399.662974] Call Trace:
[ 399.663494]
[ 399.663938] dump_stack_lvl+0x8b/0xb3
[ 399.664716] should_fail.cold+0x5/0xa
[ 399.665477] ? __register_sysctl_table+0x9e2/0x1090
[ 399.666484] should_failslab+0x5/0x10
[ 399.667243] __kmalloc+0x72/0x440
[ 399.667967] __register_sysctl_table+0x9e2/0x1090
[ 399.668950] ? proc_sys_evict_inode+0x180/0x180
[ 399.669718] loop3: detected capacity change from 0 to 264192
[ 399.669886] ? trace_kmalloc+0x29/0xd0
[ 399.671282] ? __kmalloc_track_caller+0x213/0x430
[ 399.671398] nfs: Unknown parameter '$-'
[ 399.672253] ? setup_userns_sysctls+0x4d/0x180
[ 399.672284] ? memcpy+0x39/0x60
[ 399.674231] setup_userns_sysctls+0xc2/0x180
[ 399.675117] create_user_ns+0x95a/0xe90
[ 399.675932] copy_creds+0x545/0xb20
[ 399.676701] copy_process+0xe3f/0x6d10
[ 399.677515] ? __cleanup_sighand+0xb0/0xb0
[ 399.678374] ? lock_is_held_type+0xd7/0x130
[ 399.679236] ? find_held_lock+0x2c/0x110
[ 399.680087] ? kernel_clone+0xc4/0xa60
[ 399.680881] kernel_clone+0xe7/0xa60
[ 399.681642] ? create_io_thread+0xf0/0xf0
[ 399.682482] ? find_held_lock+0x2c/0x110
[ 399.683301] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 399.684308] ? bit_wait_io_timeout+0x160/0x160
[ 399.685227] __do_sys_clone+0xc8/0x110
[ 399.686012] ? __do_sys_vfork+0xd0/0xd0
[ 399.686813] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 399.687910] ? vfs_write+0x428/0xad0
[ 399.688685] ? syscall_enter_from_user_mode+0x1d/0x50
[ 399.689719] do_syscall_64+0x3b/0x90
[ 399.690475] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 399.691513] RIP: 0033:0x7f71bf82bb19
[ 399.692261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 399.695925] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 399.697463] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 399.698885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 399.699744] loop0: detected capacity change from 0 to 264192
[ 399.700307] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
12:40:21 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 399.702384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 399.704033] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 399.705466]
[ 399.706603] sysctl could not get directory: /user -12
[ 399.707804] CPU: 1 PID: 5016 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 399.709441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 399.711716] Call Trace:
[ 399.712230]
[ 399.712673] dump_stack_lvl+0x8b/0xb3
[ 399.713442] __register_sysctl_table+0xde7/0x1090
[ 399.714418] ? proc_sys_evict_inode+0x180/0x180
[ 399.715621] ? trace_kmalloc+0x29/0xd0
[ 399.716400] ? __kmalloc_track_caller+0x213/0x430
[ 399.717346] ? setup_userns_sysctls+0x4d/0x180
[ 399.718248] ? memcpy+0x39/0x60
[ 399.718921] setup_userns_sysctls+0xc2/0x180
[ 399.719783] create_user_ns+0x95a/0xe90
[ 399.720592] copy_creds+0x545/0xb20
[ 399.721328] copy_process+0xe3f/0x6d10
[ 399.722138] ? __cleanup_sighand+0xb0/0xb0
[ 399.722985] ? lock_is_held_type+0xd7/0x130
[ 399.723858] ? find_held_lock+0x2c/0x110
[ 399.724689] ? kernel_clone+0xc4/0xa60
[ 399.725473] kernel_clone+0xe7/0xa60
[ 399.726225] ? create_io_thread+0xf0/0xf0
[ 399.727054] ? find_held_lock+0x2c/0x110
[ 399.727867] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 399.728861] ? bit_wait_io_timeout+0x160/0x160
[ 399.729777] __do_sys_clone+0xc8/0x110
[ 399.730563] ? __do_sys_vfork+0xd0/0xd0
[ 399.731360] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 399.731621] FAULT_INJECTION: forcing a failure.
[ 399.731621] name failslab, interval 1, probability 0, space 0, times 0
[ 399.732459] ? vfs_write+0x428/0xad0
[ 399.734476] ? syscall_enter_from_user_mode+0x1d/0x50
[ 399.735505] do_syscall_64+0x3b/0x90
[ 399.736269] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 399.737306] RIP: 0033:0x7f71bf82bb19
[ 399.738038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 399.741677] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 399.743173] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 399.744599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 399.746008] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 399.747411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 399.748823] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 399.750252]
[ 399.750714] CPU: 0 PID: 5029 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 399.751634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 399.752882] Call Trace:
[ 399.753165]
[ 399.753412] dump_stack_lvl+0x8b/0xb3
[ 399.753847] should_fail.cold+0x5/0xa
[ 399.754269] ? alloc_fdtable+0x7e/0x270
[ 399.754721] should_failslab+0x5/0x10
[ 399.755144] kmem_cache_alloc_trace+0x55/0x3c0
[ 399.755664] alloc_fdtable+0x7e/0x270
[ 399.756095] dup_fd+0x718/0xca0
[ 399.756468] copy_process+0x1fd8/0x6d10
[ 399.756927] ? __cleanup_sighand+0xb0/0xb0
[ 399.757379] ? lock_is_held_type+0xd7/0x130
[ 399.757857] ? find_held_lock+0x2c/0x110
[ 399.758311] ? kernel_clone+0xc4/0xa60
[ 399.758756] kernel_clone+0xe7/0xa60
[ 399.759170] ? create_io_thread+0xf0/0xf0
[ 399.759643] ? find_held_lock+0x2c/0x110
[ 399.760116] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 399.760674] ? bit_wait_io_timeout+0x160/0x160
[ 399.761189] __do_sys_clone+0xc8/0x110
[ 399.761627] ? __do_sys_vfork+0xd0/0xd0
[ 399.762073] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 399.762696] ? vfs_write+0x428/0xad0
[ 399.763124] ? syscall_enter_from_user_mode+0x1d/0x50
[ 399.763714] do_syscall_64+0x3b/0x90
[ 399.764143] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 399.764740] RIP: 0033:0x7fa70862cb19
[ 399.765149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 399.767247] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 399.768099] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 399.768877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 399.769656] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 399.770464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 399.771244] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 399.772067]
12:40:22 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:22 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:22 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:22 executing program 3:
rmdir(&(0x7f0000000000)='./file0\x00')
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:22 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 399.862574] loop0: detected capacity change from 0 to 264192
[ 399.867235] nfs: Unknown parameter '$-'
[ 399.872346] loop3: detected capacity change from 0 to 264192
[ 399.880281] nfs: Unknown parameter '$-'
[ 399.922708] loop5: detected capacity change from 0 to 136
[ 399.937230] isofs_fill_super: get root inode failed
12:40:38 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:38 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:40:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 415.797055] loop5: detected capacity change from 0 to 136
12:40:38 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180))
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:38 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17)
12:40:38 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:38 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)
12:40:38 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
[ 415.829940] isofs_fill_super: get root inode failed
[ 415.833804] loop3: detected capacity change from 0 to 264192
[ 415.843190] FAULT_INJECTION: forcing a failure.
[ 415.843190] name failslab, interval 1, probability 0, space 0, times 0
[ 415.844608] CPU: 1 PID: 5069 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 415.845475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 415.846653] Call Trace:
[ 415.846923]
[ 415.847160] dump_stack_lvl+0x8b/0xb3
[ 415.847580] should_fail.cold+0x5/0xa
[ 415.847984] ? create_object.isra.0+0x3a/0xa20
[ 415.848481] should_failslab+0x5/0x10
[ 415.848888] kmem_cache_alloc+0x5b/0x480
[ 415.849324] create_object.isra.0+0x3a/0xa20
[ 415.849798] ? kasan_unpoison+0x23/0x50
[ 415.850227] kmem_cache_alloc_trace+0x22e/0x3c0
[ 415.850724] alloc_ucounts+0x1c5/0x660
[ 415.851149] ? get_ucounts+0x60/0x60
[ 415.851530] ? key_put+0x9/0x30
[ 415.851883] ? create_user_ns+0x13b/0xe90
[ 415.852340] copy_creds+0x629/0xb20
[ 415.852742] copy_process+0xe3f/0x6d10
[ 415.853178] ? __cleanup_sighand+0xb0/0xb0
[ 415.853629] ? lock_is_held_type+0xd7/0x130
[ 415.854080] ? find_held_lock+0x2c/0x110
[ 415.854254] nfs: Unknown parameter '$-'
[ 415.854510] ? kernel_clone+0xc4/0xa60
[ 415.854531] kernel_clone+0xe7/0xa60
[ 415.856178] ? create_io_thread+0xf0/0xf0
[ 415.856624] ? find_held_lock+0x2c/0x110
[ 415.856912] nfs: Unknown parameter '$-'
[ 415.857052] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 415.858398] ? bit_wait_io_timeout+0x160/0x160
[ 415.858876] __do_sys_clone+0xc8/0x110
[ 415.859288] ? __do_sys_vfork+0xd0/0xd0
[ 415.859315] FAULT_INJECTION: forcing a failure.
[ 415.859315] name failslab, interval 1, probability 0, space 0, times 0
[ 415.859707] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 415.859725] ? vfs_write+0x428/0xad0
[ 415.863037] ? syscall_enter_from_user_mode+0x1d/0x50
[ 415.863581] do_syscall_64+0x3b/0x90
[ 415.863971] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 415.864539] RIP: 0033:0x7f71bf82bb19
[ 415.864932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 415.866839] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 415.867655] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 415.868403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 415.869148] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 415.869882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 415.870637] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 415.871383]
[ 415.873249] CPU: 0 PID: 5070 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 415.875006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 415.877383] Call Trace:
[ 415.877925]
[ 415.878386] dump_stack_lvl+0x8b/0xb3
[ 415.879199] should_fail.cold+0x5/0xa
[ 415.879994] ? create_object.isra.0+0x3a/0xa20
[ 415.880977] should_failslab+0x5/0x10
[ 415.881762] kmem_cache_alloc+0x5b/0x480
[ 415.882604] ? obj_cgroup_charge+0x247/0x740
[ 415.883528] create_object.isra.0+0x3a/0xa20
[ 415.884449] ? kasan_unpoison+0x23/0x50
[ 415.885278] kmem_cache_alloc_trace+0x22e/0x3c0
[ 415.886250] alloc_fdtable+0x7e/0x270
[ 415.887042] dup_fd+0x718/0xca0
[ 415.887744] copy_process+0x1fd8/0x6d10
[ 415.888616] ? __cleanup_sighand+0xb0/0xb0
[ 415.889510] ? lock_is_held_type+0xd7/0x130
[ 415.890403] ? find_held_lock+0x2c/0x110
12:40:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 415.891252] ? kernel_clone+0xc4/0xa60
[ 415.892238] kernel_clone+0xe7/0xa60
[ 415.893024] ? create_io_thread+0xf0/0xf0
[ 415.893890] ? find_held_lock+0x2c/0x110
[ 415.894740] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 415.895762] ? bit_wait_io_timeout+0x160/0x160
[ 415.896721] __do_sys_clone+0xc8/0x110
[ 415.897529] ? __do_sys_vfork+0xd0/0xd0
[ 415.898357] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 415.899489] ? vfs_write+0x428/0xad0
[ 415.900296] ? syscall_enter_from_user_mode+0x1d/0x50
[ 415.901367] do_syscall_64+0x3b/0x90
[ 415.902142] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 415.903214] RIP: 0033:0x7fa70862cb19
[ 415.903977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 415.907731] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 415.909282] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 415.910730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 415.912179] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 415.913650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 415.915108] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 415.916589]
12:40:38 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {0x0, 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:38 executing program 3:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:38 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
12:40:38 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:38 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:40:38 executing program 7:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)
12:40:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {0x0, 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:40:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 3:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:52 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18)
12:40:52 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:40:52 executing program 7:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 7:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 430.272801] FAULT_INJECTION: forcing a failure.
[ 430.272801] name failslab, interval 1, probability 0, space 0, times 0
[ 430.274089] CPU: 0 PID: 5101 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 430.274954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 430.276135] Call Trace:
[ 430.276422]
[ 430.276661] dump_stack_lvl+0x8b/0xb3
[ 430.277072] should_fail.cold+0x5/0xa
[ 430.277478] ? dup_fd+0x89/0xca0
[ 430.277835] should_failslab+0x5/0x10
[ 430.278236] kmem_cache_alloc+0x5b/0x480
[ 430.278685] dup_fd+0x89/0xca0
[ 430.279021] ? audit_filter_inodes+0x40/0x40
[ 430.279486] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 430.280072] ? security_task_alloc+0xe6/0x260
[ 430.280556] copy_process+0x1fd8/0x6d10
[ 430.280993] ? __cleanup_sighand+0xb0/0xb0
[ 430.281454] ? lock_is_held_type+0xd7/0x130
[ 430.281906] ? find_held_lock+0x2c/0x110
[ 430.282333] ? kernel_clone+0xc4/0xa60
[ 430.282746] kernel_clone+0xe7/0xa60
[ 430.283153] ? create_io_thread+0xf0/0xf0
[ 430.283617] ? find_held_lock+0x2c/0x110
[ 430.284067] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 430.284624] ? bit_wait_io_timeout+0x160/0x160
[ 430.285132] __do_sys_clone+0xc8/0x110
[ 430.285563] ? __do_sys_vfork+0xd0/0xd0
[ 430.285980] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 430.286564] ? vfs_write+0x428/0xad0
[ 430.286965] ? syscall_enter_from_user_mode+0x1d/0x50
[ 430.287536] do_syscall_64+0x3b/0x90
[ 430.287939] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 430.288513] RIP: 0033:0x7f71bf82bb19
[ 430.288918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 430.290917] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 430.291733] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 430.292499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 430.293240] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 430.293995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 430.294726] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 430.295483]
[ 430.305600] loop3: detected capacity change from 0 to 264192
[ 430.307850] loop5: detected capacity change from 0 to 240
[ 430.315826] FAULT_INJECTION: forcing a failure.
[ 430.315826] name failslab, interval 1, probability 0, space 0, times 0
[ 430.317042] CPU: 0 PID: 5113 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 430.317896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 430.319080] Call Trace:
[ 430.319348]
[ 430.319578] dump_stack_lvl+0x8b/0xb3
[ 430.319983] should_fail.cold+0x5/0xa
[ 430.320394] ? kvmalloc_node+0x3e/0x130
[ 430.320840] should_failslab+0x5/0x10
[ 430.321235] __kmalloc_node+0x76/0x470
[ 430.321646] kvmalloc_node+0x3e/0x130
[ 430.322045] alloc_fdtable+0xcd/0x270
[ 430.322458] dup_fd+0x718/0xca0
[ 430.322813] copy_process+0x1fd8/0x6d10
[ 430.323252] ? __cleanup_sighand+0xb0/0xb0
[ 430.323698] ? lock_is_held_type+0xd7/0x130
[ 430.324148] ? find_held_lock+0x2c/0x110
[ 430.324595] ? kernel_clone+0xc4/0xa60
[ 430.325008] kernel_clone+0xe7/0xa60
[ 430.325411] ? create_io_thread+0xf0/0xf0
[ 430.325845] ? find_held_lock+0x2c/0x110
[ 430.326277] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 430.326790] ? bit_wait_io_timeout+0x160/0x160
[ 430.327275] __do_sys_clone+0xc8/0x110
[ 430.327680] ? __do_sys_vfork+0xd0/0xd0
[ 430.327700] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 430.327716] ? vfs_write+0x428/0xad0
[ 430.327742] ? syscall_enter_from_user_mode+0x1d/0x50
[ 430.330000] do_syscall_64+0x3b/0x90
[ 430.330402] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 430.330939] RIP: 0033:0x7fa70862cb19
[ 430.331323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 430.333239] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 430.334031] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 430.334775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 430.335524] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 430.336252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 430.337001] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 430.337756]
12:40:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 430.374110] isofs_fill_super: get root inode failed
12:40:52 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
12:40:52 executing program 3:
syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:40:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 430.535628] loop3: detected capacity change from 0 to 264192
12:41:10 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:10 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:10 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:10 executing program 2:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:10 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23)
12:41:10 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19)
12:41:10 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:41:10 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {0x0, 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 448.056950] FAULT_INJECTION: forcing a failure.
[ 448.056950] name failslab, interval 1, probability 0, space 0, times 0
[ 448.059623] CPU: 1 PID: 5141 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 448.061433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 448.063863] Call Trace:
[ 448.064416]
[ 448.064905] dump_stack_lvl+0x8b/0xb3
[ 448.065752] should_fail.cold+0x5/0xa
[ 448.066584] ? create_object.isra.0+0x3a/0xa20
[ 448.067590] should_failslab+0x5/0x10
[ 448.067859] FAULT_INJECTION: forcing a failure.
[ 448.067859] name failslab, interval 1, probability 0, space 0, times 0
[ 448.068413] kmem_cache_alloc+0x5b/0x480
[ 448.068456] create_object.isra.0+0x3a/0xa20
[ 448.072597] ? kasan_unpoison+0x23/0x50
[ 448.073490] kmem_cache_alloc+0x239/0x480
[ 448.074401] dup_fd+0x89/0xca0
[ 448.075101] ? audit_filter_inodes+0x40/0x40
[ 448.076063] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 448.077265] ? security_task_alloc+0xe6/0x260
[ 448.078256] copy_process+0x1fd8/0x6d10
[ 448.079165] ? __cleanup_sighand+0xb0/0xb0
[ 448.080109] ? lock_is_held_type+0xd7/0x130
[ 448.081071] ? find_held_lock+0x2c/0x110
[ 448.081967] ? kernel_clone+0xc4/0xa60
[ 448.082830] kernel_clone+0xe7/0xa60
[ 448.083655] ? create_io_thread+0xf0/0xf0
[ 448.084563] ? find_held_lock+0x2c/0x110
[ 448.085461] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 448.086545] ? bit_wait_io_timeout+0x160/0x160
[ 448.087552] __do_sys_clone+0xc8/0x110
[ 448.088442] ? __do_sys_vfork+0xd0/0xd0
[ 448.089342] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 448.090541] ? vfs_write+0x428/0xad0
[ 448.091378] ? syscall_enter_from_user_mode+0x1d/0x50
[ 448.092510] do_syscall_64+0x3b/0x90
[ 448.093342] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 448.094477] RIP: 0033:0x7f71bf82bb19
[ 448.095280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 448.099110] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 448.100599] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 448.102005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 448.103396] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 448.104806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 448.106204] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 448.107618]
[ 448.108076] CPU: 0 PID: 5148 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 448.109873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 448.111804] loop3: detected capacity change from 0 to 264192
[ 448.112267] Call Trace:
[ 448.112279]
[ 448.114532] dump_stack_lvl+0x8b/0xb3
[ 448.115365] should_fail.cold+0x5/0xa
[ 448.115444] nfs: Unknown parameter 'pcr'
[ 448.116185] ? create_object.isra.0+0x3a/0xa20
[ 448.117510] loop5: detected capacity change from 0 to 240
[ 448.118046] should_failslab+0x5/0x10
[ 448.120025] kmem_cache_alloc+0x5b/0x480
[ 448.120911] create_object.isra.0+0x3a/0xa20
[ 448.121857] ? kasan_unpoison+0x23/0x50
[ 448.122723] __kmalloc_node+0x26f/0x470
[ 448.123579] kvmalloc_node+0x3e/0x130
[ 448.124394] alloc_fdtable+0xcd/0x270
[ 448.125217] dup_fd+0x718/0xca0
[ 448.125940] copy_process+0x1fd8/0x6d10
[ 448.126829] ? __cleanup_sighand+0xb0/0xb0
[ 448.127749] ? lock_is_held_type+0xd7/0x130
[ 448.128688] ? find_held_lock+0x2c/0x110
[ 448.129558] ? kernel_clone+0xc4/0xa60
[ 448.130402] kernel_clone+0xe7/0xa60
[ 448.131207] ? create_io_thread+0xf0/0xf0
[ 448.132096] ? find_held_lock+0x2c/0x110
[ 448.132973] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 448.134029] ? bit_wait_io_timeout+0x160/0x160
[ 448.135012] __do_sys_clone+0xc8/0x110
[ 448.135851] ? __do_sys_vfork+0xd0/0xd0
[ 448.136716] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 448.137889] ? vfs_write+0x428/0xad0
[ 448.138706] ? syscall_enter_from_user_mode+0x1d/0x50
[ 448.139807] do_syscall_64+0x3b/0x90
[ 448.140612] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 448.141739] RIP: 0033:0x7fa70862cb19
[ 448.142522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 448.146407] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 448.148014] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 448.149534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 448.151033] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 448.152537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 448.154044] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 448.155573]
12:41:10 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:10 executing program 2:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:10 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}]})
[ 448.245714] isofs_fill_super: get root inode failed
12:41:10 executing program 7:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 448.280547] loop3: detected capacity change from 0 to 264192
[ 448.356585] nfs: Unknown parameter 'pcr'
12:41:10 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:41:10 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040), 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:41:10 executing program 2:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r0, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:10 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), 0x0, 0xd7, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:10 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20)
12:41:10 executing program 7:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 448.450917] loop5: detected capacity change from 0 to 240
[ 448.479483] isofs_fill_super: get root inode failed
[ 448.485779] loop3: detected capacity change from 0 to 264192
12:41:10 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}]})
12:41:10 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 448.561730] FAULT_INJECTION: forcing a failure.
[ 448.561730] name failslab, interval 1, probability 0, space 0, times 0
[ 448.564298] CPU: 1 PID: 5177 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 448.565922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 448.568128] Call Trace:
[ 448.568633]
[ 448.569089] dump_stack_lvl+0x8b/0xb3
[ 448.569856] should_fail.cold+0x5/0xa
[ 448.570609] ? create_object.isra.0+0x3a/0xa20
[ 448.571527] should_failslab+0x5/0x10
[ 448.572288] kmem_cache_alloc+0x5b/0x480
[ 448.573110] create_object.isra.0+0x3a/0xa20
[ 448.573974] ? kasan_unpoison+0x23/0x50
[ 448.574768] kmem_cache_alloc+0x239/0x480
[ 448.575583] dup_fd+0x89/0xca0
[ 448.576210] ? audit_filter_inodes+0x40/0x40
[ 448.577087] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 448.578160] ? security_task_alloc+0xe6/0x260
[ 448.579049] copy_process+0x1fd8/0x6d10
[ 448.579874] ? __cleanup_sighand+0xb0/0xb0
[ 448.580738] ? lock_is_held_type+0xd7/0x130
[ 448.581581] ? find_held_lock+0x2c/0x110
[ 448.582379] ? kernel_clone+0xc4/0xa60
[ 448.583157] kernel_clone+0xe7/0xa60
[ 448.583898] ? create_io_thread+0xf0/0xf0
[ 448.584724] ? find_held_lock+0x2c/0x110
[ 448.585528] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 448.586497] ? bit_wait_io_timeout+0x160/0x160
[ 448.587395] __do_sys_clone+0xc8/0x110
[ 448.588164] ? __do_sys_vfork+0xd0/0xd0
[ 448.588970] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 448.590041] ? vfs_write+0x428/0xad0
[ 448.590792] ? syscall_enter_from_user_mode+0x1d/0x50
[ 448.591807] do_syscall_64+0x3b/0x90
[ 448.592545] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 448.593596] RIP: 0033:0x7f71bf82bb19
[ 448.594320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 448.597962] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 448.599444] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 448.600865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 448.602259] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 448.603647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 448.605048] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 448.606461]
[ 448.646711] nfs: Unknown parameter 'pcr'
12:41:25 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21)
[ 463.456262] FAULT_INJECTION: forcing a failure.
[ 463.456262] name failslab, interval 1, probability 0, space 0, times 0
[ 463.457613] CPU: 0 PID: 5196 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 463.458549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 463.459740] Call Trace:
[ 463.460036]
[ 463.460287] dump_stack_lvl+0x8b/0xb3
[ 463.460738] should_fail.cold+0x5/0xa
[ 463.461181] ? create_object.isra.0+0x3a/0xa20
[ 463.461710] should_failslab+0x5/0x10
[ 463.462118] kmem_cache_alloc+0x5b/0x480
[ 463.462581] ? obj_cgroup_charge+0x247/0x740
[ 463.463083] create_object.isra.0+0x3a/0xa20
[ 463.463573] ? kasan_unpoison+0x23/0x50
[ 463.464025] kmem_cache_alloc_trace+0x22e/0x3c0
[ 463.464559] alloc_fdtable+0x7e/0x270
[ 463.465000] dup_fd+0x718/0xca0
[ 463.465363] copy_process+0x1fd8/0x6d10
[ 463.465833] ? __cleanup_sighand+0xb0/0xb0
[ 463.466319] ? lock_is_held_type+0xd7/0x130
[ 463.466809] ? find_held_lock+0x2c/0x110
[ 463.467273] ? kernel_clone+0xc4/0xa60
[ 463.467714] kernel_clone+0xe7/0xa60
[ 463.468152] ? create_io_thread+0xf0/0xf0
[ 463.468622] ? find_held_lock+0x2c/0x110
[ 463.469056] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 463.469606] ? bit_wait_io_timeout+0x160/0x160
[ 463.470092] __do_sys_clone+0xc8/0x110
[ 463.470535] ? __do_sys_vfork+0xd0/0xd0
[ 463.470985] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 463.471615] ? vfs_write+0x428/0xad0
[ 463.472020] ? syscall_enter_from_user_mode+0x1d/0x50
[ 463.472599] do_syscall_64+0x3b/0x90
[ 463.473044] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 463.473647] RIP: 0033:0x7f71bf82bb19
[ 463.474070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
12:41:25 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 463.476158] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
12:41:25 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:25 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24)
12:41:25 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040), 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:41:25 executing program 7:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:25 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:25 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
[ 463.477224] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 463.478048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 463.478794] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 463.479532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 463.480275] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 463.481041]
[ 463.503531] FAULT_INJECTION: forcing a failure.
[ 463.503531] name failslab, interval 1, probability 0, space 0, times 0
[ 463.506065] CPU: 1 PID: 5197 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 463.507814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 463.510225] Call Trace:
[ 463.510665] FAULT_INJECTION: forcing a failure.
[ 463.510665] name failslab, interval 1, probability 0, space 0, times 0
[ 463.510762]
[ 463.512481] dump_stack_lvl+0x8b/0xb3
[ 463.513326] should_fail.cold+0x5/0xa
[ 463.514145] ? kvmalloc_node+0x3e/0x130
[ 463.514983] should_failslab+0x5/0x10
[ 463.515802] __kmalloc_node+0x76/0x470
[ 463.516638] kvmalloc_node+0x3e/0x130
[ 463.517474] alloc_fdtable+0x139/0x270
[ 463.518302] dup_fd+0x718/0xca0
[ 463.519003] copy_process+0x1fd8/0x6d10
[ 463.519928] ? __cleanup_sighand+0xb0/0xb0
[ 463.520843] ? lock_is_held_type+0xd7/0x130
[ 463.521819] ? find_held_lock+0x2c/0x110
[ 463.522693] ? kernel_clone+0xc4/0xa60
[ 463.523554] kernel_clone+0xe7/0xa60
[ 463.524356] ? create_io_thread+0xf0/0xf0
[ 463.525276] ? find_held_lock+0x2c/0x110
[ 463.526144] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 463.527227] ? bit_wait_io_timeout+0x160/0x160
[ 463.528206] __do_sys_clone+0xc8/0x110
[ 463.529075] ? __do_sys_vfork+0xd0/0xd0
[ 463.529942] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 463.531141] ? vfs_write+0x428/0xad0
[ 463.531984] ? syscall_enter_from_user_mode+0x1d/0x50
[ 463.533087] do_syscall_64+0x3b/0x90
[ 463.533893] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 463.534987] RIP: 0033:0x7fa70862cb19
[ 463.535785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 463.539664] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 463.541315] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 463.542806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 463.544324] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 463.545826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 463.547345] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 463.548863]
[ 463.549375] CPU: 0 PID: 5204 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 463.550302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 463.551569] Call Trace:
[ 463.551860]
[ 463.552101] dump_stack_lvl+0x8b/0xb3
[ 463.552524] should_fail.cold+0x5/0xa
[ 463.552950] ? kvmalloc_node+0x3e/0x130
[ 463.553387] should_failslab+0x5/0x10
[ 463.553808] __kmalloc_node+0x76/0x470
[ 463.554242] kvmalloc_node+0x3e/0x130
[ 463.554661] alloc_fdtable+0xcd/0x270
[ 463.555091] dup_fd+0x718/0xca0
[ 463.555450] copy_process+0x1fd8/0x6d10
[ 463.555908] ? __cleanup_sighand+0xb0/0xb0
[ 463.556382] ? lock_is_held_type+0xd7/0x130
[ 463.556861] ? find_held_lock+0x2c/0x110
[ 463.557327] ? kernel_clone+0xc4/0xa60
[ 463.557774] kernel_clone+0xe7/0xa60
[ 463.558187] ? create_io_thread+0xf0/0xf0
[ 463.558649] ? find_held_lock+0x2c/0x110
[ 463.559098] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 463.559648] ? bit_wait_io_timeout+0x160/0x160
[ 463.560155] __do_sys_clone+0xc8/0x110
[ 463.560594] ? __do_sys_vfork+0xd0/0xd0
[ 463.561059] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 463.561685] ? vfs_write+0x428/0xad0
[ 463.562123] ? syscall_enter_from_user_mode+0x1d/0x50
[ 463.562714] do_syscall_64+0x3b/0x90
[ 463.563142] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 463.563736] RIP: 0033:0x7f71bf82bb19
[ 463.564154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 463.566237] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 463.567078] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 463.567869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 463.568652] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 463.569452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 463.570238] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 463.571042]
12:41:25 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22)
[ 463.588197] loop3: detected capacity change from 0 to 264192
[ 463.594831] nfs: Unknown parameter '$-'
[ 463.596174] loop5: detected capacity change from 0 to 240
[ 463.607942] isofs_fill_super: get root inode failed
12:41:41 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23)
12:41:41 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
pidfd_open(r3, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:41:41 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:41:41 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25)
12:41:41 executing program 7:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040), 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:41:41 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:41 executing program 2:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 478.918064] loop5: detected capacity change from 0 to 240
[ 478.935295] isofs_fill_super: get root inode failed
[ 478.960319] FAULT_INJECTION: forcing a failure.
[ 478.960319] name failslab, interval 1, probability 0, space 0, times 0
[ 478.961600] CPU: 1 PID: 5233 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 478.962494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 478.963716] Call Trace:
[ 478.963997]
[ 478.964238] dump_stack_lvl+0x8b/0xb3
[ 478.964371] FAULT_INJECTION: forcing a failure.
[ 478.964371] name failslab, interval 1, probability 0, space 0, times 0
[ 478.964653] should_fail.cold+0x5/0xa
[ 478.967263] ? create_object.isra.0+0x3a/0xa20
[ 478.967772] should_failslab+0x5/0x10
[ 478.968181] kmem_cache_alloc+0x5b/0x480
[ 478.968615] create_object.isra.0+0x3a/0xa20
[ 478.969082] ? kasan_unpoison+0x23/0x50
[ 478.969531] __kmalloc_node+0x26f/0x470
[ 478.969966] kvmalloc_node+0x3e/0x130
[ 478.970378] alloc_fdtable+0xcd/0x270
[ 478.970795] dup_fd+0x718/0xca0
[ 478.971161] copy_process+0x1fd8/0x6d10
[ 478.971615] ? __cleanup_sighand+0xb0/0xb0
[ 478.972087] ? lock_is_held_type+0xd7/0x130
[ 478.972559] ? find_held_lock+0x2c/0x110
[ 478.973019] ? kernel_clone+0xc4/0xa60
[ 478.973477] kernel_clone+0xe7/0xa60
[ 478.973897] ? create_io_thread+0xf0/0xf0
[ 478.974356] ? find_held_lock+0x2c/0x110
[ 478.974802] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 478.975339] ? bit_wait_io_timeout+0x160/0x160
[ 478.975843] __do_sys_clone+0xc8/0x110
[ 478.976269] ? __do_sys_vfork+0xd0/0xd0
[ 478.976709] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 478.977320] ? vfs_write+0x428/0xad0
[ 478.977740] ? syscall_enter_from_user_mode+0x1d/0x50
[ 478.978312] do_syscall_64+0x3b/0x90
[ 478.978727] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 478.979298] RIP: 0033:0x7f71bf82bb19
[ 478.979690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 478.981691] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 478.982510] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 478.983291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 478.984074] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 478.984854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 478.985641] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 478.986432]
[ 478.986685] CPU: 0 PID: 5236 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 478.988308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 478.990510] Call Trace:
[ 478.991009]
[ 478.991446] dump_stack_lvl+0x8b/0xb3
[ 478.992205] should_fail.cold+0x5/0xa
[ 478.992953] ? create_object.isra.0+0x3a/0xa20
[ 478.993865] should_failslab+0x5/0x10
[ 478.994608] kmem_cache_alloc+0x5b/0x480
[ 478.995403] ? obj_cgroup_charge+0x247/0x740
[ 478.996304] create_object.isra.0+0x3a/0xa20
[ 478.997180] ? kasan_unpoison+0x23/0x50
[ 478.998006] __kmalloc_node+0x26f/0x470
[ 478.998793] kvmalloc_node+0x3e/0x130
[ 478.999568] alloc_fdtable+0x139/0x270
[ 479.000366] dup_fd+0x718/0xca0
[ 479.001046] copy_process+0x1fd8/0x6d10
[ 479.001884] ? __cleanup_sighand+0xb0/0xb0
[ 479.002756] ? lock_is_held_type+0xd7/0x130
[ 479.003601] ? find_held_lock+0x2c/0x110
[ 479.004425] ? kernel_clone+0xc4/0xa60
[ 479.005208] kernel_clone+0xe7/0xa60
[ 479.005978] ? create_io_thread+0xf0/0xf0
[ 479.006795] ? find_held_lock+0x2c/0x110
[ 479.007615] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 479.008579] ? bit_wait_io_timeout+0x160/0x160
[ 479.009512] __do_sys_clone+0xc8/0x110
[ 479.010283] ? __do_sys_vfork+0xd0/0xd0
[ 479.011086] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 479.012168] ? vfs_write+0x428/0xad0
[ 479.012950] ? syscall_enter_from_user_mode+0x1d/0x50
[ 479.013982] do_syscall_64+0x3b/0x90
[ 479.014749] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 479.015773] RIP: 0033:0x7fa70862cb19
[ 479.016520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 479.020109] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 479.021658] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 479.023047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 479.024430] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 479.025825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 479.027209] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 479.028611]
12:41:41 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:41:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d000800", 0xd, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 479.034648] nfs: Unknown parameter '$-'
[ 479.068525] loop5: detected capacity change from 0 to 240
12:41:41 executing program 2:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
fork()
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 479.085774] isofs_fill_super: root inode is not a directory. Corrupted media?
12:41:41 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 0:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr}]})
[ 479.173179] nfs: Unknown parameter 'pcr'
12:41:41 executing program 2:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24)
12:41:41 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d000800", 0xd, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:41:41 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26)
[ 479.243869] loop5: detected capacity change from 0 to 240
[ 479.275456] isofs_fill_super: root inode is not a directory. Corrupted media?
12:41:41 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:41 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
[ 479.315485] FAULT_INJECTION: forcing a failure.
[ 479.315485] name failslab, interval 1, probability 0, space 0, times 0
[ 479.316826] CPU: 1 PID: 5267 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 479.317716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 479.318916] Call Trace:
[ 479.319188]
[ 479.319428] dump_stack_lvl+0x8b/0xb3
[ 479.319845] should_fail.cold+0x5/0xa
[ 479.320251] ? copy_fs_struct+0x45/0x340
[ 479.320693] should_failslab+0x5/0x10
[ 479.321101] kmem_cache_alloc+0x5b/0x480
[ 479.321549] copy_fs_struct+0x45/0x340
[ 479.321959] ? copy_process+0x206b/0x6d10
[ 479.322404] copy_process+0x32f5/0x6d10
[ 479.322844] ? __cleanup_sighand+0xb0/0xb0
[ 479.323303] ? lock_is_held_type+0xd7/0x130
[ 479.323769] ? find_held_lock+0x2c/0x110
[ 479.324205] ? kernel_clone+0xc4/0xa60
[ 479.324631] kernel_clone+0xe7/0xa60
[ 479.325035] ? create_io_thread+0xf0/0xf0
[ 479.325484] ? find_held_lock+0x2c/0x110
[ 479.326145] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 479.326681] ? bit_wait_io_timeout+0x160/0x160
[ 479.327171] __do_sys_clone+0xc8/0x110
[ 479.327591] ? __do_sys_vfork+0xd0/0xd0
[ 479.328013] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 479.328600] ? vfs_write+0x428/0xad0
[ 479.329005] ? syscall_enter_from_user_mode+0x1d/0x50
[ 479.329572] do_syscall_64+0x3b/0x90
[ 479.329971] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 479.330529] RIP: 0033:0x7fa70862cb19
[ 479.330920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 479.332873] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 479.333682] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 479.334463] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 479.335243] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 479.336023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 479.336810] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 479.337622]
[ 479.375042] FAULT_INJECTION: forcing a failure.
12:41:41 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 479.375042] name failslab, interval 1, probability 0, space 0, times 0
[ 479.376451] CPU: 1 PID: 5271 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 479.377337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 479.378548] Call Trace:
[ 479.378826]
[ 479.379059] dump_stack_lvl+0x8b/0xb3
[ 479.379468] should_fail.cold+0x5/0xa
[ 479.379880] ? kvmalloc_node+0x3e/0x130
[ 479.380296] should_failslab+0x5/0x10
[ 479.380697] __kmalloc_node+0x76/0x470
[ 479.381113] kvmalloc_node+0x3e/0x130
[ 479.381528] alloc_fdtable+0x139/0x270
[ 479.381938] dup_fd+0x718/0xca0
[ 479.382304] copy_process+0x1fd8/0x6d10
[ 479.382752] ? __cleanup_sighand+0xb0/0xb0
[ 479.383211] ? lock_is_held_type+0xd7/0x130
[ 479.383660] ? find_held_lock+0x2c/0x110
[ 479.384092] ? kernel_clone+0xc4/0xa60
[ 479.384509] kernel_clone+0xe7/0xa60
[ 479.384919] ? create_io_thread+0xf0/0xf0
[ 479.385370] ? find_held_lock+0x2c/0x110
[ 479.385817] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 479.386402] ? bit_wait_io_timeout+0x160/0x160
[ 479.387078] __do_sys_clone+0xc8/0x110
[ 479.387541] ? __do_sys_vfork+0xd0/0xd0
[ 479.387981] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 479.388593] ? vfs_write+0x428/0xad0
[ 479.389027] ? syscall_enter_from_user_mode+0x1d/0x50
[ 479.389618] do_syscall_64+0x3b/0x90
[ 479.390039] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 479.390621] RIP: 0033:0x7f71bf82bb19
[ 479.391021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 479.393017] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 479.393855] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 479.394643] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 479.395425] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 479.396218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 479.396983] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 479.397788]
12:41:57 executing program 2:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:57 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:41:57 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25)
12:41:57 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:57 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:41:57 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d000800", 0xd, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:41:57 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27)
12:41:57 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
fork()
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 495.320104] FAULT_INJECTION: forcing a failure.
[ 495.320104] name failslab, interval 1, probability 0, space 0, times 0
[ 495.322459] CPU: 1 PID: 5284 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 495.324105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 495.326429] Call Trace:
[ 495.326953]
[ 495.327427] dump_stack_lvl+0x8b/0xb3
[ 495.328220] should_fail.cold+0x5/0xa
[ 495.329022] ? create_object.isra.0+0x3a/0xa20
[ 495.329981] should_failslab+0x5/0x10
[ 495.330757] kmem_cache_alloc+0x5b/0x480
[ 495.331591] ? obj_cgroup_charge+0x247/0x740
[ 495.332525] create_object.isra.0+0x3a/0xa20
[ 495.333456] ? kasan_unpoison+0x23/0x50
[ 495.334282] __kmalloc_node+0x26f/0x470
[ 495.335088] kvmalloc_node+0x3e/0x130
[ 495.335866] alloc_fdtable+0x139/0x270
[ 495.336677] dup_fd+0x718/0xca0
[ 495.337379] copy_process+0x1fd8/0x6d10
[ 495.338228] ? __cleanup_sighand+0xb0/0xb0
[ 495.339109] ? lock_is_held_type+0xd7/0x130
[ 495.339990] ? find_held_lock+0x2c/0x110
[ 495.340843] ? kernel_clone+0xc4/0xa60
[ 495.341666] kernel_clone+0xe7/0xa60
[ 495.341766] FAULT_INJECTION: forcing a failure.
[ 495.341766] name failslab, interval 1, probability 0, space 0, times 0
[ 495.342441] ? create_io_thread+0xf0/0xf0
[ 495.345074] ? find_held_lock+0x2c/0x110
[ 495.345932] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 495.346941] ? bit_wait_io_timeout+0x160/0x160
[ 495.347880] __do_sys_clone+0xc8/0x110
[ 495.348694] ? __do_sys_vfork+0xd0/0xd0
[ 495.349532] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 495.350648] ? vfs_write+0x428/0xad0
[ 495.351434] ? syscall_enter_from_user_mode+0x1d/0x50
[ 495.352496] do_syscall_64+0x3b/0x90
[ 495.353264] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 495.354340] RIP: 0033:0x7f71bf82bb19
[ 495.355078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 495.358795] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 495.360343] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 495.361790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 495.363234] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 495.364697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 495.366148] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 495.367629]
[ 495.368094] CPU: 0 PID: 5290 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 495.369426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 495.371208] Call Trace:
[ 495.371616]
[ 495.371970] dump_stack_lvl+0x8b/0xb3
[ 495.372583] should_fail.cold+0x5/0xa
[ 495.373194] ? create_object.isra.0+0x3a/0xa20
[ 495.373940] should_failslab+0x5/0x10
[ 495.374544] kmem_cache_alloc+0x5b/0x480
[ 495.375186] ? obj_cgroup_charge+0x247/0x740
[ 495.375897] create_object.isra.0+0x3a/0xa20
[ 495.376605] ? kasan_unpoison+0x23/0x50
[ 495.377245] kmem_cache_alloc+0x239/0x480
[ 495.377918] copy_fs_struct+0x45/0x340
[ 495.378535] ? copy_process+0x206b/0x6d10
[ 495.379206] copy_process+0x32f5/0x6d10
[ 495.379864] ? __cleanup_sighand+0xb0/0xb0
[ 495.380549] ? lock_is_held_type+0xd7/0x130
[ 495.381224] ? find_held_lock+0x2c/0x110
[ 495.381894] ? kernel_clone+0xc4/0xa60
[ 495.382523] kernel_clone+0xe7/0xa60
[ 495.383125] ? create_io_thread+0xf0/0xf0
[ 495.383778] ? find_held_lock+0x2c/0x110
[ 495.384412] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 495.385194] ? bit_wait_io_timeout+0x160/0x160
[ 495.385916] __do_sys_clone+0xc8/0x110
[ 495.386534] ? __do_sys_vfork+0xd0/0xd0
[ 495.387165] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 495.388038] ? vfs_write+0x428/0xad0
[ 495.388635] ? syscall_enter_from_user_mode+0x1d/0x50
[ 495.389455] do_syscall_64+0x3b/0x90
[ 495.390046] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 495.390870] RIP: 0033:0x7fa70862cb19
[ 495.391449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 495.394330] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 495.395517] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 495.396628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 495.397755] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 495.398854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 495.399733] loop5: detected capacity change from 0 to 240
[ 495.399955] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 495.402208]
[ 495.405579] nfs: Unknown parameter 'pcr'
12:41:57 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 495.427419] isofs_fill_super: root inode is not a directory. Corrupted media?
12:41:57 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:57 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}]})
12:41:57 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:41:57 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809", 0x14, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 495.629517] loop5: detected capacity change from 0 to 240
[ 495.631718] nfs: Unknown parameter 'pcr'
[ 495.653124] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:11 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809", 0x14, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:11 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:11 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:11 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28)
12:42:11 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:11 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26)
12:42:11 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:11 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr={'pcr', 0x3d, 0x32}}]})
[ 509.015089] FAULT_INJECTION: forcing a failure.
[ 509.015089] name failslab, interval 1, probability 0, space 0, times 0
[ 509.016849] CPU: 0 PID: 5324 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 509.018073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 509.019791] Call Trace:
[ 509.020180]
[ 509.020519] dump_stack_lvl+0x8b/0xb3
[ 509.021110] should_fail.cold+0x5/0xa
[ 509.021719] ? copy_fs_struct+0x45/0x340
[ 509.022351] should_failslab+0x5/0x10
[ 509.022934] kmem_cache_alloc+0x5b/0x480
[ 509.023569] copy_fs_struct+0x45/0x340
[ 509.024159] ? copy_process+0x206b/0x6d10
[ 509.024800] copy_process+0x32f5/0x6d10
[ 509.025438] ? __cleanup_sighand+0xb0/0xb0
[ 509.026112] ? lock_is_held_type+0xd7/0x130
[ 509.026774] ? find_held_lock+0x2c/0x110
[ 509.027404] ? kernel_clone+0xc4/0xa60
[ 509.028013] kernel_clone+0xe7/0xa60
[ 509.028164] nfs: Unknown parameter 'pcr'
[ 509.028596] ? create_io_thread+0xf0/0xf0
[ 509.028622] ? find_held_lock+0x2c/0x110
[ 509.030678] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 509.031413] ? bit_wait_io_timeout+0x160/0x160
[ 509.032113] __do_sys_clone+0xc8/0x110
[ 509.032689] ? __do_sys_vfork+0xd0/0xd0
[ 509.033300] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 509.034084] ? vfs_write+0x428/0xad0
[ 509.034648] ? syscall_enter_from_user_mode+0x1d/0x50
[ 509.035379] do_syscall_64+0x3b/0x90
[ 509.035925] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 509.036663] RIP: 0033:0x7f71bf82bb19
[ 509.037212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 509.039731] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 509.040834] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 509.041886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 509.042957] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 509.044008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 509.045065] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 509.046157]
[ 509.059320] FAULT_INJECTION: forcing a failure.
[ 509.059320] name failslab, interval 1, probability 0, space 0, times 0
[ 509.060996] CPU: 0 PID: 5331 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 509.062224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 509.063915] Call Trace:
[ 509.064291]
[ 509.064609] dump_stack_lvl+0x8b/0xb3
[ 509.065183] should_fail.cold+0x5/0xa
[ 509.065746] ? copy_process+0x22c1/0x6d10
[ 509.066373] should_failslab+0x5/0x10
[ 509.066932] kmem_cache_alloc+0x5b/0x480
[ 509.067543] copy_process+0x22c1/0x6d10
[ 509.068152] ? __cleanup_sighand+0xb0/0xb0
[ 509.068771] ? lock_is_held_type+0xd7/0x130
[ 509.069406] ? find_held_lock+0x2c/0x110
[ 509.070019] ? kernel_clone+0xc4/0xa60
[ 509.070602] kernel_clone+0xe7/0xa60
[ 509.071167] ? create_io_thread+0xf0/0xf0
[ 509.071221] loop5: detected capacity change from 0 to 240
[ 509.071781] ? find_held_lock+0x2c/0x110
[ 509.071804] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 509.071830] ? bit_wait_io_timeout+0x160/0x160
[ 509.074869] __do_sys_clone+0xc8/0x110
[ 509.075406] ? __do_sys_vfork+0xd0/0xd0
[ 509.075987] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 509.076817] ? vfs_write+0x428/0xad0
[ 509.077379] ? syscall_enter_from_user_mode+0x1d/0x50
[ 509.078143] do_syscall_64+0x3b/0x90
[ 509.078704] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 509.079426] RIP: 0033:0x7fa70862cb19
[ 509.079944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 509.082532] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 509.083582] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 509.084580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 509.085580] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 509.086562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 509.087549] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 509.088555]
[ 509.090915] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:11 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27)
12:42:11 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:42:11 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809", 0x14, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:11 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:11 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 509.185104] loop5: detected capacity change from 0 to 240
12:42:11 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 509.190773] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 509.222742] FAULT_INJECTION: forcing a failure.
[ 509.222742] name failslab, interval 1, probability 0, space 0, times 0
[ 509.225096] CPU: 1 PID: 5336 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 509.226751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 509.229011] Call Trace:
[ 509.229522]
12:42:11 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a", 0x17, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 509.229986] dump_stack_lvl+0x8b/0xb3
[ 509.230935] should_fail.cold+0x5/0xa
[ 509.231712] ? create_object.isra.0+0x3a/0xa20
[ 509.232634] should_failslab+0x5/0x10
[ 509.233391] kmem_cache_alloc+0x5b/0x480
[ 509.234231] ? obj_cgroup_charge+0x247/0x740
[ 509.235125] create_object.isra.0+0x3a/0xa20
[ 509.236027] ? kasan_unpoison+0x23/0x50
[ 509.236830] kmem_cache_alloc+0x239/0x480
[ 509.237691] copy_fs_struct+0x45/0x340
[ 509.238491] ? copy_process+0x206b/0x6d10
[ 509.239325] copy_process+0x32f5/0x6d10
[ 509.240158] ? __cleanup_sighand+0xb0/0xb0
[ 509.241020] ? lock_is_held_type+0xd7/0x130
[ 509.241893] ? find_held_lock+0x2c/0x110
[ 509.242709] ? kernel_clone+0xc4/0xa60
[ 509.243495] kernel_clone+0xe7/0xa60
[ 509.244249] ? create_io_thread+0xf0/0xf0
[ 509.245079] ? find_held_lock+0x2c/0x110
[ 509.245916] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 509.246906] ? bit_wait_io_timeout+0x160/0x160
[ 509.247824] __do_sys_clone+0xc8/0x110
[ 509.248613] ? __do_sys_vfork+0xd0/0xd0
[ 509.249411] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 509.250517] ? vfs_write+0x428/0xad0
[ 509.251291] ? syscall_enter_from_user_mode+0x1d/0x50
[ 509.252349] do_syscall_64+0x3b/0x90
[ 509.253107] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 509.254162] RIP: 0033:0x7f71bf82bb19
[ 509.254898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 509.259092] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 509.261072] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 509.262597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 509.264026] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 509.265473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 509.266928] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 509.268386]
12:42:11 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:11 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:11 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29)
12:42:11 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:42:11 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 509.388023] FAULT_INJECTION: forcing a failure.
[ 509.388023] name failslab, interval 1, probability 0, space 0, times 0
[ 509.389484] CPU: 1 PID: 5353 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 509.390381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 509.391681] Call Trace:
[ 509.391960]
[ 509.392215] dump_stack_lvl+0x8b/0xb3
[ 509.392667] should_fail.cold+0x5/0xa
[ 509.393110] ? create_object.isra.0+0x3a/0xa20
[ 509.393643] should_failslab+0x5/0x10
[ 509.394084] kmem_cache_alloc+0x5b/0x480
[ 509.394552] ? obj_cgroup_charge+0x247/0x740
[ 509.395053] create_object.isra.0+0x3a/0xa20
[ 509.395567] ? kasan_unpoison+0x23/0x50
[ 509.396003] kmem_cache_alloc+0x239/0x480
[ 509.396474] copy_process+0x22c1/0x6d10
[ 509.396921] ? __cleanup_sighand+0xb0/0xb0
[ 509.397407] ? lock_is_held_type+0xd7/0x130
[ 509.397882] ? find_held_lock+0x2c/0x110
[ 509.398364] ? kernel_clone+0xc4/0xa60
[ 509.398787] kernel_clone+0xe7/0xa60
[ 509.399214] ? create_io_thread+0xf0/0xf0
[ 509.399672] ? find_held_lock+0x2c/0x110
[ 509.400139] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 509.400701] ? bit_wait_io_timeout+0x160/0x160
[ 509.401199] __do_sys_clone+0xc8/0x110
[ 509.401656] ? __do_sys_vfork+0xd0/0xd0
[ 509.402081] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 509.402707] ? vfs_write+0x428/0xad0
[ 509.403144] ? syscall_enter_from_user_mode+0x1d/0x50
[ 509.403741] do_syscall_64+0x3b/0x90
[ 509.404152] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 509.404753] RIP: 0033:0x7fa70862cb19
[ 509.405148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 509.407275] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 509.408078] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 509.408896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 509.409716] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 509.410535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 509.411342] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 509.412184]
[ 509.481967] loop5: detected capacity change from 0 to 240
[ 509.484594] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:24 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a", 0x17, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:24 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:24 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:24 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:24 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:24 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28)
12:42:24 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:42:24 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30)
[ 522.527769] loop5: detected capacity change from 0 to 240
[ 522.542455] FAULT_INJECTION: forcing a failure.
[ 522.542455] name failslab, interval 1, probability 0, space 0, times 0
[ 522.544227] CPU: 0 PID: 5379 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 522.545483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 522.547220] Call Trace:
[ 522.547607]
[ 522.547952] dump_stack_lvl+0x8b/0xb3
[ 522.548551] should_fail.cold+0x5/0xa
[ 522.549137] ? create_new_namespaces+0x30/0xb30
[ 522.549879] should_failslab+0x5/0x10
[ 522.550473] kmem_cache_alloc+0x5b/0x480
[ 522.551096] ? cap_capable+0x1eb/0x250
[ 522.551701] create_new_namespaces+0x30/0xb30
[ 522.552411] copy_namespaces+0x391/0x450
[ 522.553042] copy_process+0x2ba5/0x6d10
[ 522.553677] ? __cleanup_sighand+0xb0/0xb0
[ 522.554339] ? lock_is_held_type+0xd7/0x130
[ 522.554999] ? find_held_lock+0x2c/0x110
[ 522.555623] ? kernel_clone+0xc4/0xa60
[ 522.556227] kernel_clone+0xe7/0xa60
[ 522.556799] ? create_io_thread+0xf0/0xf0
[ 522.557446] ? find_held_lock+0x2c/0x110
[ 522.558083] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 522.558851] ? bit_wait_io_timeout+0x160/0x160
[ 522.559557] __do_sys_clone+0xc8/0x110
[ 522.560166] ? __do_sys_vfork+0xd0/0xd0
[ 522.560777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 522.561619] ? vfs_write+0x428/0xad0
[ 522.562212] ? syscall_enter_from_user_mode+0x1d/0x50
[ 522.563003] do_syscall_64+0x3b/0x90
[ 522.563583] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 522.564380] RIP: 0033:0x7fa70862cb19
[ 522.564942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 522.567743] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 522.568910] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 522.570012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 522.571090] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 522.572178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 522.573256] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 522.574365]
[ 522.584060] FAULT_INJECTION: forcing a failure.
[ 522.584060] name failslab, interval 1, probability 0, space 0, times 0
[ 522.585833] CPU: 0 PID: 5380 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 522.587087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 522.588821] Call Trace:
[ 522.589210]
[ 522.589552] dump_stack_lvl+0x8b/0xb3
[ 522.590160] should_fail.cold+0x5/0xa
[ 522.590747] ? copy_process+0x22c1/0x6d10
[ 522.591396] should_failslab+0x5/0x10
[ 522.591977] kmem_cache_alloc+0x5b/0x480
[ 522.592609] copy_process+0x22c1/0x6d10
[ 522.593243] ? __cleanup_sighand+0xb0/0xb0
[ 522.593913] ? lock_is_held_type+0xd7/0x130
[ 522.594584] ? find_held_lock+0x2c/0x110
[ 522.595212] ? kernel_clone+0xc4/0xa60
[ 522.595804] kernel_clone+0xe7/0xa60
[ 522.596382] ? create_io_thread+0xf0/0xf0
[ 522.597022] ? find_held_lock+0x2c/0x110
[ 522.597648] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 522.598427] ? bit_wait_io_timeout+0x160/0x160
[ 522.599130] __do_sys_clone+0xc8/0x110
[ 522.599734] ? __do_sys_vfork+0xd0/0xd0
[ 522.600344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 522.601185] ? vfs_write+0x428/0xad0
[ 522.601785] ? syscall_enter_from_user_mode+0x1d/0x50
[ 522.602576] do_syscall_64+0x3b/0x90
[ 522.603152] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 522.603956] RIP: 0033:0x7f71bf82bb19
[ 522.604520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 522.607343] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 522.608500] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 522.609596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 522.610697] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 522.611786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 522.612867] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 522.613980]
12:42:24 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 522.649115] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:24 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:24 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={[], [{@pcr}]})
12:42:24 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:25 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:25 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29)
[ 522.748193] nfs: Unknown parameter 'pcr'
[ 522.785967] FAULT_INJECTION: forcing a failure.
[ 522.785967] name failslab, interval 1, probability 0, space 0, times 0
[ 522.788243] CPU: 1 PID: 5396 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 522.789876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 522.792121] Call Trace:
[ 522.792627]
[ 522.793068] dump_stack_lvl+0x8b/0xb3
[ 522.793850] should_fail.cold+0x5/0xa
[ 522.794616] ? create_object.isra.0+0x3a/0xa20
[ 522.795539] should_failslab+0x5/0x10
[ 522.796295] kmem_cache_alloc+0x5b/0x480
[ 522.797115] ? obj_cgroup_charge+0x247/0x740
[ 522.798034] create_object.isra.0+0x3a/0xa20
[ 522.798928] ? kasan_unpoison+0x23/0x50
[ 522.799745] kmem_cache_alloc+0x239/0x480
[ 522.800589] copy_process+0x22c1/0x6d10
[ 522.801440] ? __cleanup_sighand+0xb0/0xb0
[ 522.802306] ? lock_is_held_type+0xd7/0x130
[ 522.803172] ? find_held_lock+0x2c/0x110
[ 522.803991] ? kernel_clone+0xc4/0xa60
[ 522.804776] kernel_clone+0xe7/0xa60
[ 522.805534] ? create_io_thread+0xf0/0xf0
[ 522.806382] ? find_held_lock+0x2c/0x110
[ 522.807199] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 522.808189] ? bit_wait_io_timeout+0x160/0x160
[ 522.809106] __do_sys_clone+0xc8/0x110
[ 522.809902] ? __do_sys_vfork+0xd0/0xd0
[ 522.810705] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 522.811813] ? vfs_write+0x428/0xad0
[ 522.812572] ? syscall_enter_from_user_mode+0x1d/0x50
[ 522.813611] do_syscall_64+0x3b/0x90
[ 522.814370] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 522.815417] RIP: 0033:0x7f71bf82bb19
[ 522.816149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 522.819854] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 522.821373] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 522.822792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 522.824214] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 522.825635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 522.827064] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 522.828511]
12:42:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31)
12:42:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:37 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:37 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:37 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a", 0x17, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, 0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:37 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:37 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30)
[ 535.607561] loop5: detected capacity change from 0 to 240
[ 535.610705] FAULT_INJECTION: forcing a failure.
[ 535.610705] name failslab, interval 1, probability 0, space 0, times 0
[ 535.612989] CPU: 1 PID: 5414 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
12:42:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 535.614621] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 535.617017] Call Trace:
[ 535.617528]
[ 535.617976] dump_stack_lvl+0x8b/0xb3
[ 535.618766] should_fail.cold+0x5/0xa
[ 535.619547] ? create_new_namespaces+0x30/0xb30
[ 535.620485] should_failslab+0x5/0x10
[ 535.621237] kmem_cache_alloc+0x5b/0x480
[ 535.622064] ? cap_capable+0x1eb/0x250
[ 535.622848] create_new_namespaces+0x30/0xb30
[ 535.623762] copy_namespaces+0x391/0x450
[ 535.624584] copy_process+0x2ba5/0x6d10
[ 535.625415] ? __cleanup_sighand+0xb0/0xb0
[ 535.626296] ? lock_is_held_type+0xd7/0x130
[ 535.627156] ? find_held_lock+0x2c/0x110
[ 535.627973] ? kernel_clone+0xc4/0xa60
[ 535.628762] kernel_clone+0xe7/0xa60
[ 535.629520] ? create_io_thread+0xf0/0xf0
[ 535.630380] ? find_held_lock+0x2c/0x110
[ 535.631205] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 535.632198] ? bit_wait_io_timeout+0x160/0x160
[ 535.633123] __do_sys_clone+0xc8/0x110
[ 535.633912] ? __do_sys_vfork+0xd0/0xd0
[ 535.634737] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 535.635840] ? vfs_write+0x428/0xad0
12:42:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 535.636610] ? syscall_enter_from_user_mode+0x1d/0x50
[ 535.637766] do_syscall_64+0x3b/0x90
[ 535.638529] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 535.639567] RIP: 0033:0x7f71bf82bb19
[ 535.640306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 535.643992] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 535.645518] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 535.646983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 535.648405] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 535.649841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 535.651264] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 535.652703]
[ 535.661119] FAULT_INJECTION: forcing a failure.
[ 535.661119] name failslab, interval 1, probability 0, space 0, times 0
[ 535.662461] CPU: 0 PID: 5424 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 535.663335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 535.664564] Call Trace:
[ 535.664847]
[ 535.665093] dump_stack_lvl+0x8b/0xb3
[ 535.665509] should_fail.cold+0x5/0xa
[ 535.665921] ? create_object.isra.0+0x3a/0xa20
[ 535.666455] should_failslab+0x5/0x10
[ 535.666869] kmem_cache_alloc+0x5b/0x480
[ 535.667315] ? obj_cgroup_charge+0x247/0x740
[ 535.667797] create_object.isra.0+0x3a/0xa20
[ 535.668279] ? kasan_unpoison+0x23/0x50
[ 535.668719] kmem_cache_alloc+0x239/0x480
[ 535.669180] create_new_namespaces+0x30/0xb30
[ 535.669683] copy_namespaces+0x391/0x450
[ 535.670152] copy_process+0x2ba5/0x6d10
[ 535.670602] ? __cleanup_sighand+0xb0/0xb0
[ 535.671072] ? lock_is_held_type+0xd7/0x130
[ 535.671547] ? find_held_lock+0x2c/0x110
[ 535.672000] ? kernel_clone+0xc4/0xa60
[ 535.672433] kernel_clone+0xe7/0xa60
[ 535.672841] ? create_io_thread+0xf0/0xf0
[ 535.673297] ? find_held_lock+0x2c/0x110
[ 535.673739] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 535.674297] ? bit_wait_io_timeout+0x160/0x160
[ 535.674798] __do_sys_clone+0xc8/0x110
[ 535.675231] ? __do_sys_vfork+0xd0/0xd0
[ 535.675667] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 535.676267] ? vfs_write+0x428/0xad0
[ 535.676688] ? syscall_enter_from_user_mode+0x1d/0x50
[ 535.677252] do_syscall_64+0x3b/0x90
[ 535.677667] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 535.678253] RIP: 0033:0x7fa70862cb19
[ 535.678661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 535.680656] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 535.681472] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 535.682271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 535.683058] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 535.683805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 535.684581] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 535.685361]
[ 535.696475] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:53 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:53 executing program 0:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d000800", 0xd, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:53 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:53 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31)
12:42:53 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a08", 0x19, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:53 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a", 0x17, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:53 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32)
[ 550.804016] FAULT_INJECTION: forcing a failure.
[ 550.804016] name failslab, interval 1, probability 0, space 0, times 0
[ 550.805075] loop5: detected capacity change from 0 to 240
[ 550.806318] CPU: 1 PID: 5435 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 550.808535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 550.810837] Call Trace:
[ 550.811349]
[ 550.811360] dump_stack_lvl+0x8b/0xb3
[ 550.812378] should_fail.cold+0x5/0xa
[ 550.813149] ? create_object.isra.0+0x3a/0xa20
[ 550.814099] should_failslab+0x5/0x10
[ 550.814872] kmem_cache_alloc+0x5b/0x480
[ 550.815680] ? obj_cgroup_charge+0x247/0x740
[ 550.816569] create_object.isra.0+0x3a/0xa20
[ 550.817457] ? kasan_unpoison+0x23/0x50
[ 550.818283] kmem_cache_alloc+0x239/0x480
[ 550.819116] create_new_namespaces+0x30/0xb30
[ 550.820033] copy_namespaces+0x391/0x450
[ 550.820855] copy_process+0x2ba5/0x6d10
[ 550.821685] ? __cleanup_sighand+0xb0/0xb0
[ 550.822553] ? lock_is_held_type+0xd7/0x130
[ 550.823438] ? find_held_lock+0x2c/0x110
[ 550.824255] ? kernel_clone+0xc4/0xa60
[ 550.825045] kernel_clone+0xe7/0xa60
[ 550.825796] ? create_io_thread+0xf0/0xf0
[ 550.826640] ? find_held_lock+0x2c/0x110
[ 550.827454] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 550.828442] ? bit_wait_io_timeout+0x160/0x160
[ 550.829364] __do_sys_clone+0xc8/0x110
[ 550.830145] ? __do_sys_vfork+0xd0/0xd0
[ 550.830967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 550.832053] ? vfs_write+0x428/0xad0
[ 550.832843] ? syscall_enter_from_user_mode+0x1d/0x50
[ 550.833842] do_syscall_64+0x3b/0x90
[ 550.834602] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 550.835704] RIP: 0033:0x7f71bf82bb19
[ 550.836459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 550.840203] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 550.841655] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 550.843103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 550.844518] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 550.845930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 550.847351] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 550.848782]
[ 550.880425] FAULT_INJECTION: forcing a failure.
[ 550.880425] name failslab, interval 1, probability 0, space 0, times 0
[ 550.881705] CPU: 0 PID: 5445 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 550.882567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 550.883749] Call Trace:
[ 550.884020]
[ 550.884250] dump_stack_lvl+0x8b/0xb3
[ 550.884664] should_fail.cold+0x5/0xa
[ 550.885061] ? copy_utsname+0x155/0x4a0
[ 550.885483] should_failslab+0x5/0x10
[ 550.885883] kmem_cache_alloc+0x5b/0x480
[ 550.886336] copy_utsname+0x155/0x4a0
[ 550.886743] create_new_namespaces+0x16e/0xb30
[ 550.887233] copy_namespaces+0x391/0x450
[ 550.887664] copy_process+0x2ba5/0x6d10
[ 550.888097] ? __cleanup_sighand+0xb0/0xb0
[ 550.888548] ? lock_is_held_type+0xd7/0x130
[ 550.889000] ? find_held_lock+0x2c/0x110
[ 550.889426] ? kernel_clone+0xc4/0xa60
[ 550.889836] kernel_clone+0xe7/0xa60
[ 550.890269] ? create_io_thread+0xf0/0xf0
[ 550.890709] ? find_held_lock+0x2c/0x110
[ 550.891132] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 550.891654] ? bit_wait_io_timeout+0x160/0x160
[ 550.892132] __do_sys_clone+0xc8/0x110
[ 550.892547] ? __do_sys_vfork+0xd0/0xd0
[ 550.892967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 550.893543] ? vfs_write+0x428/0xad0
[ 550.893945] ? syscall_enter_from_user_mode+0x1d/0x50
[ 550.894506] do_syscall_64+0x3b/0x90
[ 550.894901] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 550.895445] RIP: 0033:0x7fa70862cb19
[ 550.895830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 550.897738] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 550.898531] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 550.899265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 550.899995] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 550.900736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 550.901248] loop0: detected capacity change from 0 to 240
[ 550.901473] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 550.901496]
[ 550.901896] loop3: detected capacity change from 0 to 240
[ 550.912475] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 550.915952] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 550.917598] isofs_fill_super: root inode is not a directory. Corrupted media?
12:42:53 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:53 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400))
12:42:53 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a08", 0x19, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:42:53 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:42:53 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:42:53 executing program 3:
syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000001380)=[{0x0}, {&(0x7f00000012c0)="d150f10b1f877a4c496d6687c2e3b01f89b282979140bba4631af63aff4b1e008012a9053d1fc4c722661014b5360d6d369bc958e205992997dfaa57602724ca2ce975471e70df706eac83e4712ada73b7739921cc78b159f757d9254cecef5197d02900ad42f46aa14ae9cf61e6a38ac168d9d7bcd8fb31f481913a8cd8a5a4540ad202cb833bcd20cf67da12921780e5203761877c9e7b2955bdd2719c2e193612593b336fa66122b86e8d33dbe880cefd56b5", 0xb4, 0x100000001}], 0x0, &(0x7f0000001400)={[{'$-'}], [{@pcr={'pcr', 0x3d, 0x32}}, {@obj_type={'obj_type', 0x3d, '!,*!+)+[:]'}}, {@subj_user}]})
12:42:53 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33)
[ 551.076680] FAULT_INJECTION: forcing a failure.
[ 551.076680] name failslab, interval 1, probability 0, space 0, times 0
[ 551.077985] CPU: 0 PID: 5463 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 551.078893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 551.080062] Call Trace:
[ 551.080329]
[ 551.080562] dump_stack_lvl+0x8b/0xb3
[ 551.080972] should_fail.cold+0x5/0xa
[ 551.081375] ? create_object.isra.0+0x3a/0xa20
[ 551.081857] should_failslab+0x5/0x10
[ 551.082262] kmem_cache_alloc+0x5b/0x480
[ 551.082685] ? obj_cgroup_charge+0x247/0x740
[ 551.083150] create_object.isra.0+0x3a/0xa20
[ 551.083611] ? kasan_unpoison+0x23/0x50
[ 551.084026] kmem_cache_alloc+0x239/0x480
[ 551.084480] copy_utsname+0x155/0x4a0
[ 551.084890] create_new_namespaces+0x16e/0xb30
[ 551.085371] ? __sanitizer_cov_trace_const_cmp4+0x3/0x70
[ 551.085998] copy_namespaces+0x391/0x450
[ 551.086471] copy_process+0x2ba5/0x6d10
[ 551.086944] ? __cleanup_sighand+0xb0/0xb0
[ 551.087430] ? lock_is_held_type+0xd7/0x130
[ 551.087931] ? find_held_lock+0x2c/0x110
[ 551.088405] ? kernel_clone+0xc4/0xa60
[ 551.088872] kernel_clone+0xe7/0xa60
[ 551.089307] ? create_io_thread+0xf0/0xf0
[ 551.089788] ? find_held_lock+0x2c/0x110
[ 551.090263] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 551.090835] ? bit_wait_io_timeout+0x160/0x160
[ 551.091363] __do_sys_clone+0xc8/0x110
[ 551.091802] ? __do_sys_vfork+0xd0/0xd0
[ 551.092265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 551.092890] ? vfs_write+0x428/0xad0
[ 551.093331] ? syscall_enter_from_user_mode+0x1d/0x50
[ 551.093919] do_syscall_64+0x3b/0x90
[ 551.094345] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 551.094918] RIP: 0033:0x7fa70862cb19
[ 551.095321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 551.097351] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 551.098189] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 551.098959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 551.099732] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 551.100516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 551.101307] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 551.102104]
[ 551.106593] loop5: detected capacity change from 0 to 240
[ 551.111791] loop3: detected capacity change from 0 to 264192
[ 551.114449] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 551.114524] nfs: Unknown parameter '$-'
[ 565.933709] FAULT_INJECTION: forcing a failure.
[ 565.933709] name failslab, interval 1, probability 0, space 0, times 0
[ 565.936247] CPU: 1 PID: 5476 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 565.938027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 565.940460] Call Trace:
[ 565.941043]
[ 565.941520] dump_stack_lvl+0x8b/0xb3
[ 565.942346] should_fail.cold+0x5/0xa
[ 565.943192] ? copy_ipcs+0x184/0x5d0
[ 565.944011] should_failslab+0x5/0x10
[ 565.944838] kmem_cache_alloc_trace+0x55/0x3c0
[ 565.945813] copy_ipcs+0x184/0x5d0
[ 565.946597] ? copy_utsname+0xa9/0x4a0
[ 565.947464] create_new_namespaces+0x210/0xb30
[ 565.948477] copy_namespaces+0x391/0x450
[ 565.949374] copy_process+0x2ba5/0x6d10
[ 565.950256] ? __cleanup_sighand+0xb0/0xb0
[ 565.951181] ? lock_is_held_type+0xd7/0x130
[ 565.952106] ? find_held_lock+0x2c/0x110
[ 565.953012] ? kernel_clone+0xc4/0xa60
[ 565.953871] kernel_clone+0xe7/0xa60
[ 565.954694] ? create_io_thread+0xf0/0xf0
[ 565.955617] ? find_held_lock+0x2c/0x110
[ 565.956510] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 565.957589] ? bit_wait_io_timeout+0x160/0x160
[ 565.958624] __do_sys_clone+0xc8/0x110
[ 565.959464] ? __do_sys_vfork+0xd0/0xd0
12:43:08 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34)
12:43:08 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a08", 0x19, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:08 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32)
[ 565.960546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 565.962002] ? vfs_write+0x428/0xad0
[ 565.962846] ? syscall_enter_from_user_mode+0x1d/0x50
[ 565.963991] do_syscall_64+0x3b/0x90
[ 565.964795] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 565.965947] RIP: 0033:0x7fa70862cb19
[ 565.966762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 565.970819] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 565.972426] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 565.973925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 565.975632] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 565.977137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 565.978651] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 565.980178]
[ 565.983520] FAULT_INJECTION: forcing a failure.
[ 565.983520] name failslab, interval 1, probability 0, space 0, times 0
[ 565.985955] CPU: 1 PID: 5484 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 565.987699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 565.990085] Call Trace:
[ 565.990635]
[ 565.991118] dump_stack_lvl+0x8b/0xb3
[ 565.991963] should_fail.cold+0x5/0xa
[ 565.992783] ? copy_utsname+0x155/0x4a0
[ 565.993667] should_failslab+0x5/0x10
[ 565.994508] kmem_cache_alloc+0x5b/0x480
[ 565.995377] copy_utsname+0x155/0x4a0
[ 565.996206] create_new_namespaces+0x16e/0xb30
[ 565.997210] copy_namespaces+0x391/0x450
[ 565.998097] copy_process+0x2ba5/0x6d10
[ 565.998985] ? __cleanup_sighand+0xb0/0xb0
[ 565.999923] ? lock_is_held_type+0xd7/0x130
[ 566.000834] ? find_held_lock+0x2c/0x110
[ 566.001699] ? kernel_clone+0xc4/0xa60
[ 566.002566] kernel_clone+0xe7/0xa60
[ 566.003397] ? create_io_thread+0xf0/0xf0
[ 566.004285] ? find_held_lock+0x2c/0x110
[ 566.005158] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 566.006205] ? bit_wait_io_timeout+0x160/0x160
[ 566.007204] __do_sys_clone+0xc8/0x110
[ 566.008051] ? __do_sys_vfork+0xd0/0xd0
[ 566.008919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 566.010115] ? vfs_write+0x428/0xad0
[ 566.010946] ? syscall_enter_from_user_mode+0x1d/0x50
[ 566.012047] do_syscall_64+0x3b/0x90
[ 566.012838] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 566.013940] RIP: 0033:0x7f71bf82bb19
[ 566.014762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 566.018625] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 566.020290] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 566.021886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 566.023453] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 566.024978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 566.026502] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 566.028025]
[ 566.044806] loop5: detected capacity change from 0 to 240
12:43:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85)
[ 566.087404] isofs_fill_super: root inode is not a directory. Corrupted media?
12:43:08 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33)
12:43:08 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35)
12:43:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 566.175160] FAULT_INJECTION: forcing a failure.
[ 566.175160] name failslab, interval 1, probability 0, space 0, times 0
[ 566.176458] CPU: 0 PID: 5503 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 566.177315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 566.178502] Call Trace:
[ 566.178767]
[ 566.179003] dump_stack_lvl+0x8b/0xb3
[ 566.179414] should_fail.cold+0x5/0xa
[ 566.179812] ? create_object.isra.0+0x3a/0xa20
[ 566.180314] should_failslab+0x5/0x10
[ 566.180712] kmem_cache_alloc+0x5b/0x480
[ 566.181146] create_object.isra.0+0x3a/0xa20
[ 566.181614] ? kasan_unpoison+0x23/0x50
[ 566.182039] kmem_cache_alloc_trace+0x22e/0x3c0
[ 566.182546] copy_ipcs+0x184/0x5d0
[ 566.182918] ? copy_utsname+0xa9/0x4a0
[ 566.183330] create_new_namespaces+0x210/0xb30
[ 566.183814] copy_namespaces+0x391/0x450
[ 566.184242] copy_process+0x2ba5/0x6d10
[ 566.184679] ? __cleanup_sighand+0xb0/0xb0
[ 566.185137] ? lock_is_held_type+0xd7/0x130
[ 566.185591] ? find_held_lock+0x2c/0x110
[ 566.186028] ? kernel_clone+0xc4/0xa60
[ 566.186459] kernel_clone+0xe7/0xa60
[ 566.186862] ? create_io_thread+0xf0/0xf0
[ 566.187302] ? find_held_lock+0x2c/0x110
[ 566.187733] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 566.188267] ? bit_wait_io_timeout+0x160/0x160
[ 566.188761] __do_sys_clone+0xc8/0x110
[ 566.189175] ? __do_sys_vfork+0xd0/0xd0
[ 566.189597] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 566.190169] ? vfs_write+0x428/0xad0
[ 566.190577] ? syscall_enter_from_user_mode+0x1d/0x50
[ 566.191139] do_syscall_64+0x3b/0x90
[ 566.191543] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 566.192093] RIP: 0033:0x7fa70862cb19
[ 566.192484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 566.194406] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 566.195218] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 566.195961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 566.196697] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 566.197442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 566.198191] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 566.198980]
12:43:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 566.268808] loop5: detected capacity change from 0 to 136
[ 566.286708] isofs_fill_super: get root inode failed
[ 566.346155] FAULT_INJECTION: forcing a failure.
[ 566.346155] name failslab, interval 1, probability 0, space 0, times 0
[ 566.348589] CPU: 1 PID: 5517 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 566.350273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 566.352820] Call Trace:
[ 566.353466]
[ 566.353920] dump_stack_lvl+0x8b/0xb3
[ 566.354740] should_fail.cold+0x5/0xa
[ 566.355528] ? create_object.isra.0+0x3a/0xa20
[ 566.356488] should_failslab+0x5/0x10
[ 566.357250] kmem_cache_alloc+0x5b/0x480
[ 566.358065] ? obj_cgroup_charge+0x247/0x740
[ 566.358999] create_object.isra.0+0x3a/0xa20
[ 566.359915] ? kasan_unpoison+0x23/0x50
[ 566.360748] kmem_cache_alloc+0x239/0x480
[ 566.361606] copy_utsname+0x155/0x4a0
[ 566.362399] create_new_namespaces+0x16e/0xb30
[ 566.363341] copy_namespaces+0x391/0x450
[ 566.364184] copy_process+0x2ba5/0x6d10
[ 566.365016] ? __cleanup_sighand+0xb0/0xb0
[ 566.365899] ? lock_is_held_type+0xd7/0x130
[ 566.366786] ? find_held_lock+0x2c/0x110
[ 566.367619] ? kernel_clone+0xc4/0xa60
[ 566.368421] kernel_clone+0xe7/0xa60
[ 566.369197] ? create_io_thread+0xf0/0xf0
[ 566.370057] ? find_held_lock+0x2c/0x110
[ 566.370901] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 566.371911] ? bit_wait_io_timeout+0x160/0x160
[ 566.372837] __do_sys_clone+0xc8/0x110
[ 566.373636] ? __do_sys_vfork+0xd0/0xd0
[ 566.374455] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 566.375565] ? vfs_write+0x428/0xad0
[ 566.376329] ? syscall_enter_from_user_mode+0x1d/0x50
[ 566.377510] do_syscall_64+0x3b/0x90
[ 566.378356] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 566.379550] RIP: 0033:0x7f71bf82bb19
[ 566.380369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 566.384528] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 566.386236] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 566.387852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 566.389442] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 566.391042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 566.392638] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 566.394255]
12:43:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85)
12:43:08 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 566.547803] loop5: detected capacity change from 0 to 136
12:43:08 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 566.593959] isofs_fill_super: get root inode failed
12:43:21 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:21 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380))
r2 = epoll_create(0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 579.547645] FAULT_INJECTION: forcing a failure.
[ 579.547645] name failslab, interval 1, probability 0, space 0, times 0
[ 579.550123] CPU: 1 PID: 5550 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 579.551913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 579.554330] Call Trace:
[ 579.554891]
[ 579.555376] dump_stack_lvl+0x8b/0xb3
[ 579.556209] should_fail.cold+0x5/0xa
[ 579.557039] ? alloc_fs_context+0x58/0x9d0
[ 579.557953] should_failslab+0x5/0x10
[ 579.558797] kmem_cache_alloc_trace+0x55/0x3c0
[ 579.559793] alloc_fs_context+0x58/0x9d0
[ 579.560689] mq_init_ns+0x16e/0x630
[ 579.561494] copy_ipcs+0x35e/0x5d0
[ 579.562251] ? copy_utsname+0xa9/0x4a0
[ 579.563111] create_new_namespaces+0x210/0xb30
[ 579.564110] copy_namespaces+0x391/0x450
[ 579.564967] copy_process+0x2ba5/0x6d10
[ 579.565859] ? __cleanup_sighand+0xb0/0xb0
[ 579.566809] ? lock_is_held_type+0xd7/0x130
[ 579.567733] ? find_held_lock+0x2c/0x110
[ 579.568613] ? kernel_clone+0xc4/0xa60
[ 579.569460] kernel_clone+0xe7/0xa60
[ 579.570274] ? create_io_thread+0xf0/0xf0
[ 579.571187] ? find_held_lock+0x2c/0x110
[ 579.572062] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 579.573122] ? bit_wait_io_timeout+0x160/0x160
12:43:21 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36)
12:43:21 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34)
12:43:21 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 579.574119] __do_sys_clone+0xc8/0x110
[ 579.575197] ? __do_sys_vfork+0xd0/0xd0
[ 579.576046] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 579.577210] ? vfs_write+0x428/0xad0
[ 579.578023] ? syscall_enter_from_user_mode+0x1d/0x50
[ 579.579137] do_syscall_64+0x3b/0x90
[ 579.579947] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 579.581041] RIP: 0033:0x7fa70862cb19
[ 579.581825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 579.585691] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 579.586477] loop5: detected capacity change from 0 to 136
[ 579.587286] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 579.587311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 579.590869] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 579.592352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 579.593839] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 579.595366]
[ 579.597509] FAULT_INJECTION: forcing a failure.
[ 579.597509] name failslab, interval 1, probability 0, space 0, times 0
[ 579.599852] CPU: 1 PID: 5558 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 579.601556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 579.603924] Call Trace:
[ 579.604462]
[ 579.604931] dump_stack_lvl+0x8b/0xb3
[ 579.605744] should_fail.cold+0x5/0xa
[ 579.606550] ? copy_ipcs+0x184/0x5d0
[ 579.607354] should_failslab+0x5/0x10
[ 579.608149] kmem_cache_alloc_trace+0x55/0x3c0
[ 579.609113] copy_ipcs+0x184/0x5d0
[ 579.609856] ? copy_utsname+0xa9/0x4a0
[ 579.610697] create_new_namespaces+0x210/0xb30
[ 579.611672] copy_namespaces+0x391/0x450
[ 579.612528] copy_process+0x2ba5/0x6d10
[ 579.613398] ? __cleanup_sighand+0xb0/0xb0
[ 579.614295] ? lock_is_held_type+0xd7/0x130
[ 579.615172] ? find_held_lock+0x2c/0x110
[ 579.615976] ? kernel_clone+0xc4/0xa60
[ 579.616752] kernel_clone+0xe7/0xa60
[ 579.617492] ? create_io_thread+0xf0/0xf0
[ 579.618309] ? find_held_lock+0x2c/0x110
[ 579.619118] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 579.620087] ? bit_wait_io_timeout+0x160/0x160
[ 579.620988] __do_sys_clone+0xc8/0x110
[ 579.621756] ? __do_sys_vfork+0xd0/0xd0
[ 579.622537] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 579.623627] ? vfs_write+0x428/0xad0
[ 579.624377] ? syscall_enter_from_user_mode+0x1d/0x50
[ 579.625386] do_syscall_64+0x3b/0x90
[ 579.626121] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 579.627144] RIP: 0033:0x7f71bf82bb19
[ 579.627863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 579.631427] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 579.632906] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 579.634288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 579.635679] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 579.637056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 579.638432] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 579.639850]
[ 579.656258] isofs_fill_super: get root inode failed
12:43:21 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:21 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r2, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:21 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:22 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:22 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 579.753160] loop5: detected capacity change from 0 to 240
12:43:22 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:22 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, 0x0, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 579.791381] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:43:38 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37)
12:43:38 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:38 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:38 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {0x0, 0x0, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:38 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:38 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:38 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35)
[ 595.771263] FAULT_INJECTION: forcing a failure.
[ 595.771263] name failslab, interval 1, probability 0, space 0, times 0
[ 595.773714] CPU: 1 PID: 5600 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 595.775490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 595.777910] Call Trace:
[ 595.778457]
[ 595.778940] dump_stack_lvl+0x8b/0xb3
[ 595.779769] should_fail.cold+0x5/0xa
[ 595.780590] ? create_object.isra.0+0x3a/0xa20
[ 595.781575] should_failslab+0x5/0x10
[ 595.782382] kmem_cache_alloc+0x5b/0x480
[ 595.783261] ? obj_cgroup_charge+0x247/0x740
[ 595.784212] create_object.isra.0+0x3a/0xa20
[ 595.785154] ? kasan_unpoison+0x23/0x50
[ 595.786024] kmem_cache_alloc_trace+0x22e/0x3c0
[ 595.787033] alloc_fs_context+0x58/0x9d0
[ 595.787917] mq_init_ns+0x16e/0x630
[ 595.788702] copy_ipcs+0x35e/0x5d0
[ 595.789457] ? copy_utsname+0xa9/0x4a0
[ 595.790291] create_new_namespaces+0x210/0xb30
[ 595.791286] copy_namespaces+0x391/0x450
[ 595.792176] copy_process+0x2ba5/0x6d10
[ 595.793059] ? __cleanup_sighand+0xb0/0xb0
[ 595.793990] ? lock_is_held_type+0xd7/0x130
[ 595.794924] ? find_held_lock+0x2c/0x110
[ 595.796018] ? kernel_clone+0xc4/0xa60
[ 595.796858] kernel_clone+0xe7/0xa60
[ 595.797677] ? create_io_thread+0xf0/0xf0
[ 595.798572] ? find_held_lock+0x2c/0x110
[ 595.799453] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 595.800513] ? bit_wait_io_timeout+0x160/0x160
[ 595.801498] __do_sys_clone+0xc8/0x110
[ 595.802349] ? __do_sys_vfork+0xd0/0xd0
[ 595.803235] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 595.804421] ? vfs_write+0x428/0xad0
[ 595.805248] ? syscall_enter_from_user_mode+0x1d/0x50
[ 595.806370] do_syscall_64+0x3b/0x90
[ 595.807187] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 595.808308] RIP: 0033:0x7fa70862cb19
[ 595.809105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 595.813061] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 595.814696] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 595.816252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 595.817791] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 595.819340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 595.820872] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 595.822437]
[ 595.825606] FAULT_INJECTION: forcing a failure.
[ 595.825606] name failslab, interval 1, probability 0, space 0, times 0
[ 595.826872] CPU: 0 PID: 5604 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 595.827767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 595.829010] Call Trace:
[ 595.829287]
[ 595.829534] dump_stack_lvl+0x8b/0xb3
[ 595.829960] should_fail.cold+0x5/0xa
[ 595.830391] ? create_object.isra.0+0x3a/0xa20
[ 595.830917] should_failslab+0x5/0x10
[ 595.831336] kmem_cache_alloc+0x5b/0x480
[ 595.831384] loop5: detected capacity change from 0 to 240
[ 595.831782] create_object.isra.0+0x3a/0xa20
[ 595.833418] ? kasan_unpoison+0x23/0x50
[ 595.833863] kmem_cache_alloc_trace+0x22e/0x3c0
[ 595.834388] copy_ipcs+0x184/0x5d0
[ 595.834778] ? copy_utsname+0xa9/0x4a0
[ 595.835224] create_new_namespaces+0x210/0xb30
[ 595.835727] copy_namespaces+0x391/0x450
[ 595.836198] copy_process+0x2ba5/0x6d10
[ 595.836649] ? __cleanup_sighand+0xb0/0xb0
[ 595.837113] ? lock_is_held_type+0xd7/0x130
[ 595.837585] ? find_held_lock+0x2c/0x110
[ 595.838047] ? kernel_clone+0xc4/0xa60
[ 595.838471] kernel_clone+0xe7/0xa60
[ 595.838890] ? create_io_thread+0xf0/0xf0
[ 595.839341] ? find_held_lock+0x2c/0x110
[ 595.839805] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 595.840350] ? bit_wait_io_timeout+0x160/0x160
[ 595.840830] __do_sys_clone+0xc8/0x110
[ 595.841257] ? __do_sys_vfork+0xd0/0xd0
[ 595.841678] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 595.842275] ? vfs_write+0x428/0xad0
[ 595.842691] ? syscall_enter_from_user_mode+0x1d/0x50
[ 595.843276] do_syscall_64+0x3b/0x90
[ 595.843692] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 595.844256] RIP: 0033:0x7f71bf82bb19
[ 595.844662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 595.846641] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 595.847465] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 595.848236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 595.849014] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 595.849792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 595.850559] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 595.851355]
[ 595.852330] loop3: detected capacity change from 0 to 240
[ 595.854145] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
[ 595.863800] isofs_fill_super: get root inode failed
12:43:52 executing program 4:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:52 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:52 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38)
12:43:52 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:52 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:52 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:52 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36)
[ 610.505446] FAULT_INJECTION: forcing a failure.
[ 610.505446] name failslab, interval 1, probability 0, space 0, times 0
[ 610.507894] CPU: 0 PID: 5624 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 610.509582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 610.511880] Call Trace:
[ 610.512422]
[ 610.512880] dump_stack_lvl+0x8b/0xb3
[ 610.513686] should_fail.cold+0x5/0xa
[ 610.514479] ? alloc_fs_context+0x58/0x9d0
[ 610.515372] should_failslab+0x5/0x10
[ 610.516136] kmem_cache_alloc_trace+0x55/0x3c0
[ 610.517087] alloc_fs_context+0x58/0x9d0
[ 610.517935] mq_init_ns+0x16e/0x630
[ 610.518689] copy_ipcs+0x35e/0x5d0
[ 610.519426] ? copy_utsname+0xa9/0x4a0
[ 610.520227] create_new_namespaces+0x210/0xb30
[ 610.521170] copy_namespaces+0x391/0x450
[ 610.522024] copy_process+0x2ba5/0x6d10
[ 610.522869] ? __cleanup_sighand+0xb0/0xb0
[ 610.523767] ? lock_is_held_type+0xd7/0x130
[ 610.524643] ? find_held_lock+0x2c/0x110
[ 610.525492] ? kernel_clone+0xc4/0xa60
[ 610.526298] kernel_clone+0xe7/0xa60
[ 610.527059] ? create_io_thread+0xf0/0xf0
[ 610.527917] ? find_held_lock+0x2c/0x110
[ 610.528749] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 610.529768] ? bit_wait_io_timeout+0x160/0x160
[ 610.530709] __do_sys_clone+0xc8/0x110
[ 610.531523] ? __do_sys_vfork+0xd0/0xd0
[ 610.532340] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 610.533456] ? vfs_write+0x428/0xad0
[ 610.534256] ? syscall_enter_from_user_mode+0x1d/0x50
[ 610.535362] do_syscall_64+0x3b/0x90
[ 610.536121] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 610.537229] RIP: 0033:0x7f71bf82bb19
[ 610.537973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 610.541697] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 610.543264] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 610.544709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 610.546137] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 610.547587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 610.549023] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 610.550502]
[ 610.554406] FAULT_INJECTION: forcing a failure.
[ 610.554406] name failslab, interval 1, probability 0, space 0, times 0
[ 610.556766] CPU: 0 PID: 5630 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 610.558436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 610.560721] Call Trace:
[ 610.561246]
[ 610.561691] dump_stack_lvl+0x8b/0xb3
[ 610.562487] should_fail.cold+0x5/0xa
[ 610.563290] ? mqueue_init_fs_context+0x47/0x490
[ 610.564256] should_failslab+0x5/0x10
[ 610.565014] kmem_cache_alloc_trace+0x55/0x3c0
[ 610.566237] mqueue_init_fs_context+0x47/0x490
[ 610.567180] ? mqueue_create+0x20/0x20
[ 610.567984] alloc_fs_context+0x563/0x9d0
[ 610.568843] mq_init_ns+0x16e/0x630
[ 610.569593] copy_ipcs+0x35e/0x5d0
[ 610.570317] ? copy_utsname+0xa9/0x4a0
[ 610.571122] create_new_namespaces+0x210/0xb30
[ 610.572073] copy_namespaces+0x391/0x450
[ 610.572911] copy_process+0x2ba5/0x6d10
[ 610.573753] ? __cleanup_sighand+0xb0/0xb0
[ 610.574627] ? lock_is_held_type+0xd7/0x130
[ 610.575527] ? find_held_lock+0x2c/0x110
[ 610.576359] ? kernel_clone+0xc4/0xa60
[ 610.577153] kernel_clone+0xe7/0xa60
[ 610.578111] ? create_io_thread+0xf0/0xf0
[ 610.579229] ? find_held_lock+0x2c/0x110
[ 610.580290] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 610.581506] ? bit_wait_io_timeout+0x160/0x160
[ 610.582453] __do_sys_clone+0xc8/0x110
[ 610.583267] ? __do_sys_vfork+0xd0/0xd0
[ 610.584070] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 610.585193] ? vfs_write+0x428/0xad0
[ 610.585983] ? syscall_enter_from_user_mode+0x1d/0x50
[ 610.587028] do_syscall_64+0x3b/0x90
[ 610.587818] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 610.588886] RIP: 0033:0x7fa70862cb19
[ 610.589638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 610.593358] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 610.594892] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 610.596340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 610.597766] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 610.599229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 610.600670] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 610.602119]
[ 610.605895] loop5: detected capacity change from 0 to 240
12:43:52 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:43:52 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:52 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 610.673588] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:43:53 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39)
12:43:53 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37)
12:43:53 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:53 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:43:53 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:53 executing program 0:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 610.847053] FAULT_INJECTION: forcing a failure.
[ 610.847053] name failslab, interval 1, probability 0, space 0, times 0
[ 610.847147] FAULT_INJECTION: forcing a failure.
[ 610.847147] name failslab, interval 1, probability 0, space 0, times 0
[ 610.849386] CPU: 0 PID: 5651 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 610.853256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 610.855577] Call Trace:
[ 610.856104]
[ 610.856566] dump_stack_lvl+0x8b/0xb3
[ 610.857367] should_fail.cold+0x5/0xa
[ 610.858172] ? create_object.isra.0+0x3a/0xa20
[ 610.859158] should_failslab+0x5/0x10
[ 610.859938] kmem_cache_alloc+0x5b/0x480
[ 610.860788] create_object.isra.0+0x3a/0xa20
[ 610.861690] ? kasan_unpoison+0x23/0x50
[ 610.862543] kmem_cache_alloc_trace+0x22e/0x3c0
[ 610.863534] mqueue_init_fs_context+0x47/0x490
[ 610.864485] ? mqueue_create+0x20/0x20
[ 610.865320] alloc_fs_context+0x563/0x9d0
[ 610.866197] mq_init_ns+0x16e/0x630
[ 610.866961] copy_ipcs+0x35e/0x5d0
[ 610.867717] ? copy_utsname+0xa9/0x4a0
[ 610.868540] create_new_namespaces+0x210/0xb30
[ 610.869499] copy_namespaces+0x391/0x450
[ 610.870355] copy_process+0x2ba5/0x6d10
[ 610.871226] ? __cleanup_sighand+0xb0/0xb0
[ 610.872115] ? lock_is_held_type+0xd7/0x130
[ 610.873015] ? find_held_lock+0x2c/0x110
[ 610.873855] ? kernel_clone+0xc4/0xa60
[ 610.874671] kernel_clone+0xe7/0xa60
[ 610.875461] ? create_io_thread+0xf0/0xf0
[ 610.876315] ? find_held_lock+0x2c/0x110
[ 610.877170] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 610.878212] ? bit_wait_io_timeout+0x160/0x160
[ 610.879168] __do_sys_clone+0xc8/0x110
[ 610.879978] ? __do_sys_vfork+0xd0/0xd0
[ 610.880816] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 610.881929] ? vfs_write+0x428/0xad0
[ 610.882693] ? syscall_enter_from_user_mode+0x1d/0x50
[ 610.883739] do_syscall_64+0x3b/0x90
[ 610.884485] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 610.885522] RIP: 0033:0x7fa70862cb19
[ 610.886256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 610.889904] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 610.891416] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 610.892841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 610.894255] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 610.895684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 610.897088] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 610.898558]
[ 610.899018] CPU: 1 PID: 5649 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 610.900679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 610.902893] Call Trace:
[ 610.903418]
[ 610.903863] dump_stack_lvl+0x8b/0xb3
[ 610.904633] should_fail.cold+0x5/0xa
[ 610.905395] ? create_object.isra.0+0x3a/0xa20
[ 610.906313] should_failslab+0x5/0x10
[ 610.907063] kmem_cache_alloc+0x5b/0x480
[ 610.907874] ? obj_cgroup_charge+0x247/0x740
[ 610.908750] create_object.isra.0+0x3a/0xa20
[ 610.909625] ? kasan_unpoison+0x23/0x50
[ 610.910419] kmem_cache_alloc_trace+0x22e/0x3c0
[ 610.911363] alloc_fs_context+0x58/0x9d0
[ 610.912182] mq_init_ns+0x16e/0x630
[ 610.912907] copy_ipcs+0x35e/0x5d0
[ 610.913606] ? copy_utsname+0xa9/0x4a0
[ 610.914393] create_new_namespaces+0x210/0xb30
[ 610.915324] copy_namespaces+0x391/0x450
[ 610.916141] copy_process+0x2ba5/0x6d10
[ 610.916969] ? __cleanup_sighand+0xb0/0xb0
[ 610.917824] ? lock_is_held_type+0xd7/0x130
[ 610.918677] ? find_held_lock+0x2c/0x110
[ 610.919491] ? kernel_clone+0xc4/0xa60
[ 610.920267] kernel_clone+0xe7/0xa60
[ 610.921014] ? create_io_thread+0xf0/0xf0
[ 610.921840] ? find_held_lock+0x2c/0x110
[ 610.922643] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 610.923637] ? bit_wait_io_timeout+0x160/0x160
[ 610.924544] __do_sys_clone+0xc8/0x110
[ 610.925318] ? __do_sys_vfork+0xd0/0xd0
[ 610.926107] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 610.927194] ? vfs_write+0x428/0xad0
[ 610.927956] ? syscall_enter_from_user_mode+0x1d/0x50
[ 610.928973] do_syscall_64+0x3b/0x90
[ 610.929716] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 610.930741] RIP: 0033:0x7f71bf82bb19
[ 610.931481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 610.935095] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 610.936935] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 610.938638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 610.940374] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 610.942077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 610.943819] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 610.945551]
12:43:53 executing program 3:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 610.961589] loop0: detected capacity change from 0 to 240
[ 610.994108] isofs_fill_super: bread failed, dev=loop0, iso_blknum=60, block=120
[ 611.003016] loop5: detected capacity change from 0 to 240
12:43:53 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:43:53 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 611.071927] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:43:53 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:06 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40)
12:44:06 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:06 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:06 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:06 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:06 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:06 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38)
12:44:06 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 624.160805] FAULT_INJECTION: forcing a failure.
[ 624.160805] name failslab, interval 1, probability 0, space 0, times 0
[ 624.162905] CPU: 0 PID: 5682 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 624.164423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 624.166560] Call Trace:
[ 624.167042]
[ 624.167474] dump_stack_lvl+0x8b/0xb3
[ 624.168195] should_fail.cold+0x5/0xa
[ 624.168913] ? alloc_super+0x54/0x9d0
[ 624.169642] should_failslab+0x5/0x10
[ 624.170832] kmem_cache_alloc_trace+0x55/0x3c0
[ 624.172099] ? do_raw_spin_lock+0x121/0x260
[ 624.173287] alloc_super+0x54/0x9d0
[ 624.174274] sget_fc+0x13e/0x7a0
[ 624.175182] ? refcount_dec_not_one+0x13b/0x1e0
[ 624.176242] ? set_anon_super+0xb0/0xb0
[ 624.177070] ? mqueue_get_tree+0x130/0x130
[ 624.177932] get_tree_nodev+0x24/0x1d0
[ 624.178724] mqueue_get_tree+0xee/0x130
[ 624.179538] vfs_get_tree+0x8e/0x2f0
[ 624.180293] fc_mount+0x13/0xc0
[ 624.180960] mq_init_ns+0x43e/0x630
[ 624.181719] copy_ipcs+0x35e/0x5d0
[ 624.182462] ? copy_utsname+0xa9/0x4a0
[ 624.183254] create_new_namespaces+0x210/0xb30
[ 624.184205] copy_namespaces+0x391/0x450
[ 624.185028] copy_process+0x2ba5/0x6d10
[ 624.185869] ? __cleanup_sighand+0xb0/0xb0
[ 624.186780] ? lock_is_held_type+0xd7/0x130
[ 624.187689] ? find_held_lock+0x2c/0x110
[ 624.188512] ? kernel_clone+0xc4/0xa60
[ 624.189301] kernel_clone+0xe7/0xa60
[ 624.190061] ? create_io_thread+0xf0/0xf0
[ 624.190923] ? find_held_lock+0x2c/0x110
[ 624.191755] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 624.192761] ? bit_wait_io_timeout+0x160/0x160
[ 624.193680] __do_sys_clone+0xc8/0x110
[ 624.194471] ? __do_sys_vfork+0xd0/0xd0
[ 624.195323] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 624.196435] ? vfs_write+0x428/0xad0
[ 624.197198] ? syscall_enter_from_user_mode+0x1d/0x50
[ 624.198243] do_syscall_64+0x3b/0x90
[ 624.198997] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 624.200091] RIP: 0033:0x7fa70862cb19
[ 624.200831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 624.204807] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 624.206539] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 624.208201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 624.209832] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 624.211461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 624.213092] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 624.214737]
12:44:06 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 624.233620] loop5: detected capacity change from 0 to 240
[ 624.252160] FAULT_INJECTION: forcing a failure.
[ 624.252160] name failslab, interval 1, probability 0, space 0, times 0
[ 624.254646] CPU: 0 PID: 5697 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 624.256498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 624.258974] Call Trace:
12:44:06 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 624.259575]
[ 624.260191] dump_stack_lvl+0x8b/0xb3
[ 624.261037] should_fail.cold+0x5/0xa
[ 624.261878] ? mqueue_init_fs_context+0x47/0x490
[ 624.262919] should_failslab+0x5/0x10
[ 624.263769] kmem_cache_alloc_trace+0x55/0x3c0
[ 624.264800] mqueue_init_fs_context+0x47/0x490
[ 624.265787] ? mqueue_create+0x20/0x20
[ 624.266652] alloc_fs_context+0x563/0x9d0
[ 624.267579] mq_init_ns+0x16e/0x630
[ 624.268378] copy_ipcs+0x35e/0x5d0
[ 624.269172] ? copy_utsname+0xa9/0x4a0
[ 624.270036] create_new_namespaces+0x210/0xb30
[ 624.271069] copy_namespaces+0x391/0x450
[ 624.271966] copy_process+0x2ba5/0x6d10
[ 624.272908] ? __cleanup_sighand+0xb0/0xb0
[ 624.273864] ? lock_is_held_type+0xd7/0x130
[ 624.274813] ? find_held_lock+0x2c/0x110
[ 624.275723] ? kernel_clone+0xc4/0xa60
[ 624.276601] kernel_clone+0xe7/0xa60
[ 624.277441] ? create_io_thread+0xf0/0xf0
[ 624.278353] ? find_held_lock+0x2c/0x110
[ 624.279235] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 624.280309] ? bit_wait_io_timeout+0x160/0x160
[ 624.281303] __do_sys_clone+0xc8/0x110
[ 624.282175] ? __do_sys_vfork+0xd0/0xd0
[ 624.283045] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 624.284241] ? vfs_write+0x428/0xad0
[ 624.285064] ? syscall_enter_from_user_mode+0x1d/0x50
[ 624.286200] do_syscall_64+0x3b/0x90
[ 624.287042] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 624.288197] RIP: 0033:0x7f71bf82bb19
[ 624.288982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 624.292960] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 624.294592] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 624.296154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 624.297695] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 624.299201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 624.300709] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 624.302263]
12:44:06 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r5, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 624.344749] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:44:06 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:06 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:06 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39)
12:44:22 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:22 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41)
12:44:22 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:22 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180))
r4 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd=r4, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 639.879256] FAULT_INJECTION: forcing a failure.
[ 639.879256] name failslab, interval 1, probability 0, space 0, times 0
[ 639.881677] CPU: 0 PID: 5718 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 639.883442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 639.885865] Call Trace:
[ 639.886408]
[ 639.886884] dump_stack_lvl+0x8b/0xb3
[ 639.887728] should_fail.cold+0x5/0xa
[ 639.888094] loop5: detected capacity change from 0 to 240
[ 639.888586] ? alloc_fs_context+0x58/0x9d0
[ 639.890105] should_failslab+0x5/0x10
[ 639.890940] kmem_cache_alloc_trace+0x55/0x3c0
[ 639.891994] alloc_fs_context+0x58/0x9d0
[ 639.892902] mq_init_ns+0x16e/0x630
[ 639.893684] copy_ipcs+0x35e/0x5d0
[ 639.894450] ? copy_utsname+0xa9/0x4a0
[ 639.895284] create_new_namespaces+0x210/0xb30
[ 639.896305] copy_namespaces+0x391/0x450
[ 639.897214] copy_process+0x2ba5/0x6d10
[ 639.898141] ? __cleanup_sighand+0xb0/0xb0
[ 639.899092] ? lock_is_held_type+0xd7/0x130
[ 639.900103] ? find_held_lock+0x2c/0x110
[ 639.901012] ? kernel_clone+0xc4/0xa60
[ 639.901915] kernel_clone+0xe7/0xa60
[ 639.903021] ? create_io_thread+0xf0/0xf0
[ 639.903947] ? find_held_lock+0x2c/0x110
[ 639.904827] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 639.905912] ? bit_wait_io_timeout+0x160/0x160
[ 639.906893] __do_sys_clone+0xc8/0x110
[ 639.907750] ? __do_sys_vfork+0xd0/0xd0
[ 639.908610] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 639.909797] ? vfs_write+0x428/0xad0
[ 639.910612] ? syscall_enter_from_user_mode+0x1d/0x50
[ 639.911711] do_syscall_64+0x3b/0x90
[ 639.912511] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 639.913615] RIP: 0033:0x7f71bf82bb19
[ 639.914408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 639.918282] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 639.919898] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 639.921399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 639.922912] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 639.924438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 639.925942] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 639.927460]
[ 639.950934] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
[ 639.955170] FAULT_INJECTION: forcing a failure.
[ 639.955170] name failslab, interval 1, probability 0, space 0, times 0
[ 639.957669] CPU: 0 PID: 5731 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 639.959399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 639.961801] Call Trace:
[ 639.962344]
[ 639.962819] dump_stack_lvl+0x8b/0xb3
[ 639.963670] should_fail.cold+0x5/0xa
[ 639.964491] ? create_object.isra.0+0x3a/0xa20
[ 639.965485] should_failslab+0x5/0x10
[ 639.966302] kmem_cache_alloc+0x5b/0x480
[ 639.967187] create_object.isra.0+0x3a/0xa20
[ 639.968144] ? kasan_unpoison+0x23/0x50
[ 639.969010] kmem_cache_alloc_trace+0x22e/0x3c0
[ 639.970018] alloc_super+0x54/0x9d0
[ 639.970815] sget_fc+0x13e/0x7a0
[ 639.971579] ? refcount_dec_not_one+0x13b/0x1e0
[ 639.972581] ? set_anon_super+0xb0/0xb0
[ 639.973447] ? mqueue_get_tree+0x130/0x130
[ 639.974360] get_tree_nodev+0x24/0x1d0
[ 639.975207] mqueue_get_tree+0xee/0x130
[ 639.976069] vfs_get_tree+0x8e/0x2f0
[ 639.976881] fc_mount+0x13/0xc0
[ 639.977598] mq_init_ns+0x43e/0x630
[ 639.978387] copy_ipcs+0x35e/0x5d0
[ 639.979145] ? copy_utsname+0xa9/0x4a0
[ 639.980001] create_new_namespaces+0x210/0xb30
[ 639.981000] copy_namespaces+0x391/0x450
[ 639.981883] copy_process+0x2ba5/0x6d10
[ 639.982778] ? __cleanup_sighand+0xb0/0xb0
12:44:22 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:22 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 639.983713] ? lock_is_held_type+0xd7/0x130
[ 639.984808] ? find_held_lock+0x2c/0x110
[ 639.985679] ? kernel_clone+0xc4/0xa60
[ 639.986523] kernel_clone+0xe7/0xa60
[ 639.987331] ? create_io_thread+0xf0/0xf0
[ 639.988236] ? find_held_lock+0x2c/0x110
[ 639.989114] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 639.990308] ? bit_wait_io_timeout+0x160/0x160
[ 639.991293] __do_sys_clone+0xc8/0x110
[ 639.992152] ? __do_sys_vfork+0xd0/0xd0
[ 639.993013] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 639.994185] ? vfs_write+0x428/0xad0
[ 639.995007] ? syscall_enter_from_user_mode+0x1d/0x50
[ 639.996126] do_syscall_64+0x3b/0x90
[ 639.996935] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 639.998048] RIP: 0033:0x7fa70862cb19
[ 639.998838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 640.002744] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 640.004377] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 640.005890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 640.007409] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 640.008925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 640.010445] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 640.011992]
[ 640.035629] blk_print_req_error: 446 callbacks suppressed
[ 640.035640] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
12:44:38 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:38 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:38 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42)
12:44:38 executing program 2:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:38 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:38 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:38 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40)
[ 656.414627] FAULT_INJECTION: forcing a failure.
[ 656.414627] name failslab, interval 1, probability 0, space 0, times 0
[ 656.415887] CPU: 0 PID: 5755 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 656.416758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 656.417949] Call Trace:
[ 656.418218]
[ 656.418453] dump_stack_lvl+0x8b/0xb3
[ 656.418867] should_fail.cold+0x5/0xa
[ 656.419276] ? alloc_super+0x54/0x9d0
[ 656.419691] should_failslab+0x5/0x10
[ 656.420104] kmem_cache_alloc_trace+0x55/0x3c0
[ 656.420595] ? do_raw_spin_lock+0x121/0x260
[ 656.421057] alloc_super+0x54/0x9d0
[ 656.421449] sget_fc+0x13e/0x7a0
[ 656.421812] ? refcount_dec_not_one+0x13b/0x1e0
[ 656.422303] ? set_anon_super+0xb0/0xb0
[ 656.422730] ? mqueue_get_tree+0x130/0x130
[ 656.423175] get_tree_nodev+0x24/0x1d0
[ 656.423597] mqueue_get_tree+0xee/0x130
[ 656.424038] vfs_get_tree+0x8e/0x2f0
[ 656.424439] fc_mount+0x13/0xc0
[ 656.424790] mq_init_ns+0x43e/0x630
[ 656.425180] copy_ipcs+0x35e/0x5d0
[ 656.425563] ? copy_utsname+0xa9/0x4a0
[ 656.425982] create_new_namespaces+0x210/0xb30
[ 656.426475] copy_namespaces+0x391/0x450
[ 656.426905] copy_process+0x2ba5/0x6d10
[ 656.427348] ? __cleanup_sighand+0xb0/0xb0
[ 656.427807] ? lock_is_held_type+0xd7/0x130
[ 656.428264] ? find_held_lock+0x2c/0x110
[ 656.428693] ? kernel_clone+0xc4/0xa60
[ 656.429114] kernel_clone+0xe7/0xa60
[ 656.429513] ? create_io_thread+0xf0/0xf0
[ 656.429954] ? find_held_lock+0x2c/0x110
[ 656.430383] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 656.430910] ? bit_wait_io_timeout+0x160/0x160
[ 656.431392] __do_sys_clone+0xc8/0x110
[ 656.431809] ? __do_sys_vfork+0xd0/0xd0
[ 656.432234] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 656.432819] ? vfs_write+0x428/0xad0
[ 656.433232] ? syscall_enter_from_user_mode+0x1d/0x50
[ 656.433781] do_syscall_64+0x3b/0x90
[ 656.434186] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 656.434735] RIP: 0033:0x7f71bf82bb19
[ 656.435122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 656.437076] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 656.437868] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 656.438612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 656.439342] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 656.440094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 656.440844] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 656.441610]
[ 656.442726] FAULT_INJECTION: forcing a failure.
[ 656.442726] name failslab, interval 1, probability 0, space 0, times 0
[ 656.444294] CPU: 0 PID: 5759 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 656.445188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 656.446378] Call Trace:
[ 656.446650]
[ 656.446896] dump_stack_lvl+0x8b/0xb3
[ 656.447312] should_fail.cold+0x5/0xa
[ 656.447728] ? security_sb_alloc+0x107/0x250
[ 656.448215] should_failslab+0x5/0x10
[ 656.448612] __kmalloc+0x72/0x440
[ 656.448977] ? rwsem_mark_wake+0xaf0/0xaf0
[ 656.449444] security_sb_alloc+0x107/0x250
[ 656.449900] alloc_super+0x1dd/0x9d0
[ 656.450305] sget_fc+0x13e/0x7a0
[ 656.450670] ? refcount_dec_not_one+0x13b/0x1e0
[ 656.451152] ? set_anon_super+0xb0/0xb0
[ 656.451579] ? mqueue_get_tree+0x130/0x130
[ 656.452041] get_tree_nodev+0x24/0x1d0
[ 656.452456] mqueue_get_tree+0xee/0x130
[ 656.452887] vfs_get_tree+0x8e/0x2f0
[ 656.453294] fc_mount+0x13/0xc0
[ 656.453652] mq_init_ns+0x43e/0x630
[ 656.454037] copy_ipcs+0x35e/0x5d0
[ 656.454417] ? copy_utsname+0xa9/0x4a0
[ 656.454832] create_new_namespaces+0x210/0xb30
[ 656.455326] copy_namespaces+0x391/0x450
[ 656.455466] loop5: detected capacity change from 0 to 240
[ 656.455765] copy_process+0x2ba5/0x6d10
[ 656.457369] ? __cleanup_sighand+0xb0/0xb0
[ 656.457827] ? lock_is_held_type+0xd7/0x130
[ 656.458280] ? find_held_lock+0x2c/0x110
[ 656.458715] ? kernel_clone+0xc4/0xa60
[ 656.459137] kernel_clone+0xe7/0xa60
[ 656.459542] ? create_io_thread+0xf0/0xf0
[ 656.460006] ? find_held_lock+0x2c/0x110
[ 656.460444] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 656.460965] ? bit_wait_io_timeout+0x160/0x160
[ 656.461457] __do_sys_clone+0xc8/0x110
[ 656.461872] ? __do_sys_vfork+0xd0/0xd0
[ 656.462295] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 656.462881] ? vfs_write+0x428/0xad0
[ 656.463289] ? syscall_enter_from_user_mode+0x1d/0x50
[ 656.463845] do_syscall_64+0x3b/0x90
[ 656.464249] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 656.464807] RIP: 0033:0x7fa70862cb19
[ 656.465195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 656.467119] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 656.467924] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 656.468676] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 656.469433] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 656.470176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 656.470916] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 656.471678]
[ 656.514512] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:44:38 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41)
12:44:38 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43)
[ 656.548769] FAULT_INJECTION: forcing a failure.
[ 656.548769] name failslab, interval 1, probability 0, space 0, times 0
[ 656.550088] CPU: 0 PID: 5765 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 656.550979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 656.552194] Call Trace:
[ 656.552469]
[ 656.552706] dump_stack_lvl+0x8b/0xb3
[ 656.553120] should_fail.cold+0x5/0xa
[ 656.553533] ? create_object.isra.0+0x3a/0xa20
[ 656.554039] should_failslab+0x5/0x10
[ 656.554444] kmem_cache_alloc+0x5b/0x480
[ 656.554881] create_object.isra.0+0x3a/0xa20
[ 656.555348] ? kasan_unpoison+0x23/0x50
[ 656.555780] kmem_cache_alloc_trace+0x22e/0x3c0
[ 656.556284] alloc_super+0x54/0x9d0
[ 656.556683] sget_fc+0x13e/0x7a0
[ 656.557054] ? refcount_dec_not_one+0x13b/0x1e0
[ 656.557552] ? set_anon_super+0xb0/0xb0
[ 656.557978] ? mqueue_get_tree+0x130/0x130
[ 656.558423] get_tree_nodev+0x24/0x1d0
[ 656.558840] mqueue_get_tree+0xee/0x130
[ 656.559256] vfs_get_tree+0x8e/0x2f0
[ 656.559653] fc_mount+0x13/0xc0
[ 656.560023] mq_init_ns+0x43e/0x630
[ 656.560406] copy_ipcs+0x35e/0x5d0
[ 656.560784] ? copy_utsname+0xa9/0x4a0
[ 656.561195] create_new_namespaces+0x210/0xb30
[ 656.561687] copy_namespaces+0x391/0x450
[ 656.562122] copy_process+0x2ba5/0x6d10
[ 656.562557] ? __cleanup_sighand+0xb0/0xb0
[ 656.563007] ? lock_is_held_type+0xd7/0x130
[ 656.563459] ? find_held_lock+0x2c/0x110
[ 656.563899] ? kernel_clone+0xc4/0xa60
[ 656.564316] kernel_clone+0xe7/0xa60
[ 656.564715] ? create_io_thread+0xf0/0xf0
[ 656.565150] ? find_held_lock+0x2c/0x110
[ 656.565575] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 656.566089] ? bit_wait_io_timeout+0x160/0x160
[ 656.566576] __do_sys_clone+0xc8/0x110
[ 656.566992] ? __do_sys_vfork+0xd0/0xd0
[ 656.567406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 656.567997] ? vfs_write+0x428/0xad0
[ 656.568397] ? syscall_enter_from_user_mode+0x1d/0x50
[ 656.568947] do_syscall_64+0x3b/0x90
[ 656.569344] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 656.569885] RIP: 0033:0x7f71bf82bb19
[ 656.570280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 656.572191] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 656.572991] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 656.573729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 656.574471] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 656.575242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 656.575985] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 656.576733]
12:44:38 executing program 7:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:38 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 656.588523] FAULT_INJECTION: forcing a failure.
[ 656.588523] name failslab, interval 1, probability 0, space 0, times 0
[ 656.589733] CPU: 0 PID: 5767 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 656.590603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 656.591808] Call Trace:
[ 656.592084]
[ 656.592325] dump_stack_lvl+0x8b/0xb3
[ 656.592739] should_fail.cold+0x5/0xa
[ 656.593152] ? create_object.isra.0+0x3a/0xa20
[ 656.593642] should_failslab+0x5/0x10
[ 656.594055] kmem_cache_alloc+0x5b/0x480
[ 656.594488] create_object.isra.0+0x3a/0xa20
[ 656.594947] ? kasan_unpoison+0x23/0x50
[ 656.595387] __kmalloc+0x25b/0x440
[ 656.595799] security_sb_alloc+0x107/0x250
[ 656.596298] alloc_super+0x1dd/0x9d0
[ 656.596704] sget_fc+0x13e/0x7a0
[ 656.597075] ? refcount_dec_not_one+0x13b/0x1e0
[ 656.597569] ? set_anon_super+0xb0/0xb0
[ 656.598002] ? mqueue_get_tree+0x130/0x130
[ 656.598468] get_tree_nodev+0x24/0x1d0
[ 656.598889] mqueue_get_tree+0xee/0x130
[ 656.599315] vfs_get_tree+0x8e/0x2f0
[ 656.599714] fc_mount+0x13/0xc0
[ 656.600099] mq_init_ns+0x43e/0x630
[ 656.600502] copy_ipcs+0x35e/0x5d0
[ 656.600878] ? copy_utsname+0xa9/0x4a0
[ 656.601293] create_new_namespaces+0x210/0xb30
[ 656.601788] copy_namespaces+0x391/0x450
[ 656.602218] copy_process+0x2ba5/0x6d10
[ 656.602662] ? __cleanup_sighand+0xb0/0xb0
[ 656.603117] ? lock_is_held_type+0xd7/0x130
[ 656.603567] ? find_held_lock+0x2c/0x110
[ 656.604009] ? kernel_clone+0xc4/0xa60
[ 656.604422] kernel_clone+0xe7/0xa60
[ 656.604825] ? create_io_thread+0xf0/0xf0
[ 656.605270] ? find_held_lock+0x2c/0x110
[ 656.605707] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 656.606226] ? bit_wait_io_timeout+0x160/0x160
[ 656.606712] __do_sys_clone+0xc8/0x110
[ 656.607127] ? __do_sys_vfork+0xd0/0xd0
[ 656.607554] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 656.608158] ? vfs_write+0x428/0xad0
[ 656.608559] ? syscall_enter_from_user_mode+0x1d/0x50
[ 656.609103] do_syscall_64+0x3b/0x90
[ 656.609499] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 656.610058] RIP: 0033:0x7fa70862cb19
[ 656.610449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 656.612376] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 656.613173] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 656.613929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 656.614683] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 656.615422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 656.616320] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 656.617079]
12:44:38 executing program 2:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:38 executing program 2:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 656.703716] loop5: detected capacity change from 0 to 240
12:44:39 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42)
[ 656.769650] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
[ 656.815244] FAULT_INJECTION: forcing a failure.
[ 656.815244] name failslab, interval 1, probability 0, space 0, times 0
[ 656.820749] CPU: 0 PID: 5781 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 656.822445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 656.824653] Call Trace:
[ 656.825158]
[ 656.825645] dump_stack_lvl+0x8b/0xb3
[ 656.826494] should_fail.cold+0x5/0xa
[ 656.827332] ? security_sb_alloc+0x107/0x250
[ 656.828305] should_failslab+0x5/0x10
[ 656.829135] __kmalloc+0x72/0x440
[ 656.829896] ? rwsem_mark_wake+0xaf0/0xaf0
[ 656.830822] security_sb_alloc+0x107/0x250
[ 656.831755] alloc_super+0x1dd/0x9d0
[ 656.832612] sget_fc+0x13e/0x7a0
[ 656.833362] ? refcount_dec_not_one+0x13b/0x1e0
[ 656.834384] ? set_anon_super+0xb0/0xb0
[ 656.835263] ? mqueue_get_tree+0x130/0x130
[ 656.836193] get_tree_nodev+0x24/0x1d0
[ 656.837058] mqueue_get_tree+0xee/0x130
[ 656.837975] vfs_get_tree+0x8e/0x2f0
[ 656.838833] fc_mount+0x13/0xc0
[ 656.839581] mq_init_ns+0x43e/0x630
[ 656.840430] copy_ipcs+0x35e/0x5d0
[ 656.841222] ? copy_utsname+0xa9/0x4a0
[ 656.842137] create_new_namespaces+0x210/0xb30
[ 656.843191] copy_namespaces+0x391/0x450
[ 656.844148] copy_process+0x2ba5/0x6d10
[ 656.845094] ? __cleanup_sighand+0xb0/0xb0
[ 656.846075] ? lock_is_held_type+0xd7/0x130
[ 656.847020] ? find_held_lock+0x2c/0x110
[ 656.847920] ? kernel_clone+0xc4/0xa60
[ 656.848783] kernel_clone+0xe7/0xa60
[ 656.849610] ? create_io_thread+0xf0/0xf0
[ 656.850521] ? find_held_lock+0x2c/0x110
[ 656.851415] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 656.852508] ? bit_wait_io_timeout+0x160/0x160
[ 656.853517] __do_sys_clone+0xc8/0x110
[ 656.854377] ? __do_sys_vfork+0xd0/0xd0
[ 656.855249] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 656.856461] ? vfs_write+0x428/0xad0
[ 656.857297] ? syscall_enter_from_user_mode+0x1d/0x50
[ 656.858424] do_syscall_64+0x3b/0x90
[ 656.859242] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 656.860382] RIP: 0033:0x7f71bf82bb19
[ 656.861183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 656.865178] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 656.866830] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 656.868387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 656.869932] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 656.871474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 656.873023] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 656.874595]
[ 669.424523] loop5: detected capacity change from 0 to 240
12:44:51 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:51 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:44:51 executing program 7:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:51 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43)
12:44:51 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44)
[ 669.457135] FAULT_INJECTION: forcing a failure.
[ 669.457135] name failslab, interval 1, probability 0, space 0, times 0
[ 669.458374] CPU: 1 PID: 5801 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 669.459226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 669.460405] Call Trace:
[ 669.460670]
[ 669.460903] dump_stack_lvl+0x8b/0xb3
[ 669.461311] should_fail.cold+0x5/0xa
[ 669.461711] ? create_object.isra.0+0x3a/0xa20
[ 669.462194] should_failslab+0x5/0x10
[ 669.462595] kmem_cache_alloc+0x5b/0x480
[ 669.463028] create_object.isra.0+0x3a/0xa20
[ 669.463494] ? kasan_unpoison+0x23/0x50
[ 669.463914] __kmalloc+0x25b/0x440
[ 669.464307] security_sb_alloc+0x107/0x250
[ 669.464752] alloc_super+0x1dd/0x9d0
[ 669.465182] sget_fc+0x13e/0x7a0
[ 669.465461] FAULT_INJECTION: forcing a failure.
[ 669.465461] name failslab, interval 1, probability 0, space 0, times 0
[ 669.465544] ? refcount_dec_not_one+0x13b/0x1e0
[ 669.468394] ? set_anon_super+0xb0/0xb0
[ 669.468817] ? mqueue_get_tree+0x130/0x130
[ 669.469250] get_tree_nodev+0x24/0x1d0
[ 669.469660] mqueue_get_tree+0xee/0x130
[ 669.470076] vfs_get_tree+0x8e/0x2f0
[ 669.470472] fc_mount+0x13/0xc0
[ 669.470815] mq_init_ns+0x43e/0x630
[ 669.471199] copy_ipcs+0x35e/0x5d0
[ 669.471582] ? copy_utsname+0xa9/0x4a0
[ 669.472011] create_new_namespaces+0x210/0xb30
[ 669.472507] copy_namespaces+0x391/0x450
[ 669.472935] copy_process+0x2ba5/0x6d10
[ 669.473370] ? __cleanup_sighand+0xb0/0xb0
[ 669.473824] ? lock_is_held_type+0xd7/0x130
[ 669.474285] ? find_held_lock+0x2c/0x110
[ 669.474717] ? kernel_clone+0xc4/0xa60
[ 669.475132] kernel_clone+0xe7/0xa60
[ 669.475526] ? create_io_thread+0xf0/0xf0
[ 669.475981] ? find_held_lock+0x2c/0x110
[ 669.476415] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 669.476931] ? bit_wait_io_timeout+0x160/0x160
[ 669.477408] __do_sys_clone+0xc8/0x110
[ 669.477816] ? __do_sys_vfork+0xd0/0xd0
[ 669.478231] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 669.478812] ? vfs_write+0x428/0xad0
[ 669.479210] ? syscall_enter_from_user_mode+0x1d/0x50
[ 669.479759] do_syscall_64+0x3b/0x90
[ 669.480164] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 669.480714] RIP: 0033:0x7f71bf82bb19
[ 669.481098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 669.482992] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 669.483773] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 669.484535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 669.485269] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 669.486013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 669.486752] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 669.487500]
[ 669.487738] CPU: 0 PID: 5803 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 669.489512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 669.491944] Call Trace:
[ 669.492509]
[ 669.492993] dump_stack_lvl+0x8b/0xb3
12:44:51 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
epoll_create(0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 669.493834] should_fail.cold+0x5/0xa
[ 669.494726] ? create_object.isra.0+0x3a/0xa20
[ 669.495726] should_failslab+0x5/0x10
[ 669.496555] kmem_cache_alloc+0x5b/0x480
[ 669.497439] create_object.isra.0+0x3a/0xa20
[ 669.498397] kmemleak_alloc_percpu+0xa0/0x100
[ 669.499370] pcpu_alloc+0x7bf/0x1060
[ 669.500201] __percpu_init_rwsem+0x22/0x150
[ 669.501138] alloc_super+0x222/0x9d0
[ 669.501947] sget_fc+0x13e/0x7a0
[ 669.502683] ? refcount_dec_not_one+0x13b/0x1e0
[ 669.503674] ? set_anon_super+0xb0/0xb0
[ 669.504565] ? mqueue_get_tree+0x130/0x130
[ 669.505456] get_tree_nodev+0x24/0x1d0
[ 669.506306] mqueue_get_tree+0xee/0x130
[ 669.507167] vfs_get_tree+0x8e/0x2f0
[ 669.507976] fc_mount+0x13/0xc0
[ 669.508693] mq_init_ns+0x43e/0x630
[ 669.509474] copy_ipcs+0x35e/0x5d0
[ 669.510235] ? copy_utsname+0xa9/0x4a0
[ 669.511068] create_new_namespaces+0x210/0xb30
[ 669.512089] copy_namespaces+0x391/0x450
[ 669.512964] copy_process+0x2ba5/0x6d10
[ 669.513859] ? __cleanup_sighand+0xb0/0xb0
[ 669.514786] ? lock_is_held_type+0xd7/0x130
[ 669.515714] ? find_held_lock+0x2c/0x110
[ 669.516617] ? kernel_clone+0xc4/0xa60
[ 669.517470] kernel_clone+0xe7/0xa60
[ 669.518289] ? create_io_thread+0xf0/0xf0
[ 669.519197] ? find_held_lock+0x2c/0x110
[ 669.520089] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 669.521157] ? bit_wait_io_timeout+0x160/0x160
[ 669.522157] __do_sys_clone+0xc8/0x110
[ 669.522989] ? __do_sys_vfork+0xd0/0xd0
[ 669.523862] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 669.525047] ? vfs_write+0x428/0xad0
[ 669.525882] ? syscall_enter_from_user_mode+0x1d/0x50
[ 669.526977] do_syscall_64+0x3b/0x90
[ 669.527792] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 669.528909] RIP: 0033:0x7fa70862cb19
[ 669.529708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 669.533571] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 669.535202] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 669.536741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 669.538268] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 669.539807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 669.541357] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 669.542917]
12:44:51 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
epoll_create(0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 669.559846] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
[ 669.560117] loop3: detected capacity change from 0 to 240
12:44:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 669.603636] isofs_fill_super: bread failed, dev=loop3, iso_blknum=60, block=120
12:44:51 executing program 7:
syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000380))
epoll_create(0x1)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:44:51 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:44:51 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:44:52 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44)
[ 669.751558] loop5: detected capacity change from 0 to 240
[ 669.778283] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
[ 669.811213] FAULT_INJECTION: forcing a failure.
[ 669.811213] name failslab, interval 1, probability 0, space 0, times 0
[ 669.812499] CPU: 1 PID: 5828 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 669.813347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 669.814547] Call Trace:
[ 669.814826]
[ 669.815063] dump_stack_lvl+0x8b/0xb3
[ 669.815474] should_fail.cold+0x5/0xa
[ 669.815877] ? create_object.isra.0+0x3a/0xa20
[ 669.816370] should_failslab+0x5/0x10
[ 669.816767] kmem_cache_alloc+0x5b/0x480
[ 669.817193] create_object.isra.0+0x3a/0xa20
[ 669.817654] ? kasan_unpoison+0x23/0x50
[ 669.818072] __kmalloc+0x25b/0x440
[ 669.818453] security_sb_alloc+0x107/0x250
[ 669.818898] alloc_super+0x1dd/0x9d0
[ 669.819305] sget_fc+0x13e/0x7a0
[ 669.819669] ? refcount_dec_not_one+0x13b/0x1e0
[ 669.820170] ? set_anon_super+0xb0/0xb0
[ 669.820589] ? mqueue_get_tree+0x130/0x130
[ 669.821034] get_tree_nodev+0x24/0x1d0
[ 669.821446] mqueue_get_tree+0xee/0x130
[ 669.821866] vfs_get_tree+0x8e/0x2f0
[ 669.822255] fc_mount+0x13/0xc0
[ 669.822611] mq_init_ns+0x43e/0x630
[ 669.823000] copy_ipcs+0x35e/0x5d0
[ 669.823370] ? copy_utsname+0xa9/0x4a0
[ 669.823784] create_new_namespaces+0x210/0xb30
[ 669.824302] copy_namespaces+0x391/0x450
[ 669.824735] copy_process+0x2ba5/0x6d10
[ 669.825185] ? __cleanup_sighand+0xb0/0xb0
[ 669.825640] ? lock_is_held_type+0xd7/0x130
[ 669.826111] ? find_held_lock+0x2c/0x110
[ 669.826546] ? kernel_clone+0xc4/0xa60
[ 669.826977] kernel_clone+0xe7/0xa60
[ 669.827379] ? create_io_thread+0xf0/0xf0
[ 669.827821] ? find_held_lock+0x2c/0x110
[ 669.828289] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 669.828819] ? bit_wait_io_timeout+0x160/0x160
[ 669.829335] __do_sys_clone+0xc8/0x110
[ 669.829746] ? __do_sys_vfork+0xd0/0xd0
[ 669.830181] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 669.830764] ? vfs_write+0x428/0xad0
[ 669.831184] ? syscall_enter_from_user_mode+0x1d/0x50
[ 669.831750] do_syscall_64+0x3b/0x90
[ 669.832175] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 669.832748] RIP: 0033:0x7f71bf82bb19
[ 669.833156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 669.835166] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 669.836013] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 669.836802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 669.837591] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 669.838372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 669.839148] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 669.839943]
12:45:05 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:05 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45)
12:45:05 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:05 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:05 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:45:05 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:05 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45)
[ 683.423156] loop3: detected capacity change from 0 to 240
[ 683.426183] FAULT_INJECTION: forcing a failure.
[ 683.426183] name failslab, interval 1, probability 0, space 0, times 0
[ 683.427530] CPU: 0 PID: 5840 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 683.428405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 683.429667] Call Trace:
[ 683.429954]
[ 683.430200] dump_stack_lvl+0x8b/0xb3
[ 683.430641] should_fail.cold+0x5/0xa
[ 683.431076] ? create_object.isra.0+0x3a/0xa20
[ 683.431580] should_failslab+0x5/0x10
[ 683.431988] kmem_cache_alloc+0x5b/0x480
[ 683.432447] create_object.isra.0+0x3a/0xa20
[ 683.432944] ? kasan_unpoison+0x23/0x50
[ 683.433379] __kmalloc+0x25b/0x440
[ 683.433812] security_sb_alloc+0x107/0x250
[ 683.434337] alloc_super+0x1dd/0x9d0
[ 683.434791] sget_fc+0x13e/0x7a0
[ 683.435201] ? refcount_dec_not_one+0x13b/0x1e0
[ 683.435629] FAULT_INJECTION: forcing a failure.
[ 683.435629] name failslab, interval 1, probability 0, space 0, times 0
[ 683.435762] ? set_anon_super+0xb0/0xb0
[ 683.438433] ? mqueue_get_tree+0x130/0x130
[ 683.438937] get_tree_nodev+0x24/0x1d0
[ 683.439408] mqueue_get_tree+0xee/0x130
[ 683.439879] vfs_get_tree+0x8e/0x2f0
[ 683.440340] fc_mount+0x13/0xc0
[ 683.440744] mq_init_ns+0x43e/0x630
[ 683.441136] copy_ipcs+0x35e/0x5d0
[ 683.441558] ? copy_utsname+0xa9/0x4a0
[ 683.442034] create_new_namespaces+0x210/0xb30
[ 683.442605] copy_namespaces+0x391/0x450
[ 683.443093] copy_process+0x2ba5/0x6d10
[ 683.443596] ? __cleanup_sighand+0xb0/0xb0
[ 683.444056] ? lock_is_held_type+0xd7/0x130
[ 683.444595] ? find_held_lock+0x2c/0x110
[ 683.445060] ? kernel_clone+0xc4/0xa60
[ 683.445532] kernel_clone+0xe7/0xa60
[ 683.445989] ? create_io_thread+0xf0/0xf0
[ 683.446494] ? find_held_lock+0x2c/0x110
[ 683.446980] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 683.447574] ? bit_wait_io_timeout+0x160/0x160
[ 683.448118] __do_sys_clone+0xc8/0x110
[ 683.448552] ? __do_sys_vfork+0xd0/0xd0
[ 683.448978] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 683.449640] ? vfs_write+0x428/0xad0
[ 683.450090] ? syscall_enter_from_user_mode+0x1d/0x50
[ 683.450718] do_syscall_64+0x3b/0x90
[ 683.451164] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 683.451734] RIP: 0033:0x7fa70862cb19
[ 683.452181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 683.454365] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 683.455231] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 683.456076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 683.456827] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 683.457570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 683.458342] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 683.459097]
[ 683.459346] CPU: 1 PID: 5836 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 683.461036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 683.463266] Call Trace:
[ 683.463773]
[ 683.464233] dump_stack_lvl+0x8b/0xb3
[ 683.465005] should_fail.cold+0x5/0xa
[ 683.465762] ? create_object.isra.0+0x3a/0xa20
[ 683.466678] should_failslab+0x5/0x10
[ 683.467439] kmem_cache_alloc+0x5b/0x480
[ 683.468272] create_object.isra.0+0x3a/0xa20
[ 683.469156] kmemleak_alloc_percpu+0xa0/0x100
[ 683.470047] pcpu_alloc+0x7bf/0x1060
[ 683.470816] __percpu_init_rwsem+0x22/0x150
[ 683.471729] alloc_super+0x222/0x9d0
[ 683.472535] sget_fc+0x13e/0x7a0
[ 683.473221] ? refcount_dec_not_one+0x13b/0x1e0
[ 683.474166] ? set_anon_super+0xb0/0xb0
[ 683.475004] ? mqueue_get_tree+0x130/0x130
[ 683.475984] get_tree_nodev+0x24/0x1d0
[ 683.476795] mqueue_get_tree+0xee/0x130
[ 683.477602] vfs_get_tree+0x8e/0x2f0
[ 683.478452] fc_mount+0x13/0xc0
[ 683.479121] mq_init_ns+0x43e/0x630
[ 683.479873] copy_ipcs+0x35e/0x5d0
[ 683.480656] isofs_fill_super: bread failed, dev=loop3, iso_blknum=60, block=120
[ 683.480658] ? copy_utsname+0xa9/0x4a0
[ 683.482227] create_new_namespaces+0x210/0xb30
[ 683.483169] copy_namespaces+0x391/0x450
[ 683.484001] copy_process+0x2ba5/0x6d10
[ 683.484859] ? __cleanup_sighand+0xb0/0xb0
[ 683.485713] ? lock_is_held_type+0xd7/0x130
[ 683.486599] ? find_held_lock+0x2c/0x110
[ 683.487415] ? kernel_clone+0xc4/0xa60
[ 683.488221] kernel_clone+0xe7/0xa60
[ 683.489017] ? create_io_thread+0xf0/0xf0
[ 683.489995] ? find_held_lock+0x2c/0x110
[ 683.490828] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 683.491959] ? bit_wait_io_timeout+0x160/0x160
[ 683.493074] __do_sys_clone+0xc8/0x110
[ 683.493865] ? __do_sys_vfork+0xd0/0xd0
[ 683.494720] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 683.495823] ? vfs_write+0x428/0xad0
[ 683.496775] ? syscall_enter_from_user_mode+0x1d/0x50
[ 683.497816] do_syscall_64+0x3b/0x90
[ 683.498713] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 683.499942] RIP: 0033:0x7f71bf82bb19
[ 683.500806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 683.504764] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 683.506420] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 683.507830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 683.509252] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 683.510676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 683.512174] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 683.513640]
[ 683.527235] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[ 683.540964] loop5: detected capacity change from 0 to 240
[ 683.569926] isofs_fill_super: bread failed, dev=loop5, iso_blknum=60, block=120
12:45:05 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46)
12:45:05 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:05 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:05 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
12:45:05 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 683.640929] loop3: detected capacity change from 0 to 240
12:45:05 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500"/120, 0x78, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 683.670097] FAULT_INJECTION: forcing a failure.
[ 683.670097] name failslab, interval 1, probability 0, space 0, times 0
[ 683.672704] CPU: 1 PID: 5859 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 683.674348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 683.676627] Call Trace:
[ 683.677144]
[ 683.677602] dump_stack_lvl+0x8b/0xb3
[ 683.678392] should_fail.cold+0x5/0xa
[ 683.679172] ? create_object.isra.0+0x3a/0xa20
[ 683.680109] should_failslab+0x5/0x10
[ 683.680915] kmem_cache_alloc+0x5b/0x480
[ 683.681908] create_object.isra.0+0x3a/0xa20
[ 683.682980] kmemleak_alloc_percpu+0xa0/0x100
[ 683.683913] pcpu_alloc+0x7bf/0x1060
12:45:05 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 683.684859] __percpu_init_rwsem+0x22/0x150
[ 683.685922] alloc_super+0x222/0x9d0
[ 683.686838] sget_fc+0x13e/0x7a0
[ 683.687647] ? refcount_dec_not_one+0x13b/0x1e0
[ 683.688692] ? set_anon_super+0xb0/0xb0
[ 683.689665] ? mqueue_get_tree+0x130/0x130
[ 683.690596] get_tree_nodev+0x24/0x1d0
[ 683.691553] mqueue_get_tree+0xee/0x130
[ 683.692389] vfs_get_tree+0x8e/0x2f0
[ 683.693287] fc_mount+0x13/0xc0
[ 683.694093] mq_init_ns+0x43e/0x630
[ 683.694984] copy_ipcs+0x35e/0x5d0
[ 683.695841] ? copy_utsname+0xa9/0x4a0
[ 683.696725] create_new_namespaces+0x210/0xb30
[ 683.697674] copy_namespaces+0x391/0x450
[ 683.698521] copy_process+0x2ba5/0x6d10
[ 683.699362] ? __cleanup_sighand+0xb0/0xb0
[ 683.700240] ? lock_is_held_type+0xd7/0x130
[ 683.701099] ? find_held_lock+0x2c/0x110
[ 683.701916] ? kernel_clone+0xc4/0xa60
[ 683.702715] kernel_clone+0xe7/0xa60
[ 683.703471] ? create_io_thread+0xf0/0xf0
[ 683.704323] ? find_held_lock+0x2c/0x110
[ 683.705163] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 683.706169] ? bit_wait_io_timeout+0x160/0x160
[ 683.707188] __do_sys_clone+0xc8/0x110
[ 683.707976] ? __do_sys_vfork+0xd0/0xd0
[ 683.708794] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 683.710053] ? vfs_write+0x428/0xad0
[ 683.710833] ? syscall_enter_from_user_mode+0x1d/0x50
[ 683.711871] do_syscall_64+0x3b/0x90
[ 683.712640] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 683.713884] RIP: 0033:0x7fa70862cb19
[ 683.714676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 683.718804] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 683.720372] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 683.721990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 683.723453] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 683.724984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
12:45:05 executing program 0:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 683.726440] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 683.728061]
[ 683.734760] isofs_fill_super: bread failed, dev=loop3, iso_blknum=60, block=120
[ 683.804738] loop5: detected capacity change from 0 to 240
[ 683.810356] ISOFS: Logical zone size(0) < hardware blocksize(1024)
12:45:21 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:21 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47)
12:45:21 executing program 2:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000", 0x50, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:21 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:21 executing program 0:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:21 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46)
12:45:21 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500"/120, 0x78, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 699.628623] loop2: detected capacity change from 0 to 240
[ 699.631245] loop5: detected capacity change from 0 to 240
[ 699.649442] ISOFS: Logical zone size(0) < hardware blocksize(1024)
12:45:21 executing program 7:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
[ 699.696803] FAULT_INJECTION: forcing a failure.
[ 699.696803] name failslab, interval 1, probability 0, space 0, times 0
[ 699.699570] CPU: 0 PID: 5888 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 699.701462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 699.703753] Call Trace:
[ 699.704282]
[ 699.704748] dump_stack_lvl+0x8b/0xb3
[ 699.705534] should_fail.cold+0x5/0xa
[ 699.706310] ? create_object.isra.0+0x3a/0xa20
[ 699.707244] should_failslab+0x5/0x10
[ 699.708018] kmem_cache_alloc+0x5b/0x480
[ 699.708890] create_object.isra.0+0x3a/0xa20
[ 699.709794] kmemleak_alloc_percpu+0xa0/0x100
[ 699.710706] pcpu_alloc+0x7bf/0x1060
[ 699.711480] __percpu_init_rwsem+0x22/0x150
[ 699.712351] alloc_super+0x222/0x9d0
[ 699.713134] sget_fc+0x13e/0x7a0
[ 699.713834] ? refcount_dec_not_one+0x13b/0x1e0
[ 699.714770] ? set_anon_super+0xb0/0xb0
[ 699.715583] ? mqueue_get_tree+0x130/0x130
[ 699.716433] get_tree_nodev+0x24/0x1d0
[ 699.717238] mqueue_get_tree+0xee/0x130
[ 699.718034] vfs_get_tree+0x8e/0x2f0
[ 699.718799] fc_mount+0x13/0xc0
[ 699.719468] mq_init_ns+0x43e/0x630
[ 699.720212] copy_ipcs+0x35e/0x5d0
[ 699.720944] ? copy_utsname+0xa9/0x4a0
[ 699.721733] create_new_namespaces+0x210/0xb30
[ 699.722665] copy_namespaces+0x391/0x450
[ 699.723489] copy_process+0x2ba5/0x6d10
[ 699.724326] ? __cleanup_sighand+0xb0/0xb0
[ 699.725216] ? lock_is_held_type+0xd7/0x130
[ 699.726078] ? find_held_lock+0x2c/0x110
[ 699.726903] ? kernel_clone+0xc4/0xa60
[ 699.727691] kernel_clone+0xe7/0xa60
[ 699.728473] ? create_io_thread+0xf0/0xf0
[ 699.729314] ? find_held_lock+0x2c/0x110
[ 699.730138] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 699.731133] ? bit_wait_io_timeout+0x160/0x160
12:45:22 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500"/120, 0x78, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
[ 699.732062] __do_sys_clone+0xc8/0x110
[ 699.733077] ? __do_sys_vfork+0xd0/0xd0
[ 699.733881] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 699.734992] ? vfs_write+0x428/0xad0
[ 699.735784] ? syscall_enter_from_user_mode+0x1d/0x50
[ 699.736842] do_syscall_64+0x3b/0x90
[ 699.737593] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 699.738633] RIP: 0033:0x7f71bf82bb19
[ 699.739378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 699.743037] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 699.744563] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 699.745994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 699.747406] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 699.748849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 699.750262] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 699.751705]
[ 699.752529] FAULT_INJECTION: forcing a failure.
[ 699.752529] name failslab, interval 1, probability 0, space 0, times 0
[ 699.754882] CPU: 1 PID: 5889 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 699.756580] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 699.758821] Call Trace:
[ 699.759337]
[ 699.759784] dump_stack_lvl+0x8b/0xb3
[ 699.760580] should_fail.cold+0x5/0xa
[ 699.761370] ? create_object.isra.0+0x3a/0xa20
[ 699.762306] should_failslab+0x5/0x10
[ 699.763071] kmem_cache_alloc+0x5b/0x480
[ 699.763893] ? mark_held_locks+0x9e/0xe0
[ 699.764732] create_object.isra.0+0x3a/0xa20
[ 699.765633] kmemleak_alloc_percpu+0xa0/0x100
[ 699.766548] pcpu_alloc+0x7bf/0x1060
[ 699.767325] __percpu_init_rwsem+0x22/0x150
[ 699.768190] ? __sanitizer_cov_trace_pc+0x59/0x60
[ 699.769185] alloc_super+0x222/0x9d0
[ 699.769956] sget_fc+0x13e/0x7a0
[ 699.770650] ? refcount_dec_not_one+0x13b/0x1e0
[ 699.771594] ? set_anon_super+0xb0/0xb0
[ 699.772413] ? mqueue_get_tree+0x130/0x130
[ 699.773267] get_tree_nodev+0x24/0x1d0
[ 699.774064] mqueue_get_tree+0xee/0x130
[ 699.774866] vfs_get_tree+0x8e/0x2f0
[ 699.775628] fc_mount+0x13/0xc0
[ 699.776296] mq_init_ns+0x43e/0x630
[ 699.777055] copy_ipcs+0x35e/0x5d0
[ 699.777771] ? copy_utsname+0xa9/0x4a0
[ 699.778568] create_new_namespaces+0x210/0xb30
[ 699.779505] copy_namespaces+0x391/0x450
[ 699.780331] copy_process+0x2ba5/0x6d10
[ 699.781156] ? mark_lock.part.0+0xef/0x2f60
[ 699.782051] ? __cleanup_sighand+0xb0/0xb0
[ 699.782917] ? lock_is_held_type+0xd7/0x130
[ 699.783782] ? find_held_lock+0x2c/0x110
[ 699.784607] ? kernel_clone+0xc4/0xa60
[ 699.785401] kernel_clone+0xe7/0xa60
[ 699.786158] ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 699.787246] ? create_io_thread+0xf0/0xf0
[ 699.788082] ? lockdep_hardirqs_on+0x79/0x100
[ 699.788999] ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 699.790089] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 699.791087] ? bit_wait_io_timeout+0x160/0x160
[ 699.792013] __do_sys_clone+0xc8/0x110
[ 699.792811] ? __do_sys_vfork+0xd0/0xd0
[ 699.793616] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 699.794717] ? vfs_write+0x428/0xad0
[ 699.795489] ? syscall_enter_from_user_mode+0x1d/0x50
[ 699.796537] do_syscall_64+0x3b/0x90
[ 699.797293] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 699.798342] RIP: 0033:0x7fa70862cb19
[ 699.799083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 699.802753] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 699.804271] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 699.805717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 699.807137] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 699.808567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 699.809986] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 699.811433]
[ 699.812915] isofs_fill_super: bread failed, dev=loop2, iso_blknum=60, block=120
12:45:22 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:22 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:22 executing program 0:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 699.855461] loop5: detected capacity change from 0 to 240
[ 699.860049] ISOFS: Logical zone size(0) < hardware blocksize(1024)
12:45:22 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:22 executing program 2:
r0 = epoll_create(0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x0, 0x0}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 700.023772] loop5: detected capacity change from 0 to 240
[ 700.034427] isofs_fill_super: get root inode failed
12:45:37 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:37 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:37 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
12:45:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
socket$inet(0x2, 0x80006, 0xfff)
pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff})
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000640)=""/77, &(0x7f00000001c0)=0x4d)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x4000, @fd, 0x7f, &(0x7f0000000080)=[{&(0x7f0000000280)="28e85cd3903d904966ef20ed13c74e55525bfd4e5d9746e9d0b4768b4eaf7dc62073fe08ca6b04908b8187351ad72e453a691dce62178832ef1f62bba9e950e5fa162d56f254c3bfe56878fb60ed209bb69e63b6369e794742354477faebf45158045b2deac94644ca3b4cdcc00957536d6d56fd942e2111df33f0114710c30da9577c3228e327c3827b8c67c6c2dad053cc66d6e67506be4af45632f42e48c41addb80fcb93eaa649ab4d78740726c85bccd2226296c8a626f00388792f8d03755cdec95ff405372f1acb1c287f9016", 0xd0}, {&(0x7f00000003c0)="bd0730e2586b20bb78ac0008d60551be3bb6cb7d408e456107b772bf9fdca59aee3bd51d0a5bb21b308d263847b69f65357386203e800101f120f33783bfda1f8be5068c2a6cda4ed00c09c350c601ed4d843f230138989fa98e3215c2056d740d326da16e2d7f15817b9788aefa66fab5aef0ac700032ddeda8ea0f9864b16519a4", 0x82}, {&(0x7f0000000480)="ef66f13cf01dd56dae0577a803e85146e053a96d169fcd12cb005b379492622e58b121025e8a655d03bc66c5e1ef94a5ff8a08fef9612b87db7f647ac23988a405cb1118ead28561a906975f2f56a62bacf60f69cfce1a1e348188422489ae486a68f0003705133ccc3150b54a06ecb60ff5aaed01c78c3a3c75dc30806ed8b626a470e27732cfe966acf629552f81b76dae974aab61c16fe0973e4eab2375ae4643d208fa9480cd1088d08538f7e3ac1bd70589966ef3edd670789d0098269d3f69abeba448b14ab590301c22b82a24a2939fcf", 0xd4}, {&(0x7f0000000580)="9b4963b1f3b753309e2aa27c5aed97ecc6e81ae2b5f234dd95a4fa29891e457c2ad62d64898eef8362ff85f04eb0a9ba3881c084f556342aa3c40f5405033e7327c9ab53d4404ad222fb56def81c9366ed85c90926a29922edafdfe63bd98dcfa0c7208bc9dd6a2183c56245b1e84a46259e08d556cf85f86d0c7dc671050b6d3b000cbccdfea89de961f06d0a54c42073228fae720b6bce7984b745b00a8e5981aa232fe5e3", 0xa6}], 0x4, 0x4, 0x1, {0x1}}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:37 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47)
12:45:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48)
12:45:37 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:37 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
[ 715.474698] loop5: detected capacity change from 0 to 240
[ 715.477176] FAULT_INJECTION: forcing a failure.
[ 715.477176] name failslab, interval 1, probability 0, space 0, times 0
[ 715.478915] CPU: 1 PID: 5922 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.480064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.481660] Call Trace:
[ 715.482029]
[ 715.482341] dump_stack_lvl+0x8b/0xb3
[ 715.482910] should_fail.cold+0x5/0xa
[ 715.483461] ? create_object.isra.0+0x3a/0xa20
[ 715.484121] should_failslab+0x5/0x10
[ 715.484678] kmem_cache_alloc+0x5b/0x480
[ 715.485122] create_object.isra.0+0x3a/0xa20
[ 715.485599] kmemleak_alloc_percpu+0xa0/0x100
[ 715.486094] pcpu_alloc+0x7bf/0x1060
[ 715.486500] __percpu_init_rwsem+0x22/0x150
[ 715.486981] alloc_super+0x222/0x9d0
[ 715.487395] sget_fc+0x13e/0x7a0
[ 715.487777] ? refcount_dec_not_one+0x13b/0x1e0
[ 715.488294] ? set_anon_super+0xb0/0xb0
[ 715.488767] ? mqueue_get_tree+0x130/0x130
[ 715.489233] get_tree_nodev+0x24/0x1d0
[ 715.489677] mqueue_get_tree+0xee/0x130
[ 715.490121] vfs_get_tree+0x8e/0x2f0
[ 715.490549] fc_mount+0x13/0xc0
[ 715.490926] mq_init_ns+0x43e/0x630
[ 715.491339] copy_ipcs+0x35e/0x5d0
[ 715.491714] ? copy_utsname+0xa9/0x4a0
[ 715.492153] create_new_namespaces+0x210/0xb30
[ 715.492675] copy_namespaces+0x391/0x450
[ 715.493135] copy_process+0x2ba5/0x6d10
[ 715.493605] ? __cleanup_sighand+0xb0/0xb0
[ 715.494086] ? lock_is_held_type+0xd7/0x130
[ 715.494566] ? find_held_lock+0x2c/0x110
[ 715.495024] ? kernel_clone+0xc4/0xa60
[ 715.495459] kernel_clone+0xe7/0xa60
[ 715.495877] ? create_io_thread+0xf0/0xf0
[ 715.496335] ? find_held_lock+0x2c/0x110
[ 715.496775] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 715.497329] ? bit_wait_io_timeout+0x160/0x160
[ 715.497835] __do_sys_clone+0xc8/0x110
[ 715.498273] ? __do_sys_vfork+0xd0/0xd0
[ 715.498717] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.499325] ? vfs_write+0x428/0xad0
[ 715.499756] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.500332] do_syscall_64+0x3b/0x90
[ 715.500752] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.501334] RIP: 0033:0x7fa70862cb19
[ 715.501740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.503794] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 715.504647] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 715.505419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 715.506212] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.506988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 715.507769] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 715.508573]
[ 715.517884] FAULT_INJECTION: forcing a failure.
[ 715.517884] name failslab, interval 1, probability 0, space 0, times 0
[ 715.520294] CPU: 0 PID: 5932 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.522057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.522183] FAULT_INJECTION: forcing a failure.
[ 715.522183] name failslab, interval 1, probability 0, space 0, times 0
[ 715.524454] Call Trace:
[ 715.524462]
[ 715.524472] dump_stack_lvl+0x8b/0xb3
[ 715.527690] should_fail.cold+0x5/0xa
[ 715.528516] ? create_object.isra.0+0x3a/0xa20
[ 715.529528] should_failslab+0x5/0x10
[ 715.530344] kmem_cache_alloc+0x5b/0x480
[ 715.531213] ? mark_held_locks+0x9e/0xe0
[ 715.532090] create_object.isra.0+0x3a/0xa20
[ 715.533061] kmemleak_alloc_percpu+0xa0/0x100
[ 715.534026] pcpu_alloc+0x7bf/0x1060
[ 715.534863] __percpu_init_rwsem+0x22/0x150
[ 715.535787] alloc_super+0x222/0x9d0
[ 715.536607] sget_fc+0x13e/0x7a0
[ 715.537362] ? refcount_dec_not_one+0x13b/0x1e0
[ 715.538358] ? set_anon_super+0xb0/0xb0
[ 715.539218] ? mqueue_get_tree+0x130/0x130
[ 715.540120] get_tree_nodev+0x24/0x1d0
[ 715.540973] mqueue_get_tree+0xee/0x130
[ 715.541821] vfs_get_tree+0x8e/0x2f0
[ 715.542622] fc_mount+0x13/0xc0
[ 715.543330] mq_init_ns+0x43e/0x630
[ 715.544112] copy_ipcs+0x35e/0x5d0
[ 715.544877] ? copy_utsname+0xa9/0x4a0
[ 715.545715] create_new_namespaces+0x210/0xb30
[ 715.546712] copy_namespaces+0x391/0x450
[ 715.547588] copy_process+0x2ba5/0x6d10
[ 715.548479] ? __cleanup_sighand+0xb0/0xb0
[ 715.549419] ? lock_is_held_type+0xd7/0x130
[ 715.550346] ? find_held_lock+0x2c/0x110
[ 715.551215] ? kernel_clone+0xc4/0xa60
[ 715.552065] kernel_clone+0xe7/0xa60
[ 715.552885] ? create_io_thread+0xf0/0xf0
[ 715.553779] ? find_held_lock+0x2c/0x110
[ 715.554652] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 715.555705] ? bit_wait_io_timeout+0x160/0x160
[ 715.556693] __do_sys_clone+0xc8/0x110
[ 715.557529] ? __do_sys_vfork+0xd0/0xd0
[ 715.558382] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.559548] ? vfs_write+0x428/0xad0
[ 715.560366] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.561493] do_syscall_64+0x3b/0x90
[ 715.562297] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.563404] RIP: 0033:0x7f71bf82bb19
[ 715.564188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.568089] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 715.569711] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 715.571220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 715.572734] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.574238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 715.575741] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 715.577283]
[ 715.577774] CPU: 1 PID: 5933 Comm: syz-executor.3 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.578692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.579971] Call Trace:
[ 715.580252]
[ 715.580504] dump_stack_lvl+0x8b/0xb3
[ 715.580956] should_fail.cold+0x5/0xa
[ 715.581391] should_failslab+0x5/0x10
[ 715.581813] kmem_cache_alloc_bulk+0x47/0x780
[ 715.582303] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.582918] ? percpu_counter_add_batch+0xb4/0x170
[ 715.583465] io_submit_sqes.cold+0x1b6/0x3eb
[ 715.583967] ? find_held_lock+0x2c/0x110
[ 715.584418] ? io_apoll_task_func+0x230/0x230
[ 715.584924] ? lock_release+0x3b2/0x6f0
[ 715.585367] ? __do_sys_io_uring_enter+0x424/0x1520
[ 715.585937] ? lock_downgrade+0x6d0/0x6d0
[ 715.586405] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 715.586985] __do_sys_io_uring_enter+0xa17/0x1520
[ 715.587539] ? bit_wait_io_timeout+0x160/0x160
[ 715.588061] ? lock_is_held_type+0xd7/0x130
[ 715.588541] ? io_submit_sqes+0x9690/0x9690
[ 715.589048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.589659] ? vfs_write+0x428/0xad0
[ 715.590084] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 715.590686] ? fput+0x2a/0x50
[ 715.591044] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.591612] do_syscall_64+0x3b/0x90
[ 715.592035] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.592608] RIP: 0033:0x7f9f5db0bb19
[ 715.593032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.595032] RSP: 002b:00007f9f5b081188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 715.595891] RAX: ffffffffffffffda RBX: 00007f9f5dc1ef60 RCX: 00007f9f5db0bb19
[ 715.596710] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 715.597508] RBP: 00007f9f5b0811d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.598308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 715.599100] R13: 00007ffd1170c0ff R14: 00007f9f5b081300 R15: 0000000000022000
[ 715.599909]
[ 715.607128] isofs_fill_super: get root inode failed
12:45:37 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c", 0x8c, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:37 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:37 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
[ 715.658844] loop5: detected capacity change from 0 to 240
12:45:37 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49)
[ 715.694482] isofs_fill_super: get root inode failed
[ 715.727290] FAULT_INJECTION: forcing a failure.
[ 715.727290] name failslab, interval 1, probability 0, space 0, times 0
[ 715.728598] CPU: 1 PID: 5944 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.729482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.730692] Call Trace:
[ 715.730967]
[ 715.731202] dump_stack_lvl+0x8b/0xb3
[ 715.731618] should_fail.cold+0x5/0xa
[ 715.732021] ? create_object.isra.0+0x3a/0xa20
[ 715.732525] should_failslab+0x5/0x10
[ 715.732937] kmem_cache_alloc+0x5b/0x480
[ 715.733371] ? mark_held_locks+0x9e/0xe0
[ 715.733809] create_object.isra.0+0x3a/0xa20
[ 715.734274] kmemleak_alloc_percpu+0xa0/0x100
[ 715.734755] pcpu_alloc+0x7bf/0x1060
[ 715.735168] __percpu_init_rwsem+0x22/0x150
[ 715.735627] alloc_super+0x222/0x9d0
[ 715.736034] sget_fc+0x13e/0x7a0
[ 715.736402] ? refcount_dec_not_one+0x13b/0x1e0
[ 715.736916] ? set_anon_super+0xb0/0xb0
[ 715.737359] ? mqueue_get_tree+0x130/0x130
[ 715.737827] get_tree_nodev+0x24/0x1d0
[ 715.738272] mqueue_get_tree+0xee/0x130
[ 715.738712] vfs_get_tree+0x8e/0x2f0
[ 715.739137] fc_mount+0x13/0xc0
[ 715.739501] mq_init_ns+0x43e/0x630
[ 715.739912] copy_ipcs+0x35e/0x5d0
[ 715.740315] ? copy_utsname+0xa9/0x4a0
[ 715.740770] create_new_namespaces+0x210/0xb30
[ 715.741289] copy_namespaces+0x391/0x450
[ 715.741759] copy_process+0x2ba5/0x6d10
[ 715.742229] ? __cleanup_sighand+0xb0/0xb0
[ 715.742714] ? lock_is_held_type+0xd7/0x130
[ 715.743197] ? find_held_lock+0x2c/0x110
[ 715.743663] ? kernel_clone+0xc4/0xa60
[ 715.744101] kernel_clone+0xe7/0xa60
[ 715.744523] ? create_io_thread+0xf0/0xf0
[ 715.744999] ? find_held_lock+0x2c/0x110
[ 715.745469] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 715.746032] ? bit_wait_io_timeout+0x160/0x160
[ 715.746561] __do_sys_clone+0xc8/0x110
[ 715.746997] ? __do_sys_vfork+0xd0/0xd0
[ 715.747449] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.748065] ? vfs_write+0x428/0xad0
[ 715.748502] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.749099] do_syscall_64+0x3b/0x90
[ 715.749528] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.750092] RIP: 0033:0x7fa70862cb19
[ 715.750179] FAULT_INJECTION: forcing a failure.
[ 715.750179] name failslab, interval 1, probability 0, space 0, times 0
[ 715.750501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.750514] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 715.750528] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 715.750537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 715.750545] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.750553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 715.750560] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 715.759734]
[ 715.759999] CPU: 0 PID: 5949 Comm: syz-executor.2 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.761763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.764153] Call Trace:
[ 715.764705]
[ 715.765179] dump_stack_lvl+0x8b/0xb3
[ 715.766003] should_fail.cold+0x5/0xa
[ 715.766825] should_failslab+0x5/0x10
[ 715.767635] kmem_cache_alloc_bulk+0x47/0x780
[ 715.768585] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.769768] ? percpu_counter_add_batch+0xb4/0x170
[ 715.770818] io_submit_sqes.cold+0x1b6/0x3eb
[ 715.771778] ? find_held_lock+0x2c/0x110
[ 715.772648] ? io_apoll_task_func+0x230/0x230
[ 715.773608] ? lock_release+0x3b2/0x6f0
[ 715.774449] ? __do_sys_io_uring_enter+0x424/0x1520
[ 715.775513] ? lock_downgrade+0x6d0/0x6d0
[ 715.776412] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 715.777490] __do_sys_io_uring_enter+0xa17/0x1520
[ 715.778533] ? bit_wait_io_timeout+0x160/0x160
[ 715.779513] ? lock_is_held_type+0xd7/0x130
[ 715.780432] ? io_submit_sqes+0x9690/0x9690
[ 715.781370] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.782543] ? vfs_write+0x428/0xad0
[ 715.783344] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 715.784514] ? fput+0x2a/0x50
[ 715.785205] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.786311] do_syscall_64+0x3b/0x90
[ 715.787109] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.788214] RIP: 0033:0x7fb6c8047b19
[ 715.789011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.792893] RSP: 002b:00007fb6c55bd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 715.794493] RAX: ffffffffffffffda RBX: 00007fb6c815af60 RCX: 00007fb6c8047b19
[ 715.795997] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 715.797512] RBP: 00007fb6c55bd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.799009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 715.800510] R13: 00007fff02802d3f R14: 00007fb6c55bd300 R15: 0000000000022000
[ 715.802053]
12:45:38 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:38 executing program 0:
r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:38 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48)
[ 715.847987] FAULT_INJECTION: forcing a failure.
[ 715.847987] name failslab, interval 1, probability 0, space 0, times 0
[ 715.849332] CPU: 1 PID: 5951 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.850222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.851412] Call Trace:
[ 715.851686]
[ 715.851924] dump_stack_lvl+0x8b/0xb3
[ 715.852338] should_fail.cold+0x5/0xa
[ 715.852770] ? create_object.isra.0+0x3a/0xa20
[ 715.853266] should_failslab+0x5/0x10
[ 715.853679] kmem_cache_alloc+0x5b/0x480
[ 715.854116] create_object.isra.0+0x3a/0xa20
[ 715.854586] kmemleak_alloc_percpu+0xa0/0x100
[ 715.855070] pcpu_alloc+0x7bf/0x1060
[ 715.855484] __percpu_init_rwsem+0x22/0x150
[ 715.855946] alloc_super+0x222/0x9d0
[ 715.856351] sget_fc+0x13e/0x7a0
[ 715.856726] ? refcount_dec_not_one+0x13b/0x1e0
[ 715.857224] ? set_anon_super+0xb0/0xb0
[ 715.857661] ? mqueue_get_tree+0x130/0x130
[ 715.858108] get_tree_nodev+0x24/0x1d0
[ 715.858548] mqueue_get_tree+0xee/0x130
[ 715.858997] vfs_get_tree+0x8e/0x2f0
[ 715.859425] fc_mount+0x13/0xc0
[ 715.859794] mq_init_ns+0x43e/0x630
[ 715.860201] copy_ipcs+0x35e/0x5d0
[ 715.860607] ? copy_utsname+0xa9/0x4a0
[ 715.861069] create_new_namespaces+0x210/0xb30
[ 715.861590] copy_namespaces+0x391/0x450
[ 715.862042] copy_process+0x2ba5/0x6d10
[ 715.862514] ? __cleanup_sighand+0xb0/0xb0
[ 715.862996] ? lock_is_held_type+0xd7/0x130
[ 715.863479] ? find_held_lock+0x2c/0x110
[ 715.863939] ? kernel_clone+0xc4/0xa60
[ 715.864378] kernel_clone+0xe7/0xa60
[ 715.864800] ? create_io_thread+0xf0/0xf0
[ 715.865274] ? find_held_lock+0x2c/0x110
[ 715.865727] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 715.866285] ? bit_wait_io_timeout+0x160/0x160
[ 715.866793] __do_sys_clone+0xc8/0x110
[ 715.867242] ? __do_sys_vfork+0xd0/0xd0
[ 715.867699] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.868324] ? vfs_write+0x428/0xad0
[ 715.868761] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.869343] do_syscall_64+0x3b/0x90
[ 715.869774] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.870365] RIP: 0033:0x7f71bf82bb19
[ 715.870780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.872909] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 715.873765] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 715.874575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 715.875373] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.876171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 715.876987] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 715.877794]
[ 715.900176] loop5: detected capacity change from 0 to 240
[ 715.909572] isofs_fill_super: get root inode failed
12:45:38 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50)
[ 715.944505] FAULT_INJECTION: forcing a failure.
[ 715.944505] name failslab, interval 1, probability 0, space 0, times 0
[ 715.945787] CPU: 1 PID: 5958 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.946653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.947853] Call Trace:
[ 715.948123]
[ 715.948359] dump_stack_lvl+0x8b/0xb3
[ 715.948782] should_fail.cold+0x5/0xa
[ 715.949185] ? __list_lru_init+0xc7/0x590
[ 715.949633] should_failslab+0x5/0x10
[ 715.950030] __kmalloc+0x72/0x440
[ 715.950417] __list_lru_init+0xc7/0x590
[ 715.950844] alloc_super+0x814/0x9d0
[ 715.951247] sget_fc+0x13e/0x7a0
[ 715.951609] ? refcount_dec_not_one+0x13b/0x1e0
[ 715.952126] ? set_anon_super+0xb0/0xb0
[ 715.952559] ? mqueue_get_tree+0x130/0x130
[ 715.953024] get_tree_nodev+0x24/0x1d0
[ 715.953442] mqueue_get_tree+0xee/0x130
[ 715.953889] vfs_get_tree+0x8e/0x2f0
[ 715.954322] fc_mount+0x13/0xc0
[ 715.954697] mq_init_ns+0x43e/0x630
[ 715.955117] copy_ipcs+0x35e/0x5d0
[ 715.955521] ? copy_utsname+0xa9/0x4a0
[ 715.955970] create_new_namespaces+0x210/0xb30
[ 715.956485] copy_namespaces+0x391/0x450
[ 715.956955] copy_process+0x2ba5/0x6d10
[ 715.957415] ? __cleanup_sighand+0xb0/0xb0
[ 715.957894] ? lock_is_held_type+0xd7/0x130
[ 715.958364] ? find_held_lock+0x2c/0x110
[ 715.958825] ? kernel_clone+0xc4/0xa60
[ 715.959266] kernel_clone+0xe7/0xa60
[ 715.959700] ? create_io_thread+0xf0/0xf0
[ 715.960166] ? find_held_lock+0x2c/0x110
[ 715.960630] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 715.961193] ? bit_wait_io_timeout+0x160/0x160
[ 715.961722] __do_sys_clone+0xc8/0x110
[ 715.962166] ? __do_sys_vfork+0xd0/0xd0
[ 715.962626] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 715.963252] ? vfs_write+0x428/0xad0
[ 715.963686] ? syscall_enter_from_user_mode+0x1d/0x50
[ 715.964270] do_syscall_64+0x3b/0x90
[ 715.964706] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 715.965279] RIP: 0033:0x7fa70862cb19
[ 715.965689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 715.967750] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 715.968601] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 715.969400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 715.970207] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 715.970998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 715.971800] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 715.972622]
12:45:38 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
[ 715.993290] FAULT_INJECTION: forcing a failure.
[ 715.993290] name failslab, interval 1, probability 0, space 0, times 0
[ 715.994631] CPU: 1 PID: 5960 Comm: syz-executor.3 Not tainted 5.17.0-rc8-next-20220318 #1
[ 715.995488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 715.996685] Call Trace:
[ 715.996973]
[ 715.997204] dump_stack_lvl+0x8b/0xb3
[ 715.997627] should_fail.cold+0x5/0xa
[ 715.998033] ? create_object.isra.0+0x3a/0xa20
[ 715.998524] should_failslab+0x5/0x10
[ 715.998922] kmem_cache_alloc+0x5b/0x480
[ 715.999371] create_object.isra.0+0x3a/0xa20
[ 715.999833] ? kasan_unpoison+0x23/0x50
[ 716.000270] kmem_cache_alloc_bulk+0x3fa/0x780
[ 716.000770] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.001350] ? percpu_counter_add_batch+0xb4/0x170
[ 716.001908] io_submit_sqes.cold+0x1b6/0x3eb
[ 716.002416] ? find_held_lock+0x2c/0x110
[ 716.002870] ? io_apoll_task_func+0x230/0x230
[ 716.003396] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 716.003966] __do_sys_io_uring_enter+0xa17/0x1520
[ 716.004508] ? bit_wait_io_timeout+0x160/0x160
[ 716.005050] ? lock_is_held_type+0xd7/0x130
[ 716.005540] ? io_submit_sqes+0x9690/0x9690
[ 716.006027] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 716.006638] ? vfs_write+0x428/0xad0
[ 716.007061] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 716.007690] ? fput+0x2a/0x50
[ 716.008056] ? syscall_enter_from_user_mode+0x1d/0x50
[ 716.008653] do_syscall_64+0x3b/0x90
[ 716.009081] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 716.009653] RIP: 0033:0x7f9f5db0bb19
[ 716.010068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 716.012105] RSP: 002b:00007f9f5b081188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 716.012968] RAX: ffffffffffffffda RBX: 00007f9f5dc1ef60 RCX: 00007f9f5db0bb19
[ 716.013766] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 716.014567] RBP: 00007f9f5b0811d0 R08: 0000000000000000 R09: 0000000000000000
[ 716.015346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 716.016151] R13: 00007ffd1170c0ff R14: 00007f9f5b081300 R15: 0000000000022000
[ 716.016965]
[ 734.138525] FAULT_INJECTION: forcing a failure.
[ 734.138525] name failslab, interval 1, probability 0, space 0, times 0
[ 734.140949] CPU: 1 PID: 5974 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.142620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.144880] Call Trace:
[ 734.145407]
[ 734.145853] dump_stack_lvl+0x8b/0xb3
[ 734.146629] should_fail.cold+0x5/0xa
[ 734.147403] ? create_object.isra.0+0x3a/0xa20
[ 734.148332] should_failslab+0x5/0x10
[ 734.149114] kmem_cache_alloc+0x5b/0x480
[ 734.149939] create_object.isra.0+0x3a/0xa20
[ 734.150827] kmemleak_alloc_percpu+0xa0/0x100
12:45:56 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:56 executing program 0:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:56 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51)
12:45:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:56 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49)
12:45:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:45:56 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
12:45:56 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)
[ 734.151744] pcpu_alloc+0x7bf/0x1060
[ 734.152763] __percpu_init_rwsem+0x22/0x150
[ 734.153653] alloc_super+0x222/0x9d0
[ 734.154417] sget_fc+0x13e/0x7a0
[ 734.155105] ? refcount_dec_not_one+0x13b/0x1e0
[ 734.156055] ? set_anon_super+0xb0/0xb0
[ 734.156862] ? mqueue_get_tree+0x130/0x130
[ 734.157726] get_tree_nodev+0x24/0x1d0
[ 734.158081] loop5: detected capacity change from 0 to 240
[ 734.158524] mqueue_get_tree+0xee/0x130
[ 734.158553] vfs_get_tree+0x8e/0x2f0
[ 734.161170] fc_mount+0x13/0xc0
[ 734.161844] mq_init_ns+0x43e/0x630
[ 734.162579] copy_ipcs+0x35e/0x5d0
[ 734.163293] ? copy_utsname+0xa9/0x4a0
[ 734.164073] create_new_namespaces+0x210/0xb30
[ 734.165028] copy_namespaces+0x391/0x450
[ 734.165844] copy_process+0x2ba5/0x6d10
[ 734.166681] ? __cleanup_sighand+0xb0/0xb0
[ 734.167542] ? lock_is_held_type+0xd7/0x130
[ 734.168430] ? find_held_lock+0x2c/0x110
[ 734.169265] ? kernel_clone+0xc4/0xa60
[ 734.170062] kernel_clone+0xe7/0xa60
[ 734.170825] ? create_io_thread+0xf0/0xf0
[ 734.171644] FAULT_INJECTION: forcing a failure.
[ 734.171644] name failslab, interval 1, probability 0, space 0, times 0
[ 734.171658] ? find_held_lock+0x2c/0x110
[ 734.171691] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 734.175656] ? bit_wait_io_timeout+0x160/0x160
[ 734.176583] __do_sys_clone+0xc8/0x110
[ 734.177377] ? __do_sys_vfork+0xd0/0xd0
[ 734.178180] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.179280] ? vfs_write+0x428/0xad0
[ 734.180050] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.181099] do_syscall_64+0x3b/0x90
[ 734.181858] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.182899] RIP: 0033:0x7f71bf82bb19
[ 734.183642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.187317] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 734.188828] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 734.190254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 734.191670] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.193100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 734.194513] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 734.195950]
[ 734.196412] CPU: 0 PID: 5981 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.198054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.200311] Call Trace:
[ 734.200817]
[ 734.201270] dump_stack_lvl+0x8b/0xb3
[ 734.202051] should_fail.cold+0x5/0xa
[ 734.202830] ? create_object.isra.0+0x3a/0xa20
[ 734.203762] should_failslab+0x5/0x10
[ 734.204528] kmem_cache_alloc+0x5b/0x480
[ 734.205370] create_object.isra.0+0x3a/0xa20
[ 734.206262] ? kasan_unpoison+0x23/0x50
[ 734.207083] __kmalloc+0x25b/0x440
[ 734.207809] __list_lru_init+0xc7/0x590
[ 734.208619] alloc_super+0x814/0x9d0
[ 734.209389] sget_fc+0x13e/0x7a0
[ 734.210080] ? refcount_dec_not_one+0x13b/0x1e0
[ 734.211010] ? set_anon_super+0xb0/0xb0
[ 734.211791] ? mqueue_get_tree+0x130/0x130
[ 734.212636] get_tree_nodev+0x24/0x1d0
[ 734.213437] mqueue_get_tree+0xee/0x130
[ 734.214231] vfs_get_tree+0x8e/0x2f0
[ 734.214985] fc_mount+0x13/0xc0
[ 734.215652] mq_init_ns+0x43e/0x630
[ 734.216387] copy_ipcs+0x35e/0x5d0
[ 734.217115] ? copy_utsname+0xa9/0x4a0
[ 734.217906] create_new_namespaces+0x210/0xb30
[ 734.218839] copy_namespaces+0x391/0x450
[ 734.219419] FAULT_INJECTION: forcing a failure.
[ 734.219419] name failslab, interval 1, probability 0, space 0, times 0
[ 734.219661] copy_process+0x2ba5/0x6d10
[ 734.222661] ? __cleanup_sighand+0xb0/0xb0
[ 734.223516] ? lock_is_held_type+0xd7/0x130
[ 734.224375] ? find_held_lock+0x2c/0x110
[ 734.225200] ? kernel_clone+0xc4/0xa60
[ 734.225983] kernel_clone+0xe7/0xa60
[ 734.226734] ? create_io_thread+0xf0/0xf0
[ 734.227562] ? find_held_lock+0x2c/0x110
[ 734.228374] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 734.229362] ? bit_wait_io_timeout+0x160/0x160
[ 734.230280] __do_sys_clone+0xc8/0x110
[ 734.231059] ? __do_sys_vfork+0xd0/0xd0
[ 734.231854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.232964] ? vfs_write+0x428/0xad0
[ 734.233726] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.234755] do_syscall_64+0x3b/0x90
[ 734.235499] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.236527] RIP: 0033:0x7fa70862cb19
[ 734.237261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.240866] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 734.242369] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 734.243767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 734.245185] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.246585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 734.247979] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 734.249411]
[ 734.249867] CPU: 1 PID: 5973 Comm: syz-executor.2 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.251519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.253811] Call Trace:
[ 734.254321]
[ 734.254766] dump_stack_lvl+0x8b/0xb3
[ 734.255538] should_fail.cold+0x5/0xa
[ 734.256304] ? create_object.isra.0+0x3a/0xa20
[ 734.257236] should_failslab+0x5/0x10
[ 734.257994] kmem_cache_alloc+0x5b/0x480
[ 734.258810] create_object.isra.0+0x3a/0xa20
[ 734.259693] ? kasan_unpoison+0x23/0x50
[ 734.260505] kmem_cache_alloc_bulk+0x3fa/0x780
[ 734.261429] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.262522] ? percpu_counter_add_batch+0xb4/0x170
[ 734.263513] io_submit_sqes.cold+0x1b6/0x3eb
[ 734.264413] ? find_held_lock+0x2c/0x110
[ 734.265230] ? io_apoll_task_func+0x230/0x230
[ 734.266160] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 734.267161] __do_sys_io_uring_enter+0xa17/0x1520
[ 734.268139] ? bit_wait_io_timeout+0x160/0x160
[ 734.269071] ? lock_is_held_type+0xd7/0x130
[ 734.269931] ? io_submit_sqes+0x9690/0x9690
[ 734.270799] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.271897] ? vfs_write+0x428/0xad0
[ 734.272647] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 734.273754] ? fput+0x2a/0x50
[ 734.274396] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.275433] do_syscall_64+0x3b/0x90
[ 734.276189] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.277243] RIP: 0033:0x7fb6c8047b19
[ 734.277979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.281637] RSP: 002b:00007fb6c55bd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 734.283149] RAX: ffffffffffffffda RBX: 00007fb6c815af60 RCX: 00007fb6c8047b19
[ 734.284562] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 734.285993] RBP: 00007fb6c55bd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.287405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 734.288817] R13: 00007fff02802d3f R14: 00007fb6c55bd300 R15: 0000000000022000
[ 734.290263]
[ 734.292431] FAULT_INJECTION: forcing a failure.
[ 734.292431] name failslab, interval 1, probability 0, space 0, times 0
[ 734.292756] isofs_fill_super: get root inode failed
[ 734.294667] CPU: 1 PID: 5982 Comm: syz-executor.3 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.294693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.299551] Call Trace:
[ 734.300060]
[ 734.300505] dump_stack_lvl+0x8b/0xb3
[ 734.301283] should_fail.cold+0x5/0xa
[ 734.302051] ? create_object.isra.0+0x3a/0xa20
[ 734.302974] should_failslab+0x5/0x10
[ 734.303730] kmem_cache_alloc+0x5b/0x480
[ 734.304545] ? mark_held_locks+0x9e/0xe0
[ 734.305379] create_object.isra.0+0x3a/0xa20
[ 734.306264] ? kasan_unpoison+0x23/0x50
[ 734.307073] kmem_cache_alloc_bulk+0x3fa/0x780
[ 734.307997] io_submit_sqes.cold+0x1b6/0x3eb
[ 734.308901] ? find_held_lock+0x2c/0x110
[ 734.309723] ? io_apoll_task_func+0x230/0x230
[ 734.310662] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 734.311675] __do_sys_io_uring_enter+0xa17/0x1520
[ 734.312682] ? bit_wait_io_timeout+0x160/0x160
[ 734.313643] ? lock_is_held_type+0xd7/0x130
[ 734.314529] ? io_submit_sqes+0x9690/0x9690
[ 734.315415] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.316545] ? vfs_write+0x428/0xad0
[ 734.317332] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 734.318450] ? fput+0x2a/0x50
[ 734.319099] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.320139] do_syscall_64+0x3b/0x90
[ 734.320900] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.321967] RIP: 0033:0x7f9f5db0bb19
[ 734.322705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.326408] RSP: 002b:00007f9f5b081188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 734.327882] RAX: ffffffffffffffda RBX: 00007f9f5dc1ef60 RCX: 00007f9f5db0bb19
[ 734.329288] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 734.330675] RBP: 00007f9f5b0811d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.332043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 734.333428] R13: 00007ffd1170c0ff R14: 00007f9f5b081300 R15: 0000000000022000
[ 734.334831]
12:45:56 executing program 0:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
12:45:56 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52)
12:45:56 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50)
12:45:56 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000", 0x96, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:45:56 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3)
12:45:56 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
12:45:56 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)
[ 734.548410] loop5: detected capacity change from 0 to 240
12:45:56 executing program 0:
r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 734.572518] isofs_fill_super: get root inode failed
[ 734.578191] FAULT_INJECTION: forcing a failure.
[ 734.578191] name failslab, interval 1, probability 0, space 0, times 0
[ 734.580795] CPU: 0 PID: 6002 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.582679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.585279] Call Trace:
[ 734.585864]
[ 734.586365] dump_stack_lvl+0x8b/0xb3
[ 734.587167] should_fail.cold+0x5/0xa
[ 734.587925] ? __list_lru_init+0xc7/0x590
[ 734.588758] should_failslab+0x5/0x10
[ 734.589521] __kmalloc+0x72/0x440
[ 734.590203] __list_lru_init+0xc7/0x590
[ 734.591002] alloc_super+0x83e/0x9d0
[ 734.591763] sget_fc+0x13e/0x7a0
[ 734.592445] ? refcount_dec_not_one+0x13b/0x1e0
[ 734.592650] FAULT_INJECTION: forcing a failure.
[ 734.592650] name failslab, interval 1, probability 0, space 0, times 0
[ 734.593391] ? set_anon_super+0xb0/0xb0
[ 734.596371] ? mqueue_get_tree+0x130/0x130
[ 734.597289] get_tree_nodev+0x24/0x1d0
[ 734.598081] mqueue_get_tree+0xee/0x130
[ 734.598876] vfs_get_tree+0x8e/0x2f0
[ 734.599626] fc_mount+0x13/0xc0
[ 734.600287] mq_init_ns+0x43e/0x630
[ 734.601035] copy_ipcs+0x35e/0x5d0
[ 734.601769] ? copy_utsname+0xa9/0x4a0
[ 734.602557] create_new_namespaces+0x210/0xb30
[ 734.603501] copy_namespaces+0x391/0x450
[ 734.604318] copy_process+0x2ba5/0x6d10
[ 734.605154] ? __cleanup_sighand+0xb0/0xb0
[ 734.606012] ? lock_is_held_type+0xd7/0x130
[ 734.606869] ? find_held_lock+0x2c/0x110
[ 734.607682] ? kernel_clone+0xc4/0xa60
[ 734.608465] kernel_clone+0xe7/0xa60
[ 734.609250] ? create_io_thread+0xf0/0xf0
[ 734.610085] ? find_held_lock+0x2c/0x110
[ 734.610899] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 734.611886] ? bit_wait_io_timeout+0x160/0x160
[ 734.612806] __do_sys_clone+0xc8/0x110
[ 734.613596] ? __do_sys_vfork+0xd0/0xd0
[ 734.614394] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.615489] ? vfs_write+0x428/0xad0
[ 734.616252] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.617299] do_syscall_64+0x3b/0x90
[ 734.618048] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.619085] RIP: 0033:0x7fa70862cb19
[ 734.619819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.623464] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 734.624977] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 734.626388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 734.627798] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.629224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 734.630635] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 734.632076]
[ 734.632539] CPU: 1 PID: 6003 Comm: syz-executor.2 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.634205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.636457] Call Trace:
[ 734.636993]
[ 734.637442] dump_stack_lvl+0x8b/0xb3
[ 734.638220] should_fail.cold+0x5/0xa
[ 734.638987] ? create_object.isra.0+0x3a/0xa20
[ 734.639911] should_failslab+0x5/0x10
[ 734.640667] kmem_cache_alloc+0x5b/0x480
[ 734.641491] ? mark_held_locks+0x9e/0xe0
[ 734.642308] create_object.isra.0+0x3a/0xa20
[ 734.643193] ? kasan_unpoison+0x23/0x50
[ 734.643998] kmem_cache_alloc_bulk+0x3fa/0x780
[ 734.644904] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.646021] ? percpu_counter_add_batch+0xb4/0x170
[ 734.647007] io_submit_sqes.cold+0x1b6/0x3eb
[ 734.647910] ? find_held_lock+0x2c/0x110
[ 734.648717] ? io_apoll_task_func+0x230/0x230
[ 734.649654] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 734.650654] __do_sys_io_uring_enter+0xa17/0x1520
[ 734.651626] ? bit_wait_io_timeout+0x160/0x160
[ 734.652565] ? lock_is_held_type+0xd7/0x130
[ 734.653705] ? io_submit_sqes+0x9690/0x9690
[ 734.654660] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.655761] ? vfs_write+0x428/0xad0
[ 734.656528] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 734.657643] ? fput+0x2a/0x50
[ 734.658290] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.659330] do_syscall_64+0x3b/0x90
[ 734.660087] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.661152] RIP: 0033:0x7fb6c8047b19
[ 734.661994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.665943] RSP: 002b:00007fb6c55bd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 734.667453] RAX: ffffffffffffffda RBX: 00007fb6c815af60 RCX: 00007fb6c8047b19
[ 734.668865] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 734.670286] RBP: 00007fb6c55bd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.671687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 734.673117] R13: 00007fff02802d3f R14: 00007fb6c55bd300 R15: 0000000000022000
[ 734.674555]
[ 734.693103] FAULT_INJECTION: forcing a failure.
[ 734.693103] name failslab, interval 1, probability 0, space 0, times 0
[ 734.693126] FAULT_INJECTION: forcing a failure.
[ 734.693126] name failslab, interval 1, probability 0, space 0, times 0
[ 734.695611] CPU: 0 PID: 6006 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.699310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.701604] Call Trace:
[ 734.702117]
[ 734.702564] dump_stack_lvl+0x8b/0xb3
[ 734.703353] should_fail.cold+0x5/0xa
[ 734.704125] ? __list_lru_init+0xc7/0x590
[ 734.704979] should_failslab+0x5/0x10
[ 734.705741] __kmalloc+0x72/0x440
[ 734.706453] __list_lru_init+0xc7/0x590
[ 734.707269] alloc_super+0x814/0x9d0
[ 734.708034] sget_fc+0x13e/0x7a0
[ 734.708723] ? refcount_dec_not_one+0x13b/0x1e0
[ 734.709674] ? set_anon_super+0xb0/0xb0
[ 734.710487] ? mqueue_get_tree+0x130/0x130
[ 734.711339] get_tree_nodev+0x24/0x1d0
[ 734.712133] mqueue_get_tree+0xee/0x130
[ 734.712948] vfs_get_tree+0x8e/0x2f0
[ 734.713708] fc_mount+0x13/0xc0
[ 734.714375] mq_init_ns+0x43e/0x630
[ 734.715111] copy_ipcs+0x35e/0x5d0
[ 734.715823] ? copy_utsname+0xa9/0x4a0
[ 734.716621] create_new_namespaces+0x210/0xb30
[ 734.717561] copy_namespaces+0x391/0x450
[ 734.718395] copy_process+0x2ba5/0x6d10
[ 734.719234] ? __cleanup_sighand+0xb0/0xb0
[ 734.720098] ? lock_is_held_type+0xd7/0x130
[ 734.720969] ? find_held_lock+0x2c/0x110
[ 734.721782] ? kernel_clone+0xc4/0xa60
[ 734.722577] kernel_clone+0xe7/0xa60
[ 734.723341] ? create_io_thread+0xf0/0xf0
[ 734.724174] ? find_held_lock+0x2c/0x110
[ 734.725007] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 734.725998] ? bit_wait_io_timeout+0x160/0x160
[ 734.726939] __do_sys_clone+0xc8/0x110
[ 734.727726] ? __do_sys_vfork+0xd0/0xd0
[ 734.728527] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.729646] ? vfs_write+0x428/0xad0
[ 734.730420] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.731458] do_syscall_64+0x3b/0x90
[ 734.732212] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.733262] RIP: 0033:0x7f71bf82bb19
[ 734.734002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.737674] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 734.739197] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 734.740621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 734.742053] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.743471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 734.744891] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 734.746341]
[ 734.746804] CPU: 1 PID: 6007 Comm: syz-executor.3 Not tainted 5.17.0-rc8-next-20220318 #1
[ 734.748430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 734.750647] Call Trace:
[ 734.751143]
[ 734.751578] dump_stack_lvl+0x8b/0xb3
[ 734.752337] should_fail.cold+0x5/0xa
[ 734.753110] ? create_object.isra.0+0x3a/0xa20
[ 734.754012] should_failslab+0x5/0x10
[ 734.754757] kmem_cache_alloc+0x5b/0x480
[ 734.755548] ? mark_held_locks+0x9e/0xe0
[ 734.756361] create_object.isra.0+0x3a/0xa20
[ 734.757254] ? kasan_unpoison+0x23/0x50
[ 734.758044] kmem_cache_alloc_bulk+0x3fa/0x780
[ 734.758946] io_submit_sqes.cold+0x1b6/0x3eb
[ 734.759830] ? find_held_lock+0x2c/0x110
[ 734.760621] ? io_apoll_task_func+0x230/0x230
[ 734.761540] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 734.762538] __do_sys_io_uring_enter+0xa17/0x1520
[ 734.763500] ? bit_wait_io_timeout+0x160/0x160
[ 734.764408] ? lock_is_held_type+0xd7/0x130
[ 734.765258] ? io_submit_sqes+0x9690/0x9690
[ 734.766109] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 734.767180] ? vfs_write+0x428/0xad0
[ 734.767917] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 734.769018] ? fput+0x2a/0x50
[ 734.769662] ? syscall_enter_from_user_mode+0x1d/0x50
[ 734.770674] do_syscall_64+0x3b/0x90
[ 734.771413] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 734.772416] RIP: 0033:0x7f9f5db0bb19
[ 734.773144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 734.776685] RSP: 002b:00007f9f5b081188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 734.778158] RAX: ffffffffffffffda RBX: 00007f9f5dc1ef60 RCX: 00007f9f5db0bb19
[ 734.779525] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 734.780888] RBP: 00007f9f5b0811d0 R08: 0000000000000000 R09: 0000000000000000
[ 734.782258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 734.783631] R13: 00007ffd1170c0ff R14: 00007f9f5b081300 R15: 0000000000022000
[ 734.785030]
12:46:09 executing program 2:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4)
12:46:09 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
read(r0, &(0x7f00000001c0)=""/133, 0x85)
12:46:09 executing program 1:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51)
12:46:09 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0)
r3 = epoll_create(0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5)
12:46:09 executing program 6:
clone(0x5d9809c9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53)
12:46:09 executing program 5:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000be000000000000be252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a000000", 0x9b, 0x8800}, {&(0x7f0000000040)="22df1d0000000000000d00080005e20008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000011e00))
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x8)
12:46:09 executing program 0:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000380)=0x0)
r2 = epoll_create(0x1)
syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r2, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0)
[ 746.925812] FAULT_INJECTION: forcing a failure.
[ 746.925812] name failslab, interval 1, probability 0, space 0, times 0
[ 746.926829] FAULT_INJECTION: forcing a failure.
[ 746.926829] name failslab, interval 1, probability 0, space 0, times 0
[ 746.928220] CPU: 0 PID: 6020 Comm: syz-executor.6 Not tainted 5.17.0-rc8-next-20220318 #1
[ 746.931056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 746.933455] Call Trace:
[ 746.933990]
[ 746.934470] dump_stack_lvl+0x8b/0xb3
[ 746.935294] should_fail.cold+0x5/0xa
[ 746.936111] ? create_object.isra.0+0x3a/0xa20
[ 746.937129] should_failslab+0x5/0x10
[ 746.937940] kmem_cache_alloc+0x5b/0x480
[ 746.938818] create_object.isra.0+0x3a/0xa20
[ 746.939836] ? kasan_unpoison+0x23/0x50
[ 746.940982] __kmalloc+0x25b/0x440
[ 746.942001] __list_lru_init+0xc7/0x590
[ 746.943140] alloc_super+0x83e/0x9d0
[ 746.944221] sget_fc+0x13e/0x7a0
[ 746.945157] ? refcount_dec_not_one+0x13b/0x1e0
[ 746.946165] ? set_anon_super+0xb0/0xb0
[ 746.947016] ? mqueue_get_tree+0x130/0x130
[ 746.947909] get_tree_nodev+0x24/0x1d0
[ 746.948745] mqueue_get_tree+0xee/0x130
[ 746.949614] vfs_get_tree+0x8e/0x2f0
[ 746.950428] fc_mount+0x13/0xc0
[ 746.951139] mq_init_ns+0x43e/0x630
[ 746.951907] copy_ipcs+0x35e/0x5d0
[ 746.952683] ? copy_utsname+0xa9/0x4a0
[ 746.953579] create_new_namespaces+0x210/0xb30
[ 746.954618] copy_namespaces+0x391/0x450
[ 746.955516] copy_process+0x2ba5/0x6d10
[ 746.956428] ? __cleanup_sighand+0xb0/0xb0
[ 746.957405] ? lock_is_held_type+0xd7/0x130
[ 746.958352] ? find_held_lock+0x2c/0x110
[ 746.959247] ? kernel_clone+0xc4/0xa60
[ 746.960113] kernel_clone+0xe7/0xa60
[ 746.960930] ? create_io_thread+0xf0/0xf0
[ 746.961869] ? find_held_lock+0x2c/0x110
[ 746.962797] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 746.963867] ? bit_wait_io_timeout+0x160/0x160
[ 746.964865] __do_sys_clone+0xc8/0x110
[ 746.965748] ? __do_sys_vfork+0xd0/0xd0
[ 746.966619] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 746.967817] ? vfs_write+0x428/0xad0
[ 746.968847] ? syscall_enter_from_user_mode+0x1d/0x50
[ 746.969988] do_syscall_64+0x3b/0x90
[ 746.970840] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 746.971988] RIP: 0033:0x7fa70862cb19
[ 746.972857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 746.976894] RSP: 002b:00007fa705ba2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 746.978558] RAX: ffffffffffffffda RBX: 00007fa70873ff60 RCX: 00007fa70862cb19
[ 746.980118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 746.981662] RBP: 00007fa705ba21d0 R08: 0000000000000000 R09: 0000000000000000
[ 746.983225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 746.984753] R13: 00007ffd6adb49ef R14: 00007fa705ba2300 R15: 0000000000022000
[ 746.986371]
[ 746.986874] CPU: 1 PID: 6023 Comm: syz-executor.1 Not tainted 5.17.0-rc8-next-20220318 #1
[ 746.987759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 746.988956] Call Trace:
[ 746.989239]
[ 746.989475] dump_stack_lvl+0x8b/0xb3
[ 746.989885] should_fail.cold+0x5/0xa
[ 746.990302] ? create_object.isra.0+0x3a/0xa20
[ 746.990801] should_failslab+0x5/0x10
[ 746.991209] kmem_cache_alloc+0x5b/0x480
[ 746.991649] create_object.isra.0+0x3a/0xa20
[ 746.992128] ? kasan_unpoison+0x23/0x50
[ 746.992568] __kmalloc+0x25b/0x440
[ 746.992960] __list_lru_init+0xc7/0x590
[ 746.993411] alloc_super+0x814/0x9d0
[ 746.993820] sget_fc+0x13e/0x7a0
[ 746.994185] ? refcount_dec_not_one+0x13b/0x1e0
[ 746.994686] ? set_anon_super+0xb0/0xb0
[ 746.995121] ? mqueue_get_tree+0x130/0x130
[ 746.995571] get_tree_nodev+0x24/0x1d0
[ 746.995992] mqueue_get_tree+0xee/0x130
[ 746.996418] vfs_get_tree+0x8e/0x2f0
[ 746.996820] fc_mount+0x13/0xc0
[ 746.997196] mq_init_ns+0x43e/0x630
[ 746.997597] copy_ipcs+0x35e/0x5d0
[ 746.997989] ? copy_utsname+0xa9/0x4a0
[ 746.998417] create_new_namespaces+0x210/0xb30
[ 746.998910] copy_namespaces+0x391/0x450
[ 746.999367] copy_process+0x2ba5/0x6d10
[ 746.999824] ? __cleanup_sighand+0xb0/0xb0
[ 747.000301] ? lock_is_held_type+0xd7/0x130
[ 747.000754] ? find_held_lock+0x2c/0x110
[ 747.001209] ? kernel_clone+0xc4/0xa60
[ 747.001639] kernel_clone+0xe7/0xa60
[ 747.002049] ? create_io_thread+0xf0/0xf0
[ 747.002500] ? find_held_lock+0x2c/0x110
[ 747.002946] ? __mutex_unlock_slowpath+0x15c/0x5e0
[ 747.003469] ? bit_wait_io_timeout+0x160/0x160
[ 747.003981] __do_sys_clone+0xc8/0x110
[ 747.004397] ? __do_sys_vfork+0xd0/0xd0
[ 747.004840] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 747.005438] ? vfs_write+0x428/0xad0
[ 747.005854] ? syscall_enter_from_user_mode+0x1d/0x50
[ 747.006403] do_syscall_64+0x3b/0x90
[ 747.006826] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 747.007386] RIP: 0033:0x7f71bf82bb19
[ 747.007794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 747.009785] RSP: 002b:00007f71bcda1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 747.010595] RAX: ffffffffffffffda RBX: 00007f71bf93ef60 RCX: 00007f71bf82bb19
[ 747.011358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005d9809c9
[ 747.012124] RBP: 00007f71bcda11d0 R08: 0000000000000000 R09: 0000000000000000
[ 747.012881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 747.013658] R13: 00007ffdc313072f R14: 00007f71bcda1300 R15: 0000000000022000
[ 747.014432]
[ 747.018908] FAULT_INJECTION: forcing a failure.
[ 747.018908] name failslab, interval 1, probability 0, space 0, times 0
[ 747.020146] CPU: 1 PID: 6024 Comm: syz-executor.3 Not tainted 5.17.0-rc8-next-20220318 #1
[ 747.021042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 747.022270] Call Trace:
[ 747.022547]
[ 747.022797] dump_stack_lvl+0x8b/0xb3
[ 747.023217] should_fail.cold+0x5/0xa
[ 747.023644] ? create_object.isra.0+0x3a/0xa20
[ 747.024156] should_failslab+0x5/0x10
[ 747.024568] kmem_cache_alloc+0x5b/0x480
[ 747.025015] ? mark_held_locks+0x9e/0xe0
[ 747.025484] create_object.isra.0+0x3a/0xa20
[ 747.025971] ? kasan_unpoison+0x23/0x50
[ 747.026431] kmem_cache_alloc_bulk+0x3fa/0x780
[ 747.026932] io_submit_sqes.cold+0x1b6/0x3eb
[ 747.027427] ? find_held_lock+0x2c/0x110
[ 747.027884] ? io_apoll_task_func+0x230/0x230
[ 747.027990] loop5: detected capacity change from 0 to 240
[ 747.028403] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 747.030128] __do_sys_io_uring_enter+0xa17/0x1520
[ 747.030646] ? bit_wait_io_timeout+0x160/0x160
[ 747.031161] ? lock_is_held_type+0xd7/0x130
[ 747.031622] ? io_submit_sqes+0x9690/0x9690
[ 747.032102] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 747.032698] ? vfs_write+0x428/0xad0
[ 747.033125] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 747.033711] ? fput+0x2a/0x50
[ 747.034077] ? syscall_enter_from_user_mode+0x1d/0x50
[ 747.034646] do_syscall_64+0x3b/0x90
[ 747.035062] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 747.035616] RIP: 0033:0x7f9f5db0bb19
[ 747.036029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 747.037993] RSP: 002b:00007f9f5b081188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 747.038829] RAX: ffffffffffffffda RBX: 00007f9f5dc1ef60 RCX: 00007f9f5db0bb19
[ 747.039618] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 747.040411] RBP: 00007f9f5b0811d0 R08: 0000000000000000 R09: 0000000000000000
[ 747.041201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 747.041988] R13: 00007ffd1170c0ff R14: 00007f9f5b081300 R15: 0000000000022000
[ 747.042787]
[ 747.045747] FAULT_INJECTION: forcing a failure.
[ 747.045747] name failslab, interval 1, probability 0, space 0, times 0
[ 747.048746] CPU: 0 PID: 6022 Comm: syz-executor.2 Not tainted 5.17.0-rc8-next-20220318 #1
[ 747.050549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 747.052988] Call Trace:
[ 747.053576]
[ 747.054067] dump_stack_lvl+0x8b/0xb3
[ 747.054898] should_fail.cold+0x5/0xa
[ 747.055732] ? create_object.isra.0+0x3a/0xa20
[ 747.056737] should_failslab+0x5/0x10
[ 747.057593] kmem_cache_alloc+0x5b/0x480
[ 747.058477] ? mark_held_locks+0x9e/0xe0
[ 747.059370] create_object.isra.0+0x3a/0xa20
[ 747.060334] ? kasan_unpoison+0x23/0x50
[ 747.061247] kmem_cache_alloc_bulk+0x3fa/0x780
[ 747.062257] io_submit_sqes.cold+0x1b6/0x3eb
[ 747.063242] ? find_held_lock+0x2c/0x110
[ 747.064127] ? io_apoll_task_func+0x230/0x230
[ 747.065184] ? __do_sys_io_uring_enter+0xa17/0x1520
[ 747.066278] __do_sys_io_uring_enter+0xa17/0x1520
[ 747.067337] ? bit_wait_io_timeout+0x160/0x160
[ 747.068333] ? lock_is_held_type+0xd7/0x130
[ 747.069290] ? io_submit_sqes+0x9690/0x9690
[ 747.070246] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 747.071433] ? vfs_write+0x428/0xad0
[ 747.072251] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 747.073464] ? fput+0x2a/0x50
[ 747.074169] ? syscall_enter_from_user_mode+0x1d/0x50
[ 747.075295] do_syscall_64+0x3b/0x90
[ 747.076112] entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 747.077253] RIP: 0033:0x7fb6c8047b19
12:46:09 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001e0069ff000000000000000007"], 0x1c}], 0x1}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f0000001340)=ANY=[@ANYBLOB="f954b225", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fddbdf2503000000140002800800030000000000080004002400000008000500ffffffff"], 0x30}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000)
preadv(r1, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
r3 = fork()
r4 = pidfd_open(r3, 0x0)
process_madvise(r4, 0x0, 0x0, 0x14, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00')
preadv(r5, &(0x7f0000000300)=[{&(0x7f0000000200)=""/66, 0x42}], 0x1, 0x1, 0x0)
read(r5, &(0x7f0000001240)=""/196, 0xc4)
syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
[ 747.078055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 747.082227] RSP: 002b:00007fb6c55bd188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 747.083891] RAX: ffffffffffffffda RBX: 00007fb6c815af60 RCX: 00007fb6c8047b19
[ 747.085447] RDX: 0000000000000000 RSI: 0000000000004059 RDI: 0000000000000003
[ 747.087037] RBP: 00007fb6c55bd1d0 R08: 0000000000000000 R09: 0000000000000000
[ 747.088589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 747.090163] R13: 00007fff02802d3f R14: 00007fb6c55bd300 R15: 0000000000022000
[ 747.091700]
[ 747.105542] isofs_fill_super: get root inode failed
12:46:09 executing program 3:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000380)=