cveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 26) 02:30:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1117.871991] FAULT_INJECTION: forcing a failure. [ 1117.871991] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.874517] CPU: 0 PID: 7447 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1117.876332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1117.878842] Call Trace: [ 1117.879400] [ 1117.879888] dump_stack_lvl+0x8b/0xb3 [ 1117.880739] should_fail.cold+0x5/0xa [ 1117.881582] ? alloc_vfsmnt+0x23/0x6b0 [ 1117.882454] should_failslab+0x5/0x10 [ 1117.883278] kmem_cache_alloc+0x5b/0x480 [ 1117.884161] ? lock_release+0x3b2/0x6f0 [ 1117.885033] alloc_vfsmnt+0x23/0x6b0 [ 1117.885850] clone_mnt+0x6d/0xdc0 [ 1117.886647] copy_tree+0x3ac/0xa50 [ 1117.887448] copy_mnt_ns+0x1a5/0xa90 [ 1117.888266] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1117.889309] ? kmem_cache_alloc+0x332/0x480 [ 1117.890291] create_new_namespaces+0xd6/0xb30 [ 1117.891280] copy_namespaces+0x391/0x450 [ 1117.892169] copy_process+0x27f2/0x6cb0 [ 1117.893039] ? lock_is_held_type+0xd7/0x130 [ 1117.893970] ? find_held_lock+0x2c/0x110 [ 1117.894894] ? __cleanup_sighand+0xb0/0xb0 [ 1117.895830] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1117.897021] ? _copy_from_user+0x139/0x170 [ 1117.897949] ? kernel_clone+0x2f8/0xa60 [ 1117.898846] kernel_clone+0xe7/0xa60 [ 1117.899660] ? lock_is_held_type+0xd7/0x130 [ 1117.900591] ? create_io_thread+0xf0/0xf0 [ 1117.901515] ? lock_is_held_type+0xd7/0x130 [ 1117.902490] __do_sys_clone3+0x1dd/0x2e0 [ 1117.903380] ? __ia32_sys_clone+0x150/0x150 [ 1117.904345] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1117.905537] ? vfs_write+0x188/0xae0 [ 1117.906375] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1117.907565] ? fput+0x2a/0x50 [ 1117.908263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1117.909388] do_syscall_64+0x3b/0x90 [ 1117.910236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1117.911363] RIP: 0033:0x7f82e43e1b19 [ 1117.912161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1117.916138] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1117.917777] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1117.919328] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1117.920861] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1117.922430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1117.923961] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1117.925522] 02:30:54 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 02:30:54 executing program 5: syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./file1\x00', 0x1000000000007, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d4a01b36fb2471bc246ce825ed68c696e5f62617463685f74696d653d3078303030303030303030303030283030302c636f6d6d69743d30783030302c004241fa69427e21720d5e4cb5f1dd203b4af2bc04de17a51fdd04c876d8bf6da1d341029861103b2f945561036d1aef567f41db433d0ffc00"/130]) 02:30:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 27) [ 1117.929584] FAULT_INJECTION: forcing a failure. [ 1117.929584] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.932079] CPU: 0 PID: 7451 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1117.933863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1117.936351] Call Trace: [ 1117.936917] [ 1117.937402] dump_stack_lvl+0x8b/0xb3 [ 1117.938287] should_fail.cold+0x5/0xa [ 1117.939126] should_failslab+0x5/0x10 [ 1117.940212] __kmalloc_track_caller+0x79/0x420 [ 1117.941091] FAULT_INJECTION: forcing a failure. [ 1117.941091] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.941320] ? kasprintf+0xbb/0xf0 [ 1117.943365] kvasprintf+0xb5/0x150 [ 1117.944231] ? bust_spinlocks+0xe0/0xe0 [ 1117.945199] ? preempt_count_add+0x74/0x140 [ 1117.946254] ? __is_module_percpu_address+0x237/0x300 [ 1117.947514] kasprintf+0xbb/0xf0 [ 1117.948337] ? kvasprintf_const+0x190/0x190 [ 1117.949391] ? save_trace+0xd00/0xd00 [ 1117.950317] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1117.951473] alloc_workqueue+0x408/0xeb0 [ 1117.952460] ? do_raw_spin_unlock+0x4f/0x210 [ 1117.953528] ? _raw_spin_unlock+0x24/0x40 [ 1117.954549] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1117.955686] ? __fget_files+0x28d/0x470 [ 1117.956554] ? loop_configure+0x62b/0x1950 [ 1117.957477] loop_configure+0x6ec/0x1950 [ 1117.958372] ? putname+0xfe/0x140 [ 1117.959146] lo_ioctl+0x7c5/0x18b0 [ 1117.959917] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1117.960965] ? loop_set_status_old+0x1b0/0x1b0 [ 1117.961960] ? avc_ss_reset+0x180/0x180 [ 1117.962839] ? __lock_acquire+0xbac/0x6120 [ 1117.963824] ? selinux_inode_getsecctx+0x90/0x90 [ 1117.964868] ? loop_set_status_old+0x1b0/0x1b0 [ 1117.965864] blkdev_ioctl+0x362/0x7f0 [ 1117.966706] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1117.967732] ? __x64_sys_ioctl+0x97/0x210 [ 1117.968634] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1117.969828] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1117.970873] __x64_sys_ioctl+0x196/0x210 [ 1117.971762] do_syscall_64+0x3b/0x90 [ 1117.972586] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1117.973697] RIP: 0033:0x7f6d56f6c8d7 [ 1117.974515] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1117.978459] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.980114] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1117.981651] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1117.983189] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1117.984719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1117.986255] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1117.987809] [ 1117.988306] CPU: 1 PID: 7445 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1117.989184] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1117.989571] audit: type=1326 audit(1643941854.880:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7448 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1117.990364] Call Trace: [ 1117.990369] [ 1117.990374] dump_stack_lvl+0x8b/0xb3 [ 1117.990395] should_fail.cold+0x5/0xa [ 1117.990413] ? create_object.isra.0+0x3a/0xa20 [ 1117.990435] should_failslab+0x5/0x10 [ 1117.990446] kmem_cache_alloc+0x5b/0x480 [ 1117.990466] create_object.isra.0+0x3a/0xa20 [ 1117.990485] ? kasan_unpoison+0x23/0x50 [ 1117.990507] __kmalloc+0x25b/0x440 [ 1117.990526] security_prepare_creds+0x10a/0x180 [ 1117.999098] prepare_creds+0x505/0x6f0 [ 1117.999509] ? acct_arg_size+0x7b/0xe0 [ 1117.999916] prepare_exec_creds+0xd/0x250 [ 1118.000352] bprm_execve+0xcf/0x1960 [ 1118.000749] ? count.constprop.0+0x1b3/0x280 [ 1118.001210] ? open_exec+0x70/0x70 [ 1118.001589] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.002151] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.002731] ? copy_string_kernel+0x4c8/0x580 [ 1118.003200] do_execveat_common+0x727/0x890 [ 1118.003659] ? bprm_execve+0x1960/0x1960 [ 1118.004095] __x64_sys_execveat+0xe0/0x120 [ 1118.004543] ? trace_hardirqs_on+0x38/0x190 [ 1118.004996] do_syscall_64+0x3b/0x90 [ 1118.005393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.005923] RIP: 0033:0x7f1a25884b19 [ 1118.006311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.008188] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1118.008977] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1118.009709] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1118.010444] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.011164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.011886] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1118.012627] [ 1118.021610] loop2: detected capacity change from 0 to 4 [ 1118.023911] loop4: detected capacity change from 0 to 256 [ 1118.025528] ext4: Unknown parameter 'mJ³o²GÂF΂^ÖŒin_batch_time' [ 1118.028935] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1118.030343] FAULT_INJECTION: forcing a failure. [ 1118.030343] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.031735] CPU: 1 PID: 7457 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.032531] ext4: Unknown parameter 'mJ³o²GÂF΂^ÖŒin_batch_time' [ 1118.032606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.035132] Call Trace: [ 1118.035423] [ 1118.035660] dump_stack_lvl+0x8b/0xb3 [ 1118.036073] should_fail.cold+0x5/0xa [ 1118.036392] loop1: detected capacity change from 0 to 256 [ 1118.036483] ? vm_area_dup+0x78/0x290 [ 1118.038085] should_failslab+0x5/0x10 [ 1118.038500] kmem_cache_alloc+0x5b/0x480 [ 1118.038975] vm_area_dup+0x78/0x290 [ 1118.039388] ? __lock_acquire+0xbac/0x6120 [ 1118.039875] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1118.040470] ? vm_area_alloc+0x110/0x110 [ 1118.040923] ? find_held_lock+0x2c/0x110 [ 1118.041379] ? lock_release+0x3b2/0x6f0 [ 1118.041817] ? get_mm_exe_file+0x137/0x2b0 [ 1118.042305] ? lock_downgrade+0x6d0/0x6d0 [ 1118.042783] ? get_mm_exe_file+0x159/0x2b0 [ 1118.043259] dup_mm+0x53f/0x1250 [ 1118.043647] ? replace_mm_exe_file+0x490/0x490 [ 1118.044165] ? __raw_spin_lock_init+0x36/0x110 [ 1118.044677] copy_process+0x384b/0x6cb0 [ 1118.045149] ? __cleanup_sighand+0xb0/0xb0 [ 1118.045626] ? lock_is_held_type+0xd7/0x130 [ 1118.046106] ? find_held_lock+0x2c/0x110 [ 1118.046572] ? kernel_clone+0x2f8/0xa60 [ 1118.047011] kernel_clone+0xe7/0xa60 [ 1118.047443] ? create_io_thread+0xf0/0xf0 [ 1118.047881] ? find_held_lock+0x2c/0x110 [ 1118.048334] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1118.048860] ? wait_for_completion_io+0x270/0x270 [ 1118.049404] __do_sys_clone+0xc8/0x110 [ 1118.049822] ? __do_sys_vfork+0xd0/0xd0 [ 1118.050289] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.050857] ? vfs_write+0x188/0xae0 [ 1118.051287] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.051827] do_syscall_64+0x3b/0x90 [ 1118.052246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.052790] RIP: 0033:0x7f466d7a6b19 [ 1118.053204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.055117] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1118.055701] FAT-fs (loop1): bogus number of FAT sectors [ 1118.055963] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1118.055973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.057134] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1118.057874] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.057883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.057891] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1118.057916] [ 1118.064217] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1118.078508] FAULT_INJECTION: forcing a failure. [ 1118.078508] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.079830] CPU: 1 PID: 7459 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.080690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.081913] Call Trace: [ 1118.082193] [ 1118.082449] dump_stack_lvl+0x8b/0xb3 [ 1118.082863] should_fail.cold+0x5/0xa [ 1118.083274] prepare_alloc_pages+0x17b/0x500 [ 1118.083750] __alloc_pages+0x131/0x4e0 [ 1118.084167] ? __is_insn_slot_addr+0x144/0x250 [ 1118.084655] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1118.085330] alloc_pages+0x1a0/0x2f0 [ 1118.085736] __get_free_pages+0xc/0xa0 [ 1118.086158] pgd_alloc+0x84/0x4b0 [ 1118.086558] ? lock_downgrade+0x6d0/0x6d0 [ 1118.086996] ? pgd_page_get_mm+0x40/0x40 [ 1118.087443] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1118.087948] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1118.088472] mm_init+0x601/0xaa0 [ 1118.088832] mm_alloc+0x99/0xc0 [ 1118.089223] alloc_bprm+0x1c3/0x900 [ 1118.089627] ? __virt_addr_valid+0xe9/0x340 [ 1118.090114] do_execveat_common+0x232/0x890 [ 1118.090584] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1118.091199] ? bprm_execve+0x1960/0x1960 [ 1118.091634] __x64_sys_execveat+0xe0/0x120 [ 1118.092099] ? trace_hardirqs_on+0x38/0x190 [ 1118.092557] do_syscall_64+0x3b/0x90 [ 1118.092975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.093514] RIP: 0033:0x7f245182fb19 [ 1118.093940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.095870] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1118.096710] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1118.097451] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1118.098265] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.099058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.099861] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1118.100675] 02:30:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r1, 0x8, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) 02:30:55 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 68) [ 1118.129653] FAULT_INJECTION: forcing a failure. [ 1118.129653] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.130900] CPU: 1 PID: 7464 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.131770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.132984] Call Trace: [ 1118.133252] [ 1118.133487] dump_stack_lvl+0x8b/0xb3 [ 1118.133895] should_fail.cold+0x5/0xa [ 1118.134305] ? create_object.isra.0+0x3a/0xa20 [ 1118.134798] should_failslab+0x5/0x10 [ 1118.135218] kmem_cache_alloc+0x5b/0x480 [ 1118.135657] ? mark_held_locks+0x9e/0xe0 [ 1118.136104] create_object.isra.0+0x3a/0xa20 [ 1118.136585] kmemleak_alloc_percpu+0xa0/0x100 [ 1118.137063] pcpu_alloc+0x7bf/0x1060 [ 1118.137488] alloc_vfsmnt+0xfd/0x6b0 [ 1118.137887] clone_mnt+0x6d/0xdc0 [ 1118.138283] copy_tree+0x3ac/0xa50 [ 1118.138679] copy_mnt_ns+0x1a5/0xa90 [ 1118.139082] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1118.139595] ? kmem_cache_alloc+0x332/0x480 [ 1118.140050] create_new_namespaces+0xd6/0xb30 [ 1118.140546] copy_namespaces+0x391/0x450 [ 1118.140979] copy_process+0x27f2/0x6cb0 [ 1118.141407] ? lock_is_held_type+0xd7/0x130 [ 1118.141893] ? find_held_lock+0x2c/0x110 [ 1118.142352] ? __cleanup_sighand+0xb0/0xb0 [ 1118.142847] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1118.143419] ? _copy_from_user+0x139/0x170 [ 1118.143901] ? kernel_clone+0x2f8/0xa60 [ 1118.144320] kernel_clone+0xe7/0xa60 [ 1118.144739] ? lock_is_held_type+0xd7/0x130 [ 1118.145186] ? create_io_thread+0xf0/0xf0 [ 1118.145660] ? lock_is_held_type+0xd7/0x130 [ 1118.146117] __do_sys_clone3+0x1dd/0x2e0 [ 1118.146588] ? __ia32_sys_clone+0x150/0x150 [ 1118.147082] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.147660] ? vfs_write+0x188/0xae0 [ 1118.148081] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.148659] ? fput+0x2a/0x50 [ 1118.149022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.149572] do_syscall_64+0x3b/0x90 [ 1118.149991] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.150563] RIP: 0033:0x7f82e43e1b19 [ 1118.150977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.152889] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1118.153741] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1118.154494] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1118.155236] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.155966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.156691] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1118.157455] 02:30:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 28) 02:30:55 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 69) [ 1118.197190] FAULT_INJECTION: forcing a failure. [ 1118.197190] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.198469] CPU: 1 PID: 7469 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.199345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.200552] Call Trace: [ 1118.200821] [ 1118.201052] dump_stack_lvl+0x8b/0xb3 [ 1118.201479] should_fail.cold+0x5/0xa [ 1118.201884] should_failslab+0x5/0x10 [ 1118.202299] __kmalloc_track_caller+0x79/0x420 [ 1118.202810] ? kstrdup_const+0x53/0x80 [ 1118.203231] kstrdup+0x36/0x70 [ 1118.203594] kstrdup_const+0x53/0x80 [ 1118.204000] alloc_vfsmnt+0xb5/0x6b0 [ 1118.204413] clone_mnt+0x6d/0xdc0 [ 1118.204803] copy_tree+0x3ac/0xa50 [ 1118.205209] copy_mnt_ns+0x1a5/0xa90 [ 1118.205605] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1118.206114] ? kmem_cache_alloc+0x332/0x480 [ 1118.206582] create_new_namespaces+0xd6/0xb30 [ 1118.207061] copy_namespaces+0x391/0x450 [ 1118.207491] copy_process+0x27f2/0x6cb0 [ 1118.207908] ? lock_is_held_type+0xd7/0x130 [ 1118.208361] ? find_held_lock+0x2c/0x110 [ 1118.208802] ? __cleanup_sighand+0xb0/0xb0 [ 1118.209255] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1118.209834] ? _copy_from_user+0x139/0x170 [ 1118.210305] ? kernel_clone+0x2f8/0xa60 [ 1118.210727] kernel_clone+0xe7/0xa60 [ 1118.211124] ? lock_is_held_type+0xd7/0x130 [ 1118.211585] ? create_io_thread+0xf0/0xf0 [ 1118.212034] ? lock_is_held_type+0xd7/0x130 [ 1118.212487] __do_sys_clone3+0x1dd/0x2e0 [ 1118.212925] ? __ia32_sys_clone+0x150/0x150 [ 1118.213391] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.213970] ? vfs_write+0x188/0xae0 [ 1118.214376] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.214948] ? fput+0x2a/0x50 [ 1118.215280] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1118.215821] do_syscall_64+0x3b/0x90 [ 1118.216217] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.216757] RIP: 0033:0x7f82e43e1b19 [ 1118.217141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.219076] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1118.219870] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1118.220610] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1118.221351] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.222089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.222832] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1118.223586] [ 1118.231653] FAULT_INJECTION: forcing a failure. [ 1118.231653] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.232873] CPU: 1 PID: 7471 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.233756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.234978] Call Trace: [ 1118.235252] [ 1118.235483] dump_stack_lvl+0x8b/0xb3 [ 1118.235898] should_fail.cold+0x5/0xa [ 1118.236307] should_failslab+0x5/0x10 [ 1118.236716] __kmalloc_track_caller+0x79/0x420 [ 1118.237219] ? kasprintf+0xbb/0xf0 [ 1118.237610] kvasprintf+0xb5/0x150 [ 1118.238006] ? bust_spinlocks+0xe0/0xe0 [ 1118.238461] ? preempt_count_add+0x74/0x140 [ 1118.238916] ? __is_module_percpu_address+0x237/0x300 [ 1118.239464] kasprintf+0xbb/0xf0 [ 1118.239843] ? kvasprintf_const+0x190/0x190 [ 1118.240322] ? save_trace+0xd00/0xd00 [ 1118.240731] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1118.241234] alloc_workqueue+0x408/0xeb0 [ 1118.241672] ? do_raw_spin_unlock+0x4f/0x210 [ 1118.242136] ? _raw_spin_unlock+0x24/0x40 [ 1118.242590] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1118.243119] ? __fget_files+0x28d/0x470 [ 1118.243538] ? loop_configure+0x62b/0x1950 [ 1118.243989] loop_configure+0x6ec/0x1950 [ 1118.244425] ? putname+0xfe/0x140 [ 1118.244805] lo_ioctl+0x7c5/0x18b0 [ 1118.245180] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1118.245696] ? loop_set_status_old+0x1b0/0x1b0 [ 1118.246198] ? avc_ss_reset+0x180/0x180 [ 1118.246617] ? __lock_acquire+0xbac/0x6120 [ 1118.247102] ? selinux_inode_getsecctx+0x90/0x90 [ 1118.247613] ? loop_set_status_old+0x1b0/0x1b0 [ 1118.248099] blkdev_ioctl+0x362/0x7f0 [ 1118.248498] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1118.248993] ? __x64_sys_ioctl+0x97/0x210 [ 1118.249433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.250012] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1118.250525] __x64_sys_ioctl+0x196/0x210 [ 1118.250956] do_syscall_64+0x3b/0x90 [ 1118.251352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.251893] RIP: 0033:0x7f6d56f6c8d7 [ 1118.252279] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.254219] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1118.255014] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1118.255760] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1118.256500] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1118.257256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1118.257997] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1118.258768] 02:30:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:30:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) 02:30:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x40000200) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pwritev(r1, &(0x7f0000001600)=[{&(0x7f0000000140)="93", 0x1}], 0x1, 0x0, 0x0) [ 1118.268258] loop2: detected capacity change from 0 to 4 [ 1118.272390] EXT4-fs (loop2): Can't read superblock on 2nd try 02:30:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 9) 02:30:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 27) [ 1118.273730] loop1: detected capacity change from 0 to 256 [ 1118.287206] FAT-fs (loop1): bogus number of FAT sectors [ 1118.287828] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1118.289522] FAULT_INJECTION: forcing a failure. [ 1118.289522] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.290722] CPU: 1 PID: 7475 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.291585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.292763] Call Trace: [ 1118.293048] [ 1118.293291] dump_stack_lvl+0x8b/0xb3 [ 1118.293707] should_fail.cold+0x5/0xa [ 1118.294118] ? __alloc_file+0x21/0x240 [ 1118.294567] should_failslab+0x5/0x10 [ 1118.294971] kmem_cache_alloc+0x5b/0x480 [ 1118.295406] ? kernel_text_address+0x53/0xb0 [ 1118.295877] __alloc_file+0x21/0x240 [ 1118.296278] alloc_empty_file+0x6d/0x170 [ 1118.296724] path_openat+0xe1/0x28a0 [ 1118.297127] ? lock_chain_count+0x20/0x20 [ 1118.297564] ? filter_irq_stacks+0x90/0x90 [ 1118.298032] ? path_lookupat+0x850/0x850 [ 1118.298503] ? kasan_save_stack+0x2e/0x40 [ 1118.298976] ? kasan_save_stack+0x1e/0x40 [ 1118.299437] ? __kasan_kmalloc+0x81/0xa0 [ 1118.299898] ? security_prepare_creds+0x10a/0x180 [ 1118.300452] ? prepare_creds+0x505/0x6f0 [ 1118.300918] ? prepare_exec_creds+0xd/0x250 [ 1118.301424] do_filp_open+0x1aa/0x400 [ 1118.301853] ? may_open_dev+0xf0/0xf0 [ 1118.302303] ? find_held_lock+0x2c/0x110 [ 1118.302768] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1118.303356] ? lock_release+0x3b2/0x6f0 [ 1118.303807] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1118.304393] ? lock_is_held_type+0xd7/0x130 [ 1118.304880] ? find_held_lock+0x2c/0x110 [ 1118.305348] do_open_execat+0x116/0x740 [ 1118.305802] ? bprm_execve+0x44b/0x1960 [ 1118.306268] ? __ia32_sys_uselib+0x40/0x40 [ 1118.306738] ? do_raw_spin_lock+0x121/0x260 [ 1118.307220] ? rwlock_bug.part.0+0x90/0x90 [ 1118.307707] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.308326] bprm_execve+0x48a/0x1960 [ 1118.308757] ? count.constprop.0+0x1b3/0x280 [ 1118.309246] ? open_exec+0x70/0x70 [ 1118.309651] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.310276] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.310894] ? copy_string_kernel+0x4c8/0x580 [ 1118.311405] do_execveat_common+0x727/0x890 [ 1118.311897] ? bprm_execve+0x1960/0x1960 [ 1118.312370] __x64_sys_execveat+0xe0/0x120 [ 1118.312862] ? trace_hardirqs_on+0x38/0x190 [ 1118.313342] do_syscall_64+0x3b/0x90 [ 1118.313761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.314351] RIP: 0033:0x7f1a25884b19 [ 1118.314772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.316841] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1118.317687] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1118.318502] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1118.319313] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.320110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.320903] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1118.321717] [ 1118.337646] FAULT_INJECTION: forcing a failure. [ 1118.337646] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.340254] CPU: 0 PID: 7479 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.342024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.344459] Call Trace: [ 1118.345010] [ 1118.345493] dump_stack_lvl+0x8b/0xb3 [ 1118.346356] should_fail.cold+0x5/0xa [ 1118.347189] ? create_object.isra.0+0x3a/0xa20 [ 1118.348190] should_failslab+0x5/0x10 [ 1118.349008] kmem_cache_alloc+0x5b/0x480 [ 1118.349901] create_object.isra.0+0x3a/0xa20 [ 1118.350867] ? kasan_unpoison+0x23/0x50 [ 1118.351746] kmem_cache_alloc+0x239/0x480 [ 1118.352653] vm_area_dup+0x78/0x290 [ 1118.353458] ? __lock_acquire+0xbac/0x6120 [ 1118.354415] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1118.355575] ? vm_area_alloc+0x110/0x110 [ 1118.356455] ? find_held_lock+0x2c/0x110 [ 1118.357340] ? lock_release+0x3b2/0x6f0 [ 1118.358207] ? get_mm_exe_file+0x137/0x2b0 [ 1118.359126] ? lock_downgrade+0x6d0/0x6d0 [ 1118.360052] ? get_mm_exe_file+0x159/0x2b0 [ 1118.360974] dup_mm+0x53f/0x1250 [ 1118.361735] ? replace_mm_exe_file+0x490/0x490 [ 1118.362746] ? __raw_spin_lock_init+0x36/0x110 [ 1118.363747] copy_process+0x384b/0x6cb0 [ 1118.364651] ? __cleanup_sighand+0xb0/0xb0 [ 1118.365580] ? lock_is_held_type+0xd7/0x130 [ 1118.366520] ? find_held_lock+0x2c/0x110 [ 1118.367403] ? kernel_clone+0x2f8/0xa60 [ 1118.368277] kernel_clone+0xe7/0xa60 [ 1118.369097] ? create_io_thread+0xf0/0xf0 [ 1118.370000] ? find_held_lock+0x2c/0x110 [ 1118.370892] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.372081] ? populate_seccomp_data+0x214/0x540 [ 1118.373109] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.374310] ? __seccomp_filter+0x5ab/0xff0 [ 1118.375237] ? wait_for_completion_io+0x270/0x270 [ 1118.376293] __do_sys_clone+0xc8/0x110 [ 1118.377142] ? __do_sys_vfork+0xd0/0xd0 [ 1118.378038] ? __secure_computing+0xb4/0x290 [ 1118.379003] do_syscall_64+0x3b/0x90 [ 1118.379821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.380933] RIP: 0033:0x7f466d7a6b19 [ 1118.381731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.385696] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1118.387332] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1118.388864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1118.390401] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.391930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.393458] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1118.395031] [ 1118.395701] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:30:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 28) [ 1118.435297] FAULT_INJECTION: forcing a failure. [ 1118.435297] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.437705] CPU: 0 PID: 7482 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.439446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.441838] Call Trace: [ 1118.442426] [ 1118.442902] dump_stack_lvl+0x8b/0xb3 [ 1118.443749] should_fail.cold+0x5/0xa [ 1118.444568] ? create_object.isra.0+0x3a/0xa20 [ 1118.445572] should_failslab+0x5/0x10 [ 1118.446388] kmem_cache_alloc+0x5b/0x480 [ 1118.447288] create_object.isra.0+0x3a/0xa20 [ 1118.448231] ? kasan_unpoison+0x23/0x50 [ 1118.449112] kmem_cache_alloc+0x239/0x480 [ 1118.450020] __alloc_file+0x21/0x240 [ 1118.450860] alloc_empty_file+0x6d/0x170 [ 1118.451752] path_openat+0xe1/0x28a0 [ 1118.452576] ? lock_chain_count+0x20/0x20 [ 1118.453479] ? filter_irq_stacks+0x90/0x90 [ 1118.454408] ? path_lookupat+0x850/0x850 [ 1118.455309] ? kasan_save_stack+0x2e/0x40 [ 1118.456199] ? kasan_save_stack+0x1e/0x40 [ 1118.457101] ? __kasan_kmalloc+0x81/0xa0 [ 1118.457968] ? security_prepare_creds+0x10a/0x180 [ 1118.459025] ? prepare_creds+0x505/0x6f0 [ 1118.459910] ? prepare_exec_creds+0xd/0x250 [ 1118.460859] do_filp_open+0x1aa/0x400 [ 1118.461678] ? may_open_dev+0xf0/0xf0 [ 1118.462526] ? find_held_lock+0x2c/0x110 [ 1118.463407] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1118.464541] ? lock_release+0x3b2/0x6f0 [ 1118.465402] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1118.466538] ? lock_is_held_type+0xd7/0x130 [ 1118.467472] ? find_held_lock+0x2c/0x110 [ 1118.468356] do_open_execat+0x116/0x740 [ 1118.469217] ? bprm_execve+0x44b/0x1960 [ 1118.470082] ? __ia32_sys_uselib+0x40/0x40 [ 1118.471009] ? do_raw_spin_lock+0x121/0x260 [ 1118.471946] ? rwlock_bug.part.0+0x90/0x90 [ 1118.472864] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.474070] bprm_execve+0x48a/0x1960 [ 1118.474918] ? count.constprop.0+0x1b3/0x280 [ 1118.475880] ? open_exec+0x70/0x70 [ 1118.476652] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1118.477823] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1118.479031] ? copy_string_kernel+0x4c8/0x580 [ 1118.480003] do_execveat_common+0x727/0x890 [ 1118.480947] ? bprm_execve+0x1960/0x1960 [ 1118.481838] __x64_sys_execveat+0xe0/0x120 [ 1118.482766] ? trace_hardirqs_on+0x38/0x190 [ 1118.483704] do_syscall_64+0x3b/0x90 [ 1118.484523] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.485639] RIP: 0033:0x7f1a25884b19 [ 1118.486457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.490414] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1118.492049] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1118.493581] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1118.495120] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.496651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1118.498197] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1118.499758] [ 1118.504882] loop4: detected capacity change from 0 to 256 [ 1118.518797] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1118.530044] FAULT_INJECTION: forcing a failure. [ 1118.530044] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.532595] CPU: 0 PID: 7485 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1118.534383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1118.536830] Call Trace: [ 1118.537389] [ 1118.537872] dump_stack_lvl+0x8b/0xb3 [ 1118.538739] should_fail.cold+0x5/0xa [ 1118.539574] ? vm_area_alloc+0x1c/0x110 [ 1118.540446] should_failslab+0x5/0x10 [ 1118.541268] kmem_cache_alloc+0x5b/0x480 [ 1118.542157] vm_area_alloc+0x1c/0x110 [ 1118.543000] alloc_bprm+0x33b/0x900 [ 1118.543796] ? __virt_addr_valid+0xe9/0x340 [ 1118.544755] do_execveat_common+0x232/0x890 [ 1118.545685] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1118.546899] ? bprm_execve+0x1960/0x1960 [ 1118.547788] __x64_sys_execveat+0xe0/0x120 [ 1118.548710] ? trace_hardirqs_on+0x38/0x190 [ 1118.549647] do_syscall_64+0x3b/0x90 [ 1118.550475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1118.551597] RIP: 0033:0x7f245182fb19 [ 1118.552403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1118.556411] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1118.558053] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1118.559595] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1118.561130] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1118.562678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.564213] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1118.565774] [ 1118.621501] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 10) [ 1132.457825] loop4: detected capacity change from 0 to 256 02:31:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1132.473962] FAULT_INJECTION: forcing a failure. [ 1132.473962] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.474193] FAULT_INJECTION: forcing a failure. [ 1132.474193] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.475535] CPU: 1 PID: 7500 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.478951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.480174] Call Trace: [ 1132.480449] [ 1132.480685] dump_stack_lvl+0x8b/0xb3 [ 1132.481114] should_fail.cold+0x5/0xa [ 1132.481529] ? apply_wqattrs_prepare+0xab/0x880 [ 1132.482046] should_failslab+0x5/0x10 [ 1132.482465] __kmalloc+0x72/0x440 [ 1132.482861] ? lock_is_held_type+0xd7/0x130 [ 1132.483344] apply_wqattrs_prepare+0xab/0x880 [ 1132.483846] apply_workqueue_attrs_locked+0xc1/0x140 [ 1132.484401] alloc_workqueue+0xb1a/0xeb0 [ 1132.484832] ? do_raw_spin_unlock+0x4f/0x210 [ 1132.485319] ? _raw_spin_unlock+0x24/0x40 [ 1132.485759] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1132.486310] ? __fget_files+0x28d/0x470 [ 1132.486750] ? loop_configure+0x62b/0x1950 [ 1132.487217] loop_configure+0x6ec/0x1950 [ 1132.487659] ? putname+0xfe/0x140 [ 1132.488042] lo_ioctl+0x7c5/0x18b0 [ 1132.488424] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1132.488958] ? loop_set_status_old+0x1b0/0x1b0 [ 1132.489449] ? avc_ss_reset+0x180/0x180 [ 1132.489879] ? __lock_acquire+0xbac/0x6120 [ 1132.490384] ? selinux_inode_getsecctx+0x90/0x90 [ 1132.490908] ? loop_set_status_old+0x1b0/0x1b0 [ 1132.491405] blkdev_ioctl+0x362/0x7f0 [ 1132.491817] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1132.492330] ? __x64_sys_ioctl+0x97/0x210 [ 1132.492775] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.493371] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1132.493880] __x64_sys_ioctl+0x196/0x210 [ 1132.494319] do_syscall_64+0x3b/0x90 [ 1132.494729] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.495290] RIP: 0033:0x7f6d56f6c8d7 [ 1132.495698] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.497670] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.498507] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1132.499273] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1132.500041] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1132.500809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1132.501570] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1132.502352] [ 1132.502611] CPU: 0 PID: 7499 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.504515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.507108] Call Trace: [ 1132.507699] [ 1132.508210] dump_stack_lvl+0x8b/0xb3 [ 1132.509113] should_fail.cold+0x5/0xa [ 1132.509999] ? create_object.isra.0+0x3a/0xa20 [ 1132.511084] should_failslab+0x5/0x10 [ 1132.511955] kmem_cache_alloc+0x5b/0x480 [ 1132.512900] create_object.isra.0+0x3a/0xa20 [ 1132.513922] ? kasan_unpoison+0x23/0x50 [ 1132.514862] __kmalloc_track_caller+0x25e/0x420 [ 1132.515930] ? kstrdup_const+0x53/0x80 [ 1132.516832] kstrdup+0x36/0x70 [ 1132.517575] kstrdup_const+0x53/0x80 [ 1132.518448] alloc_vfsmnt+0xb5/0x6b0 [ 1132.519317] clone_mnt+0x6d/0xdc0 [ 1132.520134] copy_tree+0x3ac/0xa50 [ 1132.520979] copy_mnt_ns+0x1a5/0xa90 [ 1132.521850] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1132.522961] ? kmem_cache_alloc+0x332/0x480 [ 1132.523952] create_new_namespaces+0xd6/0xb30 [ 1132.524992] copy_namespaces+0x391/0x450 [ 1132.525931] copy_process+0x27f2/0x6cb0 [ 1132.526858] ? lock_is_held_type+0xd7/0x130 [ 1132.527844] ? find_held_lock+0x2c/0x110 [ 1132.528796] ? __cleanup_sighand+0xb0/0xb0 [ 1132.529779] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1132.531041] ? _copy_from_user+0x139/0x170 [ 1132.532018] ? kernel_clone+0x2f8/0xa60 [ 1132.532935] kernel_clone+0xe7/0xa60 [ 1132.533793] ? lock_is_held_type+0xd7/0x130 [ 1132.534794] ? create_io_thread+0xf0/0xf0 [ 1132.535764] ? lock_is_held_type+0xd7/0x130 [ 1132.536755] __do_sys_clone3+0x1dd/0x2e0 [ 1132.537690] ? __ia32_sys_clone+0x150/0x150 [ 1132.538711] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.539960] ? vfs_write+0x188/0xae0 [ 1132.540818] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1132.542069] ? fput+0x2a/0x50 [ 1132.542825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.544005] do_syscall_64+0x3b/0x90 [ 1132.544862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.546030] RIP: 0033:0x7f82e43e1b19 [ 1132.546870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.550994] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1132.552694] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1132.554284] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1132.555891] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.557490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.559089] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1132.560718] [ 1132.563018] FAULT_INJECTION: forcing a failure. [ 1132.563018] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.564297] CPU: 1 PID: 7502 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.565181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.566400] Call Trace: [ 1132.566672] [ 1132.566928] dump_stack_lvl+0x8b/0xb3 [ 1132.567338] should_fail.cold+0x5/0xa [ 1132.567740] ? create_object.isra.0+0x3a/0xa20 [ 1132.568236] should_failslab+0x5/0x10 [ 1132.568646] kmem_cache_alloc+0x5b/0x480 [ 1132.569073] create_object.isra.0+0x3a/0xa20 [ 1132.569538] ? kasan_unpoison+0x23/0x50 [ 1132.569963] kmem_cache_alloc+0x239/0x480 [ 1132.570409] vm_area_alloc+0x1c/0x110 [ 1132.570839] alloc_bprm+0x33b/0x900 [ 1132.571230] ? __virt_addr_valid+0xe9/0x340 [ 1132.571706] do_execveat_common+0x232/0x890 [ 1132.572175] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1132.572771] ? bprm_execve+0x1960/0x1960 [ 1132.573225] __x64_sys_execveat+0xe0/0x120 [ 1132.573674] ? trace_hardirqs_on+0x38/0x190 [ 1132.574150] do_syscall_64+0x3b/0x90 [ 1132.574570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.575126] RIP: 0033:0x7f245182fb19 [ 1132.575541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.577538] RSP: 002b:00007f244ed84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1132.578365] RAX: ffffffffffffffda RBX: 00007f2451943020 RCX: 00007f245182fb19 [ 1132.579131] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1132.579905] RBP: 00007f244ed841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.580679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.581446] R13: 00007ffe6f6d4c7f R14: 00007f244ed84300 R15: 0000000000022000 [ 1132.582225] 02:31:09 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 70) 02:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 29) 02:31:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1132.595559] loop1: detected capacity change from 0 to 256 [ 1132.598991] FAULT_INJECTION: forcing a failure. [ 1132.598991] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.599285] audit: type=1326 audit(1643941869.551:68): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7495 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1132.600188] CPU: 1 PID: 7503 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.605593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.606785] Call Trace: [ 1132.607061] [ 1132.607305] dump_stack_lvl+0x8b/0xb3 [ 1132.607716] should_fail.cold+0x5/0xa [ 1132.608124] ? vm_area_dup+0x78/0x290 [ 1132.608537] should_failslab+0x5/0x10 [ 1132.608942] kmem_cache_alloc+0x5b/0x480 [ 1132.609378] vm_area_dup+0x78/0x290 [ 1132.609765] ? lock_release+0x3b2/0x6f0 [ 1132.610185] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1132.610424] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1132.610698] ? lock_downgrade+0x6d0/0x6d0 [ 1132.612988] ? copy_page_range+0x2cbb/0x47b0 [ 1132.613458] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1132.614008] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1132.614537] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1132.615077] ? vm_area_alloc+0x110/0x110 [ 1132.615526] ? find_held_lock+0x2c/0x110 [ 1132.615984] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.616588] ? selinux_vm_enough_memory+0x10f/0x170 [ 1132.617111] ? selinux_sctp_sk_clone+0x370/0x370 02:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f800002000400003000000000000", 0x23}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 29) [ 1132.617638] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.618435] ? percpu_counter_add_batch+0xb4/0x170 [ 1132.619007] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1132.619572] ? __vm_enough_memory+0x184/0x360 [ 1132.620076] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1132.620666] dup_mm+0x53f/0x1250 [ 1132.621056] ? replace_mm_exe_file+0x490/0x490 [ 1132.621573] ? __raw_spin_lock_init+0x36/0x110 [ 1132.622087] copy_process+0x384b/0x6cb0 [ 1132.622539] ? __cleanup_sighand+0xb0/0xb0 [ 1132.623015] ? lock_is_held_type+0xd7/0x130 [ 1132.623489] ? find_held_lock+0x2c/0x110 [ 1132.623934] ? kernel_clone+0x2f8/0xa60 [ 1132.624381] kernel_clone+0xe7/0xa60 [ 1132.624800] ? create_io_thread+0xf0/0xf0 [ 1132.625259] ? find_held_lock+0x2c/0x110 [ 1132.625696] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.626287] ? populate_seccomp_data+0x214/0x540 [ 1132.626799] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1132.627393] ? __seccomp_filter+0x5ab/0xff0 [ 1132.627515] FAT-fs (loop1): bogus number of FAT sectors [ 1132.627864] ? wait_for_completion_io+0x270/0x270 [ 1132.629095] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1132.629570] __do_sys_clone+0xc8/0x110 [ 1132.629591] ? __do_sys_vfork+0xd0/0xd0 [ 1132.631754] ? __secure_computing+0xb4/0x290 [ 1132.632252] do_syscall_64+0x3b/0x90 02:31:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004801) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xcc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfb}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1250592ac837192}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1ce}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) [ 1132.632659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.633337] RIP: 0033:0x7f466d7a6b19 [ 1132.633774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.635774] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1132.636593] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1132.637370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1132.638130] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.638905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.639671] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1132.640449] [ 1132.662814] FAULT_INJECTION: forcing a failure. [ 1132.662814] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.665551] CPU: 0 PID: 7507 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.667399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.669888] Call Trace: [ 1132.670456] [ 1132.670944] dump_stack_lvl+0x8b/0xb3 [ 1132.671798] should_fail.cold+0x5/0xa [ 1132.672644] ? security_file_alloc+0x34/0x170 [ 1132.673642] should_failslab+0x5/0x10 [ 1132.674499] kmem_cache_alloc+0x5b/0x480 [ 1132.675402] security_file_alloc+0x34/0x170 [ 1132.676359] __alloc_file+0xb6/0x240 [ 1132.677188] alloc_empty_file+0x6d/0x170 [ 1132.678088] path_openat+0xe1/0x28a0 [ 1132.678931] ? lock_chain_count+0x20/0x20 [ 1132.679844] ? filter_irq_stacks+0x90/0x90 [ 1132.680778] ? path_lookupat+0x850/0x850 [ 1132.681688] ? kasan_save_stack+0x2e/0x40 [ 1132.682614] ? kasan_save_stack+0x1e/0x40 [ 1132.683525] ? __kasan_kmalloc+0x81/0xa0 [ 1132.684417] ? security_prepare_creds+0x10a/0x180 [ 1132.685481] ? prepare_creds+0x505/0x6f0 [ 1132.686228] FAULT_INJECTION: forcing a failure. [ 1132.686228] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.686376] ? prepare_exec_creds+0xd/0x250 [ 1132.688545] do_filp_open+0x1aa/0x400 [ 1132.689370] ? may_open_dev+0xf0/0xf0 [ 1132.690206] ? find_held_lock+0x2c/0x110 [ 1132.691100] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1132.692236] ? lock_release+0x3b2/0x6f0 [ 1132.693095] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1132.694225] ? lock_is_held_type+0xd7/0x130 [ 1132.695171] ? find_held_lock+0x2c/0x110 [ 1132.696055] do_open_execat+0x116/0x740 [ 1132.696916] ? bprm_execve+0x44b/0x1960 [ 1132.697787] ? __ia32_sys_uselib+0x40/0x40 [ 1132.698717] ? do_raw_spin_lock+0x121/0x260 [ 1132.699659] ? rwlock_bug.part.0+0x90/0x90 [ 1132.700579] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.701786] bprm_execve+0x48a/0x1960 [ 1132.702632] ? count.constprop.0+0x1b3/0x280 [ 1132.703590] ? open_exec+0x70/0x70 [ 1132.704360] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1132.705547] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.706755] ? copy_string_kernel+0x4c8/0x580 [ 1132.707746] do_execveat_common+0x727/0x890 [ 1132.708680] ? bprm_execve+0x1960/0x1960 [ 1132.709574] __x64_sys_execveat+0xe0/0x120 [ 1132.710489] ? trace_hardirqs_on+0x38/0x190 [ 1132.711419] do_syscall_64+0x3b/0x90 [ 1132.712228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.713334] RIP: 0033:0x7f1a25884b19 [ 1132.714124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.718048] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1132.719673] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1132.721197] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1132.722721] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.724246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.725764] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1132.727324] [ 1132.727814] CPU: 1 PID: 7513 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.728734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.729965] Call Trace: [ 1132.730247] [ 1132.730495] dump_stack_lvl+0x8b/0xb3 [ 1132.730921] should_fail.cold+0x5/0xa [ 1132.731343] ? create_object.isra.0+0x3a/0xa20 [ 1132.731839] should_failslab+0x5/0x10 [ 1132.732252] kmem_cache_alloc+0x5b/0x480 [ 1132.732699] create_object.isra.0+0x3a/0xa20 [ 1132.733208] kmemleak_alloc_percpu+0xa0/0x100 [ 1132.733701] pcpu_alloc+0x7bf/0x1060 [ 1132.734124] alloc_vfsmnt+0xfd/0x6b0 [ 1132.734553] clone_mnt+0x6d/0xdc0 [ 1132.734955] copy_tree+0x3ac/0xa50 [ 1132.735362] copy_mnt_ns+0x1a5/0xa90 [ 1132.735773] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1132.736299] ? kmem_cache_alloc+0x332/0x480 [ 1132.736767] create_new_namespaces+0xd6/0xb30 [ 1132.737271] copy_namespaces+0x391/0x450 [ 1132.737716] copy_process+0x27f2/0x6cb0 [ 1132.738152] ? lock_is_held_type+0xd7/0x130 [ 1132.738622] ? find_held_lock+0x2c/0x110 [ 1132.739077] ? __cleanup_sighand+0xb0/0xb0 [ 1132.739546] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1132.740148] ? _copy_from_user+0x139/0x170 [ 1132.740611] ? kernel_clone+0x2f8/0xa60 [ 1132.741044] kernel_clone+0xe7/0xa60 [ 1132.741456] ? lock_is_held_type+0xd7/0x130 [ 1132.741920] ? create_io_thread+0xf0/0xf0 [ 1132.742398] ? lock_is_held_type+0xd7/0x130 [ 1132.742867] __do_sys_clone3+0x1dd/0x2e0 [ 1132.743316] ? __ia32_sys_clone+0x150/0x150 [ 1132.743799] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.744395] ? vfs_write+0x188/0xae0 [ 1132.744801] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1132.745404] ? fput+0x2a/0x50 [ 1132.745756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1132.746325] do_syscall_64+0x3b/0x90 [ 1132.746744] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.747308] RIP: 0033:0x7f82e43e1b19 [ 1132.747706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.749669] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1132.750497] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1132.751255] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1132.752017] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.752779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.753522] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1132.754309] 02:31:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 02:31:09 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 71) 02:31:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 30) [ 1132.790516] FAULT_INJECTION: forcing a failure. [ 1132.790516] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.791875] CPU: 1 PID: 7518 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.792773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.793967] Call Trace: [ 1132.794243] [ 1132.794482] dump_stack_lvl+0x8b/0xb3 [ 1132.794889] should_fail.cold+0x5/0xa [ 1132.795295] ? create_object.isra.0+0x3a/0xa20 [ 1132.795792] should_failslab+0x5/0x10 [ 1132.796207] kmem_cache_alloc+0x5b/0x480 [ 1132.796648] create_object.isra.0+0x3a/0xa20 [ 1132.797123] ? kasan_unpoison+0x23/0x50 [ 1132.797565] kmem_cache_alloc+0x239/0x480 [ 1132.798013] vm_area_dup+0x78/0x290 [ 1132.798420] ? lock_release+0x3b2/0x6f0 [ 1132.798850] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1132.799345] ? lock_downgrade+0x6d0/0x6d0 [ 1132.799790] ? copy_page_range+0x2cbb/0x47b0 [ 1132.800287] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1132.800834] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1132.801342] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1132.801870] ? vm_area_alloc+0x110/0x110 [ 1132.802328] ? find_held_lock+0x2c/0x110 [ 1132.802788] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.803397] ? selinux_vm_enough_memory+0x10f/0x170 [ 1132.803943] ? selinux_sctp_sk_clone+0x370/0x370 [ 1132.804482] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.805093] ? percpu_counter_add_batch+0xb4/0x170 [ 1132.805637] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1132.806193] ? __vm_enough_memory+0x184/0x360 [ 1132.806705] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1132.807296] dup_mm+0x53f/0x1250 [ 1132.807691] ? replace_mm_exe_file+0x490/0x490 [ 1132.808209] ? __raw_spin_lock_init+0x36/0x110 [ 1132.808730] copy_process+0x384b/0x6cb0 [ 1132.809189] ? __cleanup_sighand+0xb0/0xb0 [ 1132.809663] ? lock_is_held_type+0xd7/0x130 [ 1132.810138] ? find_held_lock+0x2c/0x110 [ 1132.810600] ? kernel_clone+0x2f8/0xa60 [ 1132.811054] kernel_clone+0xe7/0xa60 [ 1132.811475] ? create_io_thread+0xf0/0xf0 [ 1132.811933] ? find_held_lock+0x2c/0x110 [ 1132.812397] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.813010] ? populate_seccomp_data+0x214/0x540 [ 1132.813547] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1132.814161] ? __seccomp_filter+0x5ab/0xff0 [ 1132.814641] ? wait_for_completion_io+0x270/0x270 [ 1132.815181] __do_sys_clone+0xc8/0x110 [ 1132.815616] ? __do_sys_vfork+0xd0/0xd0 [ 1132.816078] ? __secure_computing+0xb4/0x290 [ 1132.816568] do_syscall_64+0x3b/0x90 [ 1132.816987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.817567] RIP: 0033:0x7f466d7a6b19 [ 1132.817984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.820015] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1132.820857] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1132.821649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1132.822445] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.823225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.824021] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1132.824818] [ 1132.835510] FAULT_INJECTION: forcing a failure. [ 1132.835510] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.836831] CPU: 1 PID: 7520 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.837710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.838923] Call Trace: [ 1132.839224] [ 1132.839465] dump_stack_lvl+0x8b/0xb3 [ 1132.839879] should_fail.cold+0x5/0xa [ 1132.840299] ? create_object.isra.0+0x3a/0xa20 [ 1132.840792] should_failslab+0x5/0x10 [ 1132.841196] kmem_cache_alloc+0x5b/0x480 [ 1132.841644] create_object.isra.0+0x3a/0xa20 [ 1132.842110] ? kasan_unpoison+0x23/0x50 [ 1132.842545] __kmalloc+0x25b/0x440 [ 1132.842934] apply_wqattrs_prepare+0xab/0x880 [ 1132.843421] apply_workqueue_attrs_locked+0xc1/0x140 [ 1132.843982] alloc_workqueue+0xb1a/0xeb0 [ 1132.844418] ? do_raw_spin_unlock+0x4f/0x210 [ 1132.844889] ? _raw_spin_unlock+0x24/0x40 02:31:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 11) 02:31:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1132.845346] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1132.846134] ? __fget_files+0x28d/0x470 [ 1132.846573] ? loop_configure+0x62b/0x1950 [ 1132.847033] loop_configure+0x6ec/0x1950 [ 1132.847475] ? putname+0xfe/0x140 [ 1132.847856] lo_ioctl+0x7c5/0x18b0 [ 1132.848240] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1132.848749] ? loop_set_status_old+0x1b0/0x1b0 [ 1132.849246] ? avc_ss_reset+0x180/0x180 [ 1132.849673] ? __lock_acquire+0xbac/0x6120 [ 1132.850163] ? selinux_inode_getsecctx+0x90/0x90 [ 1132.850686] ? loop_set_status_old+0x1b0/0x1b0 [ 1132.851180] blkdev_ioctl+0x362/0x7f0 [ 1132.851597] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1132.852104] ? __x64_sys_ioctl+0x97/0x210 [ 1132.852547] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1132.853129] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1132.853629] __x64_sys_ioctl+0x196/0x210 [ 1132.854070] do_syscall_64+0x3b/0x90 [ 1132.854485] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.855037] RIP: 0033:0x7f6d56f6c8d7 [ 1132.855440] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.857384] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1132.858172] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1132.858928] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1132.859709] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1132.860450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1132.861200] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1132.861979] [ 1132.902840] loop1: detected capacity change from 0 to 256 [ 1132.905992] loop2: detected capacity change from 0 to 4 [ 1132.907108] FAT-fs (loop1): bogus number of FAT sectors [ 1132.907713] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1132.921123] loop4: detected capacity change from 0 to 256 02:31:09 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 72) [ 1132.931312] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1132.935669] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 30) [ 1132.950251] FAULT_INJECTION: forcing a failure. [ 1132.950251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.951503] CPU: 1 PID: 7528 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1132.952387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1132.953574] Call Trace: [ 1132.953874] [ 1132.954109] dump_stack_lvl+0x8b/0xb3 [ 1132.954553] should_fail.cold+0x5/0xa [ 1132.954971] prepare_alloc_pages+0x17b/0x500 [ 1132.955445] ? mark_lock+0xfc/0x2e10 [ 1132.955849] __alloc_pages+0x131/0x4e0 [ 1132.956283] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1132.956935] ? lock_release+0x3b2/0x6f0 [ 1132.957372] alloc_pages+0x1a0/0x2f0 [ 1132.957773] get_zeroed_page+0x14/0xa0 [ 1132.958197] __pud_alloc+0x33/0x270 [ 1132.958588] __handle_mm_fault+0xc66/0x3570 [ 1132.959052] ? lock_is_held_type+0xd7/0x130 [ 1132.959531] ? __pmd_alloc+0x680/0x680 [ 1132.959988] handle_mm_fault+0x2e6/0xa20 [ 1132.960444] __get_user_pages+0x522/0x1130 [ 1132.960929] ? follow_page_mask+0x1800/0x1800 [ 1132.961426] ? lock_release+0x6f0/0x6f0 [ 1132.961877] ? lock_is_held_type+0xd7/0x130 [ 1132.962359] __get_user_pages_remote+0x18f/0x870 [ 1132.962896] ? down_read+0xd0/0x440 [ 1132.963303] get_user_pages_remote+0x63/0x90 [ 1132.963792] get_arg_page+0xee/0x2b0 [ 1132.964207] ? count.constprop.0+0x280/0x280 [ 1132.964685] ? count.constprop.0+0x1b3/0x280 [ 1132.965169] copy_string_kernel+0x1b4/0x580 [ 1132.965646] ? __virt_addr_valid+0xe9/0x340 [ 1132.966128] do_execveat_common+0x4da/0x890 [ 1132.966623] ? bprm_execve+0x1960/0x1960 [ 1132.967074] __x64_sys_execveat+0xe0/0x120 [ 1132.967542] ? trace_hardirqs_on+0x38/0x190 [ 1132.968013] do_syscall_64+0x3b/0x90 [ 1132.968429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1132.968988] RIP: 0033:0x7f245182fb19 [ 1132.969393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1132.971397] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1132.972235] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1132.973007] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1132.973784] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1132.974575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1132.975352] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1132.976141] [ 1133.007757] FAULT_INJECTION: forcing a failure. [ 1133.007757] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.010219] CPU: 0 PID: 7530 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1133.011954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1133.013737] FAULT_INJECTION: forcing a failure. [ 1133.013737] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.014312] Call Trace: [ 1133.014322] [ 1133.014334] dump_stack_lvl+0x8b/0xb3 [ 1133.017296] should_fail.cold+0x5/0xa [ 1133.018109] should_failslab+0x5/0x10 [ 1133.018917] __kmalloc_track_caller+0x79/0x420 [ 1133.019877] ? kstrdup_const+0x53/0x80 [ 1133.020703] kstrdup+0x36/0x70 [ 1133.021379] kstrdup_const+0x53/0x80 [ 1133.022157] alloc_vfsmnt+0xb5/0x6b0 [ 1133.022967] clone_mnt+0x6d/0xdc0 [ 1133.023707] copy_tree+0x3ac/0xa50 [ 1133.024475] copy_mnt_ns+0x1a5/0xa90 [ 1133.025260] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1133.026264] ? kmem_cache_alloc+0x332/0x480 [ 1133.027177] create_new_namespaces+0xd6/0xb30 [ 1133.028129] copy_namespaces+0x391/0x450 [ 1133.028982] copy_process+0x27f2/0x6cb0 [ 1133.029818] ? lock_is_held_type+0xd7/0x130 [ 1133.030722] ? find_held_lock+0x2c/0x110 [ 1133.031592] ? __cleanup_sighand+0xb0/0xb0 [ 1133.032490] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1133.033633] ? _copy_from_user+0x139/0x170 [ 1133.034540] ? kernel_clone+0x2f8/0xa60 [ 1133.035383] kernel_clone+0xe7/0xa60 [ 1133.036154] ? lock_is_held_type+0xd7/0x130 [ 1133.037046] ? create_io_thread+0xf0/0xf0 [ 1133.037935] ? lock_is_held_type+0xd7/0x130 [ 1133.038842] __do_sys_clone3+0x1dd/0x2e0 [ 1133.039694] ? __ia32_sys_clone+0x150/0x150 [ 1133.040616] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1133.041757] ? vfs_write+0x188/0xae0 [ 1133.042542] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1133.043677] ? fput+0x2a/0x50 [ 1133.044341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1133.045412] do_syscall_64+0x3b/0x90 [ 1133.046193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1133.047267] RIP: 0033:0x7f82e43e1b19 [ 1133.048031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.051782] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1133.053319] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1133.054791] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1133.056239] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.057683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.059137] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1133.060638] [ 1133.061177] CPU: 1 PID: 7532 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1133.062080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1133.063304] Call Trace: [ 1133.063580] [ 1133.063828] dump_stack_lvl+0x8b/0xb3 [ 1133.064255] should_fail.cold+0x5/0xa [ 1133.064674] ? create_object.isra.0+0x3a/0xa20 [ 1133.065177] should_failslab+0x5/0x10 [ 1133.065587] kmem_cache_alloc+0x5b/0x480 [ 1133.066037] create_object.isra.0+0x3a/0xa20 [ 1133.066522] ? kasan_unpoison+0x23/0x50 [ 1133.066944] kmem_cache_alloc+0x239/0x480 [ 1133.067408] security_file_alloc+0x34/0x170 [ 1133.067860] __alloc_file+0xb6/0x240 [ 1133.068274] alloc_empty_file+0x6d/0x170 [ 1133.068715] path_openat+0xe1/0x28a0 [ 1133.069129] ? lock_chain_count+0x20/0x20 [ 1133.069575] ? filter_irq_stacks+0x90/0x90 [ 1133.070044] ? path_lookupat+0x850/0x850 [ 1133.070492] ? kasan_save_stack+0x2e/0x40 [ 1133.070939] ? kasan_save_stack+0x1e/0x40 [ 1133.071371] ? __kasan_kmalloc+0x81/0xa0 [ 1133.071814] ? security_prepare_creds+0x10a/0x180 [ 1133.072322] ? prepare_creds+0x505/0x6f0 [ 1133.072763] ? prepare_exec_creds+0xd/0x250 [ 1133.073229] do_filp_open+0x1aa/0x400 [ 1133.073638] ? may_open_dev+0xf0/0xf0 [ 1133.074040] ? find_held_lock+0x2c/0x110 [ 1133.074490] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1133.075046] ? lock_release+0x3b2/0x6f0 [ 1133.075477] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1133.076016] ? lock_is_held_type+0xd7/0x130 [ 1133.076487] ? find_held_lock+0x2c/0x110 [ 1133.076921] do_open_execat+0x116/0x740 [ 1133.077353] ? bprm_execve+0x44b/0x1960 [ 1133.077780] ? __ia32_sys_uselib+0x40/0x40 [ 1133.078237] ? do_raw_spin_lock+0x121/0x260 [ 1133.078712] ? rwlock_bug.part.0+0x90/0x90 [ 1133.079178] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1133.079772] bprm_execve+0x48a/0x1960 [ 1133.080175] ? count.constprop.0+0x1b3/0x280 [ 1133.080658] ? open_exec+0x70/0x70 [ 1133.081053] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1133.081652] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1133.082215] ? copy_string_kernel+0x4c8/0x580 [ 1133.082732] do_execveat_common+0x727/0x890 [ 1133.083202] ? bprm_execve+0x1960/0x1960 [ 1133.083660] __x64_sys_execveat+0xe0/0x120 [ 1133.084129] ? trace_hardirqs_on+0x38/0x190 [ 1133.084600] do_syscall_64+0x3b/0x90 [ 1133.085015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1133.085590] RIP: 0033:0x7f1a25884b19 [ 1133.085996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.087870] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1133.088695] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1133.089461] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1133.090225] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.090993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1133.091769] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1133.092552] [ 1133.155868] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 31) [ 1147.766503] loop1: detected capacity change from 0 to 256 02:31:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 02:31:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004801) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xcc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xfb}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3f}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1250592ac837192}]}, 0x44}, 0x1, 0x0, 0x0, 0x98}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1ce}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) 02:31:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 31) 02:31:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 12) 02:31:24 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 73) [ 1147.794013] FAT-fs (loop1): bogus number of FAT sectors [ 1147.794663] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1147.805754] FAULT_INJECTION: forcing a failure. [ 1147.805754] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.807011] CPU: 1 PID: 7552 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1147.807885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.809069] Call Trace: [ 1147.809338] [ 1147.809576] dump_stack_lvl+0x8b/0xb3 [ 1147.809983] should_fail.cold+0x5/0xa [ 1147.810396] ? alloc_workqueue_attrs+0x38/0x80 [ 1147.810896] should_failslab+0x5/0x10 [ 1147.811310] kmem_cache_alloc_trace+0x55/0x3c0 [ 1147.811816] alloc_workqueue_attrs+0x38/0x80 [ 1147.812298] apply_wqattrs_prepare+0xb3/0x880 [ 1147.812797] apply_workqueue_attrs_locked+0xc1/0x140 [ 1147.813354] alloc_workqueue+0xb1a/0xeb0 [ 1147.813793] ? do_raw_spin_unlock+0x4f/0x210 [ 1147.814278] ? _raw_spin_unlock+0x24/0x40 [ 1147.814752] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1147.815313] ? __fget_files+0x28d/0x470 [ 1147.815748] ? loop_configure+0x62b/0x1950 [ 1147.816211] loop_configure+0x6ec/0x1950 [ 1147.816654] ? putname+0xfe/0x140 [ 1147.817043] lo_ioctl+0x7c5/0x18b0 [ 1147.817439] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1147.817970] ? loop_set_status_old+0x1b0/0x1b0 [ 1147.818478] ? avc_ss_reset+0x180/0x180 [ 1147.818927] ? __lock_acquire+0xbac/0x6120 [ 1147.819427] ? selinux_inode_getsecctx+0x90/0x90 [ 1147.819955] ? loop_set_status_old+0x1b0/0x1b0 [ 1147.820460] blkdev_ioctl+0x362/0x7f0 [ 1147.820876] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1147.821398] ? __x64_sys_ioctl+0x97/0x210 [ 1147.821851] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1147.822455] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1147.822986] __x64_sys_ioctl+0x196/0x210 [ 1147.823436] do_syscall_64+0x3b/0x90 [ 1147.823847] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.824415] RIP: 0033:0x7f6d56f6c8d7 [ 1147.824821] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.826828] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1147.827656] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1147.828431] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1147.829206] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1147.829974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1147.830755] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1147.831543] [ 1147.842130] FAULT_INJECTION: forcing a failure. [ 1147.842130] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.844754] CPU: 0 PID: 7556 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1147.846429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.848771] Call Trace: [ 1147.849315] [ 1147.849785] dump_stack_lvl+0x8b/0xb3 [ 1147.850593] should_fail.cold+0x5/0xa [ 1147.851409] ? anon_vma_clone+0xdc/0x580 [ 1147.852261] should_failslab+0x5/0x10 [ 1147.853042] kmem_cache_alloc+0x5b/0x480 [ 1147.853901] anon_vma_clone+0xdc/0x580 [ 1147.854744] anon_vma_fork+0x82/0x6a0 [ 1147.855536] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 02:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000", 0x24}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1147.856560] ? __vm_enough_memory+0x184/0x360 [ 1147.857626] dup_mm+0x91b/0x1250 [ 1147.858357] ? replace_mm_exe_file+0x490/0x490 [ 1147.859316] ? __raw_spin_lock_init+0x36/0x110 [ 1147.860270] copy_process+0x384b/0x6cb0 [ 1147.861132] ? __cleanup_sighand+0xb0/0xb0 [ 1147.862016] ? lock_is_held_type+0xd7/0x130 [ 1147.862920] ? find_held_lock+0x2c/0x110 [ 1147.863764] ? kernel_clone+0x2f8/0xa60 [ 1147.864594] kernel_clone+0xe7/0xa60 [ 1147.865375] ? create_io_thread+0xf0/0xf0 [ 1147.866231] ? find_held_lock+0x2c/0x110 [ 1147.867081] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1147.868202] ? populate_seccomp_data+0x214/0x540 [ 1147.869175] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1147.870305] ? __seccomp_filter+0x5ab/0xff0 [ 1147.871190] ? wait_for_completion_io+0x270/0x270 [ 1147.872190] __do_sys_clone+0xc8/0x110 [ 1147.872994] ? __do_sys_vfork+0xd0/0xd0 [ 1147.873846] ? __secure_computing+0xb4/0x290 [ 1147.874925] do_syscall_64+0x3b/0x90 [ 1147.875699] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.876745] RIP: 0033:0x7f466d7a6b19 [ 1147.877621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.881349] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1147.882886] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1147.884325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1147.885763] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.886778] loop1: detected capacity change from 0 to 256 [ 1147.887214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.887231] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1147.890718] [ 1147.891802] FAT-fs (loop1): bogus number of FAT sectors [ 1147.892497] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1147.895211] loop4: detected capacity change from 0 to 256 [ 1147.898653] FAULT_INJECTION: forcing a failure. [ 1147.898653] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.899894] CPU: 1 PID: 7559 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1147.900806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.901387] FAULT_INJECTION: forcing a failure. [ 1147.901387] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.902022] Call Trace: [ 1147.902028] [ 1147.902034] dump_stack_lvl+0x8b/0xb3 [ 1147.905209] should_fail.cold+0x5/0xa [ 1147.905643] ? alloc_vfsmnt+0x23/0x6b0 [ 1147.906085] should_failslab+0x5/0x10 [ 1147.906511] kmem_cache_alloc+0x5b/0x480 [ 1147.906981] ? lock_release+0x3b2/0x6f0 [ 1147.907422] alloc_vfsmnt+0x23/0x6b0 [ 1147.907844] clone_mnt+0x6d/0xdc0 [ 1147.908246] copy_tree+0x3ac/0xa50 [ 1147.908658] copy_mnt_ns+0x1a5/0xa90 [ 1147.909075] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1147.909617] ? kmem_cache_alloc+0x332/0x480 [ 1147.910108] create_new_namespaces+0xd6/0xb30 [ 1147.910629] copy_namespaces+0x391/0x450 [ 1147.911080] copy_process+0x27f2/0x6cb0 [ 1147.911527] ? lock_is_held_type+0xd7/0x130 [ 1147.912005] ? find_held_lock+0x2c/0x110 [ 1147.912460] ? __cleanup_sighand+0xb0/0xb0 [ 1147.912918] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1147.913533] ? _copy_from_user+0x139/0x170 [ 1147.914012] ? kernel_clone+0x2f8/0xa60 [ 1147.914461] kernel_clone+0xe7/0xa60 [ 1147.914883] ? lock_is_held_type+0xd7/0x130 [ 1147.915372] ? create_io_thread+0xf0/0xf0 [ 1147.915841] ? lock_is_held_type+0xd7/0x130 [ 1147.916329] __do_sys_clone3+0x1dd/0x2e0 [ 1147.916782] ? __ia32_sys_clone+0x150/0x150 [ 1147.917276] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1147.917874] ? vfs_write+0x188/0xae0 [ 1147.918290] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1147.918918] ? fput+0x2a/0x50 [ 1147.919274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1147.919843] do_syscall_64+0x3b/0x90 [ 1147.920278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.920858] RIP: 0033:0x7f82e43e1b19 [ 1147.921283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.923374] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1147.924238] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1147.925053] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1147.925868] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.926688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.927499] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1147.928332] [ 1147.928585] CPU: 0 PID: 7555 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1147.930276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1147.932568] Call Trace: [ 1147.933093] [ 1147.933551] dump_stack_lvl+0x8b/0xb3 [ 1147.934346] should_fail.cold+0x5/0xa [ 1147.935147] ? create_object.isra.0+0x3a/0xa20 [ 1147.936093] should_failslab+0x5/0x10 [ 1147.936875] kmem_cache_alloc+0x5b/0x480 [ 1147.937717] create_object.isra.0+0x3a/0xa20 [ 1147.938626] ? kasan_unpoison+0x23/0x50 [ 1147.939461] kmem_cache_alloc+0x239/0x480 [ 1147.940321] security_file_alloc+0x34/0x170 [ 1147.941214] __alloc_file+0xb6/0x240 [ 1147.941983] alloc_empty_file+0x6d/0x170 [ 1147.942849] path_openat+0xe1/0x28a0 [ 1147.943632] ? lock_chain_count+0x20/0x20 [ 1147.944484] ? filter_irq_stacks+0x90/0x90 [ 1147.945359] ? path_lookupat+0x850/0x850 [ 1147.946210] ? kasan_save_stack+0x2e/0x40 [ 1147.947068] ? kasan_save_stack+0x1e/0x40 [ 1147.947919] ? __kasan_kmalloc+0x81/0xa0 [ 1147.948750] ? security_prepare_creds+0x10a/0x180 [ 1147.949735] ? prepare_creds+0x505/0x6f0 [ 1147.950572] ? prepare_exec_creds+0xd/0x250 [ 1147.951491] do_filp_open+0x1aa/0x400 [ 1147.952264] ? may_open_dev+0xf0/0xf0 [ 1147.953055] ? find_held_lock+0x2c/0x110 [ 1147.953884] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1147.954960] ? lock_release+0x3b2/0x6f0 [ 1147.955775] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1147.956842] ? lock_is_held_type+0xd7/0x130 [ 1147.957722] ? find_held_lock+0x2c/0x110 02:31:24 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000025c0), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYBLOB="7c7599fb115d2ac372dd9a59b981eb66e8880592d1afd007bb0b68985136fa0dfc6a57dc92aabfe84dfa57e119d2c5"]) syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1c6, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000015c0)=""/4096, &(0x7f0000000100)=0x1000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0xffff, 0x631, 0xfff, 0x9, 0x80000000}) [ 1147.958559] do_open_execat+0x116/0x740 [ 1147.959525] ? bprm_execve+0x44b/0x1960 [ 1147.960338] ? __ia32_sys_uselib+0x40/0x40 [ 1147.961195] ? do_raw_spin_lock+0x121/0x260 [ 1147.962077] ? rwlock_bug.part.0+0x90/0x90 [ 1147.962970] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1147.964107] bprm_execve+0x48a/0x1960 [ 1147.964884] ? count.constprop.0+0x1b3/0x280 [ 1147.965780] ? open_exec+0x70/0x70 [ 1147.966496] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1147.967618] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1147.968725] ? copy_string_kernel+0x4c8/0x580 [ 1147.969651] do_execveat_common+0x727/0x890 [ 1147.970532] ? bprm_execve+0x1960/0x1960 [ 1147.971393] __x64_sys_execveat+0xe0/0x120 [ 1147.972251] ? trace_hardirqs_on+0x38/0x190 [ 1147.973127] do_syscall_64+0x3b/0x90 [ 1147.973888] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1147.974946] RIP: 0033:0x7f1a25884b19 [ 1147.975695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1147.979405] RSP: 002b:00007f1a22dfa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1147.980944] RAX: ffffffffffffffda RBX: 00007f1a25997f60 RCX: 00007f1a25884b19 [ 1147.982383] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1147.983841] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1147.985279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1147.986728] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1147.988193] 02:31:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1148.001276] 9pnet: Could not find request transport: f0xffffffffffffffff|u™û]*ÃrÝšY¹ëf舒ѯл h˜Q6úüjWÜ’ª¿èMúWáÒÅ 02:31:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 32) [ 1148.005741] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1148.009422] FAULT_INJECTION: forcing a failure. [ 1148.009422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1148.011906] CPU: 0 PID: 7562 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1148.013582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1148.015899] Call Trace: [ 1148.016421] [ 1148.016876] dump_stack_lvl+0x8b/0xb3 [ 1148.017678] should_fail.cold+0x5/0xa [ 1148.018468] prepare_alloc_pages+0x17b/0x500 [ 1148.019393] __alloc_pages+0x131/0x4e0 [ 1148.020193] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1148.021434] ? find_held_lock+0x2c/0x110 [ 1148.022269] ? lock_downgrade+0x6d0/0x6d0 [ 1148.023102] ? do_raw_spin_lock+0x121/0x260 [ 1148.023993] alloc_pages+0x1a0/0x2f0 [ 1148.024767] __pmd_alloc+0x37/0x680 [ 1148.025508] __handle_mm_fault+0xe78/0x3570 [ 1148.026385] ? lock_is_held_type+0xd7/0x130 [ 1148.027277] ? __pmd_alloc+0x680/0x680 [ 1148.028100] handle_mm_fault+0x2e6/0xa20 [ 1148.028930] __get_user_pages+0x522/0x1130 [ 1148.029813] ? follow_page_mask+0x1800/0x1800 [ 1148.030740] ? lock_release+0x6f0/0x6f0 [ 1148.031558] ? lock_is_held_type+0xd7/0x130 [ 1148.032439] __get_user_pages_remote+0x18f/0x870 [ 1148.033409] ? down_read+0xd0/0x440 [ 1148.034163] get_user_pages_remote+0x63/0x90 [ 1148.035073] get_arg_page+0xee/0x2b0 [ 1148.035840] ? count.constprop.0+0x280/0x280 [ 1148.036731] ? count.constprop.0+0x1b3/0x280 [ 1148.037632] copy_string_kernel+0x1b4/0x580 [ 1148.038503] ? __virt_addr_valid+0xe9/0x340 [ 1148.039413] do_execveat_common+0x4da/0x890 [ 1148.040289] ? bprm_execve+0x1960/0x1960 [ 1148.041134] __x64_sys_execveat+0xe0/0x120 [ 1148.041988] ? trace_hardirqs_on+0x38/0x190 [ 1148.042873] do_syscall_64+0x3b/0x90 [ 1148.043640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.044684] RIP: 0033:0x7f245182fb19 [ 1148.045435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.049157] RSP: 002b:00007f244ed84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1148.050795] RAX: ffffffffffffffda RBX: 00007f2451943020 RCX: 00007f245182fb19 [ 1148.052237] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1148.053678] RBP: 00007f244ed841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.055136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.056575] R13: 00007ffe6f6d4c7f R14: 00007f244ed84300 R15: 0000000000022000 [ 1148.058082] [ 1148.065766] 9pnet: Could not find request transport: f0xffffffffffffffff|u™û]*ÃrÝšY¹ëf舒ѯл h˜Q6úüjWÜ’ª¿èMúWáÒÅ [ 1148.066514] audit: type=1326 audit(1643941885.019:69): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7541 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1148.101420] FAULT_INJECTION: forcing a failure. [ 1148.101420] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.102751] CPU: 1 PID: 7571 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1148.103666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1148.104922] Call Trace: [ 1148.105205] [ 1148.105455] dump_stack_lvl+0x8b/0xb3 [ 1148.105889] should_fail.cold+0x5/0xa [ 1148.106311] ? create_object.isra.0+0x3a/0xa20 [ 1148.106848] should_failslab+0x5/0x10 [ 1148.107264] kmem_cache_alloc+0x5b/0x480 [ 1148.107724] create_object.isra.0+0x3a/0xa20 [ 1148.108216] ? kasan_unpoison+0x23/0x50 [ 1148.108662] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1148.109181] alloc_workqueue_attrs+0x38/0x80 [ 1148.109668] apply_wqattrs_prepare+0xb3/0x880 [ 1148.110186] apply_workqueue_attrs_locked+0xc1/0x140 [ 1148.110764] alloc_workqueue+0xb1a/0xeb0 [ 1148.111217] ? do_raw_spin_unlock+0x4f/0x210 [ 1148.111700] ? _raw_spin_unlock+0x24/0x40 [ 1148.112158] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1148.112714] ? __fget_files+0x28d/0x470 [ 1148.113155] ? loop_configure+0x62b/0x1950 [ 1148.113629] loop_configure+0x6ec/0x1950 [ 1148.114077] ? putname+0xfe/0x140 [ 1148.114474] lo_ioctl+0x7c5/0x18b0 [ 1148.114882] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1148.115423] ? loop_set_status_old+0x1b0/0x1b0 [ 1148.115927] ? avc_ss_reset+0x180/0x180 [ 1148.116373] ? __lock_acquire+0xbac/0x6120 [ 1148.116885] ? selinux_inode_getsecctx+0x90/0x90 [ 1148.117419] ? loop_set_status_old+0x1b0/0x1b0 [ 1148.117937] blkdev_ioctl+0x362/0x7f0 [ 1148.118360] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1148.118895] ? __x64_sys_ioctl+0x97/0x210 [ 1148.119359] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1148.119970] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1148.120470] __x64_sys_ioctl+0x196/0x210 [ 1148.120906] do_syscall_64+0x3b/0x90 [ 1148.121308] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.121848] RIP: 0033:0x7f6d56f6c8d7 [ 1148.122268] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.124226] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1148.125031] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1148.125778] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1148.126521] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1148.127270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1148.128006] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1148.128768] 02:31:25 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:31:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:25 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 74) 02:31:25 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresuid(0x0, r1, r1) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x0, 0x62, 0x64, 0xf4caf8a687896f15, 0x62, 0x65, 0x32], 0x2d, [0x34, 0x30, 0x38, 0x63], 0x2d, [0x30, 0x33, 0x66, 0x65], 0x2d, [0x32, 0x66, 0x30, 0x64], 0x2d, [0x64, 0x63, 0x62, 0x62, 0x64, 0x34, 0x38, 0x36]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@subj_role={'subj_role', 0x3d, '!,\\'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@uid_eq={'uid', 0x3d, r1}}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) [ 1148.168442] tmpfs: Unknown parameter 'fsuuid' [ 1148.171218] FAULT_INJECTION: forcing a failure. [ 1148.171218] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.171236] CPU: 1 PID: 7578 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 02:31:25 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 75) [ 1148.171250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1148.171258] Call Trace: [ 1148.171263] [ 1148.171268] dump_stack_lvl+0x8b/0xb3 [ 1148.171291] should_fail.cold+0x5/0xa [ 1148.171309] ? create_object.isra.0+0x3a/0xa20 [ 1148.171330] should_failslab+0x5/0x10 02:31:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 13) [ 1148.171343] kmem_cache_alloc+0x5b/0x480 [ 1148.171364] create_object.isra.0+0x3a/0xa20 [ 1148.171385] ? kasan_unpoison+0x23/0x50 [ 1148.171408] kmem_cache_alloc+0x239/0x480 [ 1148.171427] alloc_vfsmnt+0x23/0x6b0 [ 1148.171446] clone_mnt+0x6d/0xdc0 [ 1148.171470] copy_tree+0x3ac/0xa50 [ 1148.171496] copy_mnt_ns+0x1a5/0xa90 [ 1148.171515] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1148.171531] ? kmem_cache_alloc+0x332/0x480 [ 1148.171551] create_new_namespaces+0xd6/0xb30 [ 1148.171576] copy_namespaces+0x391/0x450 [ 1148.171595] copy_process+0x27f2/0x6cb0 [ 1148.171614] ? lock_is_held_type+0xd7/0x130 [ 1148.171628] ? find_held_lock+0x2c/0x110 [ 1148.171655] ? __cleanup_sighand+0xb0/0xb0 [ 1148.171679] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1148.171696] ? _copy_from_user+0x139/0x170 [ 1148.171715] ? kernel_clone+0x2f8/0xa60 [ 1148.171735] kernel_clone+0xe7/0xa60 [ 1148.171752] ? lock_is_held_type+0xd7/0x130 [ 1148.171766] ? create_io_thread+0xf0/0xf0 [ 1148.171794] ? lock_is_held_type+0xd7/0x130 [ 1148.171812] __do_sys_clone3+0x1dd/0x2e0 [ 1148.171831] ? __ia32_sys_clone+0x150/0x150 [ 1148.171861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1148.171877] ? vfs_write+0x188/0xae0 [ 1148.171895] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1148.171912] ? fput+0x2a/0x50 [ 1148.171934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.171954] do_syscall_64+0x3b/0x90 [ 1148.171973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.171987] RIP: 0033:0x7f82e43e1b19 [ 1148.171996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.172008] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1148.172022] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1148.172031] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1148.172039] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.172047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.172055] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1148.172077] [ 1148.179678] audit: type=1326 audit(1643941885.133:70): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7573 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1148.229968] FAULT_INJECTION: forcing a failure. [ 1148.229968] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.229987] CPU: 1 PID: 7583 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1148.230001] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1148.230010] Call Trace: [ 1148.230014] [ 1148.230019] dump_stack_lvl+0x8b/0xb3 [ 1148.230047] should_fail.cold+0x5/0xa [ 1148.230067] should_failslab+0x5/0x10 [ 1148.230079] __kmalloc_track_caller+0x79/0x420 [ 1148.230094] ? kstrdup_const+0x53/0x80 [ 1148.230112] kstrdup+0x36/0x70 [ 1148.230125] kstrdup_const+0x53/0x80 [ 1148.230139] alloc_vfsmnt+0xb5/0x6b0 [ 1148.230157] clone_mnt+0x6d/0xdc0 [ 1148.230179] copy_tree+0x3ac/0xa50 [ 1148.230205] copy_mnt_ns+0x1a5/0xa90 [ 1148.230224] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1148.230239] ? kmem_cache_alloc+0x332/0x480 [ 1148.230257] create_new_namespaces+0xd6/0xb30 [ 1148.230282] copy_namespaces+0x391/0x450 [ 1148.230301] copy_process+0x27f2/0x6cb0 [ 1148.230318] ? lock_is_held_type+0xd7/0x130 [ 1148.230333] ? find_held_lock+0x2c/0x110 [ 1148.230360] ? __cleanup_sighand+0xb0/0xb0 [ 1148.230383] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1148.230400] ? _copy_from_user+0x139/0x170 [ 1148.230418] ? kernel_clone+0x2f8/0xa60 [ 1148.230437] kernel_clone+0xe7/0xa60 [ 1148.230455] ? lock_is_held_type+0xd7/0x130 [ 1148.230469] ? create_io_thread+0xf0/0xf0 [ 1148.230497] ? lock_is_held_type+0xd7/0x130 [ 1148.230514] __do_sys_clone3+0x1dd/0x2e0 [ 1148.230533] ? __ia32_sys_clone+0x150/0x150 [ 1148.230562] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1148.230578] ? vfs_write+0x188/0xae0 [ 1148.230598] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1148.230620] ? fput+0x2a/0x50 [ 1148.230643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.230663] do_syscall_64+0x3b/0x90 [ 1148.230682] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.230697] RIP: 0033:0x7f82e43e1b19 [ 1148.230706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.230718] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1148.230732] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1148.230740] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1148.230749] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.230757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.230765] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1148.230787] [ 1148.244356] loop2: detected capacity change from 0 to 4 [ 1148.256402] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1148.286287] loop4: detected capacity change from 0 to 256 [ 1148.303459] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1148.321492] FAULT_INJECTION: forcing a failure. [ 1148.321492] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.321511] CPU: 1 PID: 7587 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1148.321526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1148.321534] Call Trace: [ 1148.321539] [ 1148.321544] dump_stack_lvl+0x8b/0xb3 [ 1148.321570] should_fail.cold+0x5/0xa [ 1148.321588] ? __pmd_alloc+0x94/0x680 [ 1148.321603] should_failslab+0x5/0x10 [ 1148.321617] kmem_cache_alloc+0x5b/0x480 [ 1148.321632] ? alloc_pages+0x1a8/0x2f0 [ 1148.321655] __pmd_alloc+0x94/0x680 [ 1148.321669] __handle_mm_fault+0xe78/0x3570 [ 1148.321684] ? lock_is_held_type+0xd7/0x130 [ 1148.321700] ? __pmd_alloc+0x680/0x680 [ 1148.321730] handle_mm_fault+0x2e6/0xa20 [ 1148.321746] __get_user_pages+0x522/0x1130 [ 1148.321774] ? follow_page_mask+0x1800/0x1800 [ 1148.321793] ? lock_release+0x6f0/0x6f0 [ 1148.321815] ? lock_is_held_type+0xd7/0x130 [ 1148.321832] __get_user_pages_remote+0x18f/0x870 [ 1148.321853] ? down_read+0xd0/0x440 [ 1148.321874] get_user_pages_remote+0x63/0x90 [ 1148.321896] get_arg_page+0xee/0x2b0 [ 1148.321914] ? count.constprop.0+0x280/0x280 [ 1148.321932] ? count.constprop.0+0x1b3/0x280 [ 1148.321951] copy_string_kernel+0x1b4/0x580 [ 1148.321967] ? __virt_addr_valid+0xe9/0x340 [ 1148.321991] do_execveat_common+0x4da/0x890 [ 1148.322009] ? bprm_execve+0x1960/0x1960 [ 1148.322039] __x64_sys_execveat+0xe0/0x120 [ 1148.322055] ? trace_hardirqs_on+0x38/0x190 [ 1148.322070] do_syscall_64+0x3b/0x90 [ 1148.322090] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1148.322104] RIP: 0033:0x7f245182fb19 [ 1148.322113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.322127] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1148.322140] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1148.322149] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1148.322158] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.322166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1148.322174] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1148.322196] [ 1148.355021] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1148.434580] tmpfs: Unknown parameter 'fsuuid' 02:31:41 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:41 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1164.664249] FAULT_INJECTION: forcing a failure. [ 1164.664249] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.664515] FAULT_INJECTION: forcing a failure. [ 1164.664515] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.666604] CPU: 1 PID: 7597 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.669406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.671716] Call Trace: [ 1164.672226] [ 1164.672682] dump_stack_lvl+0x8b/0xb3 [ 1164.673463] should_fail.cold+0x5/0xa [ 1164.674242] ? lock_downgrade+0x6d0/0x6d0 [ 1164.675109] ? create_object.isra.0+0x3a/0xa20 [ 1164.676065] should_failslab+0x5/0x10 [ 1164.676849] kmem_cache_alloc+0x5b/0x480 [ 1164.677685] create_object.isra.0+0x3a/0xa20 [ 1164.678593] ? kasan_unpoison+0x23/0x50 [ 1164.679431] kmem_cache_alloc+0x239/0x480 [ 1164.680298] anon_vma_clone+0xdc/0x580 [ 1164.681109] anon_vma_fork+0x82/0x6a0 [ 1164.681894] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1164.682912] ? __vm_enough_memory+0x184/0x360 [ 1164.683828] dup_mm+0x91b/0x1250 [ 1164.684568] ? replace_mm_exe_file+0x490/0x490 [ 1164.685502] ? __raw_spin_lock_init+0x36/0x110 [ 1164.686436] copy_process+0x384b/0x6cb0 [ 1164.687294] ? __cleanup_sighand+0xb0/0xb0 [ 1164.688163] ? lock_is_held_type+0xd7/0x130 [ 1164.689038] ? find_held_lock+0x2c/0x110 [ 1164.689870] ? kernel_clone+0x2f8/0xa60 [ 1164.690694] kernel_clone+0xe7/0xa60 [ 1164.691486] ? create_io_thread+0xf0/0xf0 [ 1164.692321] ? find_held_lock+0x2c/0x110 [ 1164.693164] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1164.694271] ? populate_seccomp_data+0x214/0x540 [ 1164.695243] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1164.696357] ? __seccomp_filter+0x5ab/0xff0 [ 1164.697231] ? wait_for_completion_io+0x270/0x270 [ 1164.698214] __do_sys_clone+0xc8/0x110 [ 1164.699028] ? __do_sys_vfork+0xd0/0xd0 [ 1164.699865] ? __secure_computing+0xb4/0x290 [ 1164.700769] do_syscall_64+0x3b/0x90 [ 1164.701538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.702599] RIP: 0033:0x7f466d7a6b19 [ 1164.703357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.707070] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1164.708628] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1164.710041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1164.711488] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.712919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.714333] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1164.715804] [ 1164.716265] CPU: 0 PID: 7600 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.717213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.718497] Call Trace: [ 1164.718788] [ 1164.719044] dump_stack_lvl+0x8b/0xb3 [ 1164.719491] should_fail.cold+0x5/0xa [ 1164.719929] ? alloc_workqueue_attrs+0x38/0x80 [ 1164.720459] should_failslab+0x5/0x10 [ 1164.720898] kmem_cache_alloc_trace+0x55/0x3c0 [ 1164.721433] alloc_workqueue_attrs+0x38/0x80 [ 1164.721936] apply_wqattrs_prepare+0xbb/0x880 [ 1164.722458] apply_workqueue_attrs_locked+0xc1/0x140 [ 1164.723047] alloc_workqueue+0xb1a/0xeb0 [ 1164.723518] ? do_raw_spin_unlock+0x4f/0x210 [ 1164.724027] ? _raw_spin_unlock+0x24/0x40 [ 1164.724473] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1164.725037] ? __fget_files+0x28d/0x470 [ 1164.725483] ? loop_configure+0x62b/0x1950 [ 1164.725961] loop_configure+0x6ec/0x1950 [ 1164.726415] ? putname+0xfe/0x140 [ 1164.726812] lo_ioctl+0x7c5/0x18b0 [ 1164.727225] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1164.727757] ? loop_set_status_old+0x1b0/0x1b0 [ 1164.728269] ? avc_ss_reset+0x180/0x180 [ 1164.728716] ? __lock_acquire+0xbac/0x6120 [ 1164.729205] ? lock_is_held_type+0xd7/0x130 [ 1164.729689] ? selinux_inode_getsecctx+0x90/0x90 [ 1164.730227] ? loop_set_status_old+0x1b0/0x1b0 [ 1164.730739] blkdev_ioctl+0x362/0x7f0 [ 1164.731179] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1164.731703] ? __x64_sys_ioctl+0x97/0x210 [ 1164.732175] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1164.732783] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1164.733319] __x64_sys_ioctl+0x196/0x210 [ 1164.733776] do_syscall_64+0x3b/0x90 [ 1164.734199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.734768] RIP: 0033:0x7f6d56f6c8d7 [ 1164.735194] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.737225] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1164.738067] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1164.738814] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1164.739583] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1164.740339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1164.741098] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1164.741884] 02:31:41 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) setresuid(0x0, r1, r1) r2 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x0, 0x62, 0x64, 0xf4caf8a687896f15, 0x62, 0x65, 0x32], 0x2d, [0x34, 0x30, 0x38, 0x63], 0x2d, [0x30, 0x33, 0x66, 0x65], 0x2d, [0x32, 0x66, 0x30, 0x64], 0x2d, [0x64, 0x63, 0x62, 0x62, 0x64, 0x34, 0x38, 0x36]}}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@subj_role={'subj_role', 0x3d, '!,\\'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@uid_eq={'uid', 0x3d, r1}}]}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) copy_file_range(r2, 0x0, r3, 0x0, 0x0, 0x0) 02:31:41 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 76) 02:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 32) 02:31:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 33) 02:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 14) [ 1164.757791] FAULT_INJECTION: forcing a failure. [ 1164.757791] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.759092] CPU: 0 PID: 7609 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.760013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.761238] Call Trace: [ 1164.761525] [ 1164.761775] dump_stack_lvl+0x8b/0xb3 [ 1164.762210] should_fail.cold+0x5/0xa [ 1164.762646] ? create_object.isra.0+0x3a/0xa20 [ 1164.763187] should_failslab+0x5/0x10 [ 1164.763616] kmem_cache_alloc+0x5b/0x480 [ 1164.764075] create_object.isra.0+0x3a/0xa20 [ 1164.764569] ? kasan_unpoison+0x23/0x50 [ 1164.765018] __kmalloc_track_caller+0x25e/0x420 [ 1164.765540] ? kstrdup_const+0x53/0x80 [ 1164.765977] kstrdup+0x36/0x70 [ 1164.766341] kstrdup_const+0x53/0x80 [ 1164.766749] alloc_vfsmnt+0xb5/0x6b0 [ 1164.767182] clone_mnt+0x6d/0xdc0 [ 1164.767588] copy_tree+0x3ac/0xa50 [ 1164.768004] copy_mnt_ns+0x1a5/0xa90 [ 1164.768431] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1164.768973] ? kmem_cache_alloc+0x332/0x480 [ 1164.769464] create_new_namespaces+0xd6/0xb30 [ 1164.769983] copy_namespaces+0x391/0x450 [ 1164.770433] copy_process+0x27f2/0x6cb0 [ 1164.770895] ? lock_is_held_type+0xd7/0x130 [ 1164.771384] ? find_held_lock+0x2c/0x110 [ 1164.771848] ? __cleanup_sighand+0xb0/0xb0 [ 1164.772340] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1164.772801] loop4: detected capacity change from 0 to 256 [ 1164.772951] ? _copy_from_user+0x139/0x170 [ 1164.772976] ? kernel_clone+0x2f8/0xa60 [ 1164.772997] kernel_clone+0xe7/0xa60 [ 1164.775423] ? lock_is_held_type+0xd7/0x130 [ 1164.775904] ? create_io_thread+0xf0/0xf0 [ 1164.776383] ? lock_is_held_type+0xd7/0x130 [ 1164.776867] __do_sys_clone3+0x1dd/0x2e0 [ 1164.777336] ? __ia32_sys_clone+0x150/0x150 [ 1164.777839] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1164.778450] ? vfs_write+0x188/0xae0 [ 1164.778876] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1164.779491] ? fput+0x2a/0x50 [ 1164.779854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1164.780426] do_syscall_64+0x3b/0x90 [ 1164.780855] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.781432] RIP: 0033:0x7f82e43e1b19 [ 1164.781847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.783916] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1164.784769] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1164.785562] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1164.786367] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.787150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.787904] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1164.788681] [ 1164.792013] FAULT_INJECTION: forcing a failure. [ 1164.792013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.793345] CPU: 0 PID: 7605 Comm: syz-executor.0 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.794128] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1164.795185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.795227] Call Trace: [ 1164.795231] [ 1164.795236] dump_stack_lvl+0x8b/0xb3 [ 1164.798467] should_fail.cold+0x5/0xa [ 1164.798917] _copy_to_user+0x2e/0x150 [ 1164.799352] simple_read_from_buffer+0xcc/0x160 [ 1164.799888] proc_fail_nth_read+0x194/0x220 [ 1164.800380] ? proc_exe_link+0x1d0/0x1d0 [ 1164.800837] ? security_file_permission+0xb1/0xd0 [ 1164.801396] ? proc_exe_link+0x1d0/0x1d0 [ 1164.801846] vfs_read+0x1b6/0x5f0 [ 1164.802250] ksys_read+0x12d/0x250 [ 1164.802654] ? __ia32_sys_pwrite64+0x230/0x230 [ 1164.803162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1164.803750] do_syscall_64+0x3b/0x90 [ 1164.804155] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.804739] RIP: 0033:0x7f1a2583769c [ 1164.805159] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1164.807238] RSP: 002b:00007f1a22dfa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.808087] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1a2583769c [ 1164.808886] RDX: 000000000000000f RSI: 00007f1a22dfa1e0 RDI: 0000000000000003 [ 1164.809687] RBP: 00007f1a22dfa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.810484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.811300] R13: 00007ffda0068f3f R14: 00007f1a22dfa300 R15: 0000000000022000 [ 1164.812127] [ 1164.814098] loop1: detected capacity change from 0 to 256 [ 1164.816048] tmpfs: Unknown parameter 'fsuuid' [ 1164.821482] audit: type=1326 audit(1643941901.775:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7604 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1164.834766] FAULT_INJECTION: forcing a failure. [ 1164.834766] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.837304] CPU: 1 PID: 7610 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.838993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.841257] Call Trace: [ 1164.841787] [ 1164.842235] dump_stack_lvl+0x8b/0xb3 [ 1164.843057] should_fail.cold+0x5/0xa [ 1164.843852] ? create_object.isra.0+0x3a/0xa20 [ 1164.844789] should_failslab+0x5/0x10 [ 1164.845558] kmem_cache_alloc+0x5b/0x480 [ 1164.846380] create_object.isra.0+0x3a/0xa20 [ 1164.847299] ? kasan_unpoison+0x23/0x50 [ 1164.848125] kmem_cache_alloc+0x239/0x480 [ 1164.848974] __pmd_alloc+0x94/0x680 [ 1164.849715] __handle_mm_fault+0xe78/0x3570 [ 1164.850601] ? lock_is_held_type+0xd7/0x130 [ 1164.851501] ? __pmd_alloc+0x680/0x680 [ 1164.852310] handle_mm_fault+0x2e6/0xa20 [ 1164.853129] __get_user_pages+0x522/0x1130 [ 1164.854004] ? follow_page_mask+0x1800/0x1800 [ 1164.854946] ? lock_release+0x6f0/0x6f0 [ 1164.855768] ? lock_is_held_type+0xd7/0x130 [ 1164.856654] __get_user_pages_remote+0x18f/0x870 [ 1164.857621] ? down_read+0xd0/0x440 [ 1164.858366] get_user_pages_remote+0x63/0x90 [ 1164.859298] get_arg_page+0xee/0x2b0 [ 1164.860061] ? count.constprop.0+0x280/0x280 [ 1164.860957] ? count.constprop.0+0x1b3/0x280 [ 1164.861856] copy_string_kernel+0x1b4/0x580 [ 1164.862748] ? __virt_addr_valid+0xe9/0x340 [ 1164.863658] do_execveat_common+0x4da/0x890 [ 1164.864539] ? bprm_execve+0x1960/0x1960 [ 1164.865372] __x64_sys_execveat+0xe0/0x120 [ 1164.866237] ? trace_hardirqs_on+0x38/0x190 [ 1164.867132] do_syscall_64+0x3b/0x90 [ 1164.867898] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.868934] RIP: 0033:0x7f245182fb19 [ 1164.869689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.873380] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1164.874934] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1164.876355] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1164.877782] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.879230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.880738] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1164.882287] 02:31:41 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 77) 02:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:31:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000001c0)={0x2, 0x0, 0xfffff801, 0x1, 0x0, "0e9d3be38d2d41e2532fb1440eb4e8c9920c5d"}) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x21020, &(0x7f0000000200)=ANY=[]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 1164.918691] FAULT_INJECTION: forcing a failure. [ 1164.918691] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.920981] CPU: 1 PID: 7618 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1164.922617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1164.924965] Call Trace: [ 1164.925623] [ 1164.926203] dump_stack_lvl+0x8b/0xb3 [ 1164.927220] should_fail.cold+0x5/0xa [ 1164.928214] ? create_object.isra.0+0x3a/0xa20 [ 1164.929143] should_failslab+0x5/0x10 [ 1164.929919] kmem_cache_alloc+0x5b/0x480 [ 1164.930749] create_object.isra.0+0x3a/0xa20 [ 1164.931677] kmemleak_alloc_percpu+0xa0/0x100 [ 1164.932590] pcpu_alloc+0x7bf/0x1060 [ 1164.933362] alloc_vfsmnt+0xfd/0x6b0 [ 1164.934143] clone_mnt+0x6d/0xdc0 [ 1164.934885] copy_tree+0x3ac/0xa50 [ 1164.935637] copy_mnt_ns+0x1a5/0xa90 [ 1164.936387] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1164.937361] ? kmem_cache_alloc+0x332/0x480 [ 1164.938234] create_new_namespaces+0xd6/0xb30 [ 1164.939170] copy_namespaces+0x391/0x450 [ 1164.939980] copy_process+0x27f2/0x6cb0 [ 1164.940802] ? lock_is_held_type+0xd7/0x130 [ 1164.941668] ? find_held_lock+0x2c/0x110 [ 1164.942514] ? __cleanup_sighand+0xb0/0xb0 [ 1164.943375] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1164.944488] ? _copy_from_user+0x139/0x170 [ 1164.945332] ? kernel_clone+0x2f8/0xa60 [ 1164.946149] kernel_clone+0xe7/0xa60 [ 1164.946919] ? lock_is_held_type+0xd7/0x130 [ 1164.947795] ? create_io_thread+0xf0/0xf0 [ 1164.948647] ? lock_is_held_type+0xd7/0x130 [ 1164.949536] __do_sys_clone3+0x1dd/0x2e0 [ 1164.950363] ? __ia32_sys_clone+0x150/0x150 [ 1164.951286] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1164.952398] ? vfs_write+0x188/0xae0 [ 1164.953173] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1164.954287] ? fput+0x2a/0x50 [ 1164.954954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1164.956004] do_syscall_64+0x3b/0x90 [ 1164.956773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1164.957814] RIP: 0033:0x7f82e43e1b19 [ 1164.958559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1164.962264] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1164.963807] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1164.965229] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1164.966673] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1164.968107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1164.969548] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1164.971023] 02:31:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 34) 02:31:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2) 02:31:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 15) [ 1165.020787] FAULT_INJECTION: forcing a failure. [ 1165.020787] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.022033] CPU: 0 PID: 7631 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1165.022932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1165.024150] Call Trace: [ 1165.024426] [ 1165.024674] dump_stack_lvl+0x8b/0xb3 [ 1165.025111] should_fail.cold+0x5/0xa [ 1165.025530] ? create_object.isra.0+0x3a/0xa20 [ 1165.026042] should_failslab+0x5/0x10 [ 1165.026467] kmem_cache_alloc+0x5b/0x480 [ 1165.026922] create_object.isra.0+0x3a/0xa20 [ 1165.027410] ? kasan_unpoison+0x23/0x50 [ 1165.027854] kmem_cache_alloc_trace+0x22e/0x3c0 [ 1165.028370] alloc_workqueue_attrs+0x38/0x80 [ 1165.028850] apply_wqattrs_prepare+0xbb/0x880 [ 1165.029349] apply_workqueue_attrs_locked+0xc1/0x140 [ 1165.029906] alloc_workqueue+0xb1a/0xeb0 [ 1165.030354] ? do_raw_spin_unlock+0x4f/0x210 [ 1165.030843] ? _raw_spin_unlock+0x24/0x40 [ 1165.031315] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1165.031867] ? __fget_files+0x28d/0x470 [ 1165.032301] ? loop_configure+0x62b/0x1950 [ 1165.032770] loop_configure+0x6ec/0x1950 [ 1165.033226] ? putname+0xfe/0x140 [ 1165.033612] lo_ioctl+0x7c5/0x18b0 [ 1165.033995] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1165.034530] ? loop_set_status_old+0x1b0/0x1b0 [ 1165.035040] ? avc_ss_reset+0x180/0x180 [ 1165.035478] ? __lock_acquire+0xbac/0x6120 [ 1165.035983] ? selinux_inode_getsecctx+0x90/0x90 [ 1165.036509] ? loop_set_status_old+0x1b0/0x1b0 [ 1165.036994] blkdev_ioctl+0x362/0x7f0 [ 1165.037406] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1165.037911] ? __x64_sys_ioctl+0x97/0x210 [ 1165.038366] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1165.038976] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1165.039499] __x64_sys_ioctl+0x196/0x210 [ 1165.039942] do_syscall_64+0x3b/0x90 [ 1165.040351] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1165.040902] RIP: 0033:0x7f6d56f6c8d7 [ 1165.041306] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.043300] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1165.044120] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1165.044898] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1165.045672] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1165.046451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1165.047232] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1165.048008] [ 1165.054304] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1165.080841] FAULT_INJECTION: forcing a failure. [ 1165.080841] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.082156] CPU: 0 PID: 7636 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1165.083038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1165.084271] Call Trace: [ 1165.084550] [ 1165.084788] dump_stack_lvl+0x8b/0xb3 [ 1165.085215] should_fail.cold+0x5/0xa [ 1165.085630] ? create_object.isra.0+0x3a/0xa20 [ 1165.086147] should_failslab+0x5/0x10 [ 1165.086550] kmem_cache_alloc+0x5b/0x480 [ 1165.087039] create_object.isra.0+0x3a/0xa20 [ 1165.087515] ? kasan_unpoison+0x23/0x50 [ 1165.087962] kmem_cache_alloc+0x239/0x480 [ 1165.088421] __pmd_alloc+0x94/0x680 [ 1165.088818] __handle_mm_fault+0xe78/0x3570 [ 1165.089290] ? lock_is_held_type+0xd7/0x130 [ 1165.089763] ? __pmd_alloc+0x680/0x680 [ 1165.090207] handle_mm_fault+0x2e6/0xa20 [ 1165.090652] __get_user_pages+0x522/0x1130 [ 1165.091135] ? follow_page_mask+0x1800/0x1800 [ 1165.091625] ? lock_release+0x6f0/0x6f0 [ 1165.092054] ? lock_is_held_type+0xd7/0x130 [ 1165.092531] __get_user_pages_remote+0x18f/0x870 [ 1165.093045] ? down_read+0xd0/0x440 [ 1165.093449] get_user_pages_remote+0x63/0x90 [ 1165.093937] get_arg_page+0xee/0x2b0 [ 1165.094353] ? count.constprop.0+0x280/0x280 [ 1165.094855] ? count.constprop.0+0x1b3/0x280 [ 1165.095366] copy_string_kernel+0x1b4/0x580 [ 1165.095843] ? __virt_addr_valid+0xe9/0x340 [ 1165.096323] do_execveat_common+0x4da/0x890 [ 1165.096793] ? bprm_execve+0x1960/0x1960 [ 1165.097246] __x64_sys_execveat+0xe0/0x120 [ 1165.097712] ? trace_hardirqs_on+0x38/0x190 [ 1165.098182] do_syscall_64+0x3b/0x90 [ 1165.098594] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1165.099164] RIP: 0033:0x7f245182fb19 [ 1165.099563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.101599] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1165.102449] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1165.103242] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1165.104003] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.104784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.105554] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1165.106339] [ 1165.161548] loop2: detected capacity change from 0 to 4 [ 1165.162407] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1165.167702] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1165.174431] EXT4-fs (loop2): Can't read superblock on 2nd try 02:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 16) 02:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1178.638767] loop4: detected capacity change from 0 to 256 [ 1178.650577] loop1: detected capacity change from 0 to 256 02:31:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 35) 02:31:55 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 78) 02:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) 02:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x10) [ 1178.668083] loop5: detected capacity change from 0 to 256 [ 1178.676998] FAULT_INJECTION: forcing a failure. [ 1178.676998] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.678278] CPU: 0 PID: 7652 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1178.679142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.680321] Call Trace: [ 1178.680590] [ 1178.680824] dump_stack_lvl+0x8b/0xb3 [ 1178.681237] should_fail.cold+0x5/0xa [ 1178.681650] ? anon_vma_fork+0xed/0x6a0 [ 1178.682088] should_failslab+0x5/0x10 [ 1178.682513] kmem_cache_alloc+0x5b/0x480 [ 1178.682960] anon_vma_fork+0xed/0x6a0 [ 1178.683375] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1178.683906] ? __vm_enough_memory+0x184/0x360 [ 1178.684388] dup_mm+0x91b/0x1250 [ 1178.684768] ? replace_mm_exe_file+0x490/0x490 [ 1178.685257] ? __raw_spin_lock_init+0x36/0x110 [ 1178.685757] copy_process+0x384b/0x6cb0 [ 1178.686200] ? __cleanup_sighand+0xb0/0xb0 [ 1178.686667] ? lock_is_held_type+0xd7/0x130 [ 1178.687146] ? find_held_lock+0x2c/0x110 [ 1178.687588] ? kernel_clone+0x2f8/0xa60 [ 1178.688030] kernel_clone+0xe7/0xa60 [ 1178.688446] ? create_io_thread+0xf0/0xf0 [ 1178.688903] ? find_held_lock+0x2c/0x110 [ 1178.689346] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1178.689943] ? populate_seccomp_data+0x214/0x540 [ 1178.690456] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1178.691053] ? __seccomp_filter+0x5ab/0xff0 [ 1178.691528] ? wait_for_completion_io+0x270/0x270 [ 1178.692055] __do_sys_clone+0xc8/0x110 [ 1178.692481] ? __do_sys_vfork+0xd0/0xd0 [ 1178.692929] ? __secure_computing+0xb4/0x290 [ 1178.693417] do_syscall_64+0x3b/0x90 [ 1178.693830] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1178.694390] RIP: 0033:0x7f466d7a6b19 [ 1178.694794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.696790] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1178.697612] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1178.698379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1178.699158] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.699919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.700688] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1178.701476] [ 1178.705397] FAULT_INJECTION: forcing a failure. [ 1178.705397] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.706700] CPU: 0 PID: 7656 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1178.707606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.708833] Call Trace: [ 1178.709112] [ 1178.709353] dump_stack_lvl+0x8b/0xb3 [ 1178.709775] should_fail.cold+0x5/0xa [ 1178.710193] ? alloc_unbound_pwq+0x4ad/0xd70 [ 1178.710673] should_failslab+0x5/0x10 [ 1178.711087] kmem_cache_alloc_node+0x55/0x490 [ 1178.711591] ? lock_is_held_type+0xd7/0x130 [ 1178.712063] alloc_unbound_pwq+0x4ad/0xd70 [ 1178.712538] apply_wqattrs_prepare+0x2a4/0x880 [ 1178.713037] apply_workqueue_attrs_locked+0xc1/0x140 [ 1178.713593] alloc_workqueue+0xb1a/0xeb0 [ 1178.714035] ? do_raw_spin_unlock+0x4f/0x210 [ 1178.714521] ? _raw_spin_unlock+0x24/0x40 [ 1178.714984] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1178.715546] ? __fget_files+0x28d/0x470 [ 1178.715999] ? loop_configure+0x62b/0x1950 [ 1178.716471] loop_configure+0x6ec/0x1950 [ 1178.716917] ? putname+0xfe/0x140 [ 1178.717304] lo_ioctl+0x7c5/0x18b0 [ 1178.717696] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1178.718239] ? loop_set_status_old+0x1b0/0x1b0 [ 1178.718744] ? avc_ss_reset+0x180/0x180 [ 1178.718986] FAULT_INJECTION: forcing a failure. [ 1178.718986] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.719197] ? __lock_acquire+0xbac/0x6120 [ 1178.719255] ? selinux_inode_getsecctx+0x90/0x90 [ 1178.722666] ? loop_set_status_old+0x1b0/0x1b0 [ 1178.723194] blkdev_ioctl+0x362/0x7f0 [ 1178.723620] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1178.724135] ? __x64_sys_ioctl+0x97/0x210 [ 1178.724590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1178.725198] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1178.725712] __x64_sys_ioctl+0x196/0x210 [ 1178.726164] do_syscall_64+0x3b/0x90 [ 1178.726583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1178.727151] RIP: 0033:0x7f6d56f6c8d7 [ 1178.727562] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.729581] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1178.730410] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1178.731207] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1178.731977] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1178.732751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1178.733524] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1178.734328] [ 1178.734577] CPU: 1 PID: 7657 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1178.736433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.737183] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1178.738971] Call Trace: [ 1178.738982] [ 1178.738993] dump_stack_lvl+0x8b/0xb3 [ 1178.741781] should_fail.cold+0x5/0xa [ 1178.741847] FAULT_INJECTION: forcing a failure. [ 1178.741847] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.742651] ? create_object.isra.0+0x3a/0xa20 [ 1178.744868] should_failslab+0x5/0x10 [ 1178.745724] kmem_cache_alloc+0x5b/0x480 [ 1178.746641] ? mark_held_locks+0x9e/0xe0 [ 1178.747570] create_object.isra.0+0x3a/0xa20 [ 1178.748578] kmemleak_alloc_percpu+0xa0/0x100 [ 1178.749599] pcpu_alloc+0x7bf/0x1060 [ 1178.750469] alloc_vfsmnt+0xfd/0x6b0 [ 1178.751326] clone_mnt+0x6d/0xdc0 [ 1178.752117] copy_tree+0x3ac/0xa50 [ 1178.752936] copy_mnt_ns+0x1a5/0xa90 [ 1178.753777] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1178.754841] ? kmem_cache_alloc+0x332/0x480 [ 1178.755818] create_new_namespaces+0xd6/0xb30 [ 1178.756831] copy_namespaces+0x391/0x450 [ 1178.757737] copy_process+0x27f2/0x6cb0 [ 1178.758612] ? lock_is_held_type+0xd7/0x130 [ 1178.759575] ? find_held_lock+0x2c/0x110 [ 1178.760494] ? __cleanup_sighand+0xb0/0xb0 [ 1178.761469] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1178.762686] ? _copy_from_user+0x139/0x170 [ 1178.763645] ? kernel_clone+0x2f8/0xa60 [ 1178.764527] kernel_clone+0xe7/0xa60 [ 1178.765360] ? lock_is_held_type+0xd7/0x130 [ 1178.766306] ? create_io_thread+0xf0/0xf0 [ 1178.767258] ? lock_is_held_type+0xd7/0x130 [ 1178.768215] __do_sys_clone3+0x1dd/0x2e0 [ 1178.769128] ? __ia32_sys_clone+0x150/0x150 [ 1178.770113] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1178.771342] ? vfs_write+0x188/0xae0 [ 1178.772168] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1178.773393] ? fput+0x2a/0x50 [ 1178.774092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.775268] do_syscall_64+0x3b/0x90 [ 1178.776089] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1178.777223] RIP: 0033:0x7f82e43e1b19 [ 1178.778022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.781978] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1178.783618] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1178.785143] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1178.786658] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.788223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.789755] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1178.791358] [ 1178.791871] CPU: 0 PID: 7659 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1178.792766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.793979] Call Trace: [ 1178.794259] [ 1178.794500] dump_stack_lvl+0x8b/0xb3 [ 1178.794917] should_fail.cold+0x5/0xa [ 1178.795344] ? ptlock_alloc+0x1d/0x70 [ 1178.795761] should_failslab+0x5/0x10 [ 1178.796170] kmem_cache_alloc+0x5b/0x480 [ 1178.796614] ptlock_alloc+0x1d/0x70 [ 1178.797007] pte_alloc_one+0x68/0x1f0 [ 1178.797424] __pte_alloc+0x69/0x200 [ 1178.797815] ? pmd_install+0x250/0x250 [ 1178.798244] ? do_raw_spin_unlock+0x4f/0x210 [ 1178.798719] ? _raw_spin_unlock+0x24/0x40 [ 1178.799171] ? __pmd_alloc+0x30d/0x680 [ 1178.799585] __handle_mm_fault+0x2559/0x3570 [ 1178.800060] ? lock_is_held_type+0xd7/0x130 [ 1178.800525] ? __pmd_alloc+0x680/0x680 [ 1178.800967] handle_mm_fault+0x2e6/0xa20 [ 1178.801407] __get_user_pages+0x522/0x1130 [ 1178.801871] ? follow_page_mask+0x1800/0x1800 [ 1178.802360] ? lock_release+0x6f0/0x6f0 [ 1178.802804] ? lock_is_held_type+0xd7/0x130 [ 1178.803288] __get_user_pages_remote+0x18f/0x870 [ 1178.803809] ? down_read+0xd0/0x440 [ 1178.804216] get_user_pages_remote+0x63/0x90 [ 1178.804696] get_arg_page+0xee/0x2b0 [ 1178.805097] ? count.constprop.0+0x280/0x280 [ 1178.805581] ? count.constprop.0+0x1b3/0x280 [ 1178.806057] copy_string_kernel+0x1b4/0x580 [ 1178.806516] ? __virt_addr_valid+0xe9/0x340 [ 1178.806983] do_execveat_common+0x4da/0x890 [ 1178.807471] ? bprm_execve+0x1960/0x1960 [ 1178.807919] __x64_sys_execveat+0xe0/0x120 [ 1178.808376] ? trace_hardirqs_on+0x38/0x190 [ 1178.808839] do_syscall_64+0x3b/0x90 [ 1178.809242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1178.809789] RIP: 0033:0x7f245182fb19 [ 1178.810182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.812155] RSP: 002b:00007f244ed84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1178.812985] RAX: ffffffffffffffda RBX: 00007f2451943020 RCX: 00007f245182fb19 [ 1178.813744] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1178.814507] RBP: 00007f244ed841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.815278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.816041] R13: 00007ffe6f6d4c7f R14: 00007f244ed84300 R15: 0000000000022000 [ 1178.816812] [ 1178.822930] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2000) [ 1178.857073] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 02:31:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 36) 02:31:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x1800) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1178.978529] FAULT_INJECTION: forcing a failure. [ 1178.978529] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.980946] CPU: 1 PID: 7673 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1178.982602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1178.984885] Call Trace: [ 1178.985403] [ 1178.985852] dump_stack_lvl+0x8b/0xb3 [ 1178.986641] should_fail.cold+0x5/0xa [ 1178.987445] ? create_object.isra.0+0x3a/0xa20 [ 1178.988384] should_failslab+0x5/0x10 [ 1178.989143] kmem_cache_alloc+0x5b/0x480 [ 1178.989968] create_object.isra.0+0x3a/0xa20 [ 1178.990867] ? kasan_unpoison+0x23/0x50 [ 1178.991694] kmem_cache_alloc_node+0x248/0x490 [ 1178.992625] alloc_unbound_pwq+0x4ad/0xd70 [ 1178.993494] apply_wqattrs_prepare+0x2a4/0x880 [ 1178.994432] apply_workqueue_attrs_locked+0xc1/0x140 [ 1178.995468] alloc_workqueue+0xb1a/0xeb0 [ 1178.996282] ? do_raw_spin_unlock+0x4f/0x210 [ 1178.997184] ? _raw_spin_unlock+0x24/0x40 [ 1178.998012] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1178.999035] ? __fget_files+0x28d/0x470 [ 1178.999855] ? loop_configure+0x62b/0x1950 [ 1179.000706] loop_configure+0x6ec/0x1950 [ 1179.001523] ? putname+0xfe/0x140 [ 1179.002245] lo_ioctl+0x7c5/0x18b0 [ 1179.002956] ? avc_has_extended_perms+0x7e8/0xeb0 02:31:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2) [ 1179.003936] ? loop_set_status_old+0x1b0/0x1b0 02:31:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 17) [ 1179.004980] ? avc_ss_reset+0x180/0x180 [ 1179.005866] ? __lock_acquire+0xbac/0x6120 [ 1179.006769] ? selinux_inode_getsecctx+0x90/0x90 [ 1179.007750] ? loop_set_status_old+0x1b0/0x1b0 [ 1179.008655] blkdev_ioctl+0x362/0x7f0 [ 1179.009415] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1179.010345] ? __x64_sys_ioctl+0x97/0x210 [ 1179.011182] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.012264] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1179.013208] __x64_sys_ioctl+0x196/0x210 [ 1179.014010] do_syscall_64+0x3b/0x90 [ 1179.014748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.015773] RIP: 0033:0x7f6d56f6c8d7 [ 1179.016502] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.020147] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1179.021904] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1179.023564] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1179.025219] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1179.026867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1179.028532] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1179.030491] 02:31:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f00) [ 1179.051754] FAULT_INJECTION: forcing a failure. [ 1179.051754] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.053031] CPU: 0 PID: 7672 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1179.053937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1179.055162] Call Trace: [ 1179.055446] [ 1179.055684] dump_stack_lvl+0x8b/0xb3 [ 1179.056109] should_fail.cold+0x5/0xa [ 1179.056524] ? create_object.isra.0+0x3a/0xa20 [ 1179.057034] should_failslab+0x5/0x10 [ 1179.057448] kmem_cache_alloc+0x5b/0x480 [ 1179.057900] create_object.isra.0+0x3a/0xa20 [ 1179.058380] ? kasan_unpoison+0x23/0x50 [ 1179.058822] kmem_cache_alloc+0x239/0x480 [ 1179.059283] anon_vma_fork+0xed/0x6a0 [ 1179.059703] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1179.060242] ? __vm_enough_memory+0x184/0x360 [ 1179.060743] dup_mm+0x91b/0x1250 [ 1179.061126] ? replace_mm_exe_file+0x490/0x490 [ 1179.061624] ? __raw_spin_lock_init+0x36/0x110 [ 1179.062118] copy_process+0x384b/0x6cb0 [ 1179.062569] ? __cleanup_sighand+0xb0/0xb0 [ 1179.063033] ? lock_is_held_type+0xd7/0x130 [ 1179.063526] ? find_held_lock+0x2c/0x110 [ 1179.063977] ? kernel_clone+0x2f8/0xa60 [ 1179.064408] kernel_clone+0xe7/0xa60 [ 1179.064817] ? create_io_thread+0xf0/0xf0 [ 1179.065264] ? find_held_lock+0x2c/0x110 [ 1179.065704] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.066298] ? populate_seccomp_data+0x214/0x540 [ 1179.066819] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1179.067414] ? __seccomp_filter+0x5ab/0xff0 [ 1179.067878] ? wait_for_completion_io+0x270/0x270 [ 1179.068412] __do_sys_clone+0xc8/0x110 [ 1179.068838] ? __do_sys_vfork+0xd0/0xd0 [ 1179.069285] ? __secure_computing+0xb4/0x290 [ 1179.069770] do_syscall_64+0x3b/0x90 [ 1179.070177] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.070734] RIP: 0033:0x7f466d7a6b19 [ 1179.071146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.073139] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1179.073967] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1179.074741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.075531] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.076297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.077059] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1179.077843] 02:31:56 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 79) 02:31:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1179.127418] FAULT_INJECTION: forcing a failure. [ 1179.127418] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.128740] CPU: 0 PID: 7684 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1179.129635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1179.130835] Call Trace: [ 1179.131111] [ 1179.131359] dump_stack_lvl+0x8b/0xb3 [ 1179.131776] should_fail.cold+0x5/0xa [ 1179.132184] ? alloc_vfsmnt+0x23/0x6b0 [ 1179.132603] should_failslab+0x5/0x10 [ 1179.133009] kmem_cache_alloc+0x5b/0x480 [ 1179.133441] ? lock_release+0x3b2/0x6f0 [ 1179.133874] alloc_vfsmnt+0x23/0x6b0 [ 1179.134274] clone_mnt+0x6d/0xdc0 [ 1179.134656] copy_tree+0x3ac/0xa50 [ 1179.135048] copy_mnt_ns+0x1a5/0xa90 [ 1179.135454] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1179.135965] ? kmem_cache_alloc+0x332/0x480 [ 1179.136430] create_new_namespaces+0xd6/0xb30 [ 1179.136914] copy_namespaces+0x391/0x450 [ 1179.137353] copy_process+0x27f2/0x6cb0 [ 1179.137790] ? lock_is_held_type+0xd7/0x130 [ 1179.138262] ? find_held_lock+0x2c/0x110 [ 1179.138712] ? __cleanup_sighand+0xb0/0xb0 [ 1179.139191] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1179.139783] ? _copy_from_user+0x139/0x170 [ 1179.140247] ? kernel_clone+0x2f8/0xa60 [ 1179.140685] kernel_clone+0xe7/0xa60 [ 1179.141091] ? lock_is_held_type+0xd7/0x130 [ 1179.141550] ? create_io_thread+0xf0/0xf0 [ 1179.142004] ? lock_is_held_type+0xd7/0x130 [ 1179.142478] __do_sys_clone3+0x1dd/0x2e0 [ 1179.142916] ? __ia32_sys_clone+0x150/0x150 [ 1179.143413] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.143995] ? vfs_write+0x188/0xae0 [ 1179.144407] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1179.144991] ? fput+0x2a/0x50 [ 1179.145340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1179.145896] do_syscall_64+0x3b/0x90 [ 1179.146307] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.146856] RIP: 0033:0x7f82e43e1b19 [ 1179.147256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.147790] FAULT_INJECTION: forcing a failure. [ 1179.147790] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.149187] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1179.149204] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1179.149214] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1179.149225] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.154713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.155480] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1179.156255] [ 1179.156511] CPU: 1 PID: 7686 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1179.158264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1179.160689] Call Trace: [ 1179.161241] [ 1179.161714] dump_stack_lvl+0x8b/0xb3 [ 1179.162561] should_fail.cold+0x5/0xa [ 1179.163396] ? create_object.isra.0+0x3a/0xa20 [ 1179.164386] should_failslab+0x5/0x10 [ 1179.165195] kmem_cache_alloc+0x5b/0x480 [ 1179.166071] create_object.isra.0+0x3a/0xa20 [ 1179.167019] ? kasan_unpoison+0x23/0x50 [ 1179.167884] kmem_cache_alloc+0x239/0x480 [ 1179.168774] ptlock_alloc+0x1d/0x70 [ 1179.169540] pte_alloc_one+0x68/0x1f0 [ 1179.170353] __pte_alloc+0x69/0x200 [ 1179.171147] ? pmd_install+0x250/0x250 [ 1179.171993] ? do_raw_spin_unlock+0x4f/0x210 [ 1179.172923] ? _raw_spin_unlock+0x24/0x40 [ 1179.173796] ? __pmd_alloc+0x30d/0x680 [ 1179.174615] __handle_mm_fault+0x2559/0x3570 [ 1179.175575] ? lock_is_held_type+0xd7/0x130 [ 1179.176486] ? __pmd_alloc+0x680/0x680 [ 1179.177349] handle_mm_fault+0x2e6/0xa20 [ 1179.178207] __get_user_pages+0x522/0x1130 [ 1179.179134] ? follow_page_mask+0x1800/0x1800 [ 1179.180089] ? lock_release+0x6f0/0x6f0 [ 1179.180954] ? lock_is_held_type+0xd7/0x130 [ 1179.181857] __get_user_pages_remote+0x18f/0x870 [ 1179.182850] ? down_read+0xd0/0x440 [ 1179.183648] get_user_pages_remote+0x63/0x90 [ 1179.184580] get_arg_page+0xee/0x2b0 [ 1179.185361] ? count.constprop.0+0x280/0x280 [ 1179.186276] ? count.constprop.0+0x1b3/0x280 [ 1179.187209] copy_string_kernel+0x1b4/0x580 [ 1179.188109] ? __virt_addr_valid+0xe9/0x340 [ 1179.189023] do_execveat_common+0x4da/0x890 [ 1179.189932] ? bprm_execve+0x1960/0x1960 [ 1179.190798] __x64_sys_execveat+0xe0/0x120 [ 1179.191693] ? trace_hardirqs_on+0x38/0x190 [ 1179.192609] do_syscall_64+0x3b/0x90 [ 1179.193394] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.194452] RIP: 0033:0x7f245182fb19 [ 1179.195233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.199014] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1179.200583] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1179.202050] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1179.203530] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.204988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.206446] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1179.207921] 02:31:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100000) 02:31:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='cmdline\x00') pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="49a163a952821d1f45df4aba3464aa259d28b2df9e68ce0022f62e64925ece3edd24dcc0ac273a16919d51df9ad4fd707700df7e4c89153d6f953e1e933f1b47af25f3eb1bff23ccef79ec1a023a1a3b95b8746b366ed34d5244fd92f6ccc7a2dc538c16206169c85fe77ad004e476be7f9ee2ab7ece48bdc3", 0x79}, {&(0x7f0000000140)="584dcdd156f8188d7615a58faf5fc0a53180970d78d01e9ea798175a79ae0aac3daf4e4fd773765effd3a71bbe1f13bc4e69d17fa3a7ff356fb5e2c950c2d510195fc6beaeeceae25c3cf4162cd101c233f7364b0e0fb398981fc215ca914cf8b8a556dd09a2bd8fbdedaf9df71a611e571b6518f2bba17744522ff51fb769f9cf0b8853cd8dd1f952d9ca5ce412853b15a53fadff63d193c62785be5273307fd6b04909dd864cd3ba287500a335b2fb0ae640fd9f062e054809e8dc6199649165c49c7a31ac80918aec9e4349", 0xcd}, {&(0x7f0000000240)="4dcea7730439903f21e75c72b6660125625445e72561754c10c98b15aad090dcec184465dcb4ef5e688a5ca8e9f6c4bc3626f93363fc763fe165b22fc233db4e1cba36353532c5de7e0abed1e0a7d9d11a2fe6c4ca1b92c367d153c1fd57ec47b3d119fd96201fa7fd707253055efacf46acfb9ac912ef42531bda7f26be3f60e9ca236838d1a0559f4f98f56456a6b2994f5137b4ac1fe814b596b77696e04d93631f62c172f3996e2a4ffd452afcfc36fbbbf366284c088c98eb964f2619", 0xbf}, {&(0x7f0000000300)="a82502cb57422e180f08ab04b85dab0a8db370df03e4378bcc33920ad82e8cb10ed44759cc330fdcb25719df0da7a09948c670618a3043931112b441226439605a031134825809a82edea0f512ecb23948f01467e3e3c13e07a1520021358a0d7ae210d84014b4dfcaae", 0x6a}, {&(0x7f00000000c0)="223bba57218ab9759c86a2a0ee463ad55f9034977033437bc3c9f6a321c500516f8e3702e65a291ee1dea1d7ad4bccc2db0b346b7b", 0x35}], 0x5, 0x3aec, 0x8000) fstatfs(r0, &(0x7f0000000100)=""/50) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$hiddev(r1, 0x0, 0x3d) [ 1179.269817] loop2: detected capacity change from 0 to 4 02:31:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) 02:31:56 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) [ 1179.303622] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1179.309033] loop1: detected capacity change from 0 to 256 [ 1179.322004] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:31:56 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 80) 02:31:56 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) [ 1179.362854] FAULT_INJECTION: forcing a failure. [ 1179.362854] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.364187] CPU: 0 PID: 7706 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1179.365063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1179.366269] Call Trace: [ 1179.366540] [ 1179.366778] dump_stack_lvl+0x8b/0xb3 [ 1179.367203] should_fail.cold+0x5/0xa [ 1179.367615] ? create_object.isra.0+0x3a/0xa20 [ 1179.368112] should_failslab+0x5/0x10 [ 1179.368514] kmem_cache_alloc+0x5b/0x480 [ 1179.368959] create_object.isra.0+0x3a/0xa20 [ 1179.369434] ? kasan_unpoison+0x23/0x50 [ 1179.369865] kmem_cache_alloc+0x239/0x480 [ 1179.370307] alloc_vfsmnt+0x23/0x6b0 [ 1179.370712] clone_mnt+0x6d/0xdc0 [ 1179.371112] copy_tree+0x3ac/0xa50 [ 1179.371505] copy_mnt_ns+0x1a5/0xa90 [ 1179.371916] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1179.372442] ? kmem_cache_alloc+0x332/0x480 [ 1179.372918] create_new_namespaces+0xd6/0xb30 [ 1179.373419] copy_namespaces+0x391/0x450 [ 1179.373862] copy_process+0x27f2/0x6cb0 [ 1179.374303] ? lock_is_held_type+0xd7/0x130 [ 1179.374781] ? find_held_lock+0x2c/0x110 [ 1179.375252] ? __cleanup_sighand+0xb0/0xb0 [ 1179.375725] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1179.376330] ? _copy_from_user+0x139/0x170 [ 1179.376799] ? kernel_clone+0x2f8/0xa60 [ 1179.377239] kernel_clone+0xe7/0xa60 [ 1179.377652] ? lock_is_held_type+0xd7/0x130 [ 1179.378118] ? create_io_thread+0xf0/0xf0 [ 1179.378581] ? lock_is_held_type+0xd7/0x130 [ 1179.379058] __do_sys_clone3+0x1dd/0x2e0 [ 1179.379520] ? __ia32_sys_clone+0x150/0x150 [ 1179.380005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.380603] ? vfs_write+0x188/0xae0 [ 1179.381025] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1179.381621] ? fput+0x2a/0x50 [ 1179.381968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1179.382537] do_syscall_64+0x3b/0x90 [ 1179.382948] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.383540] RIP: 0033:0x7f82e43e1b19 [ 1179.383950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.385965] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1179.386799] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1179.387583] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1179.388363] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.389119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.389883] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1179.390673] 02:31:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1179.417808] FAULT_INJECTION: forcing a failure. [ 1179.417808] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.419049] CPU: 0 PID: 7709 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1179.419940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1179.421127] Call Trace: [ 1179.421402] [ 1179.421638] dump_stack_lvl+0x8b/0xb3 [ 1179.422064] should_fail.cold+0x5/0xa [ 1179.422487] ? anon_vma_fork+0x1de/0x6a0 [ 1179.422939] should_failslab+0x5/0x10 [ 1179.423366] kmem_cache_alloc+0x5b/0x480 [ 1179.423820] anon_vma_fork+0x1de/0x6a0 [ 1179.424268] dup_mm+0x91b/0x1250 [ 1179.424652] ? replace_mm_exe_file+0x490/0x490 [ 1179.425151] ? __raw_spin_lock_init+0x36/0x110 [ 1179.425660] copy_process+0x384b/0x6cb0 [ 1179.426112] ? __cleanup_sighand+0xb0/0xb0 [ 1179.426588] ? lock_is_held_type+0xd7/0x130 [ 1179.427055] ? find_held_lock+0x2c/0x110 [ 1179.427519] ? kernel_clone+0x2f8/0xa60 [ 1179.427951] kernel_clone+0xe7/0xa60 [ 1179.428360] ? create_io_thread+0xf0/0xf0 [ 1179.428818] ? find_held_lock+0x2c/0x110 [ 1179.429266] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1179.429859] ? populate_seccomp_data+0x214/0x540 [ 1179.430377] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1179.430978] ? __seccomp_filter+0x5ab/0xff0 [ 1179.431449] ? wait_for_completion_io+0x270/0x270 [ 1179.431978] __do_sys_clone+0xc8/0x110 [ 1179.432410] ? __do_sys_vfork+0xd0/0xd0 [ 1179.432858] ? __secure_computing+0xb4/0x290 [ 1179.433347] do_syscall_64+0x3b/0x90 [ 1179.433758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1179.434323] RIP: 0033:0x7f466d7a6b19 [ 1179.434721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.436721] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1179.437537] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1179.438316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.439093] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.439857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1179.440628] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1179.441416] [ 1179.476548] loop1: detected capacity change from 0 to 256 [ 1179.495916] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1191.718872] loop1: detected capacity change from 0 to 256 [ 1191.721778] audit: type=1326 audit(1643941928.675:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7719 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1191.726194] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1191.734866] FAULT_INJECTION: forcing a failure. [ 1191.734866] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.736164] CPU: 0 PID: 7724 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1191.737067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.738304] Call Trace: [ 1191.738588] [ 1191.738828] dump_stack_lvl+0x8b/0xb3 [ 1191.739263] should_fail.cold+0x5/0xa [ 1191.739705] should_failslab+0x5/0x10 [ 1191.740127] __kmalloc_track_caller+0x79/0x420 [ 1191.740631] ? kstrdup_const+0x53/0x80 [ 1191.741067] kstrdup+0x36/0x70 [ 1191.741423] kstrdup_const+0x53/0x80 [ 1191.741834] alloc_vfsmnt+0xb5/0x6b0 [ 1191.742263] clone_mnt+0x6d/0xdc0 [ 1191.742651] copy_tree+0x3ac/0xa50 [ 1191.743048] copy_mnt_ns+0x1a5/0xa90 [ 1191.743472] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1191.744002] ? kmem_cache_alloc+0x332/0x480 [ 1191.744485] create_new_namespaces+0xd6/0xb30 [ 1191.744987] copy_namespaces+0x391/0x450 [ 1191.745431] copy_process+0x27f2/0x6cb0 [ 1191.745869] ? lock_is_held_type+0xd7/0x130 [ 1191.746347] ? find_held_lock+0x2c/0x110 [ 1191.746810] ? __cleanup_sighand+0xb0/0xb0 [ 1191.747288] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1191.747896] ? _copy_from_user+0x139/0x170 [ 1191.748369] ? kernel_clone+0x2f8/0xa60 [ 1191.748815] kernel_clone+0xe7/0xa60 [ 1191.749235] ? lock_is_held_type+0xd7/0x130 [ 1191.749709] ? create_io_thread+0xf0/0xf0 [ 1191.750187] ? lock_is_held_type+0xd7/0x130 [ 1191.750666] __do_sys_clone3+0x1dd/0x2e0 [ 1191.751126] ? __ia32_sys_clone+0x150/0x150 [ 1191.751634] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1191.752250] ? vfs_write+0x188/0xae0 [ 1191.752671] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1191.753286] ? fput+0x2a/0x50 [ 1191.753644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.753852] loop4: detected capacity change from 0 to 256 [ 1191.754222] do_syscall_64+0x3b/0x90 02:32:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 37) 02:32:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:32:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000) 02:32:08 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) 02:32:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 18) 02:32:08 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 81) 02:32:08 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 02:32:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1191.754245] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.754261] RIP: 0033:0x7f82e43e1b19 [ 1191.754272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.759068] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1191.759924] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1191.760702] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1191.760879] FAULT_INJECTION: forcing a failure. [ 1191.760879] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.761468] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.761480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.761488] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1191.761512] [ 1191.766314] CPU: 1 PID: 7730 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1191.768020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.770284] Call Trace: [ 1191.770791] [ 1191.771237] dump_stack_lvl+0x8b/0xb3 [ 1191.772021] should_fail.cold+0x5/0xa [ 1191.772788] ? kobject_uevent_env+0x236/0xfa0 [ 1191.773697] should_failslab+0x5/0x10 [ 1191.774516] kmem_cache_alloc_trace+0x55/0x3c0 [ 1191.775438] ? lock_is_held_type+0xd7/0x130 [ 1191.776314] kobject_uevent_env+0x236/0xfa0 [ 1191.777193] ? dev_uevent_filter+0xd0/0xd0 [ 1191.778053] ? _raw_spin_unlock+0x24/0x40 [ 1191.778889] disk_event_uevent+0x17b/0x1e0 [ 1191.779769] ? disk_events_async_show+0x10/0x10 [ 1191.780714] ? __fget_files+0x28d/0x470 [ 1191.781529] disk_force_media_change+0x1e/0xc0 [ 1191.782452] loop_configure+0x75b/0x1950 [ 1191.783293] ? putname+0xfe/0x140 [ 1191.784015] lo_ioctl+0x7c5/0x18b0 [ 1191.784732] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1191.785714] ? loop_set_status_old+0x1b0/0x1b0 [ 1191.786648] ? avc_ss_reset+0x180/0x180 [ 1191.787477] ? __lock_acquire+0xbac/0x6120 [ 1191.788396] ? selinux_inode_getsecctx+0x90/0x90 [ 1191.789357] ? loop_set_status_old+0x1b0/0x1b0 [ 1191.790282] blkdev_ioctl+0x362/0x7f0 [ 1191.791037] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1191.791990] ? __x64_sys_ioctl+0x97/0x210 [ 1191.792817] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1191.793918] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1191.794859] __x64_sys_ioctl+0x196/0x210 [ 1191.795701] do_syscall_64+0x3b/0x90 [ 1191.796451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.797490] RIP: 0033:0x7f6d56f6c8d7 [ 1191.798230] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.801925] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1191.803436] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1191.804833] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1191.806246] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1191.807659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1191.809065] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1191.810503] 02:32:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(r0) [ 1191.835258] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1000000) [ 1191.853894] FAULT_INJECTION: forcing a failure. [ 1191.853894] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.856704] CPU: 1 PID: 7731 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1191.858568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.861120] Call Trace: [ 1191.861698] [ 1191.862206] dump_stack_lvl+0x8b/0xb3 [ 1191.863098] should_fail.cold+0x5/0xa [ 1191.864003] ? __anon_vma_prepare+0x60/0x530 [ 1191.865020] should_failslab+0x5/0x10 [ 1191.865881] kmem_cache_alloc+0x5b/0x480 [ 1191.866818] __anon_vma_prepare+0x60/0x530 [ 1191.867792] ? __pmd_alloc+0x30d/0x680 [ 1191.868683] __handle_mm_fault+0x2811/0x3570 [ 1191.869397] FAULT_INJECTION: forcing a failure. [ 1191.869397] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.869690] ? lock_is_held_type+0xd7/0x130 [ 1191.871865] ? __pmd_alloc+0x680/0x680 [ 1191.872781] handle_mm_fault+0x2e6/0xa20 [ 1191.873708] __get_user_pages+0x522/0x1130 [ 1191.874694] ? follow_page_mask+0x1800/0x1800 [ 1191.875728] ? lock_release+0x6f0/0x6f0 [ 1191.876647] ? lock_is_held_type+0xd7/0x130 [ 1191.877631] __get_user_pages_remote+0x18f/0x870 [ 1191.878718] ? down_read+0xd0/0x440 [ 1191.879579] get_user_pages_remote+0x63/0x90 [ 1191.880584] get_arg_page+0xee/0x2b0 [ 1191.881433] ? count.constprop.0+0x280/0x280 [ 1191.882432] ? count.constprop.0+0x1b3/0x280 [ 1191.883438] copy_string_kernel+0x1b4/0x580 [ 1191.884411] ? __virt_addr_valid+0xe9/0x340 [ 1191.885403] do_execveat_common+0x4da/0x890 [ 1191.886379] ? bprm_execve+0x1960/0x1960 [ 1191.887343] __x64_sys_execveat+0xe0/0x120 [ 1191.888307] ? trace_hardirqs_on+0x38/0x190 [ 1191.889282] do_syscall_64+0x3b/0x90 [ 1191.890130] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.891295] RIP: 0033:0x7f245182fb19 [ 1191.892128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.896225] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1191.897917] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1191.899523] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1191.901109] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.902704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.904303] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1191.905922] [ 1191.906443] CPU: 0 PID: 7738 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1191.907364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.908567] Call Trace: [ 1191.908844] [ 1191.909083] dump_stack_lvl+0x8b/0xb3 [ 1191.909508] should_fail.cold+0x5/0xa [ 1191.909923] ? create_object.isra.0+0x3a/0xa20 [ 1191.910436] should_failslab+0x5/0x10 [ 1191.910851] kmem_cache_alloc+0x5b/0x480 [ 1191.911305] create_object.isra.0+0x3a/0xa20 [ 1191.911783] ? kasan_unpoison+0x23/0x50 [ 1191.912223] kmem_cache_alloc+0x239/0x480 [ 1191.912681] anon_vma_fork+0x1de/0x6a0 [ 1191.913112] dup_mm+0x91b/0x1250 [ 1191.913494] ? replace_mm_exe_file+0x490/0x490 [ 1191.913988] ? __raw_spin_lock_init+0x36/0x110 [ 1191.914490] copy_process+0x384b/0x6cb0 [ 1191.914934] ? __cleanup_sighand+0xb0/0xb0 [ 1191.915412] ? lock_is_held_type+0xd7/0x130 [ 1191.915874] ? find_held_lock+0x2c/0x110 [ 1191.916311] ? kernel_clone+0x2f8/0xa60 [ 1191.916742] kernel_clone+0xe7/0xa60 [ 1191.917149] ? create_io_thread+0xf0/0xf0 [ 1191.917595] ? find_held_lock+0x2c/0x110 [ 1191.918025] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1191.918560] ? wait_for_completion_io+0x270/0x270 [ 1191.919073] __do_sys_clone+0xc8/0x110 [ 1191.919499] ? __do_sys_vfork+0xd0/0xd0 [ 1191.919931] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1191.920525] ? vfs_write+0x188/0xae0 [ 1191.920934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1191.921496] do_syscall_64+0x3b/0x90 [ 1191.921903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1191.922457] RIP: 0033:0x7f466d7a6b19 [ 1191.922852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1191.924788] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1191.925609] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1191.926353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1191.927108] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.927874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1191.928633] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1191.929405] [ 1191.964032] loop1: detected capacity change from 0 to 256 02:32:08 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 82) [ 1191.993436] FAULT_INJECTION: forcing a failure. [ 1191.993436] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.994787] CPU: 0 PID: 7747 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1191.995682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1191.995757] loop2: detected capacity change from 0 to 4 [ 1191.996884] Call Trace: [ 1191.996890] [ 1191.996896] dump_stack_lvl+0x8b/0xb3 [ 1191.996923] should_fail.cold+0x5/0xa [ 1191.999355] ? create_object.isra.0+0x3a/0xa20 [ 1191.999355] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1191.999861] should_failslab+0x5/0x10 [ 1192.001936] kmem_cache_alloc+0x5b/0x480 [ 1192.002382] create_object.isra.0+0x3a/0xa20 [ 1192.002875] ? kasan_unpoison+0x23/0x50 [ 1192.003323] __kmalloc_track_caller+0x25e/0x420 [ 1192.003825] ? kstrdup_const+0x53/0x80 [ 1192.004251] kstrdup+0x36/0x70 [ 1192.004620] kstrdup_const+0x53/0x80 [ 1192.005026] alloc_vfsmnt+0xb5/0x6b0 [ 1192.005438] clone_mnt+0x6d/0xdc0 [ 1192.005819] copy_tree+0x3ac/0xa50 [ 1192.006219] copy_mnt_ns+0x1a5/0xa90 [ 1192.006624] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1192.007143] ? kmem_cache_alloc+0x332/0x480 [ 1192.007627] create_new_namespaces+0xd6/0xb30 [ 1192.008132] copy_namespaces+0x391/0x450 [ 1192.008583] copy_process+0x27f2/0x6cb0 [ 1192.009032] ? lock_is_held_type+0xd7/0x130 [ 1192.009501] ? find_held_lock+0x2c/0x110 [ 1192.009965] ? __cleanup_sighand+0xb0/0xb0 [ 1192.010437] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1192.011039] ? _copy_from_user+0x139/0x170 [ 1192.011518] ? kernel_clone+0x2f8/0xa60 [ 1192.011955] kernel_clone+0xe7/0xa60 [ 1192.012366] ? lock_is_held_type+0xd7/0x130 [ 1192.012840] ? create_io_thread+0xf0/0xf0 [ 1192.013306] ? lock_is_held_type+0xd7/0x130 [ 1192.013785] __do_sys_clone3+0x1dd/0x2e0 [ 1192.014234] ? __ia32_sys_clone+0x150/0x150 02:32:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2000000) [ 1192.014719] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1192.015495] ? vfs_write+0x188/0xae0 [ 1192.015917] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1192.016513] ? fput+0x2a/0x50 [ 1192.016852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1192.017414] do_syscall_64+0x3b/0x90 [ 1192.017826] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1192.018390] RIP: 0033:0x7f82e43e1b19 [ 1192.018793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.020801] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1192.021627] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1192.022392] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1192.023149] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.023917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.024677] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1192.025454] [ 1192.032086] EXT4-fs (loop2): Can't read superblock on 2nd try 02:32:09 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 83) 02:32:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) [ 1192.130226] FAULT_INJECTION: forcing a failure. [ 1192.130226] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.131449] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1192.131576] CPU: 0 PID: 7754 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1192.134208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1192.135422] Call Trace: [ 1192.135693] [ 1192.135938] dump_stack_lvl+0x8b/0xb3 [ 1192.136359] should_fail.cold+0x5/0xa [ 1192.136774] ? create_object.isra.0+0x3a/0xa20 [ 1192.137272] should_failslab+0x5/0x10 [ 1192.137674] kmem_cache_alloc+0x5b/0x480 [ 1192.138114] create_object.isra.0+0x3a/0xa20 [ 1192.138589] kmemleak_alloc_percpu+0xa0/0x100 [ 1192.139073] pcpu_alloc+0x7bf/0x1060 [ 1192.139505] alloc_vfsmnt+0xfd/0x6b0 [ 1192.139924] clone_mnt+0x6d/0xdc0 [ 1192.140305] copy_tree+0x3ac/0xa50 [ 1192.140698] copy_mnt_ns+0x1a5/0xa90 [ 1192.141105] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1192.141636] ? kmem_cache_alloc+0x332/0x480 [ 1192.142107] create_new_namespaces+0xd6/0xb30 [ 1192.142595] copy_namespaces+0x391/0x450 [ 1192.143031] copy_process+0x27f2/0x6cb0 [ 1192.143473] ? lock_is_held_type+0xd7/0x130 [ 1192.143941] ? find_held_lock+0x2c/0x110 [ 1192.144399] ? __cleanup_sighand+0xb0/0xb0 [ 1192.144858] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1192.145454] ? _copy_from_user+0x139/0x170 [ 1192.145915] ? kernel_clone+0x2f8/0xa60 [ 1192.146342] kernel_clone+0xe7/0xa60 [ 1192.146751] ? lock_is_held_type+0xd7/0x130 [ 1192.147214] ? create_io_thread+0xf0/0xf0 [ 1192.147676] ? lock_is_held_type+0xd7/0x130 [ 1192.148137] __do_sys_clone3+0x1dd/0x2e0 [ 1192.148573] ? __ia32_sys_clone+0x150/0x150 [ 1192.149057] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1192.149649] ? vfs_write+0x188/0xae0 [ 1192.150052] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1192.150644] ? fput+0x2a/0x50 [ 1192.150989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1192.151551] do_syscall_64+0x3b/0x90 [ 1192.151958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1192.152514] RIP: 0033:0x7f82e43e1b19 [ 1192.152920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1192.154860] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1192.155678] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1192.156440] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1192.157204] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.157979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1192.158737] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1192.159519] 02:32:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 38) 02:32:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) 02:32:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:32:24 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) 02:32:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f000000) 02:32:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 02:32:24 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 84) 02:32:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 19) [ 1207.859543] FAULT_INJECTION: forcing a failure. [ 1207.859543] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1207.862189] CPU: 0 PID: 7767 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1207.863976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1207.866420] Call Trace: [ 1207.866722] FAULT_INJECTION: forcing a failure. [ 1207.866722] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.866975] [ 1207.869268] dump_stack_lvl+0x8b/0xb3 [ 1207.870119] should_fail.cold+0x5/0xa [ 1207.870968] prepare_alloc_pages+0x17b/0x500 [ 1207.871947] __alloc_pages+0x131/0x4e0 [ 1207.872802] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1207.874132] ? lock_release+0x3b2/0x6f0 [ 1207.875008] alloc_pages+0x1a0/0x2f0 [ 1207.875854] get_zeroed_page+0x14/0xa0 [ 1207.876702] __pud_alloc+0x33/0x270 [ 1207.877494] copy_page_range+0x35ba/0x47b0 [ 1207.878443] ? find_held_lock+0x2c/0x110 [ 1207.879339] ? lock_downgrade+0x6d0/0x6d0 [ 1207.880267] ? vm_iomap_memory+0x190/0x190 [ 1207.881190] ? up_write+0x148/0x460 [ 1207.881985] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1207.883069] ? __vma_link_rb+0x540/0x700 [ 1207.883975] dup_mm+0x961/0x1250 [ 1207.884741] ? replace_mm_exe_file+0x490/0x490 [ 1207.885743] ? __raw_spin_lock_init+0x36/0x110 [ 1207.886747] copy_process+0x384b/0x6cb0 [ 1207.887671] ? __cleanup_sighand+0xb0/0xb0 [ 1207.888611] ? lock_is_held_type+0xd7/0x130 [ 1207.889550] ? find_held_lock+0x2c/0x110 [ 1207.890436] ? kernel_clone+0x2f8/0xa60 [ 1207.891308] kernel_clone+0xe7/0xa60 [ 1207.892135] ? create_io_thread+0xf0/0xf0 [ 1207.893046] ? find_held_lock+0x2c/0x110 [ 1207.893925] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1207.895117] ? populate_seccomp_data+0x214/0x540 [ 1207.896165] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1207.897359] ? __seccomp_filter+0x5ab/0xff0 [ 1207.898288] ? wait_for_completion_io+0x270/0x270 [ 1207.899343] __do_sys_clone+0xc8/0x110 [ 1207.900207] ? __do_sys_vfork+0xd0/0xd0 [ 1207.901108] ? __secure_computing+0xb4/0x290 [ 1207.902080] do_syscall_64+0x3b/0x90 [ 1207.902900] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1207.904037] RIP: 0033:0x7f466d7a6b19 [ 1207.904837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1207.908773] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1207.910396] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1207.911923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1207.913440] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.914957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1207.916480] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1207.918023] [ 1207.918521] CPU: 1 PID: 7771 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1207.919753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1207.921413] Call Trace: [ 1207.921799] [ 1207.922130] dump_stack_lvl+0x8b/0xb3 [ 1207.922717] should_fail.cold+0x5/0xa [ 1207.923284] ? create_object.isra.0+0x3a/0xa20 [ 1207.923997] should_failslab+0x5/0x10 [ 1207.924552] kmem_cache_alloc+0x5b/0x480 [ 1207.925143] ? mark_held_locks+0x9e/0xe0 [ 1207.925754] create_object.isra.0+0x3a/0xa20 [ 1207.926399] kmemleak_alloc_percpu+0xa0/0x100 [ 1207.927056] pcpu_alloc+0x7bf/0x1060 [ 1207.927639] alloc_vfsmnt+0xfd/0x6b0 [ 1207.928189] clone_mnt+0x6d/0xdc0 [ 1207.928709] copy_tree+0x3ac/0xa50 [ 1207.929261] copy_mnt_ns+0x1a5/0xa90 [ 1207.929814] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1207.930529] ? kmem_cache_alloc+0x332/0x480 [ 1207.931172] create_new_namespaces+0xd6/0xb30 [ 1207.931848] copy_namespaces+0x391/0x450 [ 1207.932448] copy_process+0x27f2/0x6cb0 [ 1207.933039] ? lock_is_held_type+0xd7/0x130 [ 1207.933665] ? find_held_lock+0x2c/0x110 [ 1207.934267] ? __cleanup_sighand+0xb0/0xb0 [ 1207.934895] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1207.935745] ? _copy_from_user+0x139/0x170 [ 1207.936372] ? kernel_clone+0x2f8/0xa60 [ 1207.936972] kernel_clone+0xe7/0xa60 [ 1207.937519] ? lock_is_held_type+0xd7/0x130 [ 1207.938141] ? create_io_thread+0xf0/0xf0 [ 1207.938765] ? lock_is_held_type+0xd7/0x130 [ 1207.939386] __do_sys_clone3+0x1dd/0x2e0 [ 1207.939993] ? __ia32_sys_clone+0x150/0x150 [ 1207.940631] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1207.941422] ? vfs_write+0x188/0xae0 [ 1207.941961] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1207.942748] ? fput+0x2a/0x50 [ 1207.943218] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1207.943984] do_syscall_64+0x3b/0x90 [ 1207.944530] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1207.945270] RIP: 0033:0x7f82e43e1b19 [ 1207.945804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1207.948466] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1207.949551] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1207.950582] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1207.951204] FAULT_INJECTION: forcing a failure. [ 1207.951204] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.951609] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.951625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1207.951639] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1207.957057] [ 1207.957387] CPU: 0 PID: 7778 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1207.959186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1207.961653] Call Trace: [ 1207.962221] [ 1207.962706] dump_stack_lvl+0x8b/0xb3 [ 1207.963574] should_fail.cold+0x5/0xa [ 1207.964415] ? kobject_uevent_env+0x236/0xfa0 [ 1207.965450] should_failslab+0x5/0x10 [ 1207.966276] kmem_cache_alloc_trace+0x55/0x3c0 [ 1207.967306] ? lock_is_held_type+0xd7/0x130 [ 1207.968271] kobject_uevent_env+0x236/0xfa0 [ 1207.969240] ? dev_uevent_filter+0xd0/0xd0 [ 1207.970190] ? _raw_spin_unlock+0x24/0x40 [ 1207.971116] disk_event_uevent+0x17b/0x1e0 [ 1207.972084] ? disk_events_async_show+0x10/0x10 [ 1207.973136] ? __fget_files+0x28d/0x470 [ 1207.974007] disk_force_media_change+0x1e/0xc0 [ 1207.975023] loop_configure+0x75b/0x1950 [ 1207.975954] ? putname+0xfe/0x140 [ 1207.976756] lo_ioctl+0x7c5/0x18b0 [ 1207.977553] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1207.978611] ? loop_set_status_old+0x1b0/0x1b0 [ 1207.979649] ? avc_ss_reset+0x180/0x180 [ 1207.980526] ? __lock_acquire+0xbac/0x6120 [ 1207.981559] ? selinux_inode_getsecctx+0x90/0x90 [ 1207.982620] ? loop_set_status_old+0x1b0/0x1b0 [ 1207.983625] blkdev_ioctl+0x362/0x7f0 [ 1207.984459] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1207.985491] ? __x64_sys_ioctl+0x97/0x210 [ 1207.986400] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1207.987600] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1207.988630] __x64_sys_ioctl+0x196/0x210 [ 1207.989518] do_syscall_64+0x3b/0x90 [ 1207.990363] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1207.991484] RIP: 0033:0x7f6d56f6c8d7 [ 1207.992319] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1207.996296] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.997938] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1207.999479] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1208.001037] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1208.002580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1208.004131] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1208.005706] [ 1208.009074] audit: type=1326 audit(1643941944.962:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7775 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1208.009933] loop4: detected capacity change from 0 to 256 [ 1208.015069] loop1: detected capacity change from 0 to 256 [ 1208.045352] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1208.050777] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x807f0000) 02:32:25 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) [ 1208.069665] FAULT_INJECTION: forcing a failure. [ 1208.069665] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.071322] CPU: 1 PID: 7780 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.072486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.074080] Call Trace: [ 1208.074439] [ 1208.074758] dump_stack_lvl+0x8b/0xb3 [ 1208.075326] should_fail.cold+0x5/0xa [ 1208.075903] ? __anon_vma_prepare+0x60/0x530 [ 1208.076555] should_failslab+0x5/0x10 [ 1208.077094] kmem_cache_alloc+0x5b/0x480 [ 1208.077675] __anon_vma_prepare+0x60/0x530 [ 1208.078255] ? __pmd_alloc+0x30d/0x680 [ 1208.078784] __handle_mm_fault+0x2811/0x3570 [ 1208.079377] ? lock_is_held_type+0xd7/0x130 [ 1208.079977] ? __pmd_alloc+0x680/0x680 [ 1208.080527] handle_mm_fault+0x2e6/0xa20 [ 1208.081081] __get_user_pages+0x522/0x1130 [ 1208.081673] ? follow_page_mask+0x1800/0x1800 [ 1208.082290] ? lock_release+0x6f0/0x6f0 [ 1208.082846] ? lock_is_held_type+0xd7/0x130 [ 1208.083432] __get_user_pages_remote+0x18f/0x870 [ 1208.084094] ? down_read+0xd0/0x440 [ 1208.084597] get_user_pages_remote+0x63/0x90 [ 1208.085193] get_arg_page+0xee/0x2b0 [ 1208.085703] ? count.constprop.0+0x280/0x280 [ 1208.086294] ? count.constprop.0+0x1b3/0x280 [ 1208.086887] copy_string_kernel+0x1b4/0x580 [ 1208.087472] ? __virt_addr_valid+0xe9/0x340 [ 1208.088076] do_execveat_common+0x4da/0x890 [ 1208.088661] ? bprm_execve+0x1960/0x1960 [ 1208.089216] __x64_sys_execveat+0xe0/0x120 [ 1208.089782] ? trace_hardirqs_on+0x38/0x190 [ 1208.090366] do_syscall_64+0x3b/0x90 [ 1208.090874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.091577] RIP: 0033:0x7f245182fb19 [ 1208.092066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.094531] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1208.095547] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1208.096496] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1208.097418] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.098341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.099262] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1208.100201] 02:32:25 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 85) 02:32:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) [ 1208.158613] FAULT_INJECTION: forcing a failure. [ 1208.158613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1208.160102] CPU: 1 PID: 7791 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.161112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.162553] Call Trace: [ 1208.162873] [ 1208.163153] dump_stack_lvl+0x8b/0xb3 [ 1208.163632] should_fail.cold+0x5/0xa [ 1208.164125] prepare_alloc_pages+0x17b/0x500 [ 1208.164703] __alloc_pages+0x131/0x4e0 [ 1208.165209] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1208.165980] ? find_held_lock+0x2c/0x110 [ 1208.166502] ? lock_downgrade+0x6d0/0x6d0 [ 1208.167017] ? do_raw_spin_lock+0x121/0x260 [ 1208.167563] alloc_pages+0x1a0/0x2f0 [ 1208.168036] __pmd_alloc+0x37/0x680 [ 1208.168488] copy_page_range+0x3545/0x47b0 [ 1208.169059] ? lock_downgrade+0x6d0/0x6d0 [ 1208.169574] ? vm_iomap_memory+0x190/0x190 [ 1208.170082] ? up_write+0x148/0x460 [ 1208.170544] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1208.171179] ? __vma_link_rb+0x540/0x700 [ 1208.171705] dup_mm+0x961/0x1250 [ 1208.172129] ? replace_mm_exe_file+0x490/0x490 [ 1208.172691] ? __raw_spin_lock_init+0x36/0x110 [ 1208.173269] copy_process+0x384b/0x6cb0 [ 1208.173777] ? __cleanup_sighand+0xb0/0xb0 [ 1208.174324] ? lock_is_held_type+0xd7/0x130 [ 1208.174867] ? find_held_lock+0x2c/0x110 [ 1208.175381] ? kernel_clone+0x2f8/0xa60 [ 1208.175903] kernel_clone+0xe7/0xa60 [ 1208.176384] ? create_io_thread+0xf0/0xf0 [ 1208.176899] ? find_held_lock+0x2c/0x110 [ 1208.176989] loop2: detected capacity change from 0 to 4 [ 1208.177416] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1208.177437] ? populate_seccomp_data+0x214/0x540 [ 1208.177457] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1208.180575] ? __seccomp_filter+0x5ab/0xff0 [ 1208.181100] ? wait_for_completion_io+0x270/0x270 [ 1208.181717] __do_sys_clone+0xc8/0x110 [ 1208.182200] ? __do_sys_vfork+0xd0/0xd0 [ 1208.182721] ? __secure_computing+0xb4/0x290 [ 1208.183264] do_syscall_64+0x3b/0x90 [ 1208.183761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.184403] RIP: 0033:0x7f466d7a6b19 [ 1208.184864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.187174] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1208.188105] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1208.188993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.189835] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.190725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.191642] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1208.192564] 02:32:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf6ffffff) [ 1208.219835] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1208.223895] loop1: detected capacity change from 0 to 256 [ 1208.228943] FAULT_INJECTION: forcing a failure. [ 1208.228943] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.231546] CPU: 0 PID: 7794 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.233351] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.235823] Call Trace: [ 1208.236383] [ 1208.236876] dump_stack_lvl+0x8b/0xb3 [ 1208.237733] should_fail.cold+0x5/0xa [ 1208.238581] ? alloc_vfsmnt+0x23/0x6b0 [ 1208.239431] should_failslab+0x5/0x10 [ 1208.240253] kmem_cache_alloc+0x5b/0x480 [ 1208.241141] ? lock_release+0x3b2/0x6f0 [ 1208.242027] alloc_vfsmnt+0x23/0x6b0 [ 1208.242841] clone_mnt+0x6d/0xdc0 [ 1208.243628] copy_tree+0x3ac/0xa50 [ 1208.244420] copy_mnt_ns+0x1a5/0xa90 [ 1208.245265] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1208.246307] ? kmem_cache_alloc+0x332/0x480 [ 1208.247308] create_new_namespaces+0xd6/0xb30 [ 1208.248307] copy_namespaces+0x391/0x450 [ 1208.249193] copy_process+0x27f2/0x6cb0 [ 1208.250056] ? lock_is_held_type+0xd7/0x130 [ 1208.250985] ? find_held_lock+0x2c/0x110 [ 1208.251890] ? __cleanup_sighand+0xb0/0xb0 [ 1208.252822] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1208.254009] ? _copy_from_user+0x139/0x170 [ 1208.254929] ? kernel_clone+0x2f8/0xa60 [ 1208.255816] kernel_clone+0xe7/0xa60 [ 1208.256629] ? lock_is_held_type+0xd7/0x130 [ 1208.257557] ? create_io_thread+0xf0/0xf0 [ 1208.258473] ? lock_is_held_type+0xd7/0x130 [ 1208.259412] __do_sys_clone3+0x1dd/0x2e0 [ 1208.260306] ? __ia32_sys_clone+0x150/0x150 [ 1208.261265] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1208.262448] ? vfs_write+0x188/0xae0 [ 1208.263260] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1208.264451] ? fput+0x2a/0x50 [ 1208.265144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1208.266260] do_syscall_64+0x3b/0x90 [ 1208.267073] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.268197] RIP: 0033:0x7f82e43e1b19 [ 1208.268990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.272926] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1208.274549] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1208.276087] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1208.277611] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.279131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.280660] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1208.282214] [ 1208.292217] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 20) 02:32:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xfffffff6) 02:32:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 39) 02:32:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(0xffffffffffffffff) 02:32:25 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) [ 1208.370573] FAULT_INJECTION: forcing a failure. [ 1208.370573] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.372400] CPU: 1 PID: 7804 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.373641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.375351] Call Trace: [ 1208.375747] [ 1208.376085] dump_stack_lvl+0x8b/0xb3 [ 1208.376680] should_fail.cold+0x5/0xa [ 1208.377242] ? __pmd_alloc+0x94/0x680 [ 1208.377825] should_failslab+0x5/0x10 [ 1208.378380] kmem_cache_alloc+0x5b/0x480 [ 1208.379000] ? alloc_pages+0x1a8/0x2f0 [ 1208.379576] __pmd_alloc+0x94/0x680 [ 1208.380132] copy_page_range+0x3545/0x47b0 [ 1208.380775] ? lock_downgrade+0x6d0/0x6d0 [ 1208.381416] ? vm_iomap_memory+0x190/0x190 [ 1208.382038] ? up_write+0x148/0x460 [ 1208.382609] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1208.383407] ? __vma_link_rb+0x540/0x700 [ 1208.384071] dup_mm+0x961/0x1250 [ 1208.384606] ? replace_mm_exe_file+0x490/0x490 [ 1208.385190] ? __raw_spin_lock_init+0x36/0x110 [ 1208.385766] copy_process+0x384b/0x6cb0 [ 1208.386290] ? __cleanup_sighand+0xb0/0xb0 [ 1208.386833] ? lock_is_held_type+0xd7/0x130 [ 1208.387377] ? find_held_lock+0x2c/0x110 [ 1208.387872] ? kernel_clone+0x2f8/0xa60 [ 1208.388375] kernel_clone+0xe7/0xa60 [ 1208.388857] ? create_io_thread+0xf0/0xf0 [ 1208.389350] ? find_held_lock+0x2c/0x110 [ 1208.389854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1208.390510] ? populate_seccomp_data+0x214/0x540 [ 1208.391152] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1208.392131] ? __seccomp_filter+0x5ab/0xff0 [ 1208.392913] ? wait_for_completion_io+0x270/0x270 [ 1208.393725] __do_sys_clone+0xc8/0x110 [ 1208.394249] ? __do_sys_vfork+0xd0/0xd0 [ 1208.394772] ? __secure_computing+0xb4/0x290 [ 1208.395359] do_syscall_64+0x3b/0x90 [ 1208.395828] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.396480] RIP: 0033:0x7f466d7a6b19 [ 1208.396953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.399388] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1208.400355] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1208.401237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.402133] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.403023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.403948] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1208.404861] [ 1208.412579] FAULT_INJECTION: forcing a failure. [ 1208.412579] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.415348] CPU: 0 PID: 7806 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.417156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.419611] Call Trace: [ 1208.420173] [ 1208.420654] dump_stack_lvl+0x8b/0xb3 [ 1208.421497] should_fail.cold+0x5/0xa [ 1208.422326] ? kobject_get_path+0xc0/0x1d0 [ 1208.423254] should_failslab+0x5/0x10 [ 1208.424095] __kmalloc+0x72/0x440 [ 1208.424858] kobject_get_path+0xc0/0x1d0 [ 1208.425751] kobject_uevent_env+0x25c/0xfa0 [ 1208.426700] ? _raw_spin_unlock+0x24/0x40 [ 1208.427608] disk_event_uevent+0x17b/0x1e0 [ 1208.428530] ? disk_events_async_show+0x10/0x10 [ 1208.429545] ? __fget_files+0x28d/0x470 [ 1208.430446] disk_force_media_change+0x1e/0xc0 [ 1208.431465] loop_configure+0x75b/0x1950 [ 1208.432381] ? putname+0xfe/0x140 [ 1208.433162] lo_ioctl+0x7c5/0x18b0 [ 1208.433937] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1208.434992] ? loop_set_status_old+0x1b0/0x1b0 [ 1208.436003] ? avc_ss_reset+0x180/0x180 [ 1208.436882] ? __lock_acquire+0xbac/0x6120 [ 1208.437875] ? selinux_inode_getsecctx+0x90/0x90 [ 1208.438930] ? loop_set_status_old+0x1b0/0x1b0 [ 1208.439956] blkdev_ioctl+0x362/0x7f0 [ 1208.440789] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1208.441823] ? __x64_sys_ioctl+0x97/0x210 [ 1208.442737] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1208.443963] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1208.445013] __x64_sys_ioctl+0x196/0x210 [ 1208.445912] do_syscall_64+0x3b/0x90 [ 1208.446736] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.447850] RIP: 0033:0x7f6d56f6c8d7 [ 1208.448647] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.452608] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1208.454245] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1208.455796] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1208.457335] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1208.458868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1208.460408] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1208.461976] [ 1208.466102] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1208.467288] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1208.521957] loop4: detected capacity change from 0 to 256 [ 1208.536447] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1208.548942] FAULT_INJECTION: forcing a failure. [ 1208.548942] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.550312] CPU: 1 PID: 7811 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1208.551242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1208.552549] Call Trace: [ 1208.552840] [ 1208.553094] dump_stack_lvl+0x8b/0xb3 [ 1208.553538] should_fail.cold+0x5/0xa [ 1208.553973] ? create_object.isra.0+0x3a/0xa20 [ 1208.554498] should_failslab+0x5/0x10 [ 1208.554929] kmem_cache_alloc+0x5b/0x480 [ 1208.555402] create_object.isra.0+0x3a/0xa20 [ 1208.555912] ? kasan_unpoison+0x23/0x50 [ 1208.556373] kmem_cache_alloc+0x239/0x480 [ 1208.556852] __anon_vma_prepare+0x60/0x530 [ 1208.557340] ? __pmd_alloc+0x30d/0x680 [ 1208.557787] __handle_mm_fault+0x2811/0x3570 [ 1208.558327] ? lock_is_held_type+0xd7/0x130 [ 1208.558827] ? __pmd_alloc+0x680/0x680 [ 1208.559286] handle_mm_fault+0x2e6/0xa20 [ 1208.559757] __get_user_pages+0x522/0x1130 [ 1208.560262] ? follow_page_mask+0x1800/0x1800 [ 1208.560773] ? lock_release+0x6f0/0x6f0 [ 1208.561234] ? lock_is_held_type+0xd7/0x130 [ 1208.561732] __get_user_pages_remote+0x18f/0x870 [ 1208.562282] ? down_read+0xd0/0x440 [ 1208.562702] get_user_pages_remote+0x63/0x90 [ 1208.563219] get_arg_page+0xee/0x2b0 [ 1208.563669] ? count.constprop.0+0x280/0x280 [ 1208.564171] ? count.constprop.0+0x1b3/0x280 [ 1208.564671] copy_string_kernel+0x1b4/0x580 [ 1208.565164] ? __virt_addr_valid+0xe9/0x340 [ 1208.565661] do_execveat_common+0x4da/0x890 [ 1208.566159] ? bprm_execve+0x1960/0x1960 [ 1208.566632] __x64_sys_execveat+0xe0/0x120 [ 1208.567120] ? trace_hardirqs_on+0x38/0x190 [ 1208.567619] do_syscall_64+0x3b/0x90 [ 1208.568075] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1208.568698] RIP: 0033:0x7f245182fb19 [ 1208.569116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1208.571323] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1208.572243] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1208.572855] loop2: detected capacity change from 0 to 4 [ 1208.573105] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1208.573116] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1208.576032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1208.576899] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1208.577773] [ 1208.598900] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1208.624391] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:39 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) 02:32:39 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:32:39 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 86) 02:32:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xc0ff7f0000) 02:32:39 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) 02:32:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 21) 02:32:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(0xffffffffffffffff) 02:32:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 40) [ 1223.058710] loop4: detected capacity change from 0 to 256 [ 1223.065752] FAULT_INJECTION: forcing a failure. [ 1223.065752] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.068089] CPU: 1 PID: 7829 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.069700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.071912] Call Trace: [ 1223.072115] FAULT_INJECTION: forcing a failure. [ 1223.072115] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.072411] [ 1223.072422] dump_stack_lvl+0x8b/0xb3 [ 1223.075759] should_fail.cold+0x5/0xa [ 1223.076526] ? create_object.isra.0+0x3a/0xa20 [ 1223.077433] should_failslab+0x5/0x10 [ 1223.078175] kmem_cache_alloc+0x5b/0x480 [ 1223.078981] create_object.isra.0+0x3a/0xa20 [ 1223.079871] ? kasan_unpoison+0x23/0x50 [ 1223.080675] kmem_cache_alloc+0x239/0x480 [ 1223.081493] alloc_vfsmnt+0x23/0x6b0 [ 1223.082234] clone_mnt+0x6d/0xdc0 [ 1223.082932] copy_tree+0x3ac/0xa50 [ 1223.083649] copy_mnt_ns+0x1a5/0xa90 [ 1223.084388] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1223.085343] ? kmem_cache_alloc+0x332/0x480 [ 1223.086198] create_new_namespaces+0xd6/0xb30 [ 1223.087097] copy_namespaces+0x391/0x450 [ 1223.087925] copy_process+0x27f2/0x6cb0 [ 1223.088724] ? lock_is_held_type+0xd7/0x130 [ 1223.089575] ? find_held_lock+0x2c/0x110 [ 1223.090404] ? __cleanup_sighand+0xb0/0xb0 [ 1223.091252] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1223.092354] ? _copy_from_user+0x139/0x170 [ 1223.093200] ? kernel_clone+0x2f8/0xa60 [ 1223.093986] kernel_clone+0xe7/0xa60 [ 1223.094728] ? lock_is_held_type+0xd7/0x130 [ 1223.095573] ? create_io_thread+0xf0/0xf0 [ 1223.096425] ? lock_is_held_type+0xd7/0x130 [ 1223.097294] __do_sys_clone3+0x1dd/0x2e0 [ 1223.098100] ? __ia32_sys_clone+0x150/0x150 [ 1223.098974] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1223.100084] ? vfs_write+0x188/0xae0 [ 1223.100821] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1223.101907] ? fput+0x2a/0x50 [ 1223.102544] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1223.103563] do_syscall_64+0x3b/0x90 [ 1223.104317] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.105319] RIP: 0033:0x7f82e43e1b19 [ 1223.106036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.109635] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1223.111110] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1223.112513] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1223.113913] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.115308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.116755] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1223.118178] [ 1223.118633] CPU: 0 PID: 7831 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.120306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.122564] Call Trace: [ 1223.123066] [ 1223.123514] dump_stack_lvl+0x8b/0xb3 [ 1223.124320] should_fail.cold+0x5/0xa [ 1223.125100] ? create_object.isra.0+0x3a/0xa20 [ 1223.125381] loop1: detected capacity change from 0 to 256 [ 1223.126027] should_failslab+0x5/0x10 [ 1223.126050] kmem_cache_alloc+0x5b/0x480 [ 1223.128698] create_object.isra.0+0x3a/0xa20 [ 1223.129596] ? kasan_unpoison+0x23/0x50 [ 1223.130417] __kmalloc+0x25b/0x440 [ 1223.131148] kobject_get_path+0xc0/0x1d0 [ 1223.131997] kobject_uevent_env+0x25c/0xfa0 [ 1223.132881] ? _raw_spin_unlock+0x24/0x40 [ 1223.133732] disk_event_uevent+0x17b/0x1e0 [ 1223.134599] ? disk_events_async_show+0x10/0x10 [ 1223.135549] ? __fget_files+0x28d/0x470 [ 1223.136383] disk_force_media_change+0x1e/0xc0 [ 1223.137329] loop_configure+0x75b/0x1950 [ 1223.138165] ? putname+0xfe/0x140 [ 1223.138885] lo_ioctl+0x7c5/0x18b0 [ 1223.139605] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1223.140598] ? loop_set_status_old+0x1b0/0x1b0 [ 1223.141537] ? avc_ss_reset+0x180/0x180 [ 1223.142349] ? __lock_acquire+0xbac/0x6120 [ 1223.143268] ? selinux_inode_getsecctx+0x90/0x90 [ 1223.144301] ? loop_set_status_old+0x1b0/0x1b0 [ 1223.145229] blkdev_ioctl+0x362/0x7f0 [ 1223.145999] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1223.146960] ? __x64_sys_ioctl+0x97/0x210 [ 1223.147816] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1223.148925] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1223.149898] __x64_sys_ioctl+0x196/0x210 [ 1223.150726] do_syscall_64+0x3b/0x90 [ 1223.151511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.152562] RIP: 0033:0x7f6d56f6c8d7 [ 1223.153310] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.157001] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.158539] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1223.159969] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1223.161251] FAULT_INJECTION: forcing a failure. [ 1223.161251] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.161416] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1223.161432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1223.166381] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1223.167891] [ 1223.168378] CPU: 1 PID: 7834 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.169991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.172221] Call Trace: [ 1223.172723] [ 1223.173161] dump_stack_lvl+0x8b/0xb3 [ 1223.174059] should_fail.cold+0x5/0xa [ 1223.174818] ? create_object.isra.0+0x3a/0xa20 [ 1223.175846] should_failslab+0x5/0x10 [ 1223.176633] kmem_cache_alloc+0x5b/0x480 [ 1223.177443] create_object.isra.0+0x3a/0xa20 [ 1223.178438] ? kasan_unpoison+0x23/0x50 [ 1223.179285] kmem_cache_alloc+0x239/0x480 [ 1223.180125] __anon_vma_prepare+0x60/0x530 [ 1223.180995] ? __pmd_alloc+0x30d/0x680 [ 1223.181768] __handle_mm_fault+0x2811/0x3570 [ 1223.182658] ? lock_is_held_type+0xd7/0x130 [ 1223.183509] ? __pmd_alloc+0x680/0x680 [ 1223.184363] handle_mm_fault+0x2e6/0xa20 [ 1223.185171] __get_user_pages+0x522/0x1130 [ 1223.186024] ? follow_page_mask+0x1800/0x1800 [ 1223.186914] ? lock_release+0x6f0/0x6f0 [ 1223.187717] ? lock_is_held_type+0xd7/0x130 [ 1223.188598] __get_user_pages_remote+0x18f/0x870 [ 1223.189548] ? down_read+0xd0/0x440 [ 1223.190286] get_user_pages_remote+0x63/0x90 [ 1223.191172] get_arg_page+0xee/0x2b0 [ 1223.191923] ? count.constprop.0+0x280/0x280 [ 1223.192805] ? count.constprop.0+0x1b3/0x280 [ 1223.193684] copy_string_kernel+0x1b4/0x580 [ 1223.194555] ? __virt_addr_valid+0xe9/0x340 [ 1223.195425] do_execveat_common+0x4da/0x890 [ 1223.196287] ? bprm_execve+0x1960/0x1960 [ 1223.197104] __x64_sys_execveat+0xe0/0x120 [ 1223.197951] ? trace_hardirqs_on+0x38/0x190 [ 1223.198804] do_syscall_64+0x3b/0x90 [ 1223.199558] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.200590] RIP: 0033:0x7f245182fb19 [ 1223.201311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.204924] RSP: 002b:00007f244ed84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1223.206429] RAX: ffffffffffffffda RBX: 00007f2451943020 RCX: 00007f245182fb19 [ 1223.207884] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1223.209324] RBP: 00007f244ed841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.210759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.212206] R13: 00007ffe6f6d4c7f R14: 00007f244ed84300 R15: 0000000000022000 [ 1223.213639] [ 1223.217672] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1223.231663] FAULT_INJECTION: forcing a failure. [ 1223.231663] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.234175] CPU: 0 PID: 7837 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.235958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.238417] Call Trace: [ 1223.238962] [ 1223.239448] dump_stack_lvl+0x8b/0xb3 [ 1223.240284] should_fail.cold+0x5/0xa [ 1223.241124] ? create_object.isra.0+0x3a/0xa20 [ 1223.242110] should_failslab+0x5/0x10 [ 1223.242953] kmem_cache_alloc+0x5b/0x480 [ 1223.243834] create_object.isra.0+0x3a/0xa20 [ 1223.244789] ? kasan_unpoison+0x23/0x50 [ 1223.245627] kmem_cache_alloc+0x239/0x480 [ 1223.246563] __pmd_alloc+0x94/0x680 [ 1223.247287] copy_page_range+0x3545/0x47b0 [ 1223.248185] ? queued_spin_lock_slowpath+0xcc/0x930 [ 1223.249257] ? lock_downgrade+0x6d0/0x6d0 [ 1223.250102] ? vm_iomap_memory+0x190/0x190 [ 1223.250966] ? up_write+0x148/0x460 [ 1223.251700] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1223.252740] ? __vma_link_rb+0x540/0x700 [ 1223.253578] dup_mm+0x961/0x1250 [ 1223.254302] ? replace_mm_exe_file+0x490/0x490 [ 1223.255230] ? __raw_spin_lock_init+0x36/0x110 [ 1223.256185] copy_process+0x384b/0x6cb0 [ 1223.257012] ? __cleanup_sighand+0xb0/0xb0 [ 1223.257882] ? lock_is_held_type+0xd7/0x130 [ 1223.258767] ? find_held_lock+0x2c/0x110 [ 1223.259603] ? kernel_clone+0x2f8/0xa60 [ 1223.260432] kernel_clone+0xe7/0xa60 [ 1223.261203] ? create_io_thread+0xf0/0xf0 [ 1223.262033] ? find_held_lock+0x2c/0x110 [ 1223.262868] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1223.263880] ? wait_for_completion_io+0x270/0x270 [ 1223.264868] __do_sys_clone+0xc8/0x110 [ 1223.265653] ? __do_sys_vfork+0xd0/0xd0 [ 1223.266466] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1223.267557] ? vfs_write+0x188/0xae0 [ 1223.268353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1223.269387] do_syscall_64+0x3b/0x90 [ 1223.270153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.271183] RIP: 0033:0x7f466d7a6b19 [ 1223.271947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.275625] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1223.277160] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1223.278544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1223.279629] loop2: detected capacity change from 0 to 4 [ 1223.279984] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.282445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.283899] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1223.285454] 02:32:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7f8000000000) [ 1223.312449] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1223.335943] audit: type=1326 audit(1643941960.289:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7819 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1223.343920] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) close(0xffffffffffffffff) 02:32:40 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 87) 02:32:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:32:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffc0000000) [ 1223.470411] loop1: detected capacity change from 0 to 256 [ 1223.477828] audit: type=1326 audit(1643941960.431:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7846 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 02:32:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 22) [ 1223.495656] FAULT_INJECTION: forcing a failure. [ 1223.495656] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.497839] CPU: 1 PID: 7850 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.499433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.501425] Call Trace: [ 1223.501898] [ 1223.502335] dump_stack_lvl+0x8b/0xb3 [ 1223.503080] should_fail.cold+0x5/0xa [ 1223.503869] should_failslab+0x5/0x10 [ 1223.504592] __kmalloc_track_caller+0x79/0x420 [ 1223.505496] ? kstrdup_const+0x53/0x80 [ 1223.506255] kstrdup+0x36/0x70 [ 1223.506887] kstrdup_const+0x53/0x80 [ 1223.507595] alloc_vfsmnt+0xb5/0x6b0 [ 1223.508315] clone_mnt+0x6d/0xdc0 [ 1223.508983] copy_tree+0x3ac/0xa50 [ 1223.509673] copy_mnt_ns+0x1a5/0xa90 [ 1223.510377] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1223.511286] ? kmem_cache_alloc+0x332/0x480 [ 1223.512107] create_new_namespaces+0xd6/0xb30 [ 1223.512969] copy_namespaces+0x391/0x450 [ 1223.513737] copy_process+0x27f2/0x6cb0 [ 1223.514498] ? lock_is_held_type+0xd7/0x130 [ 1223.515313] ? find_held_lock+0x2c/0x110 [ 1223.516120] ? __cleanup_sighand+0xb0/0xb0 [ 1223.516928] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1223.517959] ? _copy_from_user+0x139/0x170 [ 1223.518762] ? kernel_clone+0x2f8/0xa60 [ 1223.519514] kernel_clone+0xe7/0xa60 [ 1223.520223] ? lock_is_held_type+0xd7/0x130 [ 1223.521028] ? create_io_thread+0xf0/0xf0 [ 1223.521817] ? lock_is_held_type+0xd7/0x130 [ 1223.522627] __do_sys_clone3+0x1dd/0x2e0 [ 1223.523383] ? __ia32_sys_clone+0x150/0x150 [ 1223.524229] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1223.525248] ? vfs_write+0x188/0xae0 [ 1223.525961] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1223.526984] ? fput+0x2a/0x50 [ 1223.527588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1223.528565] do_syscall_64+0x3b/0x90 [ 1223.529278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.530230] RIP: 0033:0x7f82e43e1b19 [ 1223.530916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.534303] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1223.535706] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1223.537079] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1223.538385] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.539760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.541079] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1223.542469] [ 1223.558911] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:32:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 41) 02:32:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffffe00000) [ 1223.659258] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1223.668888] FAULT_INJECTION: forcing a failure. [ 1223.668888] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.671375] CPU: 1 PID: 7860 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.672853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.674847] Call Trace: [ 1223.675312] [ 1223.675739] dump_stack_lvl+0x8b/0xb3 [ 1223.676477] should_fail.cold+0x5/0xa [ 1223.677208] ? __alloc_skb+0x211/0x340 [ 1223.677950] should_failslab+0x5/0x10 [ 1223.678671] kmem_cache_alloc_node+0x55/0x490 [ 1223.679527] __alloc_skb+0x211/0x340 [ 1223.680256] alloc_uevent_skb+0x7b/0x210 [ 1223.681041] kobject_uevent_env+0xaa4/0xfa0 [ 1223.681855] ? _raw_spin_unlock+0x24/0x40 [ 1223.682658] disk_event_uevent+0x17b/0x1e0 [ 1223.683450] ? disk_events_async_show+0x10/0x10 [ 1223.684352] ? __fget_files+0x28d/0x470 [ 1223.685105] disk_force_media_change+0x1e/0xc0 [ 1223.685964] loop_configure+0x75b/0x1950 [ 1223.686736] ? putname+0xfe/0x140 [ 1223.687398] lo_ioctl+0x7c5/0x18b0 [ 1223.688087] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1223.688988] ? loop_set_status_old+0x1b0/0x1b0 [ 1223.689857] ? avc_ss_reset+0x180/0x180 [ 1223.690613] ? __lock_acquire+0xbac/0x6120 [ 1223.691473] ? selinux_inode_getsecctx+0x90/0x90 [ 1223.692388] ? loop_set_status_old+0x1b0/0x1b0 [ 1223.693248] blkdev_ioctl+0x362/0x7f0 [ 1223.693960] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1223.694844] ? __x64_sys_ioctl+0x97/0x210 [ 1223.695650] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1223.696703] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1223.697623] __x64_sys_ioctl+0x196/0x210 [ 1223.698402] do_syscall_64+0x3b/0x90 [ 1223.699135] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.700146] RIP: 0033:0x7f6d56f6c8d7 [ 1223.700830] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.704211] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.705599] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1223.706914] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1223.708260] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1223.709570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1223.710905] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1223.712264] [ 1223.764545] loop2: detected capacity change from 0 to 4 [ 1223.776760] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1223.778295] FAULT_INJECTION: forcing a failure. [ 1223.778295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1223.780961] CPU: 0 PID: 7862 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1223.782694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1223.785284] Call Trace: [ 1223.785875] [ 1223.786411] dump_stack_lvl+0x8b/0xb3 [ 1223.787323] should_fail.cold+0x5/0xa [ 1223.788281] prepare_alloc_pages+0x17b/0x500 [ 1223.789484] ? find_held_lock+0x2c/0x110 [ 1223.790441] __alloc_pages+0x131/0x4e0 [ 1223.791354] ? __anon_vma_prepare+0x252/0x530 [ 1223.792453] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1223.793855] ? lock_release+0x3b2/0x6f0 [ 1223.794786] ? lock_downgrade+0x6d0/0x6d0 [ 1223.795704] ? up_write+0x148/0x460 [ 1223.796482] alloc_pages_vma+0xde/0x500 [ 1223.797342] __handle_mm_fault+0xfb3/0x3570 [ 1223.798249] ? lock_is_held_type+0xd7/0x130 [ 1223.799150] ? __pmd_alloc+0x680/0x680 [ 1223.799994] handle_mm_fault+0x2e6/0xa20 [ 1223.800841] __get_user_pages+0x522/0x1130 [ 1223.801762] ? follow_page_mask+0x1800/0x1800 [ 1223.802703] ? lock_release+0x6f0/0x6f0 [ 1223.803549] ? lock_is_held_type+0xd7/0x130 [ 1223.804470] __get_user_pages_remote+0x18f/0x870 [ 1223.805472] ? down_read+0xd0/0x440 [ 1223.806258] get_user_pages_remote+0x63/0x90 [ 1223.807200] get_arg_page+0xee/0x2b0 [ 1223.807980] ? count.constprop.0+0x280/0x280 [ 1223.808926] ? count.constprop.0+0x1b3/0x280 [ 1223.809881] copy_string_kernel+0x1b4/0x580 [ 1223.810792] ? __virt_addr_valid+0xe9/0x340 [ 1223.811693] do_execveat_common+0x4da/0x890 [ 1223.812598] ? bprm_execve+0x1960/0x1960 [ 1223.813449] __x64_sys_execveat+0xe0/0x120 [ 1223.814321] ? trace_hardirqs_on+0x38/0x190 [ 1223.815200] do_syscall_64+0x3b/0x90 [ 1223.815994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1223.817040] RIP: 0033:0x7f245182fb19 [ 1223.817795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1223.821498] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1223.823049] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1223.824511] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1223.825963] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1223.827413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1223.828878] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1223.830365] 02:32:55 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 88) 02:32:55 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:32:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:32:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffffefe000) 02:32:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 23) 02:32:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 42) 02:32:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) 02:32:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7f8000000000) [ 1238.653419] loop4: detected capacity change from 0 to 256 [ 1238.660731] FAULT_INJECTION: forcing a failure. [ 1238.660731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1238.662805] FAULT_INJECTION: forcing a failure. [ 1238.662805] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.663493] CPU: 0 PID: 7880 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.666344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.668818] Call Trace: [ 1238.669378] [ 1238.669866] dump_stack_lvl+0x8b/0xb3 [ 1238.670712] should_fail.cold+0x5/0xa [ 1238.671556] prepare_alloc_pages+0x17b/0x500 [ 1238.672537] __alloc_pages+0x131/0x4e0 [ 1238.673395] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1238.674721] ? lock_is_held_type+0xd7/0x130 [ 1238.675663] ? find_held_lock+0x2c/0x110 [ 1238.676577] alloc_pages+0x1a0/0x2f0 [ 1238.677406] pte_alloc_one+0x16/0x1f0 [ 1238.678244] __pte_alloc+0x69/0x200 [ 1238.679049] ? pmd_install+0x250/0x250 [ 1238.679903] ? do_raw_spin_unlock+0x4f/0x210 [ 1238.680873] ? _raw_spin_unlock+0x24/0x40 [ 1238.681782] copy_page_range+0x1b84/0x47b0 [ 1238.682765] ? vm_iomap_memory+0x190/0x190 [ 1238.683693] ? up_write+0x148/0x460 [ 1238.684497] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1238.685586] ? __vma_link_rb+0x540/0x700 [ 1238.686486] dup_mm+0x961/0x1250 [ 1238.687251] ? replace_mm_exe_file+0x490/0x490 [ 1238.688276] ? __raw_spin_lock_init+0x36/0x110 [ 1238.689284] copy_process+0x384b/0x6cb0 [ 1238.690194] ? __cleanup_sighand+0xb0/0xb0 [ 1238.691129] ? lock_is_held_type+0xd7/0x130 [ 1238.692076] ? find_held_lock+0x2c/0x110 [ 1238.692966] ? kernel_clone+0x2f8/0xa60 [ 1238.693849] kernel_clone+0xe7/0xa60 [ 1238.694678] ? create_io_thread+0xf0/0xf0 [ 1238.695587] ? find_held_lock+0x2c/0x110 [ 1238.696494] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.697689] ? populate_seccomp_data+0x214/0x540 [ 1238.698720] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1238.699922] ? __seccomp_filter+0x5ab/0xff0 [ 1238.700867] ? wait_for_completion_io+0x270/0x270 [ 1238.701932] __do_sys_clone+0xc8/0x110 [ 1238.702787] ? __do_sys_vfork+0xd0/0xd0 [ 1238.703688] ? __secure_computing+0xb4/0x290 [ 1238.704663] do_syscall_64+0x3b/0x90 [ 1238.705488] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.706605] RIP: 0033:0x7f466d7a6b19 [ 1238.707407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.711387] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1238.713039] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1238.714583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.716128] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.717665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.719204] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1238.720790] [ 1238.721293] CPU: 1 PID: 7884 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.722230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.723497] Call Trace: [ 1238.723786] [ 1238.724049] dump_stack_lvl+0x8b/0xb3 [ 1238.724490] should_fail.cold+0x5/0xa [ 1238.724924] ? create_object.isra.0+0x3a/0xa20 [ 1238.725449] should_failslab+0x5/0x10 [ 1238.725881] kmem_cache_alloc+0x5b/0x480 [ 1238.726351] create_object.isra.0+0x3a/0xa20 [ 1238.726845] ? kasan_unpoison+0x23/0x50 [ 1238.727304] __kmalloc_track_caller+0x25e/0x420 [ 1238.727826] ? kstrdup_const+0x53/0x80 [ 1238.728292] kstrdup+0x36/0x70 [ 1238.728653] kstrdup_const+0x53/0x80 [ 1238.729076] alloc_vfsmnt+0xb5/0x6b0 [ 1238.729498] clone_mnt+0x6d/0xdc0 [ 1238.729902] copy_tree+0x3ac/0xa50 [ 1238.730316] copy_mnt_ns+0x1a5/0xa90 [ 1238.730737] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1238.731296] ? kmem_cache_alloc+0x332/0x480 [ 1238.731779] create_new_namespaces+0xd6/0xb30 [ 1238.732313] copy_namespaces+0x391/0x450 [ 1238.732777] copy_process+0x27f2/0x6cb0 [ 1238.733238] ? lock_is_held_type+0xd7/0x130 [ 1238.733722] ? find_held_lock+0x2c/0x110 [ 1238.734197] ? __cleanup_sighand+0xb0/0xb0 [ 1238.734613] loop1: detected capacity change from 0 to 256 [ 1238.734678] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1238.736501] ? _copy_from_user+0x139/0x170 [ 1238.736993] ? kernel_clone+0x2f8/0xa60 [ 1238.737455] kernel_clone+0xe7/0xa60 [ 1238.737873] ? lock_is_held_type+0xd7/0x130 [ 1238.738361] ? create_io_thread+0xf0/0xf0 [ 1238.738844] ? lock_is_held_type+0xd7/0x130 [ 1238.739334] __do_sys_clone3+0x1dd/0x2e0 [ 1238.739802] ? __ia32_sys_clone+0x150/0x150 [ 1238.740322] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.740945] ? vfs_write+0x188/0xae0 [ 1238.741377] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1238.741994] ? fput+0x2a/0x50 [ 1238.742359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1238.742945] do_syscall_64+0x3b/0x90 [ 1238.743377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.743958] RIP: 0033:0x7f82e43e1b19 [ 1238.744393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.746433] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1238.747271] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1238.748087] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1238.748881] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.749672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.750460] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1238.751264] [ 1238.751872] FAULT_INJECTION: forcing a failure. [ 1238.751872] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.753249] CPU: 1 PID: 7878 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.754142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.755379] Call Trace: [ 1238.755640] [ 1238.755882] dump_stack_lvl+0x8b/0xb3 [ 1238.756324] should_fail.cold+0x5/0xa [ 1238.756743] ? create_object.isra.0+0x3a/0xa20 [ 1238.757250] should_failslab+0x5/0x10 [ 1238.757660] kmem_cache_alloc+0x5b/0x480 [ 1238.758104] create_object.isra.0+0x3a/0xa20 [ 1238.758586] ? kasan_unpoison+0x23/0x50 [ 1238.759021] kmem_cache_alloc_node+0x248/0x490 [ 1238.759516] __alloc_skb+0x211/0x340 [ 1238.759916] alloc_uevent_skb+0x7b/0x210 [ 1238.760400] kobject_uevent_env+0xaa4/0xfa0 [ 1238.760894] ? _raw_spin_unlock+0x24/0x40 [ 1238.761354] disk_event_uevent+0x17b/0x1e0 [ 1238.761814] ? disk_events_async_show+0x10/0x10 [ 1238.762335] ? __fget_files+0x28d/0x470 [ 1238.762766] disk_force_media_change+0x1e/0xc0 [ 1238.763269] loop_configure+0x75b/0x1950 [ 1238.763714] ? putname+0xfe/0x140 [ 1238.764106] lo_ioctl+0x7c5/0x18b0 [ 1238.764502] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1238.765048] ? loop_set_status_old+0x1b0/0x1b0 [ 1238.765566] ? avc_ss_reset+0x180/0x180 [ 1238.766021] ? __lock_acquire+0xbac/0x6120 [ 1238.766537] ? selinux_inode_getsecctx+0x90/0x90 [ 1238.767093] ? loop_set_status_old+0x1b0/0x1b0 [ 1238.767607] blkdev_ioctl+0x362/0x7f0 [ 1238.768054] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1238.768494] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1238.768590] ? __x64_sys_ioctl+0x97/0x210 [ 1238.770845] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.771469] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1238.772028] __x64_sys_ioctl+0x196/0x210 [ 1238.772496] do_syscall_64+0x3b/0x90 [ 1238.772927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.773506] RIP: 0033:0x7f6d56f6c8d7 [ 1238.773921] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.776016] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.776792] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1238.777597] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1238.778397] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1238.779114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1238.779908] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1238.780725] [ 1238.787292] audit: type=1326 audit(1643941975.738:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7871 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1238.795017] loop2: detected capacity change from 0 to 4 [ 1238.798679] EXT4-fs (loop2): Can't read superblock on 2nd try 02:32:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) [ 1238.815568] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1238.836718] FAULT_INJECTION: forcing a failure. [ 1238.836718] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.838016] CPU: 1 PID: 7881 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.838893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.840094] Call Trace: [ 1238.840376] [ 1238.840616] dump_stack_lvl+0x8b/0xb3 [ 1238.841039] should_fail.cold+0x5/0xa [ 1238.841451] ? prepare_creds+0x2b/0x6f0 [ 1238.841901] should_failslab+0x5/0x10 [ 1238.842312] kmem_cache_alloc+0x5b/0x480 [ 1238.842756] prepare_creds+0x2b/0x6f0 [ 1238.843178] ? acct_arg_size+0x7b/0xe0 [ 1238.843599] prepare_exec_creds+0xd/0x250 [ 1238.844039] bprm_execve+0xcf/0x1960 [ 1238.844448] ? count.constprop.0+0x1b3/0x280 [ 1238.844918] ? open_exec+0x70/0x70 [ 1238.845307] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1238.845896] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.846511] ? copy_string_kernel+0x4c8/0x580 [ 1238.847019] do_execveat_common+0x727/0x890 [ 1238.847507] ? bprm_execve+0x1960/0x1960 [ 1238.847972] __x64_sys_execveat+0xe0/0x120 [ 1238.848461] ? trace_hardirqs_on+0x38/0x190 [ 1238.848893] do_syscall_64+0x3b/0x90 [ 1238.849318] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.849896] RIP: 0033:0x7f245182fb19 [ 1238.850307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.852360] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1238.853213] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1238.854009] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1238.854810] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.855602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.856409] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1238.857211] 02:32:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 43) [ 1238.888999] FAULT_INJECTION: forcing a failure. [ 1238.888999] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.891211] FAULT_INJECTION: forcing a failure. [ 1238.891211] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.891532] CPU: 0 PID: 7892 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.894469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.896930] Call Trace: [ 1238.897487] [ 1238.897972] dump_stack_lvl+0x8b/0xb3 [ 1238.898822] should_fail.cold+0x5/0xa [ 1238.899665] ? ptlock_alloc+0x1d/0x70 [ 1238.900517] should_failslab+0x5/0x10 [ 1238.901342] kmem_cache_alloc+0x5b/0x480 [ 1238.902245] ptlock_alloc+0x1d/0x70 [ 1238.903051] pte_alloc_one+0x68/0x1f0 [ 1238.903892] __pte_alloc+0x69/0x200 [ 1238.904705] ? pmd_install+0x250/0x250 [ 1238.905560] ? do_raw_spin_unlock+0x4f/0x210 [ 1238.906525] ? _raw_spin_unlock+0x24/0x40 [ 1238.907433] copy_page_range+0x1b84/0x47b0 [ 1238.908445] ? vm_iomap_memory+0x190/0x190 [ 1238.909372] ? up_write+0x148/0x460 [ 1238.910165] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1238.911256] ? __vma_link_rb+0x540/0x700 [ 1238.912165] dup_mm+0x961/0x1250 [ 1238.912934] ? replace_mm_exe_file+0x490/0x490 [ 1238.913941] ? __raw_spin_lock_init+0x36/0x110 [ 1238.914954] copy_process+0x384b/0x6cb0 [ 1238.915870] ? __cleanup_sighand+0xb0/0xb0 [ 1238.916815] ? lock_is_held_type+0xd7/0x130 [ 1238.917757] ? find_held_lock+0x2c/0x110 [ 1238.918647] ? kernel_clone+0x2f8/0xa60 [ 1238.919527] kernel_clone+0xe7/0xa60 [ 1238.920374] ? create_io_thread+0xf0/0xf0 [ 1238.921283] ? find_held_lock+0x2c/0x110 [ 1238.922171] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.923363] ? populate_seccomp_data+0x214/0x540 [ 1238.924406] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1238.925601] ? __seccomp_filter+0x5ab/0xff0 [ 1238.926532] ? wait_for_completion_io+0x270/0x270 [ 1238.927593] __do_sys_clone+0xc8/0x110 [ 1238.928458] ? __do_sys_vfork+0xd0/0xd0 [ 1238.929358] ? __secure_computing+0xb4/0x290 [ 1238.930325] do_syscall_64+0x3b/0x90 [ 1238.931153] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.932287] RIP: 0033:0x7f466d7a6b19 [ 1238.933086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.937071] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1238.938709] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1238.940265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.941829] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.943359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1238.944899] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1238.946462] [ 1238.946962] CPU: 1 PID: 7895 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1238.947806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1238.948939] Call Trace: [ 1238.949202] [ 1238.949428] dump_stack_lvl+0x8b/0xb3 [ 1238.949820] should_fail.cold+0x5/0xa [ 1238.950219] should_failslab+0x5/0x10 [ 1238.950621] __kmalloc_node_track_caller+0x7e/0x440 [ 1238.951174] ? alloc_uevent_skb+0x7b/0x210 [ 1238.951634] __alloc_skb+0xe3/0x340 [ 1238.952064] alloc_uevent_skb+0x7b/0x210 [ 1238.952509] kobject_uevent_env+0xaa4/0xfa0 [ 1238.952979] ? _raw_spin_unlock+0x24/0x40 [ 1238.953422] disk_event_uevent+0x17b/0x1e0 [ 1238.953879] ? disk_events_async_show+0x10/0x10 [ 1238.954390] ? __fget_files+0x28d/0x470 [ 1238.954814] disk_force_media_change+0x1e/0xc0 [ 1238.955306] loop_configure+0x75b/0x1950 [ 1238.955752] ? putname+0xfe/0x140 [ 1238.956157] lo_ioctl+0x7c5/0x18b0 [ 1238.956540] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1238.957058] ? loop_set_status_old+0x1b0/0x1b0 [ 1238.957564] ? avc_ss_reset+0x180/0x180 [ 1238.957994] ? __lock_acquire+0xbac/0x6120 [ 1238.958480] ? selinux_inode_getsecctx+0x90/0x90 [ 1238.958989] ? loop_set_status_old+0x1b0/0x1b0 [ 1238.959484] blkdev_ioctl+0x362/0x7f0 [ 1238.959889] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1238.960413] ? __x64_sys_ioctl+0x97/0x210 [ 1238.960860] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1238.961451] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1238.961959] __x64_sys_ioctl+0x196/0x210 [ 1238.962396] do_syscall_64+0x3b/0x90 [ 1238.962798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1238.963343] RIP: 0033:0x7f6d56f6c8d7 [ 1238.963727] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.965764] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1238.966607] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1238.967397] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1238.968222] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1238.969009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1238.969796] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1238.970597] [ 1238.993929] loop2: detected capacity change from 0 to 4 [ 1239.014452] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1239.025164] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:33:09 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 89) 02:33:09 executing program 6: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1252.236856] FAULT_INJECTION: forcing a failure. [ 1252.236856] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.238125] CPU: 1 PID: 7907 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1252.239007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1252.240118] Call Trace: [ 1252.240408] [ 1252.240659] dump_stack_lvl+0x8b/0xb3 [ 1252.241092] should_fail.cold+0x5/0xa [ 1252.241515] ? create_object.isra.0+0x3a/0xa20 [ 1252.242027] should_failslab+0x5/0x10 [ 1252.242443] kmem_cache_alloc+0x5b/0x480 [ 1252.242881] create_object.isra.0+0x3a/0xa20 [ 1252.243354] ? kasan_unpoison+0x23/0x50 [ 1252.243791] __kmalloc_node_track_caller+0x269/0x440 [ 1252.244295] ? alloc_uevent_skb+0x7b/0x210 [ 1252.244756] __alloc_skb+0xe3/0x340 [ 1252.245162] alloc_uevent_skb+0x7b/0x210 [ 1252.245613] kobject_uevent_env+0xaa4/0xfa0 [ 1252.246072] ? _raw_spin_unlock+0x24/0x40 [ 1252.246489] disk_event_uevent+0x17b/0x1e0 [ 1252.246946] ? disk_events_async_show+0x10/0x10 [ 1252.247456] ? __fget_files+0x28d/0x470 [ 1252.247900] disk_force_media_change+0x1e/0xc0 [ 1252.248407] loop_configure+0x75b/0x1950 [ 1252.248814] ? putname+0xfe/0x140 [ 1252.249197] lo_ioctl+0x7c5/0x18b0 [ 1252.249584] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1252.250106] ? loop_set_status_old+0x1b0/0x1b0 [ 1252.250608] ? avc_ss_reset+0x180/0x180 [ 1252.251046] ? __lock_acquire+0xbac/0x6120 [ 1252.251542] ? selinux_inode_getsecctx+0x90/0x90 [ 1252.252069] ? loop_set_status_old+0x1b0/0x1b0 [ 1252.252583] blkdev_ioctl+0x362/0x7f0 [ 1252.252992] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1252.253511] ? __x64_sys_ioctl+0x97/0x210 [ 1252.253953] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1252.254555] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1252.255034] __x64_sys_ioctl+0x196/0x210 [ 1252.255473] do_syscall_64+0x3b/0x90 [ 1252.255889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1252.256457] RIP: 0033:0x7f6d56f6c8d7 [ 1252.256853] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.258800] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.259601] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1252.260394] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1252.261089] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1252.261850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1252.262559] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1252.263344] 02:33:09 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f000000) 02:33:09 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe0ffff7f0000) 02:33:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 24) 02:33:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 44) 02:33:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) [ 1252.269103] audit: type=1326 audit(1643941989.222:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7910 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1252.272378] loop1: detected capacity change from 0 to 256 [ 1252.279088] loop2: detected capacity change from 0 to 4 [ 1252.281913] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1252.286322] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1252.292989] FAULT_INJECTION: forcing a failure. [ 1252.292989] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.294244] CPU: 1 PID: 7917 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1252.295130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1252.296359] Call Trace: [ 1252.296632] [ 1252.296863] dump_stack_lvl+0x8b/0xb3 [ 1252.297274] should_fail.cold+0x5/0xa [ 1252.297463] loop4: detected capacity change from 0 to 256 [ 1252.297693] ? create_object.isra.0+0x3a/0xa20 [ 1252.297717] should_failslab+0x5/0x10 [ 1252.299731] kmem_cache_alloc+0x5b/0x480 [ 1252.300198] create_object.isra.0+0x3a/0xa20 [ 1252.300677] kmemleak_alloc_percpu+0xa0/0x100 [ 1252.301170] pcpu_alloc+0x7bf/0x1060 [ 1252.301583] alloc_vfsmnt+0xfd/0x6b0 [ 1252.301962] clone_mnt+0x6d/0xdc0 [ 1252.302360] copy_tree+0x3ac/0xa50 [ 1252.302760] copy_mnt_ns+0x1a5/0xa90 [ 1252.303173] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1252.303701] ? kmem_cache_alloc+0x332/0x480 [ 1252.304169] create_new_namespaces+0xd6/0xb30 [ 1252.304636] copy_namespaces+0x391/0x450 [ 1252.305072] copy_process+0x27f2/0x6cb0 [ 1252.305503] ? lock_is_held_type+0xd7/0x130 [ 1252.305857] FAULT_INJECTION: forcing a failure. [ 1252.305857] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.305967] ? find_held_lock+0x2c/0x110 [ 1252.308994] ? __cleanup_sighand+0xb0/0xb0 [ 1252.309423] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1252.310022] ? _copy_from_user+0x139/0x170 [ 1252.310482] ? kernel_clone+0x2f8/0xa60 [ 1252.310917] kernel_clone+0xe7/0xa60 [ 1252.311290] ? lock_is_held_type+0xd7/0x130 [ 1252.311753] ? create_io_thread+0xf0/0xf0 [ 1252.312175] ? lock_is_held_type+0xd7/0x130 [ 1252.312656] __do_sys_clone3+0x1dd/0x2e0 [ 1252.313062] ? __ia32_sys_clone+0x150/0x150 [ 1252.313546] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1252.314083] ? vfs_write+0x188/0xae0 [ 1252.314502] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1252.315041] ? fput+0x2a/0x50 [ 1252.315389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1252.315897] do_syscall_64+0x3b/0x90 [ 1252.316314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1252.316865] RIP: 0033:0x7f82e43e1b19 [ 1252.317259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.319238] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1252.320060] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1252.320842] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1252.321609] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.322377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.323148] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1252.323919] [ 1252.324168] CPU: 0 PID: 7918 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1252.325956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1252.328423] Call Trace: [ 1252.328967] [ 1252.329529] dump_stack_lvl+0x8b/0xb3 [ 1252.330366] should_fail.cold+0x5/0xa [ 1252.331193] ? create_object.isra.0+0x3a/0xa20 [ 1252.332207] should_failslab+0x5/0x10 [ 1252.333017] kmem_cache_alloc+0x5b/0x480 [ 1252.333911] create_object.isra.0+0x3a/0xa20 [ 1252.334865] ? kasan_unpoison+0x23/0x50 [ 1252.335734] kmem_cache_alloc+0x239/0x480 [ 1252.336665] ptlock_alloc+0x1d/0x70 [ 1252.337469] pte_alloc_one+0x68/0x1f0 [ 1252.338317] __pte_alloc+0x69/0x200 [ 1252.339110] ? pmd_install+0x250/0x250 [ 1252.339965] ? do_raw_spin_unlock+0x4f/0x210 [ 1252.340937] ? _raw_spin_unlock+0x24/0x40 [ 1252.341858] copy_page_range+0x1b84/0x47b0 [ 1252.342815] ? vm_iomap_memory+0x190/0x190 [ 1252.343743] ? up_write+0x148/0x460 [ 1252.344551] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1252.345645] ? __vma_link_rb+0x540/0x700 [ 1252.346547] dup_mm+0x961/0x1250 [ 1252.347305] ? replace_mm_exe_file+0x490/0x490 [ 1252.348328] ? __raw_spin_lock_init+0x36/0x110 [ 1252.349347] copy_process+0x384b/0x6cb0 [ 1252.350228] ? __cleanup_sighand+0xb0/0xb0 [ 1252.351156] ? lock_is_held_type+0xd7/0x130 [ 1252.352067] ? find_held_lock+0x2c/0x110 [ 1252.352962] ? kernel_clone+0x2f8/0xa60 [ 1252.353833] kernel_clone+0xe7/0xa60 [ 1252.354663] ? create_io_thread+0xf0/0xf0 [ 1252.355567] ? find_held_lock+0x2c/0x110 [ 1252.356457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1252.357643] ? populate_seccomp_data+0x214/0x540 [ 1252.358669] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1252.359857] ? __seccomp_filter+0x5ab/0xff0 [ 1252.360788] ? wait_for_completion_io+0x270/0x270 [ 1252.361852] __do_sys_clone+0xc8/0x110 [ 1252.362699] ? __do_sys_vfork+0xd0/0xd0 [ 1252.363600] ? __secure_computing+0xb4/0x290 [ 1252.364574] do_syscall_64+0x3b/0x90 [ 1252.365389] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1252.366494] RIP: 0033:0x7f466d7a6b19 [ 1252.367296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.371196] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1252.372829] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1252.374349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1252.375851] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.377388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.378895] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1252.380461] 02:33:09 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) [ 1252.406056] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1252.423296] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1252.424305] Buffer I/O error on dev loop2, logical block 0, async page read [ 1252.425699] FAULT_INJECTION: forcing a failure. [ 1252.425699] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.427993] CPU: 0 PID: 7922 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1252.429652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1252.431906] Call Trace: [ 1252.432431] [ 1252.432885] dump_stack_lvl+0x8b/0xb3 [ 1252.433665] should_fail.cold+0x5/0xa [ 1252.434463] ? create_object.isra.0+0x3a/0xa20 [ 1252.435402] should_failslab+0x5/0x10 [ 1252.436164] kmem_cache_alloc+0x5b/0x480 [ 1252.436997] create_object.isra.0+0x3a/0xa20 [ 1252.437884] ? kasan_unpoison+0x23/0x50 [ 1252.438697] kmem_cache_alloc+0x239/0x480 [ 1252.439535] prepare_creds+0x2b/0x6f0 [ 1252.440341] ? acct_arg_size+0x7b/0xe0 [ 1252.441136] prepare_exec_creds+0xd/0x250 [ 1252.441984] bprm_execve+0xcf/0x1960 [ 1252.442737] ? count.constprop.0+0x1b3/0x280 [ 1252.443627] ? open_exec+0x70/0x70 [ 1252.444356] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1252.445493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1252.446606] ? copy_string_kernel+0x4c8/0x580 [ 1252.447549] do_execveat_common+0x727/0x890 [ 1252.448452] ? bprm_execve+0x1960/0x1960 [ 1252.449289] __x64_sys_execveat+0xe0/0x120 [ 1252.450157] ? trace_hardirqs_on+0x38/0x190 [ 1252.451037] do_syscall_64+0x3b/0x90 [ 1252.451811] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1252.452867] RIP: 0033:0x7f245182fb19 [ 1252.453612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1252.457312] RSP: 002b:00007f244ed84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1252.458862] RAX: ffffffffffffffda RBX: 00007f2451943020 RCX: 00007f245182fb19 [ 1252.460326] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1252.461781] RBP: 00007f244ed841d0 R08: 0000000000000000 R09: 0000000000000000 [ 1252.463219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1252.464665] R13: 00007ffe6f6d4c7f R14: 00007f244ed84300 R15: 0000000000022000 [ 1252.466137] [ 1252.468681] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:33:22 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 45) 02:33:22 executing program 6: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:33:22 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 02:33:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x10000000000000) 02:33:22 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 90) 02:33:22 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 25) [ 1266.006539] FAULT_INJECTION: forcing a failure. [ 1266.006539] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.007738] CPU: 0 PID: 7935 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.008579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.009845] Call Trace: [ 1266.010134] [ 1266.010365] dump_stack_lvl+0x8b/0xb3 [ 1266.010799] should_fail.cold+0x5/0xa [ 1266.011228] ? create_object.isra.0+0x3a/0xa20 [ 1266.011745] should_failslab+0x5/0x10 [ 1266.012178] kmem_cache_alloc+0x5b/0x480 [ 1266.012653] ? mark_held_locks+0x9e/0xe0 [ 1266.013118] create_object.isra.0+0x3a/0xa20 [ 1266.013624] kmemleak_alloc_percpu+0xa0/0x100 [ 1266.014137] pcpu_alloc+0x7bf/0x1060 [ 1266.014564] alloc_vfsmnt+0xfd/0x6b0 [ 1266.014948] clone_mnt+0x6d/0xdc0 [ 1266.015348] copy_tree+0x3ac/0xa50 [ 1266.015759] copy_mnt_ns+0x1a5/0xa90 [ 1266.016186] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1266.016748] ? kmem_cache_alloc+0x332/0x480 [ 1266.017234] create_new_namespaces+0xd6/0xb30 [ 1266.017750] copy_namespaces+0x391/0x450 [ 1266.018207] copy_process+0x27f2/0x6cb0 [ 1266.018660] ? lock_is_held_type+0xd7/0x130 [ 1266.019150] ? find_held_lock+0x2c/0x110 [ 1266.019615] ? __cleanup_sighand+0xb0/0xb0 [ 1266.020053] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1266.020689] ? _copy_from_user+0x139/0x170 [ 1266.021172] ? kernel_clone+0x2f8/0xa60 [ 1266.021620] kernel_clone+0xe7/0xa60 [ 1266.022041] ? lock_is_held_type+0xd7/0x130 [ 1266.022533] ? create_io_thread+0xf0/0xf0 [ 1266.023015] ? lock_is_held_type+0xd7/0x130 [ 1266.023515] __do_sys_clone3+0x1dd/0x2e0 [ 1266.023971] ? __ia32_sys_clone+0x150/0x150 [ 1266.024495] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.025107] ? vfs_write+0x188/0xae0 [ 1266.025534] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.026158] ? fput+0x2a/0x50 [ 1266.026525] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1266.027105] do_syscall_64+0x3b/0x90 [ 1266.027528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.028110] RIP: 0033:0x7f82e43e1b19 [ 1266.028538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.030609] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1266.031464] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1266.032270] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1266.033091] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.033894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.034693] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1266.035507] [ 1266.054247] FAULT_INJECTION: forcing a failure. [ 1266.054247] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.055421] CPU: 0 PID: 7947 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.056251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.057590] Call Trace: [ 1266.057888] [ 1266.058148] dump_stack_lvl+0x8b/0xb3 [ 1266.058606] should_fail.cold+0x5/0xa [ 1266.059063] ? skb_clone+0x170/0x3c0 [ 1266.059498] should_failslab+0x5/0x10 [ 1266.059936] kmem_cache_alloc+0x5b/0x480 [ 1266.060441] skb_clone+0x170/0x3c0 [ 1266.060857] netlink_broadcast+0x9ae/0xd60 [ 1266.061360] ? alloc_uevent_skb+0x1c2/0x210 [ 1266.061874] kobject_uevent_env+0xa6b/0xfa0 [ 1266.062391] ? _raw_spin_unlock+0x24/0x40 [ 1266.062878] disk_event_uevent+0x17b/0x1e0 [ 1266.063375] ? disk_events_async_show+0x10/0x10 [ 1266.063926] ? __fget_files+0x28d/0x470 [ 1266.064404] disk_force_media_change+0x1e/0xc0 [ 1266.064938] loop_configure+0x75b/0x1950 [ 1266.065420] ? putname+0xfe/0x140 [ 1266.065834] lo_ioctl+0x7c5/0x18b0 [ 1266.066256] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1266.066816] ? loop_set_status_old+0x1b0/0x1b0 [ 1266.067351] ? avc_ss_reset+0x180/0x180 [ 1266.067819] ? __lock_acquire+0xbac/0x6120 [ 1266.068352] ? selinux_inode_getsecctx+0x90/0x90 [ 1266.068937] ? loop_set_status_old+0x1b0/0x1b0 [ 1266.069475] blkdev_ioctl+0x362/0x7f0 [ 1266.069921] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1266.070473] ? __x64_sys_ioctl+0x97/0x210 [ 1266.070955] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.071594] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1266.072142] __x64_sys_ioctl+0x196/0x210 [ 1266.072635] do_syscall_64+0x3b/0x90 [ 1266.073071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.073671] RIP: 0033:0x7f6d56f6c8d7 [ 1266.074042] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.076175] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.077055] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1266.077768] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1266.078603] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1266.079427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1266.080151] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1266.080891] [ 1266.081852] loop4: detected capacity change from 0 to 256 [ 1266.098586] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x20000000000000) [ 1266.111969] audit: type=1326 audit(1643942003.065:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7941 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1266.113706] FAULT_INJECTION: forcing a failure. [ 1266.113706] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.116643] CPU: 1 PID: 7948 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.118473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.120994] Call Trace: [ 1266.121569] [ 1266.122070] dump_stack_lvl+0x8b/0xb3 [ 1266.122945] should_fail.cold+0x5/0xa [ 1266.123809] ? vm_area_dup+0x78/0x290 [ 1266.124697] should_failslab+0x5/0x10 [ 1266.125550] kmem_cache_alloc+0x5b/0x480 [ 1266.126463] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1266.127594] vm_area_dup+0x78/0x290 [ 1266.128439] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.129686] ? copy_page_range+0x2cbb/0x47b0 [ 1266.130729] ? vm_area_alloc+0x110/0x110 [ 1266.131664] ? vm_iomap_memory+0x190/0x190 02:33:23 executing program 6: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1266.132637] ? up_write+0x148/0x460 [ 1266.133565] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1266.134687] ? __vma_link_rb+0x540/0x700 [ 1266.135616] dup_mm+0x53f/0x1250 [ 1266.136428] ? replace_mm_exe_file+0x490/0x490 [ 1266.137473] ? __raw_spin_lock_init+0x36/0x110 [ 1266.138519] copy_process+0x384b/0x6cb0 [ 1266.139484] ? __cleanup_sighand+0xb0/0xb0 [ 1266.140486] ? lock_is_held_type+0xd7/0x130 [ 1266.141457] ? find_held_lock+0x2c/0x110 [ 1266.142385] ? kernel_clone+0x2f8/0xa60 [ 1266.143295] kernel_clone+0xe7/0xa60 [ 1266.144151] ? create_io_thread+0xf0/0xf0 [ 1266.145096] ? find_held_lock+0x2c/0x110 [ 1266.145986] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.147155] ? populate_seccomp_data+0x214/0x540 [ 1266.148160] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.149323] ? __seccomp_filter+0x5ab/0xff0 [ 1266.150243] ? wait_for_completion_io+0x270/0x270 [ 1266.151272] __do_sys_clone+0xc8/0x110 [ 1266.152108] ? __do_sys_vfork+0xd0/0xd0 [ 1266.152995] ? __secure_computing+0xb4/0x290 [ 1266.153948] do_syscall_64+0x3b/0x90 [ 1266.154742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.155839] RIP: 0033:0x7f466d7a6b19 [ 1266.156629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.160487] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1266.162084] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1266.163564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.165077] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.166564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.168053] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1266.169577] 02:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe0efffff7f0000) [ 1266.193720] FAULT_INJECTION: forcing a failure. [ 1266.193720] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.196163] CPU: 1 PID: 7950 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.197908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.200283] Call Trace: [ 1266.200832] [ 1266.201303] dump_stack_lvl+0x8b/0xb3 [ 1266.202123] should_fail.cold+0x5/0xa [ 1266.202934] ? security_prepare_creds+0x10a/0x180 [ 1266.203961] should_failslab+0x5/0x10 [ 1266.204782] __kmalloc+0x72/0x440 [ 1266.205528] security_prepare_creds+0x10a/0x180 [ 1266.206518] prepare_creds+0x505/0x6f0 [ 1266.207349] ? acct_arg_size+0x7b/0xe0 [ 1266.208177] prepare_exec_creds+0xd/0x250 [ 1266.209069] bprm_execve+0xcf/0x1960 [ 1266.209867] ? count.constprop.0+0x1b3/0x280 [ 1266.210801] ? open_exec+0x70/0x70 [ 1266.211552] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.212730] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.213887] ? copy_string_kernel+0x4c8/0x580 [ 1266.214845] do_execveat_common+0x727/0x890 [ 1266.215762] ? bprm_execve+0x1960/0x1960 [ 1266.216650] __x64_sys_execveat+0xe0/0x120 [ 1266.217547] ? trace_hardirqs_on+0x38/0x190 [ 1266.218456] do_syscall_64+0x3b/0x90 [ 1266.219250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.220332] RIP: 0033:0x7f245182fb19 [ 1266.221115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.224962] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1266.226552] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1266.228035] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1266.229539] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.231044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.232531] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1266.234045] 02:33:23 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 91) [ 1266.253756] loop2: detected capacity change from 0 to 4 [ 1266.272145] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1266.275068] FAULT_INJECTION: forcing a failure. [ 1266.275068] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.276280] CPU: 0 PID: 7962 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.277129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.278252] Call Trace: [ 1266.278509] [ 1266.278737] dump_stack_lvl+0x8b/0xb3 [ 1266.279134] should_fail.cold+0x5/0xa [ 1266.279523] ? alloc_vfsmnt+0x23/0x6b0 [ 1266.279923] should_failslab+0x5/0x10 [ 1266.280306] kmem_cache_alloc+0x5b/0x480 [ 1266.280733] ? lock_release+0x3b2/0x6f0 [ 1266.281166] alloc_vfsmnt+0x23/0x6b0 [ 1266.281570] clone_mnt+0x6d/0xdc0 [ 1266.281951] copy_tree+0x3ac/0xa50 [ 1266.282347] copy_mnt_ns+0x1a5/0xa90 [ 1266.282739] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1266.283263] ? kmem_cache_alloc+0x332/0x480 [ 1266.283716] create_new_namespaces+0xd6/0xb30 [ 1266.284202] copy_namespaces+0x391/0x450 [ 1266.284659] copy_process+0x27f2/0x6cb0 [ 1266.285075] ? lock_is_held_type+0xd7/0x130 [ 1266.285541] ? find_held_lock+0x2c/0x110 [ 1266.285972] ? __cleanup_sighand+0xb0/0xb0 [ 1266.286434] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1266.287026] ? _copy_from_user+0x139/0x170 [ 1266.287484] ? kernel_clone+0x2f8/0xa60 [ 1266.287911] kernel_clone+0xe7/0xa60 [ 1266.288305] ? lock_is_held_type+0xd7/0x130 [ 1266.288770] ? create_io_thread+0xf0/0xf0 [ 1266.289216] ? lock_is_held_type+0xd7/0x130 [ 1266.289681] __do_sys_clone3+0x1dd/0x2e0 [ 1266.290118] ? __ia32_sys_clone+0x150/0x150 [ 1266.290596] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.291173] ? vfs_write+0x188/0xae0 [ 1266.291569] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.292139] ? fput+0x2a/0x50 [ 1266.292491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1266.293038] do_syscall_64+0x3b/0x90 [ 1266.293453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.293996] RIP: 0033:0x7f82e43e1b19 [ 1266.294384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.296311] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1266.297111] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1266.297853] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1266.298602] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.299347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.300085] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1266.300856] [ 1266.302558] audit: type=1326 audit(1643942003.255:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7955 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 02:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100000000000000) 02:33:23 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 46) 02:33:23 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000000000000) 02:33:23 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 92) [ 1266.448267] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1266.453045] FAULT_INJECTION: forcing a failure. [ 1266.453045] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.454297] CPU: 0 PID: 7973 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.455121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.456255] Call Trace: [ 1266.456533] [ 1266.456761] dump_stack_lvl+0x8b/0xb3 [ 1266.457158] should_fail.cold+0x5/0xa [ 1266.457546] ? create_object.isra.0+0x3a/0xa20 [ 1266.458024] should_failslab+0x5/0x10 [ 1266.458428] kmem_cache_alloc+0x5b/0x480 [ 1266.458874] create_object.isra.0+0x3a/0xa20 [ 1266.459351] ? kasan_unpoison+0x23/0x50 [ 1266.459789] kmem_cache_alloc+0x239/0x480 [ 1266.460241] alloc_vfsmnt+0x23/0x6b0 [ 1266.460673] clone_mnt+0x6d/0xdc0 [ 1266.461056] copy_tree+0x3ac/0xa50 [ 1266.461447] copy_mnt_ns+0x1a5/0xa90 [ 1266.461847] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1266.462374] ? kmem_cache_alloc+0x332/0x480 [ 1266.462842] create_new_namespaces+0xd6/0xb30 [ 1266.463334] copy_namespaces+0x391/0x450 [ 1266.463774] copy_process+0x27f2/0x6cb0 [ 1266.464207] ? lock_is_held_type+0xd7/0x130 [ 1266.464676] ? find_held_lock+0x2c/0x110 [ 1266.465134] ? __cleanup_sighand+0xb0/0xb0 [ 1266.465587] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1266.466176] ? _copy_from_user+0x139/0x170 [ 1266.466641] ? kernel_clone+0x2f8/0xa60 [ 1266.467071] kernel_clone+0xe7/0xa60 [ 1266.467473] ? lock_is_held_type+0xd7/0x130 [ 1266.467932] ? create_io_thread+0xf0/0xf0 [ 1266.468392] ? lock_is_held_type+0xd7/0x130 [ 1266.468863] __do_sys_clone3+0x1dd/0x2e0 [ 1266.469295] ? __ia32_sys_clone+0x150/0x150 [ 1266.469765] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.470342] ? vfs_write+0x188/0xae0 [ 1266.470744] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1266.471325] ? fput+0x2a/0x50 [ 1266.471668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1266.472218] do_syscall_64+0x3b/0x90 [ 1266.472623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.473171] RIP: 0033:0x7f82e43e1b19 [ 1266.473557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.475486] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1266.476283] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1266.477030] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1266.477777] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.478542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1266.479274] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1266.480029] [ 1266.495778] FAULT_INJECTION: forcing a failure. [ 1266.495778] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.498356] CPU: 1 PID: 7976 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1266.500073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1266.502432] Call Trace: [ 1266.502969] [ 1266.503436] dump_stack_lvl+0x8b/0xb3 [ 1266.504254] should_fail.cold+0x5/0xa [ 1266.505068] ? create_object.isra.0+0x3a/0xa20 [ 1266.506041] should_failslab+0x5/0x10 [ 1266.506838] kmem_cache_alloc+0x5b/0x480 [ 1266.507704] create_object.isra.0+0x3a/0xa20 [ 1266.508653] ? kasan_unpoison+0x23/0x50 [ 1266.509504] kmem_cache_alloc+0x239/0x480 [ 1266.510383] skb_clone+0x170/0x3c0 [ 1266.511158] netlink_broadcast+0x9ae/0xd60 [ 1266.512063] ? alloc_uevent_skb+0x1c2/0x210 [ 1266.512995] kobject_uevent_env+0xa6b/0xfa0 [ 1266.513925] ? _raw_spin_unlock+0x24/0x40 [ 1266.514804] disk_event_uevent+0x17b/0x1e0 [ 1266.515704] ? disk_events_async_show+0x10/0x10 [ 1266.516705] ? __fget_files+0x28d/0x470 [ 1266.517560] disk_force_media_change+0x1e/0xc0 [ 1266.518531] loop_configure+0x75b/0x1950 [ 1266.519417] ? putname+0xfe/0x140 [ 1266.520170] lo_ioctl+0x7c5/0x18b0 [ 1266.520940] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1266.521958] ? loop_set_status_old+0x1b0/0x1b0 [ 1266.522924] ? avc_ss_reset+0x180/0x180 [ 1266.523774] ? __lock_acquire+0xbac/0x6120 [ 1266.524755] ? selinux_inode_getsecctx+0x90/0x90 [ 1266.525776] ? loop_set_status_old+0x1b0/0x1b0 [ 1266.526746] blkdev_ioctl+0x362/0x7f0 [ 1266.527546] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1266.528546] ? __x64_sys_ioctl+0x97/0x210 [ 1266.529422] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1266.530578] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1266.531574] __x64_sys_ioctl+0x196/0x210 [ 1266.532443] do_syscall_64+0x3b/0x90 [ 1266.533240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1266.534319] RIP: 0033:0x7f6d56f6c8d7 [ 1266.535096] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1266.538932] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.540530] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1266.542025] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1266.543507] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1266.544992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1266.546471] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1266.547975] [ 1266.574335] loop2: detected capacity change from 0 to 4 [ 1266.578477] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:37 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1280.604896] FAULT_INJECTION: forcing a failure. [ 1280.604896] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.606131] CPU: 0 PID: 7997 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.606946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.608055] Call Trace: [ 1280.608310] [ 1280.608533] dump_stack_lvl+0x8b/0xb3 [ 1280.608931] should_fail.cold+0x5/0xa [ 1280.609316] ? __kernfs_new_node+0xd4/0x8b0 [ 1280.609750] should_failslab+0x5/0x10 [ 1280.610128] kmem_cache_alloc+0x5b/0x480 [ 1280.610538] __kernfs_new_node+0xd4/0x8b0 [ 1280.610951] ? kernfs_path_from_node+0x60/0x60 [ 1280.611400] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1280.611918] ? mark_held_locks+0x9e/0xe0 [ 1280.612330] ? lock_is_held_type+0xd7/0x130 [ 1280.612766] ? find_held_lock+0x2c/0x110 [ 1280.613172] kernfs_create_dir_ns+0x9c/0x220 [ 1280.613613] internal_create_group+0x782/0xb20 [ 1280.614075] ? sysfs_remove_group+0x170/0x170 [ 1280.614521] ? lock_is_held_type+0xd7/0x130 [ 1280.614948] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1280.615020] loop4: detected capacity change from 0 to 256 [ 1280.615417] ? loop_configure+0x1950/0x1950 [ 1280.615437] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1280.615456] ? __loop_update_dio+0x2a3/0x620 [ 1280.617964] loop_configure+0xe87/0x1950 [ 1280.618395] lo_ioctl+0x7c5/0x18b0 [ 1280.618767] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1280.619269] ? loop_set_status_old+0x1b0/0x1b0 [ 1280.619755] ? avc_ss_reset+0x180/0x180 [ 1280.620180] ? __lock_acquire+0xbac/0x6120 [ 1280.620661] ? selinux_inode_getsecctx+0x90/0x90 [ 1280.621169] ? loop_set_status_old+0x1b0/0x1b0 [ 1280.621646] blkdev_ioctl+0x362/0x7f0 [ 1280.622033] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1280.622520] ? __x64_sys_ioctl+0x97/0x210 [ 1280.622953] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.623526] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1280.624019] __x64_sys_ioctl+0x196/0x210 [ 1280.624446] do_syscall_64+0x3b/0x90 [ 1280.624845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.625384] RIP: 0033:0x7f6d56f6c8d7 [ 1280.625770] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.627646] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.628440] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1280.629185] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1280.629923] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1280.630662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1280.631403] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1280.632157] [ 1280.632448] loop2: detected capacity change from 0 to 4 [ 1280.635730] FAULT_INJECTION: forcing a failure. [ 1280.635730] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.636919] CPU: 0 PID: 7991 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.637786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.638954] Call Trace: [ 1280.639224] [ 1280.639454] dump_stack_lvl+0x8b/0xb3 [ 1280.639854] should_fail.cold+0x5/0xa [ 1280.640267] should_failslab+0x5/0x10 [ 1280.640662] __kmalloc_track_caller+0x79/0x420 [ 1280.641134] ? kstrdup_const+0x53/0x80 [ 1280.641553] kstrdup+0x36/0x70 [ 1280.641892] kstrdup_const+0x53/0x80 [ 1280.642276] alloc_vfsmnt+0xb5/0x6b0 [ 1280.642674] clone_mnt+0x6d/0xdc0 [ 1280.643049] copy_tree+0x3ac/0xa50 [ 1280.643430] copy_mnt_ns+0x1a5/0xa90 [ 1280.643822] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1280.644316] ? kmem_cache_alloc+0x332/0x480 [ 1280.644788] create_new_namespaces+0xd6/0xb30 [ 1280.645270] copy_namespaces+0x391/0x450 [ 1280.645694] copy_process+0x27f2/0x6cb0 [ 1280.646115] ? lock_is_held_type+0xd7/0x130 [ 1280.646563] ? find_held_lock+0x2c/0x110 [ 1280.647005] ? __cleanup_sighand+0xb0/0xb0 [ 1280.647459] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1280.648035] ? _copy_from_user+0x139/0x170 [ 1280.648483] ? kernel_clone+0x2f8/0xa60 [ 1280.648901] kernel_clone+0xe7/0xa60 [ 1280.649296] ? lock_is_held_type+0xd7/0x130 [ 1280.649747] ? create_io_thread+0xf0/0xf0 [ 1280.650199] ? lock_is_held_type+0xd7/0x130 [ 1280.650658] __do_sys_clone3+0x1dd/0x2e0 [ 1280.651088] ? __ia32_sys_clone+0x150/0x150 [ 1280.651563] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.652140] ? vfs_write+0x188/0xae0 [ 1280.652526] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1280.653106] ? fput+0x2a/0x50 [ 1280.653443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1280.653990] do_syscall_64+0x3b/0x90 [ 1280.654375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.654914] RIP: 0033:0x7f82e43e1b19 [ 1280.655291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.657196] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1280.657990] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1280.658735] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1280.659470] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.660219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.660983] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1280.661738] 02:33:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 47) 02:33:37 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 26) 02:33:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) 02:33:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 93) 02:33:37 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f00000000000000) [ 1280.682287] audit: type=1326 audit(1643942017.635:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7992 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1280.685057] FAULT_INJECTION: forcing a failure. [ 1280.685057] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.686207] CPU: 0 PID: 8002 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.687295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.688420] Call Trace: [ 1280.688771] [ 1280.689074] dump_stack_lvl+0x8b/0xb3 [ 1280.689587] should_fail.cold+0x5/0xa [ 1280.690103] ? create_object.isra.0+0x3a/0xa20 [ 1280.690715] should_failslab+0x5/0x10 [ 1280.691228] kmem_cache_alloc+0x5b/0x480 [ 1280.691780] create_object.isra.0+0x3a/0xa20 [ 1280.692372] ? kasan_unpoison+0x23/0x50 [ 1280.692929] kmem_cache_alloc+0x239/0x480 [ 1280.693485] vm_area_dup+0x78/0x290 [ 1280.693979] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1280.694572] ? copy_page_range+0x2cbb/0x47b0 [ 1280.695187] ? vm_area_alloc+0x110/0x110 [ 1280.695630] ? vm_iomap_memory+0x190/0x190 [ 1280.696199] ? up_write+0x148/0x460 [ 1280.696591] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1280.696796] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1280.697263] ? __vma_link_rb+0x540/0x700 [ 1280.697290] dup_mm+0x53f/0x1250 [ 1280.697319] ? replace_mm_exe_file+0x490/0x490 [ 1280.700422] ? __raw_spin_lock_init+0x36/0x110 [ 1280.700934] copy_process+0x384b/0x6cb0 [ 1280.701434] ? __cleanup_sighand+0xb0/0xb0 [ 1280.701892] ? lock_is_held_type+0xd7/0x130 [ 1280.702352] ? find_held_lock+0x2c/0x110 [ 1280.702780] ? kernel_clone+0x2f8/0xa60 [ 1280.703205] kernel_clone+0xe7/0xa60 [ 1280.703611] ? create_io_thread+0xf0/0xf0 [ 1280.704054] ? find_held_lock+0x2c/0x110 [ 1280.704493] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1280.705000] ? wait_for_completion_io+0x270/0x270 [ 1280.705526] __do_sys_clone+0xc8/0x110 [ 1280.705940] ? __do_sys_vfork+0xd0/0xd0 [ 1280.706368] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.706950] ? vfs_write+0x188/0xae0 [ 1280.707361] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1280.707916] do_syscall_64+0x3b/0x90 [ 1280.708316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.708880] RIP: 0033:0x7f466d7a6b19 [ 1280.709280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.711099] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1280.711901] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1280.712670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1280.713426] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.714180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.714887] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1280.715642] [ 1280.732496] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 94) 02:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf6ffffff00000000) [ 1280.747428] FAULT_INJECTION: forcing a failure. [ 1280.747428] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.749795] CPU: 1 PID: 7996 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.751402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.753625] Call Trace: [ 1280.754130] [ 1280.754481] FAULT_INJECTION: forcing a failure. [ 1280.754481] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.754566] dump_stack_lvl+0x8b/0xb3 [ 1280.756396] should_fail.cold+0x5/0xa [ 1280.757182] ? create_object.isra.0+0x3a/0xa20 [ 1280.758093] should_failslab+0x5/0x10 [ 1280.758837] kmem_cache_alloc+0x5b/0x480 [ 1280.759643] create_object.isra.0+0x3a/0xa20 [ 1280.760512] ? kasan_unpoison+0x23/0x50 [ 1280.761320] __kmalloc+0x25b/0x440 [ 1280.762029] security_prepare_creds+0x10a/0x180 [ 1280.762956] prepare_creds+0x505/0x6f0 [ 1280.763728] ? acct_arg_size+0x7b/0xe0 [ 1280.764497] prepare_exec_creds+0xd/0x250 [ 1280.765332] bprm_execve+0xcf/0x1960 [ 1280.766077] ? count.constprop.0+0x1b3/0x280 [ 1280.766949] ? open_exec+0x70/0x70 [ 1280.767646] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1280.768747] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.769833] ? copy_string_kernel+0x4c8/0x580 [ 1280.770731] do_execveat_common+0x727/0x890 [ 1280.771588] ? bprm_execve+0x1960/0x1960 [ 1280.772416] __x64_sys_execveat+0xe0/0x120 [ 1280.773285] ? trace_hardirqs_on+0x38/0x190 [ 1280.774131] do_syscall_64+0x3b/0x90 [ 1280.774867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.775868] RIP: 0033:0x7f245182fb19 [ 1280.776589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.780146] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1280.781628] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1280.783008] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1280.784399] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.785803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.787187] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1280.788597] [ 1280.789058] CPU: 0 PID: 8005 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.789914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.791075] Call Trace: [ 1280.791338] [ 1280.791571] dump_stack_lvl+0x8b/0xb3 [ 1280.791975] should_fail.cold+0x5/0xa [ 1280.792372] ? create_object.isra.0+0x3a/0xa20 [ 1280.792869] should_failslab+0x5/0x10 [ 1280.793263] kmem_cache_alloc+0x5b/0x480 [ 1280.793696] create_object.isra.0+0x3a/0xa20 [ 1280.794152] ? kasan_unpoison+0x23/0x50 [ 1280.794575] __kmalloc_track_caller+0x25e/0x420 [ 1280.795048] ? kstrdup_const+0x53/0x80 [ 1280.795459] kstrdup+0x36/0x70 [ 1280.795793] kstrdup_const+0x53/0x80 [ 1280.796184] alloc_vfsmnt+0xb5/0x6b0 [ 1280.796571] clone_mnt+0x6d/0xdc0 [ 1280.796965] copy_tree+0x3ac/0xa50 [ 1280.797356] copy_mnt_ns+0x1a5/0xa90 [ 1280.797753] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1280.798257] ? kmem_cache_alloc+0x332/0x480 [ 1280.798707] create_new_namespaces+0xd6/0xb30 [ 1280.799183] copy_namespaces+0x391/0x450 [ 1280.799616] copy_process+0x27f2/0x6cb0 [ 1280.800036] ? lock_is_held_type+0xd7/0x130 [ 1280.800501] ? find_held_lock+0x2c/0x110 [ 1280.800946] ? __cleanup_sighand+0xb0/0xb0 [ 1280.801382] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1280.801953] ? _copy_from_user+0x139/0x170 [ 1280.802390] ? kernel_clone+0x2f8/0xa60 [ 1280.802805] kernel_clone+0xe7/0xa60 [ 1280.803193] ? lock_is_held_type+0xd7/0x130 [ 1280.803639] ? create_io_thread+0xf0/0xf0 [ 1280.804085] ? lock_is_held_type+0xd7/0x130 [ 1280.804535] __do_sys_clone3+0x1dd/0x2e0 [ 1280.804968] ? __ia32_sys_clone+0x150/0x150 [ 1280.805434] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.806011] ? vfs_write+0x188/0xae0 [ 1280.806401] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1280.806972] ? fput+0x2a/0x50 [ 1280.807313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1280.807847] do_syscall_64+0x3b/0x90 [ 1280.808244] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.808785] RIP: 0033:0x7f82e43e1b19 [ 1280.809163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.811051] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1280.811818] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1280.812553] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1280.813286] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1280.814025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1280.814762] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1280.815521] 02:33:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 48) [ 1280.853359] FAULT_INJECTION: forcing a failure. [ 1280.853359] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.854568] CPU: 0 PID: 8010 Comm: syz-executor.2 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.855387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.856496] Call Trace: [ 1280.856757] [ 1280.856979] dump_stack_lvl+0x8b/0xb3 [ 1280.857373] should_fail.cold+0x5/0xa [ 1280.857756] ? create_object.isra.0+0x3a/0xa20 [ 1280.858228] should_failslab+0x5/0x10 [ 1280.858606] kmem_cache_alloc+0x5b/0x480 [ 1280.859016] create_object.isra.0+0x3a/0xa20 [ 1280.859461] ? kasan_unpoison+0x23/0x50 [ 1280.859865] kmem_cache_alloc+0x239/0x480 [ 1280.860284] __kernfs_new_node+0xd4/0x8b0 [ 1280.860710] ? kernfs_path_from_node+0x60/0x60 [ 1280.861164] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1280.861687] ? mark_held_locks+0x9e/0xe0 [ 1280.862101] ? lock_is_held_type+0xd7/0x130 [ 1280.862535] ? find_held_lock+0x2c/0x110 [ 1280.862942] kernfs_create_dir_ns+0x9c/0x220 [ 1280.863398] internal_create_group+0x782/0xb20 [ 1280.863864] ? sysfs_remove_group+0x170/0x170 [ 1280.864319] ? lock_is_held_type+0xd7/0x130 [ 1280.864799] ? lockdep_init_map_type+0x2c3/0x7a0 [ 1280.865305] ? loop_configure+0x1950/0x1950 [ 1280.865760] ? __sanitizer_cov_trace_cmp1+0x22/0x80 [ 1280.866288] ? __loop_update_dio+0x2a3/0x620 [ 1280.866757] loop_configure+0xe87/0x1950 [ 1280.867189] lo_ioctl+0x7c5/0x18b0 [ 1280.867566] ? avc_has_extended_perms+0x7e8/0xeb0 [ 1280.868062] ? loop_set_status_old+0x1b0/0x1b0 [ 1280.868546] ? avc_ss_reset+0x180/0x180 [ 1280.868969] ? __lock_acquire+0xbac/0x6120 [ 1280.869440] ? selinux_inode_getsecctx+0x90/0x90 [ 1280.869938] ? loop_set_status_old+0x1b0/0x1b0 [ 1280.870423] blkdev_ioctl+0x362/0x7f0 [ 1280.870823] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1280.871321] ? __x64_sys_ioctl+0x97/0x210 [ 1280.871759] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1280.872340] ? blkdev_common_ioctl+0x16b0/0x16b0 [ 1280.872834] __x64_sys_ioctl+0x196/0x210 [ 1280.873264] do_syscall_64+0x3b/0x90 [ 1280.873659] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1280.874193] RIP: 0033:0x7f6d56f6c8d7 [ 1280.874581] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1280.876497] RSP: 002b:00007f6d544e1f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.877293] RAX: ffffffffffffffda RBX: 00007f6d56fb6970 RCX: 00007f6d56f6c8d7 [ 1280.878054] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1280.878802] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 1280.879564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1280.880306] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 1280.881083] [ 1280.893974] loop2: detected capacity change from 0 to 4 [ 1280.900024] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) (fail_nth: 49) 02:33:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xffffffff00000000) 02:33:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 95) [ 1280.985192] FAULT_INJECTION: forcing a failure. [ 1280.985192] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.986570] CPU: 0 PID: 8020 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1280.987692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1280.989231] Call Trace: [ 1280.989633] [ 1280.989967] dump_stack_lvl+0x8b/0xb3 [ 1280.990433] should_fail.cold+0x5/0xa [ 1280.990852] ? create_object.isra.0+0x3a/0xa20 [ 1280.991358] should_failslab+0x5/0x10 [ 1280.991788] kmem_cache_alloc+0x5b/0x480 [ 1280.992241] create_object.isra.0+0x3a/0xa20 [ 1280.992758] kmemleak_alloc_percpu+0xa0/0x100 [ 1280.993247] pcpu_alloc+0x7bf/0x1060 [ 1280.993671] alloc_vfsmnt+0xfd/0x6b0 [ 1280.994098] clone_mnt+0x6d/0xdc0 [ 1280.994496] copy_tree+0x3ac/0xa50 [ 1280.994898] copy_mnt_ns+0x1a5/0xa90 [ 1280.995327] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1280.995888] ? kmem_cache_alloc+0x332/0x480 [ 1280.996353] create_new_namespaces+0xd6/0xb30 [ 1280.996857] copy_namespaces+0x391/0x450 [ 1280.997315] copy_process+0x27f2/0x6cb0 [ 1280.997745] ? lock_is_held_type+0xd7/0x130 [ 1280.998210] ? find_held_lock+0x2c/0x110 [ 1280.998641] ? __cleanup_sighand+0xb0/0xb0 [ 1280.999068] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1280.999672] ? _copy_from_user+0x139/0x170 [ 1281.000146] ? kernel_clone+0x2f8/0xa60 [ 1281.000592] kernel_clone+0xe7/0xa60 [ 1281.001027] ? lock_is_held_type+0xd7/0x130 [ 1281.001504] ? create_io_thread+0xf0/0xf0 [ 1281.001974] ? lock_is_held_type+0xd7/0x130 [ 1281.002465] __do_sys_clone3+0x1dd/0x2e0 [ 1281.002922] ? __ia32_sys_clone+0x150/0x150 [ 1281.003414] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1281.004031] ? vfs_write+0x188/0xae0 [ 1281.004452] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1281.005079] ? fput+0x2a/0x50 [ 1281.005436] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1281.005998] do_syscall_64+0x3b/0x90 [ 1281.006424] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1281.006997] RIP: 0033:0x7f82e43e1b19 [ 1281.007404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1281.009451] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1281.010298] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1281.011069] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1281.011857] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.012643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1281.013420] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1281.014229] 02:33:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:33:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1281.092481] loop2: detected capacity change from 0 to 4 [ 1281.105536] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1281.125595] loop2: detected capacity change from 0 to 4 [ 1281.127148] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1281.146920] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:50 executing program 5: mlockall(0x5) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:33:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:33:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xffffffffffffffff) 02:33:50 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) 02:33:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 27) 02:33:50 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:33:50 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:33:50 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 96) [ 1293.559984] FAULT_INJECTION: forcing a failure. [ 1293.559984] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.561352] CPU: 1 PID: 8036 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.562214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.563390] Call Trace: [ 1293.563658] [ 1293.563894] dump_stack_lvl+0x8b/0xb3 [ 1293.564311] should_fail.cold+0x5/0xa [ 1293.564719] ? vm_area_dup+0x78/0x290 [ 1293.565133] should_failslab+0x5/0x10 [ 1293.565529] kmem_cache_alloc+0x5b/0x480 [ 1293.565959] vm_area_dup+0x78/0x290 [ 1293.566350] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1293.566929] ? copy_page_range+0x2cbb/0x47b0 [ 1293.567419] ? vm_area_alloc+0x110/0x110 [ 1293.567849] ? vm_iomap_memory+0x190/0x190 [ 1293.568297] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1293.568821] ? __vma_link_rb+0x540/0x700 [ 1293.569259] dup_mm+0x53f/0x1250 [ 1293.569629] ? replace_mm_exe_file+0x490/0x490 [ 1293.570111] ? __raw_spin_lock_init+0x36/0x110 [ 1293.570592] copy_process+0x384b/0x6cb0 [ 1293.571029] ? __cleanup_sighand+0xb0/0xb0 [ 1293.571479] ? lock_is_held_type+0xd7/0x130 [ 1293.571928] ? find_held_lock+0x2c/0x110 [ 1293.572358] ? kernel_clone+0x2f8/0xa60 [ 1293.572780] kernel_clone+0xe7/0xa60 [ 1293.573188] ? create_io_thread+0xf0/0xf0 [ 1293.573621] ? find_held_lock+0x2c/0x110 [ 1293.574048] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.574615] ? populate_seccomp_data+0x214/0x540 [ 1293.575105] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.575674] ? __seccomp_filter+0x5ab/0xff0 [ 1293.576124] ? wait_for_completion_io+0x270/0x270 [ 1293.576631] __do_sys_clone+0xc8/0x110 [ 1293.577045] ? __do_sys_vfork+0xd0/0xd0 [ 1293.577476] ? __secure_computing+0xb4/0x290 [ 1293.577935] do_syscall_64+0x3b/0x90 [ 1293.578336] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.578872] RIP: 0033:0x7f466d7a6b19 [ 1293.579259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.581167] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.581962] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1293.582715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.583463] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.584217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.584982] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1293.585727] [ 1293.592120] loop2: detected capacity change from 0 to 4 [ 1293.596867] audit: type=1326 audit(1643942030.549:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8037 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1293.602185] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1293.610168] loop2: detected capacity change from 0 to 4 [ 1293.615965] FAULT_INJECTION: forcing a failure. [ 1293.615965] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.617219] CPU: 1 PID: 8044 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.618084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.619271] Call Trace: [ 1293.619538] [ 1293.619772] dump_stack_lvl+0x8b/0xb3 [ 1293.620197] should_fail.cold+0x5/0xa [ 1293.620602] ? create_object.isra.0+0x3a/0xa20 [ 1293.621107] should_failslab+0x5/0x10 [ 1293.621510] kmem_cache_alloc+0x5b/0x480 [ 1293.621945] ? mark_held_locks+0x9e/0xe0 [ 1293.622382] create_object.isra.0+0x3a/0xa20 [ 1293.622856] kmemleak_alloc_percpu+0xa0/0x100 [ 1293.623346] pcpu_alloc+0x7bf/0x1060 [ 1293.623755] alloc_vfsmnt+0xfd/0x6b0 [ 1293.624153] clone_mnt+0x6d/0xdc0 [ 1293.624531] copy_tree+0x3ac/0xa50 [ 1293.624924] copy_mnt_ns+0x1a5/0xa90 [ 1293.625330] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1293.625838] ? kmem_cache_alloc+0x332/0x480 [ 1293.626308] create_new_namespaces+0xd6/0xb30 [ 1293.626803] copy_namespaces+0x391/0x450 [ 1293.627237] copy_process+0x27f2/0x6cb0 [ 1293.627658] ? lock_is_held_type+0xd7/0x130 [ 1293.628112] ? find_held_lock+0x2c/0x110 [ 1293.628567] ? __cleanup_sighand+0xb0/0xb0 [ 1293.629029] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1293.629425] loop4: detected capacity change from 0 to 256 [ 1293.629598] ? _copy_from_user+0x139/0x170 [ 1293.631319] ? kernel_clone+0x2f8/0xa60 [ 1293.631745] kernel_clone+0xe7/0xa60 [ 1293.632140] ? lock_is_held_type+0xd7/0x130 [ 1293.632589] ? create_io_thread+0xf0/0xf0 [ 1293.633052] ? lock_is_held_type+0xd7/0x130 [ 1293.633501] __do_sys_clone3+0x1dd/0x2e0 [ 1293.633931] ? __ia32_sys_clone+0x150/0x150 [ 1293.634396] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.634969] ? vfs_write+0x188/0xae0 [ 1293.635364] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.635938] ? fput+0x2a/0x50 [ 1293.636271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.636822] do_syscall_64+0x3b/0x90 [ 1293.637218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.637748] RIP: 0033:0x7f82e43e1b19 [ 1293.638128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.640030] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1293.640828] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1293.641560] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1293.642304] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.643030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.643760] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1293.644508] [ 1293.647183] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1293.659184] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:33:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:33:50 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) [ 1293.727963] FAULT_INJECTION: forcing a failure. [ 1293.727963] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.729239] CPU: 1 PID: 8053 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.730101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.731277] Call Trace: [ 1293.731556] [ 1293.731791] dump_stack_lvl+0x8b/0xb3 [ 1293.732202] should_fail.cold+0x5/0xa [ 1293.732610] ? create_object.isra.0+0x3a/0xa20 [ 1293.733112] should_failslab+0x5/0x10 [ 1293.733515] kmem_cache_alloc+0x5b/0x480 [ 1293.733953] create_object.isra.0+0x3a/0xa20 [ 1293.734419] ? kasan_unpoison+0x23/0x50 [ 1293.734850] kmem_cache_alloc+0x239/0x480 [ 1293.735292] vm_area_dup+0x78/0x290 [ 1293.735699] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1293.736284] ? copy_page_range+0x2cbb/0x47b0 [ 1293.736775] ? vm_area_alloc+0x110/0x110 [ 1293.737225] ? vm_iomap_memory+0x190/0x190 [ 1293.737687] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1293.738233] ? __vma_link_rb+0x540/0x700 [ 1293.738679] dup_mm+0x53f/0x1250 [ 1293.739055] ? replace_mm_exe_file+0x490/0x490 [ 1293.739555] ? __raw_spin_lock_init+0x36/0x110 [ 1293.740058] copy_process+0x384b/0x6cb0 [ 1293.740510] ? __cleanup_sighand+0xb0/0xb0 [ 1293.740971] ? lock_is_held_type+0xd7/0x130 [ 1293.741440] ? find_held_lock+0x2c/0x110 [ 1293.741888] ? kernel_clone+0x2f8/0xa60 [ 1293.742323] kernel_clone+0xe7/0xa60 [ 1293.742726] ? create_io_thread+0xf0/0xf0 [ 1293.743183] ? find_held_lock+0x2c/0x110 [ 1293.743621] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.744213] ? populate_seccomp_data+0x214/0x540 [ 1293.744734] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.745339] ? __seccomp_filter+0x5ab/0xff0 [ 1293.745800] ? wait_for_completion_io+0x270/0x270 [ 1293.746343] __do_sys_clone+0xc8/0x110 [ 1293.746767] ? __do_sys_vfork+0xd0/0xd0 [ 1293.747217] ? __secure_computing+0xb4/0x290 [ 1293.747686] do_syscall_64+0x3b/0x90 [ 1293.748094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.748651] RIP: 0033:0x7f466d7a6b19 [ 1293.749070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.751038] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.751855] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1293.752625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.753396] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.754165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.754930] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1293.755725] [ 1293.765218] FAULT_INJECTION: forcing a failure. [ 1293.765218] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.767769] CPU: 0 PID: 8045 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.769549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.771987] Call Trace: [ 1293.772541] [ 1293.773040] dump_stack_lvl+0x8b/0xb3 [ 1293.773876] should_fail.cold+0x5/0xa [ 1293.774702] ? __alloc_file+0x21/0x240 [ 1293.775551] should_failslab+0x5/0x10 [ 1293.776368] kmem_cache_alloc+0x5b/0x480 [ 1293.777258] ? kernel_text_address+0x53/0xb0 [ 1293.778220] __alloc_file+0x21/0x240 [ 1293.779029] alloc_empty_file+0x6d/0x170 [ 1293.779918] path_openat+0xe1/0x28a0 [ 1293.780736] ? lock_chain_count+0x20/0x20 [ 1293.781643] ? filter_irq_stacks+0x90/0x90 [ 1293.782560] ? path_lookupat+0x850/0x850 [ 1293.783459] ? kasan_save_stack+0x2e/0x40 [ 1293.784350] ? kasan_save_stack+0x1e/0x40 [ 1293.785262] ? __kasan_kmalloc+0x81/0xa0 [ 1293.786140] ? security_prepare_creds+0x10a/0x180 [ 1293.787189] ? prepare_creds+0x505/0x6f0 [ 1293.788066] ? prepare_exec_creds+0xd/0x250 [ 1293.789026] do_filp_open+0x1aa/0x400 [ 1293.789838] ? may_open_dev+0xf0/0xf0 [ 1293.790677] ? find_held_lock+0x2c/0x110 [ 1293.791550] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1293.792667] ? lock_release+0x3b2/0x6f0 [ 1293.793573] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1293.794683] ? lock_is_held_type+0xd7/0x130 [ 1293.795606] ? find_held_lock+0x2c/0x110 [ 1293.796474] do_open_execat+0x116/0x740 [ 1293.797329] ? bprm_execve+0x44b/0x1960 [ 1293.798182] ? __ia32_sys_uselib+0x40/0x40 [ 1293.799081] ? do_raw_spin_lock+0x121/0x260 [ 1293.800005] ? rwlock_bug.part.0+0x90/0x90 [ 1293.800943] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.802128] bprm_execve+0x48a/0x1960 [ 1293.802948] ? count.constprop.0+0x1b3/0x280 [ 1293.803889] ? open_exec+0x70/0x70 [ 1293.804648] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.805824] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.807001] ? copy_string_kernel+0x4c8/0x580 [ 1293.807972] do_execveat_common+0x727/0x890 [ 1293.808904] ? bprm_execve+0x1960/0x1960 [ 1293.809800] __x64_sys_execveat+0xe0/0x120 [ 1293.810707] ? trace_hardirqs_on+0x38/0x190 [ 1293.811617] do_syscall_64+0x3b/0x90 [ 1293.812411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.813509] RIP: 0033:0x7f245182fb19 [ 1293.814286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.818162] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1293.819747] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1293.820709] loop2: detected capacity change from 0 to 4 [ 1293.821251] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1293.821270] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.824824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.826311] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1293.827814] [ 1293.833950] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:50 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) 02:33:50 executing program 5: mlockall(0x5) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1293.863480] FAULT_INJECTION: forcing a failure. [ 1293.863480] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.864764] CPU: 1 PID: 8061 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.865646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.866874] Call Trace: [ 1293.867148] [ 1293.867386] dump_stack_lvl+0x8b/0xb3 [ 1293.867800] should_fail.cold+0x5/0xa [ 1293.868201] ? vm_area_dup+0x78/0x290 [ 1293.868604] should_failslab+0x5/0x10 [ 1293.869018] kmem_cache_alloc+0x5b/0x480 [ 1293.869446] vm_area_dup+0x78/0x290 [ 1293.869852] ? lock_release+0x3b2/0x6f0 [ 1293.870271] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1293.870777] ? lock_downgrade+0x6d0/0x6d0 [ 1293.871214] ? copy_page_range+0x2cbb/0x47b0 [ 1293.871684] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1293.872230] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1293.872769] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1293.873270] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1293.873777] ? lock_is_held_type+0xd7/0x130 [ 1293.874230] ? vm_area_alloc+0x110/0x110 [ 1293.874673] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.875240] ? selinux_vm_enough_memory+0x10f/0x170 [ 1293.875785] ? selinux_sctp_sk_clone+0x370/0x370 [ 1293.876281] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.876873] ? percpu_counter_add_batch+0xb4/0x170 [ 1293.877398] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1293.877921] ? __vm_enough_memory+0x184/0x360 [ 1293.878393] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1293.878933] dup_mm+0x53f/0x1250 [ 1293.879307] ? replace_mm_exe_file+0x490/0x490 [ 1293.879792] ? __raw_spin_lock_init+0x36/0x110 [ 1293.880281] copy_process+0x384b/0x6cb0 [ 1293.880718] ? __cleanup_sighand+0xb0/0xb0 [ 1293.881187] ? lock_is_held_type+0xd7/0x130 [ 1293.881853] ? find_held_lock+0x2c/0x110 [ 1293.882308] ? kernel_clone+0x2f8/0xa60 [ 1293.882860] kernel_clone+0xe7/0xa60 02:33:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x4800, 0x101) r1 = accept4(r0, &(0x7f0000000080)=@generic, &(0x7f0000000180)=0x80, 0x0) [ 1293.883397] ? create_io_thread+0xf0/0xf0 [ 1293.883863] ? find_held_lock+0x2c/0x110 [ 1293.884284] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.884874] ? populate_seccomp_data+0x214/0x540 [ 1293.885369] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.885942] ? __seccomp_filter+0x5ab/0xff0 [ 1293.886387] ? wait_for_completion_io+0x270/0x270 [ 1293.886895] __do_sys_clone+0xc8/0x110 [ 1293.887313] ? __do_sys_vfork+0xd0/0xd0 [ 1293.887747] ? __secure_computing+0xb4/0x290 [ 1293.888217] do_syscall_64+0x3b/0x90 [ 1293.888623] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.889159] RIP: 0033:0x7f466d7a6b19 [ 1293.889545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.891431] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.892218] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1293.892971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.893705] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.894445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.895173] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1293.896141] sendmmsg(r1, &(0x7f0000004200)=[{{&(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfb}, 0x80, &(0x7f0000002540)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000001c0)="d0a43ace4056d165535215b5be2d9f87f3064532feee285f53f35f4be029955c00400fc3af35b0a0edd4edaed3df4fe362e76a0d0b8def", 0x37}, {&(0x7f0000000300)="c82552892d204bb1b0db8f53438323f040f84c43341d19986c37ed7de3cb29254e465be5e2b4d28174f2201f548e9b3eff50e4f9c35cc80d38cf6971f6b29ce30840d9995badf59dce869c7e267e081dbeb0a998b102a77bac5aa7e0bc82d8e06e337d28fb7aac7e742dd761c8686c42786afc5d71cd30b5e81588394252e1eb87756b63174aa8b0815901f2e3c6aacd9883d8c3859e000a41e7cce2d880b3ce14af57cfcfc4859ac9016d906a7342ccd8da0d4162b28795a7c8da84c07bc596d67f703c62e97bfa6f4cdef2ea63a8", 0xcf}, {&(0x7f0000000400)="e5243479e93077bc08bf9d06627428ddbb40cd0878f1e7b70a273ebd211cdb21fa84e924614f601983fc5fcc7024a93fd4d554df9ebcd2ae3354a47daf2e277e7459310b17e23d255a6e8094a3390153cb55e23aed2063042471b37c7f6ad6169733e2f07d63bbf2f510938cccbf9e887a129c60defe30ccc64d09", 0x7b}, {&(0x7f00000014c0)="308baf421e31e9d00b239f74ad7ef9eb5d366208e5987bba0a50c6a9e8633795fb7644a881eba1f66f5efebfcc1daac2d01ea648722a718c0947ed3ff696b2fc0654e97e62769c0407b2041a0caea3f9299d9e3e48b88af4519a7fc855a54f265374870f6c639aa85801a7948fcbebf3", 0x70}, {&(0x7f0000001540)="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", 0x1000}], 0x6, &(0x7f00000025c0)=[{0x40, 0x112, 0x6, "3929446ccfc13b05ebd46a90b49f18884a75c0a8cfc026f53f2473e78998df2b9e6aed7535cbf1658c1175f465e6"}, {0xe8, 0x6, 0xfffffffd, "199ce85dda2d2def8dc076b8e9e7a12c04cc1420745f7e10ee3dd2188d54e7a4414898308e155ad2e785b4c1a2a580e98acb58cdce7132e2a93f4dd247982df091a8c5a95d1c6aaab3c4762da1fe2c0ff1498e785ba1a00f773522128bcf6cc216c677a0a3031afcd6b86742596831ac0fa00aa3f01c2694a9f99b8a28387ce0c17aa141fe55bcec0715360eb0caa920c36331579a80556fcaeb512cf5e42f9f806aff8494d213de4619771de3a8ad8421ea6a1047353ffada26a76d2b61788b4de550d00101a182387838071e44be0066b0ef626b1c"}, {0x98, 0x80, 0x5, "8af0fcae9cacfccdbe994568a041a665a27e243771f6a68597254e9d9c747868f9b7634edee9cb377ae40f1ef401ff3997573a7fdd1062aedd2fec204440c42d551e9cb83b9d8bba55f2591da9ef9d042133beed9dc3fb5f8d0e06a59222ef34723740e2029bbba9520edb81fa908b3ef5ccc853deb27be3f41012152af1bf8d1337febfea6b"}, {0x48, 0x101, 0x4, "3e80140ddee2b70125210f757b77a2274e26bc31325c03dd706cdd136b11af571d9e5c28720fbde3bc89fd3cf51253a0a7b8ab63bfaf"}, {0xb0, 0x112, 0x80, "739b7fa7d9d5c1860d7dab40f4741b1e5620e406af3a834d5aaaf90e5af0f1d12d844b622dfca6e3d9bf5b7e1908575b038fc1f58e80f91793b1c9849b8586acf21521e1982ed350010aff5de139a5f94e1f07b417df2f4162924029daeb5ced82e9569bdf8649e463d24d2d2b44a566197584c8e4cc3e92ce05a98eb685d524dec3ad7bc1ffa1df8a384948598a7957ffaf532ad57053f2f4b5932cf4"}], 0x2b8}}, {{&(0x7f0000002880)=@generic={0x8, "afe908afe91e4cb5adb6b0f50bb647f7158471933be0fc5f2bc453a68fac74afbea933225c14d6eaff22b98ec86c8259f3ef81a75d20e274206d545f22edaba21acafa7e15c574ce4a405b548100067134e59fdc048988c3ba447bd081c58eec0465523e582c22768df7dccc2cb779df647729a33feaed10a5478f9dc5c8"}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000002900)="66e6156f27ff81f72e6b26912dfd7d5914cb49045a8351e7bf6075f9807dab65c4a8cbb5fda4909bc3a6038298e397374af93708e01324b0979301fd2f00426334c2625324630bc7a757029076ab4f7f1415fb9f4940a2fdd0b7b9c805431b221770144075d2d27b6faa488098e6472b7af0adfb089e8e70a6f9af6c96a290902a0b95edf0abf2bb7f29102f3ca1cedd0aae22b5a3ef2d93c058ba9476e435c8b25868351bfce400f13249026609dc", 0xaf}, {&(0x7f00000029c0)="60350aa8edc07d8927f990609982a497929319b5026fef1bcc40ba7d9cc48a0954bb41979d1f0dd065f417834a10919b919dc0c2792fe7fb9854a90accf07f908e6ba28a9bd6be832ddd9aefdaf2a146673814ccd779eba0a23997bad7b7c1163e330e8427f406eb4ee21a2b39726c686cf1bd06e7119786d5d9bbcfa208bb2eb71653703f0f439c7bc409a66042783e6e5326373309b747ce854b8aaa3c718eb3532451e8572ad453a8734f6babfe2d1d53fa4cd064f25f37b2df98f4e5a6", 0xbf}, {&(0x7f0000002a80)="ed68e7f35d08d81bd19af046895b2a53f557be9625bdd8dfadf834d0ba04f7f1db739548575fb05a14a0731b0b36f3c81bbd64b25ca525f82645eade5768dd3d59fac0917bb331eae1f142269b7c49da8d0a5840ea52fa7bec85152dae98cfda37f64a5f49a4735eefa3854bada8550969f747932bc4175d0a9bf4de4b7198f0c9841520be946f4812523dee4c9467796bc544299e2b0587d18a70824fc128dc588121369cd94b445361b455cd878a0d7d4ee07c7506f2c017ffcb1577f6f12fab0281b7935c15c1de2122e160e8512da34b4d0b3bfa165b2980d00482622c7ef96ec6d0ce7f71aa49973a112387fedb53a64816c3506681a6f1a97f77483278d64c338fc56858b8308bfeb98d7169f23f7d03ab99608b71ff68d23b3fc1640a661907552927bb08dff05c69921c581c54e63a3c9f59ef26056420883007d53c09beba3569156d2a3c4267014e6ba953102b752f3cc333cad1281dbc17487852791b7bfe3999bf901d7d1540394386c08629b1c98959d4b000bd8090fad05df9f8968a07ebe5598e424064a637b3a6b4edad8406530796d651efa660adadca72225886c1b3c52596e76a0d1419e25542915bf11051681906c1ef253e5f2142cba51b6ded4cdbfb0943620f5cb10893b1f1253169b32cb1beccab11a272ef53f4b73f210b8e69d8b14a0372714bea9b404ad0e8b27070b80864204ffc2761ba0c5f7b9a4e02123380acdf6316e8e439f07ebe5dcb169a421487d293bae84487bc637e8d4748152494185fab4b79ae148a429a23be9df7ac06938a2dcef8466f7d6d3d3e6411f301627670101eb54e5ad088d922ad94a1c84cc331270eb5440697bcf71fd33815df0565c26fa617419c6da937b2a0bc12796d89524dd044313461331b71082839b4e95074d88cc6ed9879b75d48e7ad10de7fd32c1fbb0f15f1ffaead3fffb985f278c7931541dcf787577d7a997014ad41121bfd98bbade9bc8c38dcbb3ab5c5c609a9473bd3e7b52aacc3ecae99b2643805a538415ace4af95c350746f0fd2375c41109995e36da69bebafc69bf3694f1a93cbb85c23374c6f4c26c07848cbcb40c6a18761c83b26f385a3ff71055f4d24b8078f5da0cd913e4f2ff75f1282b5c2135aab4f4a23a722b07b08ac9425e704e14e9642eaea52c0df9086af13e0ea1f59ecd9b5056f621c323b65401b57774a85320f08866e8c6311cbc68e716ed59f8d8c1eab5801e374515c0a3b833c386df6d38fdaf677b4c0287b18ddcc8781b585ee6bbe0ec9d4d89486d5711611860b94d70fc09939b2aa2377292b2fc1a3a1ac13a2d6e27b869012b24dd7bc3ed50c3a1e54f2d8a55490173f879d30ad43e5e8f313dd1ff33a943b5e9a544948a75c7c72ad736a444af23424ef49a7e0bf37a460adf780e74fee70aba0e99f894f9c7b3b769470b004d8b1740be1d855c2ad81449cf9ea488b6584fb37c58eca6c276fc8f57d63ec67e1453c82d44eb50fe15ad90d5a7e3a08b050a2469291dd9ea28cc474c26e3f52e2a6b29bc19331a0fbb51875baf1949e577dee1bbdb62f7170616edcac3b21002813ebe045613e8f72187b736d86ca0d845ef7a877f815801e1cb6b7cd3fa08db9bc4a207ebce58579f3f1983765d7b068e9caa702ad3747eafe38bb4b4265c1abac786d26905637bd72a5e8fb258ed6bb27b591f2754c567fe4be949e3b22e4f25f94af71590a3f2b685108b676f26c2f338259936e68341c8b0dc0182023394dc5f27f1ce7d4873c53ba0b69d233cbd66808b35a1aa5c8bc6a665c5ee8e0073ac9449bac81fea0dc15bc9f9463e9357ca05b0b0d2cac76e45d6ac047c886115ee340aee321db3af6cbd37623e8b697241010261e0a92456a34eeeeba3f1ddfcc10c5014664c929dfb3266a583014db4e826d5e9f3ad24c34b76d7498e24df3da7e3e56547981603821e8d0a4e7521495dc136ce5a4be63378997d9242b28085cb44656bb0aade7a378b7f5f1e0d6c33e24b4e6c49493fa66c88a348311c8989ff97079cae39756a1c7d7edc0aaa48203e701b8888e0790bcff71ae6f69a1f1e886fe4413615adbd3fbf369fc901e97365e59c032bd8178360ee82bff2e3bb294aa5c50161ae01dca0ae6cbdee204fbddd4ab73953e7de02c13638a949394ddef5d8133e31bce5774d01d4d3eda7f7019ed171c47eb66faeaea6abf7839b8894cbc27f83bba60925fd76137d04b031a5cad7da4e83bc937a7797946d06823a8cb58ff59de0ec9c9e9cad2d67f917efc4067b1aea0cfb455951b39cadb0834ed8cb28e4f26f4fd7fcd8944576ed17da388d5b603e52ed5a8cff1175634814f4359d25ee7bb9aa49fce1086f2475e23d858fefad8e89899407477ed8a643143c969f0c08679f6359faf8f3e353617b010067e152e2fea6517c810a47428e1badc95efc75719c71d79b93862ef2539673640e03f763c28f178f88ab3b0a99d1dc843807ec88d18330b6c27a72f91d6eea4ac6f415f0d5d62db1bf2b6321e44b3a0a84631d203eb762b52c1fc6ea0237a5005a4ff83a92f623e3c3364ab7851bf71cfbe9c9875521a92533bf311266aa5e7bcdf05cb5693fe8d1d6da78968038450e04f1c9a9cccc3059b5174d32914340a00d40c597483d78634501731cf5fa8b9c585035e30af70807b41aace3eb44db18dd7bd9b7bc36be1dd38499c2fe4f2cc96c974a925c059dc74a3774b3efb2873636a087cf24de01ed4ad0f3121553dffe92e00414da1b269039ad245ba790c925bd74f5fb15c327a570d03c727841b9a9e34c469a7b15a9d39a0e1495b8af640a8b94cbd0bd82a45035101971a4d31b3ea9736ea70da1094e1a080a5a180605bfd0877335d2102a9c3f66c2a315a6f7eae1ce91c4294b414a2e3e086ecc2c6b797b9feca500b8c231ad4606bc8521562d703e902e503fb462a3f9d614b96f8f5c0198ecf4606ca40a14b67f24f621d4a82092f2bd646b1b8880439866b6cff52258bb2b1d90aacef18feec1976cdf223679207ff6532eb4c5651ad460c3ecfc2a6dca14b39979a5b7ad5f11307e73d9a6db5dff955ec65bbc94e6019e7330f4f7a146e6cd4fef7f155edea47b36293e3dc62c3d67bcc17c9d9b7837ed2a0517e679adcb111020757743d55ad5dff669944da166644bedc0ff3ab6462a8953794605448b9888d5a2a9e410725daaace50230790f857a077e8658a4358f54e258ab2e5702f831a2a850cdf2ae4e6f549ca4cbd8ef12992b0a238f22b9241f17a75fcb33b18f6a7ac7c2547580968979f6c976f1118916d85356b8db395953f986643068a153bd67ce3d0ddf046fe596f4c764ee20bd779023678486af9c93e06b9b9d3683c794911cdbb4e3647cb1f1da7a8675db69d4f25ffa1056d8c3cf11e07d85715b11ed771177fcb0d25a7bbb08f71336526ad5429fd977df7277dbddefa697371368d4469731970c7d82d6b83ef8e96befb2997f48352cac1136bf77ca4b7d8bc485a53424c29f0f942de7b6a17036af90d50918272a92f0b84619bb0e47102758239a090a9384d3794579b61ce5dd4fd6e79e259dece059c4610f31e21ba2b84934637cf5c9564bb74be233e0ea8c336bdc145733e1fef14e56df38795a19c0d404d6c0d07af3cc943265d8c08bac12cd2ca4144e62d1680b3846ee84825e41c1cf0cbb288866d14cde2c6f372fd89f10aff4c7b6e945183a1c75eb56c54fd723f2cea22d62cd4729c4438bca4d692ffaac12d5db4a19bc5230a91c6a551a721adc2197240c4116125ee5253e50bb15a0ab51a2d9b571d2c48bc90a180a8f002bb2d67a4cb38ff6046899af86103989f577d4efcf18752f733351cbda96b414887f5d6870d823ee437d15e2ad446cfd8218b359f989dc73705819e3e10f3b4b63294faed0d48aa42137b9f261e9a40fbcb6e9f6c59f7a8671ec756eadbd2cc41c26d71d3afbcb85d4fb8a4e6ea948df1f05f5df1991418e38e150f91a5a9757447cfc89cf77b758c62d4c48ccc7fb80251ff196c00a3139f61e85de1ec6cf37aa550247bd337243c6b5e52bf0b4fb6dc63cd68b41802d9c61a0c0841a6686da9741519d1883dcf467a971128f219e3eeabd1ed8c5bd84876b49dcebea96801abe6527da982fc09953dca9a0e6e1462cfc30b474eddde87b7066586b8a6fb85c695d1220dfe7957642aa22bed27cf8b0bda243fae1d1393f939749054a2446bc518909f1ca84fbd9ab24242c46600c907d5c72bd62812efcb2128ef55f32b5c70e708fc5d1f63aaecdec1322daf5468db5396cee8747b4fc1cfc15a999f921b77891fd81275cabf70848a4b36796281b76b6a51f5367a7dcbc9472559aec340c64c5391aa1b9a0d6bb1f98f26a5109282d4e9523b46267709fe0e85b8fddef54a3bf28fc2944deaa7e70d4a1c4fc15a61e497b9f339e8c37a4d5e7c847926c45a229b8cb5497cce4e743d4a06fa699f2b7ab99857f16752a4a47e1eb6ca9e27242c17eef53b88919b9d0219c7696a84e466379753c6998cbd299ca2e22442207fb08ecddfd54af34599cd58f9b630fc90b5d24c8092400cf92b795788321541ca38c44705caf186303d7221452b4534169635fe43ce4414d0955418f8260d3276c9ff497c9a498415b9738cd461a4855725f12697b43c8fe3a97f72b2d6af571408cb3b8a2173eb865b5ac9bb9d282162f4c80cd999c8c1f2a59137f491baab19bd41e16f87755eb59d1761f9906eab624181e33a47e2c112ed4037901a59d6d527cfc65f83e0689a858d34a4534ecac0b8db5ee9ba3ca5096f4de825ff0c032ccf667b69bfe2461322f2356718f728c4a9709d25c962605c6373deffa07fede6eb43568fc366f3c58968faeb26829089134573ef984f280373eaf3f6245ce53a448aa37a9afad5e81b7c5bbe31eb2e943d1932d5d2af010d51a21f0f6213da60a5dfb3c4ce619677804ca259a215f3fd9c2640a2de13683acdfc20caad3ce11a6913ef714fc7d9429b3f52870c88ccf582114e175b21f08a7b303c23dff77b1b3857ff15010b90aa85c55c9a8261bb31483869589db56d24fafbaf7bfff8ed39f383e4b51957637444f865ae056ac280e0e918198277307fde8c7d5524fcdf826b3ddf029de2cfafd42f7dd6e483353a6be6b84adac3b2385bd026c4366eb653d080fdd4b479bd2983ba74518880c37e87215ba1e42dae0f5a585bd43a59bd75184b1ab8bfd6ce1245e2aa74004302c2c03d7e9cb64a70e1c40f21f8ba1bccdc7ba318183d82e71f00ce0743b78ebed9c20e7ddd535e65134697f0c4e50635512fc9ce7c52a0fd753a9bb91979013f552a3e27a53c11063ae5aef36ce7d93a20057b1b8c2b7fbef54cd7c38a3532114751f077a61adc8502ef4e1186d92d087d744fe113524e679a57c439e254cc8830fd84d891650df4cc23ed5d9ebfc42be3f59f4e345a23f5aa971c30cab1240f837ff1c7a2f93e37f8d85de08bab37d19c702a65a253068cf9f35b60df09ba54058381c5833f1dc6792f46e244864ba73df5a770d9bec64a1d83259bb3ec67c1ab1bed5a97ad766c62cacbaf161c339a80b07880e31732e34b26cc51fc32d5bc0ef70b75529b70e9ab628d82b4cde7182a82969d028d2ed4f67ef8b3753784ec85b7da8cc254d28c565cf8e3f65fbaab8e303d783dcf997198157bff09cc0ddaeec1ccef97deb2fd50f9198b599956e82a9880cdfb0c2fd69fa3e09a19ff78525d75796ab3db437322e040ddf7e71a6c65d2057b0290e0c4a08f4b0c536207c", 0x1000}, {&(0x7f0000003a80)="715c3c2635bb93c76c39c063f3d2e10a159a6f2fb858508c6370fa4b3b1c81a46322c57b26ec3a6c7e6edf7a24e78975f63176ad280d3382ae4fd14783d53adce41b0c45391082a3f8f30c674d58c5d72a6d69edfc85c3e8be164a6317cef766f000e9f2beb350932a18bb", 0x6b}], 0x4, &(0x7f0000003b40)=[{0x20, 0x1, 0x931b, "ec48b79c892035a57b2b1d794117"}, {0x68, 0x10d, 0x5, "b20cddae0547748031174014ae167d63f5730d695bcf9d3fdd8bd06a5af314c020c1000c15a7c87132932af9bef5c5b7da8cbe0615029638982f329ec859f7e9cd54343938d9bac9c19b858171d74358d01aa9ec5e95"}, {0x38, 0x29, 0x3f, "3f0e7848586a5e43e745fe2ce5106040b38700ff159a758e10f65237864cfe89644e5804c9d358"}, {0xc8, 0x101, 0x8, "3fc332ed8eee3b74325d25d9c06b7ab9b7a521c2018f9a0790f058de3ffd5602159b1be2a1cf5b1939ed1940f3bede8dc6421e40d4eb5c30136141be483abec499c1aa138d225727ec4a35a3284c682514a0d62bfcc5d21b6f6a39bb21709c30f4bbc14ec427b44a5df6af519e741b61d38631b213d17dba902695d210bd44014bd24eab2ef31172b7224a02e104cea666249a951a5a8f49a613d5ca7a864d6dbbfd776b021a3d9bb307ef69f4eb8cf98425d9"}, {0x20, 0x84, 0xd5cd, "6585b72b4b6ac5ef519aa930"}], 0x1a8}}, {{&(0x7f0000003d00)=@pppoe={0x18, 0x0, {0x3, @empty, 'bond_slave_0\x00'}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d80)="8af6ce4ede4402234146bec8da267c2ae29872789dbff24861abdeefd023b5220e1afd04f299385601cd81a3352a59e98e", 0x31}], 0x1, &(0x7f0000003e00)=[{0xb0, 0x117, 0x2, "7fc796249368c8ecba5e401967ea89064ab2dad13c5eb528c68b952a4075af51a6fa00028133a7cc6746add07176a18a4b2709bcf54eaaa3fc8b0e0fb1c91586d4a383805050e34e4812a0e0e7e32fa41fdf438c08d29962902e7903f48aaef7bf5ac79399006c9655e5fe8f82ce96812cc0621db1c3fceb7862b80b3cc1955461d07fdf673036ad7f53ce52c6da259c0074554585584ad1d924"}, {0xa8, 0x10d, 0x6, "6a56736c5401c92849c41261318153d905e9438c7f7305cefd9ea3b5a16604c1f1ea1df58a257be9be886d32960c76165077964d3a04b38e910009e9e9ad750fd558217a007338e7baf009564752d6bebb5bd4dc823f58e68efb74937a035225bfefbf93cd6b246007ff3832a8f80fef8ef1abaf31b98b262ac72a3c8d4bb1f06bb1edc61e19c21c773eff149ffefecad6d9791c"}, {0x68, 0x0, 0x9, "ca0e5af64ae38a1ed659b0e7d01c44cf3d7ac54582dfeaebde386b7f20e53931b9bafb262dd72db39c7e48baf7b3693bbe01780768845c9da9b627bcd8bc8d5a1bee6a75abd41a24d7c2975b348829ba6901a7ab"}, {0xb8, 0x117, 0x455, "3bd32efd7a969c39060814ad04d0ff08f9fab543a1bd08b0026c491cc60099db4b7a669c9efa466444d5dbed9483e1186ab5310142f41d827d8c026d0f87a500cedfc164f56649ed3f738563add88eea06c699cbd4da021736347ec89eb55fb7e40f8a1ba3698c0c398a2f00f6d654f1b133f26ef994b1a355a9c3af06e871e2b41398a50ee9e5d1994c1911a3f098022cdb479e3322d9633b938311ac718469fea91d2ab3f48bf7"}, {0xe0, 0x0, 0x0, "a5491f52d269a9eb84e3948b3784e3fff43e32a9892fa6040f35be03f93a0f51c4e3578798337947d88224aa60c4557817afe5d24825490ffe5eec82f7fbbf7b4a65bdca736ca3db9535d4473e76a30f9dc4a9d4c7b08a02c0dba41f064e14d22914fb0a186ad08835d4102182c204e47218fcacf9c94557ce1a9ca668ca12f8f9b96af1c0208ae1d55043d9083a623c8f55d67f8902a286923d09a3f2fb743b34c22d1daf0d00a1a507b787dd772d93460cd1a2d7a1bbebd5e4cc5fa64ad4d99aaf978d28147a6b213b760d"}, {0x50, 0x102, 0x0, "93712415bec9042e130cddf5a4d5dbf0946ce862acf3d6085d87f71ab0d5d7ce0e8763d13173299277894f14fb8a2ff65fbca6c32d4a59fafd5ed4457c99"}, {0x20, 0x101, 0x8000, "014e20c82ebaa40e3488d9d3b3"}], 0x3c8}}], 0x3, 0x2000042) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x200080, 0x155) openat(r0, &(0x7f00000042c0)='./file2\x00', 0x0, 0x80) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000004300)='net/vlan/config\x00') close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1293.908011] loop2: detected capacity change from 0 to 4 [ 1293.921438] EXT4-fs (loop2): Can't read superblock on 2nd try 02:33:50 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 97) [ 1293.942386] FAULT_INJECTION: forcing a failure. [ 1293.942386] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.943753] CPU: 1 PID: 8068 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1293.944637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1293.945830] Call Trace: [ 1293.946116] [ 1293.946356] dump_stack_lvl+0x8b/0xb3 [ 1293.946775] should_fail.cold+0x5/0xa [ 1293.947180] ? alloc_vfsmnt+0x23/0x6b0 [ 1293.947604] should_failslab+0x5/0x10 [ 1293.948006] kmem_cache_alloc+0x5b/0x480 [ 1293.948447] ? lock_release+0x3b2/0x6f0 [ 1293.948891] alloc_vfsmnt+0x23/0x6b0 [ 1293.949292] clone_mnt+0x6d/0xdc0 [ 1293.949669] copy_tree+0x3ac/0xa50 [ 1293.950063] copy_mnt_ns+0x1a5/0xa90 [ 1293.950457] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1293.950979] ? kmem_cache_alloc+0x332/0x480 [ 1293.951447] create_new_namespaces+0xd6/0xb30 [ 1293.951938] copy_namespaces+0x391/0x450 [ 1293.952365] copy_process+0x27f2/0x6cb0 [ 1293.952791] ? lock_is_held_type+0xd7/0x130 [ 1293.953267] ? find_held_lock+0x2c/0x110 [ 1293.953716] ? __cleanup_sighand+0xb0/0xb0 [ 1293.954172] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1293.954745] ? _copy_from_user+0x139/0x170 [ 1293.955217] ? kernel_clone+0x2f8/0xa60 [ 1293.955643] kernel_clone+0xe7/0xa60 [ 1293.956050] ? lock_is_held_type+0xd7/0x130 [ 1293.956502] ? create_io_thread+0xf0/0xf0 [ 1293.956959] ? lock_is_held_type+0xd7/0x130 [ 1293.957417] __do_sys_clone3+0x1dd/0x2e0 [ 1293.957865] ? __ia32_sys_clone+0x150/0x150 [ 1293.958343] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1293.958920] ? vfs_write+0x188/0xae0 [ 1293.959320] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1293.959905] ? fput+0x2a/0x50 [ 1293.960252] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.960794] do_syscall_64+0x3b/0x90 [ 1293.961211] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1293.961758] RIP: 0033:0x7f82e43e1b19 [ 1293.962152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.964065] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1293.964864] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1293.965605] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1293.966333] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.967069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.967805] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1293.968555] 02:33:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 02:33:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:33:50 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0xaaaaaaaaaaaac07, &(0x7f00000000c0)=[{&(0x7f0000000180)="a9d7b68fd772e3d7e7c9d953da0e05089ce5663af2c43a7539a9def16de95659b5be58259081b901b1eb3f0aa33fafaca2f8ca168ca9c692087327e3e34961544244774cb3ba6fd43161f932e709", 0x0, 0x1ff}], 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x80, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:33:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 28) [ 1294.076267] loop2: detected capacity change from 0 to 4 02:33:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 47) [ 1294.103413] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1294.114502] FAULT_INJECTION: forcing a failure. [ 1294.114502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1294.117034] CPU: 0 PID: 8078 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1294.118691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1294.120994] Call Trace: [ 1294.121517] [ 1294.121975] dump_stack_lvl+0x8b/0xb3 [ 1294.122762] should_fail.cold+0x5/0xa [ 1294.123614] prepare_alloc_pages+0x17b/0x500 [ 1294.124651] __alloc_pages+0x131/0x4e0 [ 1294.125609] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1294.127016] ? lock_is_held_type+0xd7/0x130 [ 1294.128029] ? lock_release+0x3b2/0x6f0 [ 1294.128959] ? __slab_alloc.constprop.0+0x45/0x80 [ 1294.130092] alloc_pages+0x1a0/0x2f0 [ 1294.130966] ? mark_held_locks+0x9e/0xe0 [ 1294.131929] new_slab+0x26a/0x360 [ 1294.132743] ___slab_alloc+0x8ef/0xea0 [ 1294.133675] ? vm_area_dup+0x78/0x290 [ 1294.134596] ? vm_area_dup+0x78/0x290 [ 1294.135488] __slab_alloc.constprop.0+0x45/0x80 [ 1294.136565] ? vm_area_dup+0x78/0x290 [ 1294.137462] kmem_cache_alloc+0x393/0x480 [ 1294.138430] vm_area_dup+0x78/0x290 [ 1294.139282] ? lock_release+0x3b2/0x6f0 [ 1294.140195] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1294.141270] ? lock_downgrade+0x6d0/0x6d0 [ 1294.142225] ? copy_page_range+0x2cbb/0x47b0 [ 1294.143235] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1294.144456] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1294.145632] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1294.146707] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1294.147817] ? lock_is_held_type+0xd7/0x130 [ 1294.148808] ? vm_area_alloc+0x110/0x110 [ 1294.149761] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1294.151016] ? selinux_vm_enough_memory+0x10f/0x170 [ 1294.152161] ? selinux_sctp_sk_clone+0x370/0x370 [ 1294.153252] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1294.154501] ? percpu_counter_add_batch+0xb4/0x170 [ 1294.155630] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1294.156765] ? __vm_enough_memory+0x184/0x360 [ 1294.157804] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1294.158991] dup_mm+0x53f/0x1250 [ 1294.159796] ? replace_mm_exe_file+0x490/0x490 [ 1294.160850] ? __raw_spin_lock_init+0x36/0x110 [ 1294.161897] copy_process+0x384b/0x6cb0 [ 1294.162847] ? __cleanup_sighand+0xb0/0xb0 [ 1294.163822] ? lock_is_held_type+0xd7/0x130 [ 1294.164793] ? find_held_lock+0x2c/0x110 [ 1294.165735] ? kernel_clone+0x2f8/0xa60 [ 1294.166649] kernel_clone+0xe7/0xa60 [ 1294.167513] ? create_io_thread+0xf0/0xf0 [ 1294.168462] ? find_held_lock+0x2c/0x110 [ 1294.169398] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1294.170645] ? populate_seccomp_data+0x214/0x540 [ 1294.171721] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1294.172972] ? __seccomp_filter+0x5ab/0xff0 [ 1294.173939] ? wait_for_completion_io+0x270/0x270 [ 1294.175037] __do_sys_clone+0xc8/0x110 [ 1294.175931] ? __do_sys_vfork+0xd0/0xd0 [ 1294.176880] ? __secure_computing+0xb4/0x290 [ 1294.177880] do_syscall_64+0x3b/0x90 [ 1294.178734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1294.179887] RIP: 0033:0x7f466d7a6b19 [ 1294.180717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.184804] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1294.186512] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1294.188097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1294.189680] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.191272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.192871] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1294.194482] 02:33:51 executing program 5: mlockall(0x5) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1294.232962] loop2: detected capacity change from 0 to 4 [ 1294.259700] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1294.288593] loop4: detected capacity change from 0 to 256 [ 1294.307858] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1294.324313] FAULT_INJECTION: forcing a failure. [ 1294.324313] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.326657] CPU: 0 PID: 8083 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1294.328331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1294.330901] Call Trace: [ 1294.331495] [ 1294.332005] dump_stack_lvl+0x8b/0xb3 [ 1294.332916] should_fail.cold+0x5/0xa [ 1294.333798] ? security_prepare_creds+0x10a/0x180 [ 1294.334916] should_failslab+0x5/0x10 [ 1294.335783] __kmalloc+0x72/0x440 [ 1294.336589] security_prepare_creds+0x10a/0x180 [ 1294.337676] prepare_creds+0x505/0x6f0 [ 1294.338578] ? acct_arg_size+0x7b/0xe0 [ 1294.339480] prepare_exec_creds+0xd/0x250 [ 1294.340434] bprm_execve+0xcf/0x1960 [ 1294.341302] ? count.constprop.0+0x1b3/0x280 [ 1294.342306] ? open_exec+0x70/0x70 [ 1294.343117] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1294.344364] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1294.345644] ? copy_string_kernel+0x4c8/0x580 [ 1294.346680] do_execveat_common+0x727/0x890 [ 1294.347665] ? bprm_execve+0x1960/0x1960 [ 1294.348612] __x64_sys_execveat+0xe0/0x120 [ 1294.349581] ? trace_hardirqs_on+0x38/0x190 [ 1294.350556] do_syscall_64+0x3b/0x90 [ 1294.351404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1294.352558] RIP: 0033:0x7f245182fb19 [ 1294.353402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1294.357520] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1294.359215] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1294.360806] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1294.362408] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1294.363990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1294.365574] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1294.367183] [ 1294.392968] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1309.810567] loop4: detected capacity change from 0 to 256 [ 1309.814749] FAULT_INJECTION: forcing a failure. [ 1309.814749] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.816035] CPU: 0 PID: 8105 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1309.816921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1309.818153] Call Trace: [ 1309.818437] [ 1309.818686] dump_stack_lvl+0x8b/0xb3 [ 1309.819108] should_fail.cold+0x5/0xa [ 1309.819528] ? create_object.isra.0+0x3a/0xa20 [ 1309.820034] should_failslab+0x5/0x10 [ 1309.820447] kmem_cache_alloc+0x5b/0x480 [ 1309.820894] create_object.isra.0+0x3a/0xa20 [ 1309.821381] ? kasan_unpoison+0x23/0x50 [ 1309.821817] kmem_cache_alloc+0x239/0x480 [ 1309.822273] alloc_vfsmnt+0x23/0x6b0 [ 1309.822680] clone_mnt+0x6d/0xdc0 [ 1309.823063] copy_tree+0x3ac/0xa50 [ 1309.823461] copy_mnt_ns+0x1a5/0xa90 [ 1309.823541] loop1: detected capacity change from 0 to 256 [ 1309.823881] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1309.825624] ? kmem_cache_alloc+0x332/0x480 [ 1309.826104] create_new_namespaces+0xd6/0xb30 [ 1309.826626] copy_namespaces+0x391/0x450 [ 1309.827085] copy_process+0x27f2/0x6cb0 [ 1309.827545] ? lock_is_held_type+0xd7/0x130 [ 1309.828034] ? find_held_lock+0x2c/0x110 [ 1309.828508] ? __cleanup_sighand+0xb0/0xb0 [ 1309.828997] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1309.829623] ? _copy_from_user+0x139/0x170 [ 1309.830120] ? kernel_clone+0x2f8/0xa60 [ 1309.830558] kernel_clone+0xe7/0xa60 [ 1309.830984] ? lock_is_held_type+0xd7/0x130 [ 1309.831462] ? create_io_thread+0xf0/0xf0 [ 1309.831941] ? lock_is_held_type+0xd7/0x130 [ 1309.832437] __do_sys_clone3+0x1dd/0x2e0 [ 1309.832901] ? __ia32_sys_clone+0x150/0x150 [ 1309.833416] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1309.834034] ? vfs_write+0x188/0xae0 [ 1309.834466] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1309.835093] ? fput+0x2a/0x50 [ 1309.835456] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.836033] do_syscall_64+0x3b/0x90 [ 1309.836469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1309.837069] RIP: 0033:0x7f82e43e1b19 [ 1309.837495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.839608] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1309.840477] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1309.841272] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1309.842079] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.842890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.843662] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1309.844476] [ 1309.844911] audit: type=1326 audit(1643942046.768:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8098 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 02:34:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 98) 02:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x401, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:34:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 02:34:06 executing program 5: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:34:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:34:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 29) 02:34:06 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:34:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 48) [ 1309.853207] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1309.857554] FAULT_INJECTION: forcing a failure. [ 1309.857554] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.857743] loop2: detected capacity change from 0 to 4 [ 1309.858885] CPU: 0 PID: 8102 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1309.858901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1309.858908] Call Trace: [ 1309.858912] [ 1309.858917] dump_stack_lvl+0x8b/0xb3 [ 1309.858937] should_fail.cold+0x5/0xa [ 1309.863472] ? security_file_alloc+0x34/0x170 [ 1309.863965] should_failslab+0x5/0x10 [ 1309.864379] kmem_cache_alloc+0x5b/0x480 [ 1309.864824] security_file_alloc+0x34/0x170 [ 1309.865298] __alloc_file+0xb6/0x240 [ 1309.865704] alloc_empty_file+0x6d/0x170 [ 1309.866148] path_openat+0xe1/0x28a0 [ 1309.866563] ? lock_chain_count+0x20/0x20 [ 1309.867025] ? filter_irq_stacks+0x90/0x90 [ 1309.867521] ? path_lookupat+0x850/0x850 [ 1309.867988] ? kasan_save_stack+0x2e/0x40 [ 1309.868457] ? kasan_save_stack+0x1e/0x40 [ 1309.868926] ? __kasan_kmalloc+0x81/0xa0 [ 1309.869414] ? security_prepare_creds+0x10a/0x180 [ 1309.869966] ? prepare_creds+0x505/0x6f0 [ 1309.870436] ? prepare_exec_creds+0xd/0x250 [ 1309.870928] do_filp_open+0x1aa/0x400 [ 1309.871360] ? may_open_dev+0xf0/0xf0 [ 1309.871801] ? find_held_lock+0x2c/0x110 [ 1309.872265] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1309.872868] ? lock_release+0x3b2/0x6f0 [ 1309.873326] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1309.873924] ? lock_is_held_type+0xd7/0x130 [ 1309.874421] ? find_held_lock+0x2c/0x110 [ 1309.874892] do_open_execat+0x116/0x740 [ 1309.875344] ? bprm_execve+0x44b/0x1960 [ 1309.875807] ? __ia32_sys_uselib+0x40/0x40 [ 1309.876287] ? do_raw_spin_lock+0x121/0x260 [ 1309.876782] ? rwlock_bug.part.0+0x90/0x90 [ 1309.877277] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1309.877909] bprm_execve+0x48a/0x1960 [ 1309.878345] ? count.constprop.0+0x1b3/0x280 [ 1309.878849] ? open_exec+0x70/0x70 [ 1309.879265] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1309.879899] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1309.880523] ? copy_string_kernel+0x4c8/0x580 [ 1309.881036] do_execveat_common+0x727/0x890 [ 1309.881544] ? bprm_execve+0x1960/0x1960 [ 1309.882021] __x64_sys_execveat+0xe0/0x120 [ 1309.882514] ? trace_hardirqs_on+0x38/0x190 [ 1309.883002] do_syscall_64+0x3b/0x90 [ 1309.883427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1309.884016] RIP: 0033:0x7f245182fb19 [ 1309.884440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.886547] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1309.887414] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1309.888225] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1309.889025] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.889814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.890621] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1309.891448] 02:34:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 99) [ 1309.909300] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1309.913351] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1309.922720] FAULT_INJECTION: forcing a failure. [ 1309.922720] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.923325] FAULT_INJECTION: forcing a failure. [ 1309.923325] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.923957] CPU: 0 PID: 8116 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1309.927041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1309.928273] Call Trace: [ 1309.928556] [ 1309.928800] dump_stack_lvl+0x8b/0xb3 [ 1309.929239] should_fail.cold+0x5/0xa [ 1309.929653] should_failslab+0x5/0x10 [ 1309.930067] __kmalloc_track_caller+0x79/0x420 [ 1309.930586] ? kstrdup_const+0x53/0x80 [ 1309.931022] kstrdup+0x36/0x70 [ 1309.931386] kstrdup_const+0x53/0x80 [ 1309.931785] alloc_vfsmnt+0xb5/0x6b0 [ 1309.932205] clone_mnt+0x6d/0xdc0 [ 1309.932602] copy_tree+0x3ac/0xa50 [ 1309.933017] copy_mnt_ns+0x1a5/0xa90 [ 1309.933438] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1309.933982] ? kmem_cache_alloc+0x332/0x480 [ 1309.934471] create_new_namespaces+0xd6/0xb30 [ 1309.934988] copy_namespaces+0x391/0x450 [ 1309.935454] copy_process+0x27f2/0x6cb0 [ 1309.935914] ? lock_is_held_type+0xd7/0x130 [ 1309.936409] ? find_held_lock+0x2c/0x110 [ 1309.936884] ? __cleanup_sighand+0xb0/0xb0 [ 1309.937380] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1309.938003] ? _copy_from_user+0x139/0x170 [ 1309.938492] ? kernel_clone+0x2f8/0xa60 [ 1309.938954] kernel_clone+0xe7/0xa60 [ 1309.939377] ? lock_is_held_type+0xd7/0x130 [ 1309.939873] ? create_io_thread+0xf0/0xf0 [ 1309.940339] ? lock_is_held_type+0xd7/0x130 [ 1309.940829] __do_sys_clone3+0x1dd/0x2e0 [ 1309.941292] ? __ia32_sys_clone+0x150/0x150 [ 1309.941794] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1309.942403] ? vfs_write+0x188/0xae0 [ 1309.942820] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1309.943438] ? fput+0x2a/0x50 [ 1309.943802] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.944396] do_syscall_64+0x3b/0x90 [ 1309.944818] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1309.945371] RIP: 0033:0x7f82e43e1b19 [ 1309.945798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.947765] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1309.948572] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1309.949378] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1309.950163] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.950962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.951748] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1309.952559] [ 1309.952821] CPU: 1 PID: 8117 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1309.954482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1309.956706] Call Trace: [ 1309.957224] [ 1309.957669] dump_stack_lvl+0x8b/0xb3 [ 1309.958447] should_fail.cold+0x5/0xa [ 1309.959215] ? anon_vma_clone+0xdc/0x580 [ 1309.960035] should_failslab+0x5/0x10 [ 1309.960791] kmem_cache_alloc+0x5b/0x480 [ 1309.961625] anon_vma_clone+0xdc/0x580 [ 1309.962423] anon_vma_fork+0x82/0x6a0 [ 1309.963188] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1309.964183] ? __vm_enough_memory+0x184/0x360 [ 1309.965101] dup_mm+0x91b/0x1250 [ 1309.965805] ? replace_mm_exe_file+0x490/0x490 [ 1309.966723] ? __raw_spin_lock_init+0x36/0x110 [ 1309.967661] copy_process+0x384b/0x6cb0 [ 1309.968500] ? __cleanup_sighand+0xb0/0xb0 [ 1309.969379] ? lock_is_held_type+0xd7/0x130 [ 1309.970256] ? find_held_lock+0x2c/0x110 [ 1309.971073] ? kernel_clone+0x2f8/0xa60 [ 1309.971882] kernel_clone+0xe7/0xa60 [ 1309.972646] ? create_io_thread+0xf0/0xf0 [ 1309.973488] ? find_held_lock+0x2c/0x110 [ 1309.974309] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1309.975305] ? wait_for_completion_io+0x270/0x270 [ 1309.976281] __do_sys_clone+0xc8/0x110 [ 1309.977071] ? __do_sys_vfork+0xd0/0xd0 [ 1309.977876] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1309.978976] ? vfs_write+0x188/0xae0 [ 1309.979753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.980787] do_syscall_64+0x3b/0x90 [ 1309.981558] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1309.982587] RIP: 0033:0x7f466d7a6b19 [ 1309.983324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.986960] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1309.988463] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1309.989889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1309.991303] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.992713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.994141] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1309.995588] 02:34:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 30) 02:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x200400, 0x123) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x84000, 0x10) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1310.020660] loop2: detected capacity change from 0 to 4 [ 1310.029550] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1310.035366] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1310.045266] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:07 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) [ 1310.087749] FAULT_INJECTION: forcing a failure. [ 1310.087749] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.089396] CPU: 0 PID: 8124 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1310.090467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1310.091934] Call Trace: [ 1310.092266] [ 1310.092557] dump_stack_lvl+0x8b/0xb3 [ 1310.093081] should_fail.cold+0x5/0xa [ 1310.093601] ? create_object.isra.0+0x3a/0xa20 [ 1310.094212] should_failslab+0x5/0x10 [ 1310.094708] kmem_cache_alloc+0x5b/0x480 [ 1310.095263] create_object.isra.0+0x3a/0xa20 [ 1310.095843] ? kasan_unpoison+0x23/0x50 [ 1310.096389] kmem_cache_alloc+0x239/0x480 [ 1310.096935] security_file_alloc+0x34/0x170 [ 1310.097535] __alloc_file+0xb6/0x240 [ 1310.098021] alloc_empty_file+0x6d/0x170 [ 1310.098572] path_openat+0xe1/0x28a0 [ 1310.099064] ? lock_chain_count+0x20/0x20 [ 1310.099625] ? filter_irq_stacks+0x90/0x90 [ 1310.100197] ? path_lookupat+0x850/0x850 [ 1310.100746] ? kasan_save_stack+0x2e/0x40 [ 1310.101331] ? kasan_save_stack+0x1e/0x40 [ 1310.101886] ? __kasan_kmalloc+0x81/0xa0 [ 1310.102441] ? security_prepare_creds+0x10a/0x180 [ 1310.103110] ? prepare_creds+0x505/0x6f0 [ 1310.103680] ? prepare_exec_creds+0xd/0x250 [ 1310.104295] do_filp_open+0x1aa/0x400 [ 1310.104786] ? may_open_dev+0xf0/0xf0 [ 1310.105254] ? find_held_lock+0x2c/0x110 [ 1310.105721] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1310.106316] ? lock_release+0x3b2/0x6f0 [ 1310.106780] ? memcg_slab_post_alloc_hook+0x206/0x440 [ 1310.107382] ? lock_is_held_type+0xd7/0x130 [ 1310.107880] ? find_held_lock+0x2c/0x110 [ 1310.108365] do_open_execat+0x116/0x740 [ 1310.108823] ? bprm_execve+0x44b/0x1960 [ 1310.109270] ? __ia32_sys_uselib+0x40/0x40 [ 1310.109753] ? do_raw_spin_lock+0x121/0x260 [ 1310.110248] ? rwlock_bug.part.0+0x90/0x90 [ 1310.110735] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1310.111339] bprm_execve+0x48a/0x1960 [ 1310.111781] ? count.constprop.0+0x1b3/0x280 [ 1310.112257] ? open_exec+0x70/0x70 [ 1310.112654] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1310.113296] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1310.113933] ? copy_string_kernel+0x4c8/0x580 [ 1310.114424] do_execveat_common+0x727/0x890 [ 1310.114920] ? bprm_execve+0x1960/0x1960 [ 1310.115370] __x64_sys_execveat+0xe0/0x120 [ 1310.115841] ? trace_hardirqs_on+0x38/0x190 [ 1310.116320] do_syscall_64+0x3b/0x90 [ 1310.116751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1310.117326] RIP: 0033:0x7f245182fb19 [ 1310.117745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.119840] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1310.120703] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1310.121515] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1310.122325] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.123137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1310.123958] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1310.124782] 02:34:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) creat(&(0x7f0000000080)='./file1\x00', 0x10d) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x400000, 0x118) 02:34:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:34:07 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 100) [ 1310.159621] FAULT_INJECTION: forcing a failure. [ 1310.159621] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.161009] CPU: 0 PID: 8129 Comm: syz-executor.3 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1310.161917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1310.163153] Call Trace: [ 1310.163428] [ 1310.163668] dump_stack_lvl+0x8b/0xb3 [ 1310.164095] should_fail.cold+0x5/0xa [ 1310.164515] ? create_object.isra.0+0x3a/0xa20 [ 1310.165017] should_failslab+0x5/0x10 [ 1310.165446] kmem_cache_alloc+0x5b/0x480 [ 1310.165892] create_object.isra.0+0x3a/0xa20 [ 1310.166376] ? kasan_unpoison+0x23/0x50 [ 1310.166837] __kmalloc_track_caller+0x25e/0x420 [ 1310.167344] ? kstrdup_const+0x53/0x80 [ 1310.167796] kstrdup+0x36/0x70 [ 1310.168143] kstrdup_const+0x53/0x80 [ 1310.168569] alloc_vfsmnt+0xb5/0x6b0 [ 1310.168996] clone_mnt+0x6d/0xdc0 [ 1310.169421] copy_tree+0x3ac/0xa50 [ 1310.169835] copy_mnt_ns+0x1a5/0xa90 [ 1310.170259] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1310.170814] ? kmem_cache_alloc+0x332/0x480 [ 1310.171316] create_new_namespaces+0xd6/0xb30 [ 1310.171838] copy_namespaces+0x391/0x450 [ 1310.172303] copy_process+0x27f2/0x6cb0 [ 1310.172737] ? lock_is_held_type+0xd7/0x130 [ 1310.173239] ? find_held_lock+0x2c/0x110 [ 1310.173721] ? __cleanup_sighand+0xb0/0xb0 [ 1310.174205] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1310.174831] ? _copy_from_user+0x139/0x170 [ 1310.175310] ? kernel_clone+0x2f8/0xa60 [ 1310.175767] kernel_clone+0xe7/0xa60 [ 1310.176192] ? lock_is_held_type+0xd7/0x130 [ 1310.176679] ? create_io_thread+0xf0/0xf0 [ 1310.177177] ? lock_is_held_type+0xd7/0x130 [ 1310.177671] __do_sys_clone3+0x1dd/0x2e0 [ 1310.178144] ? __ia32_sys_clone+0x150/0x150 [ 1310.178647] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1310.179269] ? vfs_write+0x188/0xae0 [ 1310.179691] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1310.180318] ? fput+0x2a/0x50 [ 1310.180683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1310.181260] do_syscall_64+0x3b/0x90 [ 1310.181690] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1310.182251] RIP: 0033:0x7f82e43e1b19 [ 1310.182649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.184739] RSP: 002b:00007f82e1957188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1310.185630] RAX: ffffffffffffffda RBX: 00007f82e44f4f60 RCX: 00007f82e43e1b19 [ 1310.186413] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000100 [ 1310.187178] RBP: 00007f82e19571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.187950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1310.188717] R13: 00007ffc215cd51f R14: 00007f82e1957300 R15: 0000000000022000 [ 1310.189516] [ 1310.190426] loop2: detected capacity change from 0 to 4 [ 1310.220544] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1310.245650] loop2: detected capacity change from 0 to 4 [ 1310.271084] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1323.347022] audit: type=1326 audit(1643942060.300:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8147 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 02:34:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 31) 02:34:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) creat(&(0x7f0000000080)='./file1\x00', 0x10d) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x400000, 0x118) 02:34:20 executing program 5: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:34:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x110000, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000500)='./file1/file0\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000540)=ANY=[@ANYBLOB="01ec9112200397d35a4b0c00000100000018000000854c8140a83907036fc1bf05971194947e83d46b85a092ac3fbdef2cd374c94a651a53151cf06cc2c73dd0f10621b33a22431247bffb0000000000000062cebf9931", @ANYRES32=r1, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x81, 0x0, {0x1, 0x2, 0x2, 0x3, 0x1f}, 0xffffff69}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) r4 = openat(r3, &(0x7f00000004c0)='./file0\x00', 0x20202, 0x10) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000280)={{r5, r6/1000+60000}}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) setxattr$security_selinux(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25, 0x3) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:34:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 49) 02:34:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:34:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:34:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b502, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1323.366000] loop1: detected capacity change from 0 to 256 [ 1323.367716] loop4: detected capacity change from 0 to 256 [ 1323.378791] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1323.391956] loop2: detected capacity change from 0 to 4 [ 1323.403141] FAULT_INJECTION: forcing a failure. [ 1323.403141] name failslab, interval 1, probability 0, space 0, times 0 [ 1323.405571] CPU: 1 PID: 8160 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1323.407289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1323.409655] Call Trace: [ 1323.410193] [ 1323.410662] dump_stack_lvl+0x8b/0xb3 [ 1323.411500] should_fail.cold+0x5/0xa 02:34:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b503, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1323.412305] ? lock_downgrade+0x6d0/0x6d0 [ 1323.413358] ? create_object.isra.0+0x3a/0xa20 [ 1323.414352] should_failslab+0x5/0x10 [ 1323.415164] kmem_cache_alloc+0x5b/0x480 [ 1323.416043] create_object.isra.0+0x3a/0xa20 [ 1323.416980] ? kasan_unpoison+0x23/0x50 [ 1323.417851] kmem_cache_alloc+0x239/0x480 [ 1323.418751] anon_vma_clone+0xdc/0x580 [ 1323.419606] anon_vma_fork+0x82/0x6a0 [ 1323.420427] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1323.421498] ? __vm_enough_memory+0x184/0x360 [ 1323.422457] dup_mm+0x91b/0x1250 [ 1323.423206] ? replace_mm_exe_file+0x490/0x490 [ 1323.424188] ? __raw_spin_lock_init+0x36/0x110 [ 1323.425175] copy_process+0x384b/0x6cb0 [ 1323.426080] ? __cleanup_sighand+0xb0/0xb0 [ 1323.427008] ? lock_is_held_type+0xd7/0x130 [ 1323.427933] ? find_held_lock+0x2c/0x110 [ 1323.428817] ? kernel_clone+0x2f8/0xa60 [ 1323.429689] kernel_clone+0xe7/0xa60 [ 1323.430486] ? create_io_thread+0xf0/0xf0 [ 1323.431369] ? find_held_lock+0x2c/0x110 [ 1323.432225] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1323.433383] ? populate_seccomp_data+0x214/0x540 [ 1323.434378] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1323.435533] ? __seccomp_filter+0x5ab/0xff0 [ 1323.436429] ? wait_for_completion_io+0x270/0x270 [ 1323.437485] __do_sys_clone+0xc8/0x110 [ 1323.438321] ? __do_sys_vfork+0xd0/0xd0 [ 1323.439205] ? __secure_computing+0xb4/0x290 [ 1323.440152] do_syscall_64+0x3b/0x90 02:34:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b504, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1323.440958] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.442180] RIP: 0033:0x7f466d7a6b19 [ 1323.442961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.446851] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1323.448452] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1323.449956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1323.451457] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.452951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.454451] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1323.455978] [ 1323.460383] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1323.462050] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1323.474228] loop2: detected capacity change from 0 to 4 [ 1323.476040] FAULT_INJECTION: forcing a failure. [ 1323.476040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1323.478973] CPU: 1 PID: 8149 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1323.480740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1323.483140] Call Trace: [ 1323.483682] [ 1323.484155] dump_stack_lvl+0x8b/0xb3 [ 1323.484979] should_fail.cold+0x5/0xa [ 1323.485821] prepare_alloc_pages+0x17b/0x500 [ 1323.486773] __alloc_pages+0x131/0x4e0 [ 1323.487612] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1323.488904] ? lock_is_held_type+0xd7/0x130 [ 1323.489829] ? find_held_lock+0x2c/0x110 [ 1323.490705] alloc_pages+0x1a0/0x2f0 [ 1323.491513] __get_free_pages+0xc/0xa0 [ 1323.492341] tlb_remove_table+0x3ca/0xc70 [ 1323.493227] ? ___pte_free_tlb+0xdc/0x100 [ 1323.494149] ___pte_free_tlb+0xb3/0x100 [ 1323.495002] free_pgd_range+0x732/0x1350 [ 1323.495911] free_pgtables+0x230/0x2f0 [ 1323.496757] exit_mmap+0x1de/0x630 [ 1323.497522] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1323.498567] ? exit_aio+0x276/0x340 [ 1323.499344] ? do_munmap+0x40/0x40 [ 1323.500114] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1323.501300] ? lock_is_held_type+0xd7/0x130 [ 1323.502232] mmput+0xc8/0x380 [ 1323.502906] free_bprm+0x65/0x2e0 [ 1323.503649] do_execveat_common+0x29a/0x890 [ 1323.504577] ? bprm_execve+0x1960/0x1960 [ 1323.505482] __x64_sys_execveat+0xe0/0x120 [ 1323.506385] ? trace_hardirqs_on+0x38/0x190 [ 1323.507302] do_syscall_64+0x3b/0x90 [ 1323.508104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1323.509195] RIP: 0033:0x7f245182fb19 [ 1323.509987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1323.513869] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1323.515471] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1323.516975] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1323.518488] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1323.519985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.521494] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1323.523035] [ 1323.526353] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1323.584130] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b505, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:36 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) 02:34:36 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:34:36 executing program 5: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:34:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 32) 02:34:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 50) 02:34:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:34:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1339.089277] audit: type=1326 audit(1643942076.038:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8178 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1339.104719] loop4: detected capacity change from 0 to 256 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b508, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1339.118298] loop2: detected capacity change from 0 to 4 [ 1339.127400] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1339.127439] FAULT_INJECTION: forcing a failure. [ 1339.127439] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.130692] CPU: 0 PID: 8185 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1339.132365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1339.134675] Call Trace: [ 1339.135195] [ 1339.135648] dump_stack_lvl+0x8b/0xb3 [ 1339.136445] should_fail.cold+0x5/0xa [ 1339.137238] ? anon_vma_clone+0xdc/0x580 [ 1339.138091] should_failslab+0x5/0x10 [ 1339.138883] kmem_cache_alloc+0x5b/0x480 [ 1339.139734] anon_vma_clone+0xdc/0x580 [ 1339.140569] anon_vma_fork+0x82/0x6a0 [ 1339.141376] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1339.142429] ? __vm_enough_memory+0x184/0x360 [ 1339.143364] dup_mm+0x91b/0x1250 [ 1339.144091] ? replace_mm_exe_file+0x490/0x490 [ 1339.145036] ? __raw_spin_lock_init+0x36/0x110 [ 1339.146007] copy_process+0x384b/0x6cb0 [ 1339.146860] ? __cleanup_sighand+0xb0/0xb0 [ 1339.147754] ? lock_is_held_type+0xd7/0x130 [ 1339.148633] ? find_held_lock+0x2c/0x110 [ 1339.149473] ? kernel_clone+0x2f8/0xa60 [ 1339.150334] kernel_clone+0xe7/0xa60 [ 1339.151117] ? create_io_thread+0xf0/0xf0 [ 1339.151989] ? find_held_lock+0x2c/0x110 [ 1339.152837] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1339.153968] ? populate_seccomp_data+0x214/0x540 [ 1339.154941] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1339.156066] ? __seccomp_filter+0x5ab/0xff0 [ 1339.156944] ? wait_for_completion_io+0x270/0x270 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b510, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1339.157947] __do_sys_clone+0xc8/0x110 [ 1339.158861] ? __do_sys_vfork+0xd0/0xd0 [ 1339.159714] ? __secure_computing+0xb4/0x290 [ 1339.160620] do_syscall_64+0x3b/0x90 [ 1339.161390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1339.162464] RIP: 0033:0x7f466d7a6b19 [ 1339.163215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.166917] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1339.168446] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1339.169896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.171327] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.172754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.174200] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1339.175661] [ 1339.182747] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1339.190748] loop2: detected capacity change from 0 to 4 [ 1339.193035] FAULT_INJECTION: forcing a failure. [ 1339.193035] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.194230] CPU: 1 PID: 8184 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1339.195024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1339.196108] Call Trace: [ 1339.196356] [ 1339.196573] dump_stack_lvl+0x8b/0xb3 [ 1339.196954] should_fail.cold+0x5/0xa [ 1339.197337] ? create_object.isra.0+0x3a/0xa20 [ 1339.197815] should_failslab+0x5/0x10 [ 1339.198193] kmem_cache_alloc+0x5b/0x480 [ 1339.198592] create_object.isra.0+0x3a/0xa20 [ 1339.199021] ? kasan_unpoison+0x23/0x50 [ 1339.199421] __kmalloc_track_caller+0x25e/0x420 [ 1339.199869] ? bprm_change_interp+0x74/0xe0 [ 1339.200312] kstrdup+0x36/0x70 [ 1339.200641] bprm_change_interp+0x74/0xe0 [ 1339.201065] load_misc_binary+0x3e4/0xb30 [ 1339.201511] bprm_execve+0x7f3/0x1960 [ 1339.201908] ? open_exec+0x70/0x70 [ 1339.202266] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1339.202830] ? copy_string_kernel+0x4c8/0x580 [ 1339.203288] do_execveat_common+0x727/0x890 [ 1339.203720] ? bprm_execve+0x1960/0x1960 [ 1339.204147] __x64_sys_execveat+0xe0/0x120 [ 1339.204581] ? trace_hardirqs_on+0x38/0x190 [ 1339.205015] do_syscall_64+0x3b/0x90 [ 1339.205391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1339.205913] RIP: 0033:0x7f245182fb19 [ 1339.206286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.208106] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1339.208903] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1339.209631] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1339.210341] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.211042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.211742] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1339.212502] [ 1339.221795] EXT4-fs (loop2): Can't read superblock on 2nd try 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b511, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:34:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x4082, 0x61) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x0, 0x0, 0x0) 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 33) [ 1339.365848] loop2: detected capacity change from 0 to 4 [ 1339.367880] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 51) [ 1339.396026] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1339.403694] FAULT_INJECTION: forcing a failure. [ 1339.403694] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.404962] CPU: 1 PID: 8218 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1339.405766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1339.406853] Call Trace: [ 1339.407102] [ 1339.407322] dump_stack_lvl+0x8b/0xb3 [ 1339.407707] should_fail.cold+0x5/0xa [ 1339.408079] ? lock_downgrade+0x6d0/0x6d0 [ 1339.408486] ? create_object.isra.0+0x3a/0xa20 [ 1339.408938] should_failslab+0x5/0x10 [ 1339.409310] kmem_cache_alloc+0x5b/0x480 [ 1339.409719] create_object.isra.0+0x3a/0xa20 [ 1339.410156] ? kasan_unpoison+0x23/0x50 [ 1339.410557] kmem_cache_alloc+0x239/0x480 [ 1339.410967] anon_vma_clone+0xdc/0x580 [ 1339.411386] anon_vma_fork+0x82/0x6a0 [ 1339.411766] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1339.412290] ? __vm_enough_memory+0x184/0x360 [ 1339.412751] dup_mm+0x91b/0x1250 [ 1339.413137] ? replace_mm_exe_file+0x490/0x490 [ 1339.413654] ? __raw_spin_lock_init+0x36/0x110 [ 1339.414133] copy_process+0x384b/0x6cb0 [ 1339.414572] ? __cleanup_sighand+0xb0/0xb0 [ 1339.415023] ? lock_is_held_type+0xd7/0x130 [ 1339.415475] ? find_held_lock+0x2c/0x110 [ 1339.415905] ? kernel_clone+0x2f8/0xa60 [ 1339.416328] kernel_clone+0xe7/0xa60 [ 1339.416724] ? create_io_thread+0xf0/0xf0 [ 1339.417161] ? find_held_lock+0x2c/0x110 [ 1339.417588] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1339.418161] ? populate_seccomp_data+0x214/0x540 [ 1339.418662] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1339.419237] ? __seccomp_filter+0x5ab/0xff0 [ 1339.419692] ? wait_for_completion_io+0x270/0x270 [ 1339.420202] __do_sys_clone+0xc8/0x110 [ 1339.420620] ? __do_sys_vfork+0xd0/0xd0 [ 1339.421070] ? __secure_computing+0xb4/0x290 [ 1339.421552] do_syscall_64+0x3b/0x90 [ 1339.421945] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1339.422494] RIP: 0033:0x7f466d7a6b19 [ 1339.422882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.424790] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1339.425598] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1339.426346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.427086] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.427833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.428580] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1339.429338] [ 1339.457329] loop4: detected capacity change from 0 to 256 [ 1339.468699] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1339.474310] FAULT_INJECTION: forcing a failure. [ 1339.474310] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.475537] CPU: 1 PID: 8221 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1339.476397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1339.477570] Call Trace: [ 1339.477838] [ 1339.478068] dump_stack_lvl+0x8b/0xb3 [ 1339.478481] should_fail.cold+0x5/0xa [ 1339.478896] ? getname_kernel+0x4e/0x370 [ 1339.479332] should_failslab+0x5/0x10 [ 1339.479730] kmem_cache_alloc+0x5b/0x480 [ 1339.480157] getname_kernel+0x4e/0x370 [ 1339.480578] open_exec+0x13/0x70 [ 1339.480934] load_misc_binary+0x942/0xb30 [ 1339.481376] bprm_execve+0x7f3/0x1960 [ 1339.481792] ? open_exec+0x70/0x70 [ 1339.482165] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1339.482739] ? copy_string_kernel+0x4c8/0x580 [ 1339.483218] do_execveat_common+0x727/0x890 [ 1339.483672] ? bprm_execve+0x1960/0x1960 [ 1339.484113] __x64_sys_execveat+0xe0/0x120 [ 1339.484574] ? trace_hardirqs_on+0x38/0x190 [ 1339.485035] do_syscall_64+0x3b/0x90 [ 1339.485435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1339.485997] RIP: 0033:0x7f245182fb19 [ 1339.486379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1339.488300] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1339.489096] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1339.489843] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1339.490578] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1339.491321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1339.492072] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1339.492843] [ 1339.571466] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:59 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:34:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 52) [ 1362.486292] loop4: detected capacity change from 0 to 256 [ 1362.488658] FAULT_INJECTION: forcing a failure. [ 1362.488658] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.491285] CPU: 0 PID: 8230 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1362.493161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1362.495726] Call Trace: [ 1362.496313] [ 1362.496823] dump_stack_lvl+0x8b/0xb3 [ 1362.497704] should_fail.cold+0x5/0xa [ 1362.498605] ? anon_vma_clone+0xdc/0x580 [ 1362.499538] should_failslab+0x5/0x10 [ 1362.500398] kmem_cache_alloc+0x5b/0x480 [ 1362.501332] anon_vma_clone+0xdc/0x580 [ 1362.502256] anon_vma_fork+0x82/0x6a0 [ 1362.503135] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1362.504264] ? __vm_enough_memory+0x184/0x360 [ 1362.505290] dup_mm+0x91b/0x1250 [ 1362.506104] ? replace_mm_exe_file+0x490/0x490 [ 1362.507147] ? __raw_spin_lock_init+0x36/0x110 [ 1362.508194] copy_process+0x384b/0x6cb0 [ 1362.509140] ? __cleanup_sighand+0xb0/0xb0 [ 1362.510127] ? lock_is_held_type+0xd7/0x130 [ 1362.511104] ? find_held_lock+0x2c/0x110 [ 1362.512023] ? kernel_clone+0x2f8/0xa60 [ 1362.512962] kernel_clone+0xe7/0xa60 [ 1362.513827] ? create_io_thread+0xf0/0xf0 [ 1362.514784] ? find_held_lock+0x2c/0x110 [ 1362.515706] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1362.516940] ? populate_seccomp_data+0x214/0x540 [ 1362.518038] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1362.519319] ? __seccomp_filter+0x5ab/0xff0 [ 1362.520320] ? wait_for_completion_io+0x270/0x270 [ 1362.521454] __do_sys_clone+0xc8/0x110 [ 1362.522384] ? __do_sys_vfork+0xd0/0xd0 [ 1362.523345] ? __secure_computing+0xb4/0x290 [ 1362.524376] do_syscall_64+0x3b/0x90 [ 1362.525261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1362.526463] RIP: 0033:0x7f466d7a6b19 [ 1362.527324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.531832] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1362.533538] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1362.535205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.536868] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.538542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.540214] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1362.541928] 02:34:59 executing program 5: mlockall(0x0) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:34:59 executing program 1: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:34:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0xfffffffffffffffe}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000180), 0x0, 0x37, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000003a00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000000840)={0x3170, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x11b4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0xb5, 0x80, [@mic={0x8c, 0x18, {0x50, "854902559c1c", @long="21cd9fc61c2cd32c10db6031ea6f354d"}}, @cf={0x4, 0x6, {0x7f, 0x8, 0x0, 0x4}}, @dsss={0x3, 0x1, 0xa}, @fast_bss_trans={0x37, 0x8a, {0x1, 0x2, "5a6d6548ee7aa0ef8629a35408268008", "1c5c457102b85fc0a74e93db4414ecaccd3aa38d9dc770535a7da0a29e125836", "c9d76b6ef698e65094f090479d6dc9fc5195ba33202351c5da21255fa60a73b9", [{0x3, 0x11, "8ca8fea1e594179a3897fa81a3044bcd25"}, {0x3, 0x23, "62adb76fb798fd95ba8722271462f0126ced8ebc119211c2fe11b0d756466307715bf3"}]}}]}, @NL80211_ATTR_PROBE_RESP={0x372, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x579, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x13c, 0x80, [@supported_rates={0x1, 0x2, [{0x9, 0x1}, {0x5f, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x1f}}, @preq={0x82, 0x78, @ext={{0x1}, 0x81, 0x8, 0x3ff, @device_b, 0x4, @broadcast, 0x0, 0x1, 0x8, [{{}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @broadcast, 0x40000}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x8001}, {{0x0, 0x0, 0x1}, @device_a, 0x7fff}, {{0x1}, @device_a, 0x4}, {{0x1}, @device_b, 0x3}, {{}, @device_b, 0x1}]}}, @mesh_chsw={0x76, 0x6, {0x4c, 0x61, 0x2a, 0xf9}}, @preq={0x82, 0x36, @ext={{}, 0x7, 0x10, 0x800, @broadcast, 0x39000, @device_a, 0x80000000, 0x0, 0x2, [{{0x1, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_b, 0x9}]}}, @tim={0x5, 0x6a, {0x1f, 0x8b, 0x4, "08861cd45f09bd9f6a16c374f08642955a2535b3fc7065c733c852cf4cc12a0612381fec84bc21f792cb8ab3db9e67dc10a8a7afe277960ebfe8bebd1409dfa8a57834602942dc63252ef75e0e3090ed3748f7994d615c825a42d6c04e31f2b997a1bd2c342836"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2, 0x4, 0x20}}]}, @NL80211_ATTR_IE={0x1a1, 0x2a, [@link_id={0x65, 0x12, {@random="b3184e79a864", @device_b}}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x9, 0x4, @broadcast, 0x6981, 0x3fffc00, 0x1}}, @tim={0x5, 0x29, {0x4, 0x28, 0x81, "782fe639aff9b0b75fed8a912c4f07cfeaee3abe89c81f9cdfe7789f543297bcb6ca5fb9059f"}}, @fast_bss_trans={0x37, 0x132, {0x3f, 0x7, "39b3478efd28328ba38262f17e1d3e86", "4477a7ade8e2a90c363f3308226ead93d60529ed55ae86ffe1127d8b58a7fed6", "10fa89b13a5cebb95080d577fb57bf8c04743de8c61e984846915a1484f27cff", [{0x4, 0x24, "3b309d19a471a02e6bb7e1caae5b7246b03bf83e8b66142bb6b76452ca030fc5379d965e"}, {0x1, 0x26, "adaef6c271280b9c803dbef27055094ce914a3d23c1fd42abf95602a6ff744ac8b5c8591cf7c"}, {0x4, 0x12, "039158589506178013ea69e18eb5550ebdfa"}, {0x1, 0xf, "536c1157ce395e4e7e2f72a08baca2"}, {0x2, 0x26, "5d7d549b63298c69409087cd261437d2e442a813120bb5812e574921ec9783bef92724511387"}, {0x4, 0x22, "104b1ffc613a914272b0a77c2085f6fc2e28cd10c722fc74e042f05e71b8fee06195"}, {0x2, 0x1f, "af899317666d8200f4fb807e2144cdfb4201c0dcb8bacfce135e15c46bce4c"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xb, 0x6}}, @ibss={0x6, 0x2, 0xfff}]}, @NL80211_ATTR_IE_PROBE_RESP={0xcb, 0x7f, [@random_vendor={0xdd, 0x1f, "73d3d38f259c23c30e16bfa7643b6152f00690195209dea050ddd18914d5b1"}, @random_vendor={0xdd, 0x31, "769da735634fa0c5c24674f02a973e19eab59d9b2582d27f4b54db5bc71603077dff0c8badffb299683ff159779e3c3888"}, @mic={0x8c, 0x18, {0x3bc, "99b00bde9840", @long="cfb4c0281cd39effae4c0a7430bab8f0"}}, @gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@random="74871b27835d", @broadcast}}, @preq={0x82, 0x2b, @ext={{0x0, 0x1, 0x1}, 0x4, 0x6, 0x7, @device_a, 0x80000000, @device_a, 0x8001, 0x8000, 0x1, [{{}, @device_a, 0xfffeffff}]}}, @cf={0x4, 0x6, {0x8, 0x4, 0x1000, 0xffff}}, @mesh_chsw={0x76, 0x6, {0x6b, 0x1, 0x1b, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x446, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_b, @random="9c0f00e6c901", {0x4, 0x3f}}, 0x20, @default, 0x0, @void, @val={0x1, 0x7, [{0x60, 0x1}, {0x6c, 0x1}, {0x30, 0x1}, {0x5}, {0x12}, {0x1}, {0x9, 0x1}]}, @val={0x3, 0x1, 0x8c}, @void, @val={0x6, 0x2, 0x800}, @val={0x5, 0xe, {0xc9, 0x3f, 0x7, "21cb4a39e0b2948d3a1992"}}, @val={0x25, 0x3, {0x1, 0x3c, 0xff}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xe5, "b2d45451ca08cdc76ad94348851bb8db4826367027eb62ec95cb3f52286f420eb449a3b6e39eafa09a069795211f08781ac3d4ba4a3e8308eebea2af38cbd5d20164df440b402071e210feb99d9f0b72c758f456fc3ee7f5c5ab199f6afeb36bcbc82cb264f53ad39577f6be26f652060d0c5a080a5b29b68b773645f7602c3f7afdf1039d3781fd36c93122809180b65847366ec5b14f4bd5e12591261fed2c9a64430bd951b59ec46becd2aa1ea6d8bcf1107c3bcb456375b2bbdf0b9d2b0fce7dbac0482b2f6be0efdbc1e209f912839ea30356364ff0bcfd746d34089fdfd3ca9e1af7"}, {0xdd, 0xa, "81faf30481ca66c7ce1b"}, {0xdd, 0xd7, "d1958073d4efebc7fef65a17822c21083a0a2c1b60662bf604a25b34af9673182edaefddf87850ecfc792ad787a98a94d956663ff533f704e5db8e12531f12806f59e2cef4d91c6823ebbd1f8ac1836c9dd325d1aff5e65d133ac71ec47f5e7dbc448c322aa21ef2fac6eddb3c3ddef80d1bf86649bf2accb4472ec227cda205dd605c3c051d48f30a1ea384bc01da46c991c10e1687cd846958c5205ad02a0e0e5e054ff5f3706b222d3a5368481d38c6f3adf134bf346168fe0a4e357f6c3de8e72770b9659d9ee0d831f937782d4c2432c22f32ef88"}, {0xdd, 0x30, "648dfe47621ba93e348eecb1c6dd5d00ef58ebd33b00992e90c670520b478bf0fc9e7ed27831ee628962b3df4e65e596"}, {0xdd, 0xc8, "3d825d90aa23b9806040c2fb72acffd4c4da51678f4c082aaa07e5172dc960fbcd45296450a53a16d92be57a3693bc14e63c81ed9b0c898fb7d540f814f78193127c78462a3ce40c14ce9eaf06fa62256b7930ff52fefe4e3951900bcaec9b72154a674b84ae657573273aabd50e1312ac64ca5afab0c4a69ce89a0ec2fc7766ddb140b47efa63d49b3f67fc83386659764b18c9d17f7fb0c6bf98593c5929ff9edc6b2f8040164daf900f7794f59247be455b1fbcb9580ad4293214d3c9d37ae8e36178bb7c9f67"}, {0xdd, 0x83, "f0e6e63e5340828876dbbd396677e7e9f275b4617f01e59a9ca675fec00e31585d1459368f5a98ed50e40471ec01782a34b78a61e28aaccae78d26f54e868a6c0cbd521f5089794ea2f320d675606cdeed0a4129b9940c0581d2703ce4ec8c11df29b16804ff247c78540ca2af840e33845a0a5d5a2fdd1002b31c067d9439a0a6c0e3"}, {0xdd, 0xa2, "dc4d0ec79e11d3f7dbcc940a1d7c8e4674b33b2c6e5f65792f553367fe9c32e52d78413a61a7dec65f24b4d5ad95bd9c413e20c13aa6f79da0cd759cd54f97795e2099974cee3cf0036353b9a3c328dde3e9ecefa32f759724d2d2205a1da85d1c98afbbb26bb86ca28bd5647031cf26b652771823021835a0de7a4396f1a01dedc0c2d4f782bdaf6b96b2936ba23f2e874b1a37ead4c033fc5142b8950e32aa10f4"}]}}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x7f, 0xb, 0x80}}, @chsw_timing={0x68, 0x4, {0x1, 0x1ff}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x31}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x1f90, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x4]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xa8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x22, 0x3, "36d401ef50a5bd6cf831811e7114b9d63f4009f2406898dc438834990a6d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x78, 0x2, "778009acda5a4792c27bf91e2ed92c4bca5dcdde98e26c1e686114f1a44bd67b58030a8eb3694d1bc82fa10ee23cebeef168c6272f9cbfbccc32f3c4671d5d2128dee0a64d61e47882de34f0114c28dcc99e00cfafa176bafdce515da23fbc37cb1dfc17671aebfac4198b46501d9ab79a9a80cc"}]}, @NL80211_ATTR_IE={0x1f, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0xbe, 0x40}}, @mic={0x8c, 0x10, {0xa25, "174056b74d5c", @short="1f0327ff6a0512f7"}}]}, @NL80211_ATTR_BEACON_HEAD={0x40d, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x2, 0x9}}, @ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x1, 0x1}}, 0x1, @random=0xd1, 0x4000, @void, @val={0x1, 0x2, [{0xb}, {0x24, 0x1}]}, @val={0x3, 0x1, 0xb1}, @void, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x1, 0xb4, 0xf1}}, @void, @val={0x3c, 0x4, {0x0, 0x5, 0xac}}, @val={0x2d, 0x1a, {0x40, 0x2, 0x0, 0x0, {0x385, 0x81, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2}, 0x300, 0x3, 0x7f}}, @void, @void, @val={0x76, 0x6, {0x0, 0x11, 0x42, 0x5}}, [{0xdd, 0xd9, "5878db507bda7d4393128bd04e6774c3826bcef4a5800bf879bfdadf3703b3cf1011b2c550818f0cf2d1a10cfa4b9e9001517fdec72860b22ceed6c053257cacf8c6199358b4a35a5ab5cfe685a95a31ed08596309b51663c7790b12a78099d1434455c1cade9f575e95c566c1f234ed16f685089a185fa1b4d1f62f3d4d4b3e1d502ca145d8b0b16adf276668d1becdb4e4af7e4bd4c9b93b85ddc4b0dfb01e2eb232f259eeef5e34b4ec7db630c4231c4f8350550a6ffacfdc8c2ec64863a7a8073c6de65dda437548b205fb39c32f4c14ce672d29971da2"}, {0xdd, 0xa4, "7fa284bc3bfeaddf8a1c8cc5b34188f4d790bfe9a794402892d75c06e916ab48c73d4ea8a258f505795802ff52d71887da1bc37d04bdcfc2d0912ba8bf9ddda6d79ae0b2610d357cdcbf98d8ac9000319684606d84317dd2c97780fa1204c975394aec4d0a08cfedc2c7790f960801b35e9b7f152c5d1d8acb5f902b4dac2e99dae5097339e3873856b09696cd8a015981c12f4d965dcaec3f084ed3bd2a8f525a49d909"}, {0xdd, 0x3d, "1445cb4dc447a1c34f395e304272e6afc20ecb317531aba865c8673da7b504348e556e925084e5958119faee5b6a831dca0eb4858ab923674deabcd143"}, {0xdd, 0x5d, "c254af2c7e7505fbaba0d81bea767d6f7b3b2baa5108c7bfdf78f3724fdbc0d0f0c7984a55cbc523e3bbb2e3458567306c322993737e3d33519c9c8be68e1843fd36a92eb6b4e3ece25f47098d450f6ea33e46134ee30575af0c4d300c"}, {0xdd, 0x8f, "9140023ae7767ad62f0dfa1e44c4c0cbfb7b069044b49252517c4674b1922a8363465336e72696c354a847986435b52fb03bcf06d07e5932dc26adf2d88e08ad996448a2233ed97c7c004ea88cdf08d82db962a81056a76a385d34913f5e49231a6ecf1541a45e368a9df9d9db5af718b83ca67e7ab21d621675b60a28098b790877b2258b2b00922d0e23992ab00e"}, {0xdd, 0xf5, "6bd259ca8ff83d01b3cb329fbf44e7a8ad0ce4207e8a283f1faae839ad24d8dbb351e14f6b3439f9ec16393aa21eb453ebdd14302f2d27b136c027338b3e1cc5905185dba989d3c36cd112f8b75a8a5b2187c7286bbbe98160bfa73611699807a5a4fe934012b22bc3efb195827d540118898996950b71e8d07d7c20fdd700bbd81fdd685dc155d291b65a4271a0551807cc43853d862ae13c301b46d252163ba35920fdd2df8a91f6f03abc2bbaa9083ecf58a897e10df8ea2bf7965dca7d2b90f162c11b805417e1010a991484b4ec513b55a057d901bdbda21571db1bec91eeca27456ed370d58a47e4e42ae4da80b6b61482b3"}]}}, @NL80211_ATTR_BEACON_HEAD={0x152, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @from_mac, {0x8, 0x3f}}, @ver_80211n={0x0, 0x81, 0x3, 0x2, 0x0, 0x2, 0x1}}, 0x6, @random=0xcb7a, 0x80, @void, @val={0x1, 0x3, [{0x12, 0x1}, {0x2}, {0x6}]}, @void, @val={0x4, 0x6, {0x7, 0x81, 0x616}}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x6, 0x40}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x5}}, @void, [{0xdd, 0x76, "09c27bb76def7c9913da20aa8686346eb490f86fa5cc593f32c07a8e0a2c1c4cb4d59abbbca475dbe666ff2197eb59474f0446ae8f705fabb3831a5406382628453b6fde4bf5831a3ae3fe0f22a22ab6e6282f24a251371499f2dcdfa5108c0f5206a31928198e8493a55dff5db1ac6564ad2d5699e4"}, {0xdd, 0x1e, "fd2a164bc5cdbf75b8f7c4513bdd95e74caf719916728438c8e49fa17fe8"}, {0xdd, 0x9, "51a45dc19ac27e7d27"}, {0xdd, 0x62, "53e47b0db32fea8b08952c5f03e9dac8cff41cfd39f40574a3b63ca21183871459d09d21d72e6468ec4d179ce002c04c18b8c780d11279a52348698f2ebdd9a416583e69aae29f42dfc49ded1e1f049068376cba280787c11b2e6e1d8991784db507"}]}}, @NL80211_ATTR_BEACON_HEAD={0x300, 0xe, {@wo_ht={{}, {}, @broadcast, @device_b, @from_mac, {0x8, 0x3}}, 0x7, @default, 0x5, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x0, 0x0, {0x90f, 0x2ca, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x8, 0xffffffff, 0x4}}, @void, @void, @void, [{0xdd, 0xfd, "adbbfe0f980a11c0f678c0d02db5b1165ee576853c1aa0465f336ee24965286fd8cda45b690b527e6b7b39ca2727af267b1cb680007d7c0bf579bdedf489dd32e10746dd02b00f8ae56b041af6d4f74152db153e38d483d242d3be91e4f6b437813fd71ccce45ea6eebc78dd65eff6def2d7774dadfeeb2c3e4d123c1cb1d9f504cca714305182e64986845a5723a18292a19a5f56d0e64dd37f587699f47486e5d67a27dfdede0feb8757776d7de9a2c8ed871fc0ea3bfaa5d96e811680f14a18091fa56c6411da65fcbb447ad56026d60e2ccb742b235b45e67d968d3cceb6a62854c2b2f45bbe3d19b901387606718e99ec5560137914e97fad6eca"}, {0xdd, 0x8a, "3e38c5485adee7927cd379fb8d342f252041615b0ff6bcbe265b26ed26c699181238e2a19c87df6e06d4ec66a79aa10504bf1a53cd0221c502a3441d6ac8a7972dc9d608245d3e16cd74f6e5a61a0b30175d15fa0ded3b181f12cb0804d19dc6356ed94e333e4826887f76cf156c0b0e071e60af4a314c4af4055858df263c0f97ba57495f27a40f74a8"}, {0xdd, 0x7a, "f556f04d433652f7cf9362aae673a27a5cb40abaff5bc267de91017b419de2081241298d78e2f42c78c7b2d2891babea1525954a1caa6a7d3aca6ac6f59af863b11d540122ba0bb0ebd1ff123205a9c0379c9db036aa7f1cd017af0b6637409adee1b0f16dc76acbd121d95339cfc9fc5da5e01f8dae5009264a"}, {0xdd, 0x14, "278893badc36656917202d18f73077259392b73d"}, {0xdd, 0x59, "ec93f59311f452367539d24b7dc20ee9ba97d1c3349cb3ec982e1677940eff0d5a100b2ab735bb4a414aa42b38f3466a9a440fdf29cac08925e803fb3db6b9ec156cae041eae3291e0e2f8bdb5e7fcabacf31568d485a85af6"}, {0xdd, 0x42, "3ddbe3dbab79c9ba9dafb7c62dcf807f8f4cb82c4d3a57c7db3299883295d1cad72838f894213802075979ceaf016a77719d06e6cf3e9497eab1d3d539d382d8bc49"}]}}, @NL80211_ATTR_BEACON_TAIL={0x3f, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x21}, 0x20, 0x8, @device_b, 0x10000, 0x9, 0x8}}, @supported_rates={0x1, 0x6, [{0x16, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0xc, 0x1}, {0xc}, {0x16}]}, @ssid={0x0, 0x6, @default_ap_ssid}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}], @beacon_params=[@NL80211_ATTR_IE={0x206, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x1, 0x0, {0x3b2, 0x7, 0x0, 0xff, 0x0, 0x1, 0x1}, 0x800, 0x1, 0x1}}, @random={0x1f, 0x98, "428c7c475c095ad542dfa2f6fe46ccdc63b25b0a4a394926267a8102565eb505f2000e7f173cecd60840950d8e2e253d1f798b99b7053b1538d375bf1e71d3e01139534c09e8eee3cb51e1c914dfe025d512bbc8a446a7d7ef8cd2c40bc97f0d78dab1951a2cacff2df46556fb2eb9f0957c01f93908b8816c752e9b0dfddfe104992ccb46e5e37538f2406a60c11f105cb3977c559b526c"}, @fast_bss_trans={0x37, 0xc0, {0x6, 0x3, "b0e8e5125957ee27d90618fa8fbf6f56", "32dc2a4605b4143b1097d4d9376579a170f4a6a5f0cb26d6fea7471be7f84612", "c4325e252a4749b9986943bd91628143cf83c0a49b965011b6e5f7336b2795d7", [{0x4, 0x1f, "4ac78a1a868165b6b5cb5f11c439fb2e24ab5ed49d68d54f3ab30129fd0198"}, {0x3, 0x23, "15c51135887fc67b25f6821279a28ff45502bb934cd36fb0596d9275ba2311e37f69d5"}, {0x1, 0x26, "fc5b93cf7d90dd9b408a4824d5f48f1cd90c1cd3a4b1a7000d4666e504d5382588878ffd3513"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x78, @ext={{0x0, 0x1}, 0x1, 0x42, 0x2, @device_b, 0x3, @broadcast, 0x8, 0x74, 0x8, [{{0x1}, @device_b, 0x80}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{}, @device_b, 0x70b}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x10001}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_b, 0x1553}, {{}, @device_a, 0x8680}]}}, @channel_switch={0x25, 0x3, {0x1, 0x9, 0x6}}]}, @NL80211_ATTR_PROBE_RESP={0x96, 0x91, "68287651cd881d4571ccf871cf87e404b38dbd651467a96a9dfba25fabe04338a68ac4914bfc6f111e2f6bd1d896b2b580248353bb0d15cd3217b5b53a558df5fde4089fc5b129fd1163de0385f9ca0826dce83c026d7e196b6cb5fa5f21518193a344a5c76bd356ad19bd4f880bebbffddc437502c189af50aa7e9edc88be71bdd425472bf875648f6ccef0c8db914f6023"}, @NL80211_ATTR_IE_PROBE_RESP={0x63, 0x7f, [@perr={0x84, 0x3b, {0x1f, 0x3, [@ext={{}, @broadcast, 0xffffffc1, @device_a, 0x12}, @ext={{}, @device_a, 0x7, @device_b, 0x16}, @ext={{}, @device_b, 0x2, @device_b, 0x15}]}}, @dsss={0x3, 0x1, 0xa}, @perr={0x84, 0x15, {0x80, 0x1, [@ext={{}, @broadcast, 0x7fffffff, @broadcast, 0x1f}]}}, @mesh_chsw={0x76, 0x6, {0x4, 0x4b, 0x41, 0x20}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x229, 0x7f, [@random={0x4b, 0x97, "42fdd3333ed211d1ddbdabcab509b011615bcee9b7e31d9f249f61438e37dd560036cdb88d84d62f65f3519f12d8ac0337fcf64a016bd0eeab0189aa06e6628f5ac3c2d695a867e6eb235b0d65fabd311a0d05ca147b75fe3b328a3cbd910bdbc7199a5787ad62caec6201300cf80664c2484a3be61236e0a8b4b146eceb7421859f9db34abad1bf11b6817db5644fae420752d68f53cd"}, @mic={0x8c, 0x18, {0x8a1, "a5e11c207558", @long="6555967b6f24fb9b8ae0dea55dcc9b52"}}, @perr={0x84, 0x82, {0x1, 0x8, [@ext={{}, @broadcast, 0x200, @broadcast, 0x9df}, @ext={{}, @device_b, 0x1f, @device_b, 0x2}, @not_ext={{}, @broadcast, 0x81fc, "", 0x2e}, @not_ext={{}, @broadcast, 0x8, "", 0x29}, @ext={{}, @broadcast, 0xc0000000, @device_a, 0x20}, @not_ext={{}, @device_b, 0xffff, "", 0x1f}, @not_ext={{}, @device_b, 0x9, "", 0x19}, @ext={{}, @device_b, 0x2, @device_a, 0xb}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xb3, 0x80}}, @fast_bss_trans={0x37, 0x84, {0x6, 0x2, "12160968a5ddcd9bc5f9b4e58d1d8ab7", "08192aeb95e2093e3beacf7dc04a51c7b15c1eafc396b04b86db4037ea4575d0", "82d08c9a5447ad51ce7afe4645fc8f35dec4e1a15b581542990b7e31aeaaec34", [{0x1, 0x28, "9d28f746fdad02f80c1575592483a038390e675b038cb9db8d5833486617caabea82730acda1531a"}, {0x2, 0x6, "202811e871fa"}]}}, @preq={0x82, 0x51, @not_ext={{0x1, 0x1}, 0x3, 0x9, 0x3, @device_b, 0xfff, "", 0x7, 0x1, 0x5, [{{0x1}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x9ca}, {{0x1}, @broadcast, 0x6}, {{0x0, 0x0, 0x1}, @device_b, 0x10001}, {{0x0, 0x0, 0x1}, @broadcast, 0x1f}]}}, @ibss={0x6, 0x2, 0x8}, @supported_rates={0x1, 0x6, [{0x24}, {0x3}, {0x4, 0x1}, {0x6c}, {0x48, 0x1}, {0x1b}]}, @challenge={0x10, 0x1, 0x3a}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x10e0, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x60}, 0x2, 0xdb, @broadcast, 0x296710c3, 0x7, 0xfffffff9}}, @erp={0x2a, 0x1}, @measure_req={0x26, 0x1003, {0x5, 0x4f, 0x3, "30843f5dce3a74a7f9c257c80eafa75bea8303b75ecf31c0f036d8455f0e79ac15772dce966a250f767fda82bbfcc747e0193c6d8e5033b3496f69e397689ab1846218206e6ebfeec78f7329bdb854ce6091c318e91285269ed73b6f2e6095118d204143d5e2ea671eed7770f30b7a05a4f8045e9bacaa4ecb601e9c9bfd2757d5184f357e34775a518c633eeee4789cc47e5eb62ecebfa58aba9f443cc27c57e4c8283dbb0223f62bff1ebe73cf2df5e73a7af73b71e9308237b7c231eacc61bf1c6d03bd46fef1ed06917e2ccc1eab9fadcab1939d93aefdd6474a2b4c8ab420705c9981dbe6a668691db93cfee9bcae42999380c1113a19b2380bd9f721175d6581b94ad700802b19a2e970e5f2af21327c4c734393992b9afb91d6760babe7a45f900f921797d8bbe1c3c8d219464d68924f66b57c8b74c8b7bd3df21df059c88b37dcb25867c7f9d29c892671b7332cde5d9630b545033e2af3928d37abd19602a80db3301f4005a0417cc3d2955b9010769131a70cefdf2bbe995491d019f9a84cda3ee8e22c0366cc8865fb82a03f8174a2e0854e0fac17176bc63795a049dea87859b8960ba2e732968e5d33160f692e8f76202931f6a3adfd4912eee24b460789ccc670de4a8f829b39bfba804d2c93a137703e740eed009770d5f1c943c311f5a0f9d89e0d6093b024483f0fe8c842ed0af4cfbbbd370f1895202b82bff0edf3fac6f490d3caf9eca6d434462538f83b7b7ab54af8e9505858edef2d4de9d9a836fcf40f85ca8798ba0ae0b33a78e9a83cfc3b6f9668a9cec09fba8488d311c79450fd16d5b67a80d7ce9be50603452230c4ec171442c0483b9ba13c738aad970ad8ae085b0639a33ae8212fd44e61773f742155194a0050f56fe70c885fa6e0b6411e8bc962e6ba619b71ea5667369c0df2325296e6fd34221680e5b95fefe262ce4dde82d6d5d0c09598266461c7bafd80576d471116922b9feb5458533e107add3e17a86696b8784eb6e6e6a9e1b3341b91d1fce72b80c39194d3d082abc81991c1cbd84cdbe5100d9a6f28f9f2e0b44583923d519c562d7b2d073725844510001fceda7cabdf458b0766fdb72c5edc2b482c4795fce3b9089351b429f53e396d67bcdc77161c76048d9df8fe7d763be4faca57d0f6d3236f2a510fd4f9c58fe264a58c4fa4a7b87c4dfc1d1c54d3d9cf69af4ee09071a2ef2c0167c04e1d22b0ef06b9feb2a53aebbdd4b9c0fdf12ba3044903ecddb0aee6d0c68e645ef38fd64cdc36dc12d36a3bbc509fd8c65b5c42b5e74386a0d9d851f53a758e43e9f574ba2b24337023a6da4aadc417f62098a7d28b09766862076b662f280c6f7beb1cc05d0e898ed965c0fb7c64cee570b886cd1e426600ea494868b08e3383209c16479537c96f907c4532d35544258c4d67a16de2f0b8a11da5aee44dd0724b984a51257a6fe72ab461923c7065b5fa653a311572877af5f2336e53ac0441f9254d0992bbca3136a37488e07e47cb2cae77e275a9dd0f87f167cdd06109f31d6f1483072aeb811b1c627e131952c103b95e9e22dd9c6839c7e3ff0ded0b0f4e99cd5f3c7a48cd3645d63552395ffbca97d8fbe8f009560b932a190abe926934ed20b389148a8598ba8e990b3e780d9aefca45e244e0abd27224bf4524b09f5bab5a588a9ebd0677a87437fb3dbbb074aee18ccf6ee57bacbf4816be3771af00f846af2d924219a34b299a3b7e8983aeef0c71daa70fda83484ccd84dc0baf9cb1d612968029216186bb32be17c5d09113ce69dd7b34fe91a6fc2beb334427875b9b452344b7c07837b6cc1245158b6fcbf0b89837900213caa0b5eb90af762fd8a451da7c0840f243a81a54fd8eb87514b71f067ae74af4c738475863290fe4be7043bbc284c21f948bd6f6ca53e9a862f3a6c158c741ae97496ab6399d97d203d92d799e897badc4cf49fdc51a6aec7ae2f9a7d2762c873ed927e97c2e9e3437fe94d75f0625cc0f20c811083b09a419e7ea0b5a0a5ea807e5e0a8df373e9c7d5370d132e887634fc021dd617884792a150aa76b2e2fa866d5759ebc8cd8d3249de845cd218ab6977c1ccf7e3462daa4fc90b31a6ff2c7891cef299fdd7d13853ce9a8b7bae244bf059d6c5ca2660cde67bd561c2002fab37bf5a74d5bafc506cdfa8e10ec58a46cf1a9ef032965bf2f2e264e99ac19c8e49ee6f51eb591768c8c4dc721c56a67d3c51c19b9751f2eb6a5c294417cf3893aac59a98880ae548c5c4c57cfe977c63af90c9c9d88b65d4b5fde25ab7a26e0c5426f24c73c9f82f3b319213040f1f60f2986da1bee97fd0c35ee9f00187e6ee13222f60106138f398375b57204adcffbc7b9a631475b4dac1a743eb56e8d1734ddf1291bfc5878b99cef15f6db257a0a85f9f9faa13af7fb1c754d6e9a224f474fce0fe870c71e468a5284ef3965747f9c27aefeb75670ac2086d84f242c1de0b087db62e76850fa5786a43d9f08ad5623272ea2ad786cddca1f2d88638d55697e4bc11dfbfd126637f25b142398ab6eea773363fdcf5da7929d68738b9817ed82afe160b22a5d06df5cb991b35065f17ed9657fa2648082fe67f5d7fc49b2b4a149f8246811d104c93b43be62de7a456c6b716f5912c123f539c88bcd7b1ec365e540e1c51012f8908322dc6cf35e979154b53a52ac6a73ac4c50b23354bb96c4141689911e6fa15e0f6aa8400ac217fc871f84ba7c28475989ef9cbcf87407431f1dd0412b1abeefd537c2778e21a30ad3bb7d04a4bb6b605d48dc388abcc4753c329692733ed0289514d6ea47e71f914c9329525c4100403124fb1bc0a44da785a4dd9cec8e6f41f8e5df75f13c3ea9c290166b8c8238e563e1ae9b470f9236cc0765e04af6c04e9c511610c6dd158b5cac3aa175272870de5e8a43ccff80e38933c03cd1f4fb8fd86a8afd4130940a522d16c38dcf5a96927628847ada81e1a87942fcb5e9bd6ca71eafb94008b8510da59b8b75f038c2205864c15c92f53b14b8cd1f1e198f1e844ab5e472e70f6d54e86a46853f401fdf1ccff634d7fc7d86736bcbc938f7c0736e161c9a2780b3dece8ca9bfd51564f351e79bca446e70a510a0320f088594b059d81483336e14e0bda6869f76799c1581b2e8585364132f9af71c87986f84818e88ce2f99e64a4f57212e907f73bfc8962c5558291a41874e9a3ce296c576f6a328a8ebbc6b074db7eb39ea99a8e37fad546c8d251a2fd2dd8c6fe4451e27fb59bdd41652958b2fc7a8a0d84512369b0aeb39600e2ce39a441d01c0bcb17af5ce97efb84b9ba89187eb16ac7d158168288fb61b22e01be5b5147f148727e13bd0153131d0fda90f4a26ba6993b4dc9930813d0eaa8703122aa1989edb272b1e347bfd6ccb7d6c6e77b59d7cc6ab2c87f7d64dfc5f6abe4eb59b94a48b1e9cd871cf1f5b2656d5e30615d04c4b375eb54b6a60cf4ec9caac03379e7ac49f50a7b1b3c61510b1dae21569b3f432febe5c3b26543246985354c282b6999807fcbef1eea546f0e4b8c969eda387fa44bbd533c1dc89c55efb61d9e9409e31dd832a70d736186f25a2610b08166529ef4f659360211df3008b251df81653a8897d1b4125e38e3130eeea50e2312a50a57b6fd8924791dac7d1bec6591bdea96ea84a72f433207fa07977c3977a42c1fde39ff1ea589305f3214c6f24d7a41cbe0e67479d80f359cba2abfb20a1014c6d8ac2e96b5d40c407c9b0752b70b029e1502db040481a2436e4b04ccc16c0c64c0689a87848fcedae069f2eb386917756849711f5177d9169bdeb65792863ff22b11201f54af9dc08ff4f2502cbba09b7de7d6504ab6987a0d66f478eac8eb286bfa90c7210580b4bc592af3488cc835082091220983b41b3ec3cbe0907f6d9b7e7198ee7227d436e6b2b3435b6dc7ebbb82aec505b040a783ccaee82a915b395d0d4110ca27b86e0cbb2013e171feabda0a83ea7e3548c07e148cba4978dcc449effcd2a7e36f3446089e26d69c99ad5270af7a6c1e178251729dff5e99a5268363e76c84c5c3ac027c711007a110737f387c89ad514ff0d40d938a80f714d003dbbbcb42ba60d899e80386a04e61f7369e480bd82afd6503690581504b6c35f7d5b19e9a0574608d029cd4e8dd3724142d4209830949895408e8b455f04a7f9beac27c8113a5eac4f7200e48db08be05d812832261bf786174976e06c5e6ee5510efea21356f08bb30111df2d88b6dda4f42509dedcd677ba3c484cb14e78b0d77adf5f1cf8a60002a2d753ad9315769058e9ad4349d31951714105810214dc7003954d1faacdd5243f028cfd6db4043d8188d822b22c61c2e11cb5324a1ea91adbce92da2aecdf5ba3ca823d2f95c90390ed72706e1bab0dc97686f4640d56aa5acbd43087407386f1131f931b78d693a716ade0bc82dd2233cf2866a301569d87e8e9b8c8158a325dd14efbb7fbcb1b7fe19f435cd7fb74ee626a95558c9be24176c74f5c77a80efdea73f4ad246baaf0504d0a20f7bf7f94c048904ed056e033be782c3687bae2afb363ea7cc2b560054aa7bb6a0501584a93a2e5d91e15a347ed8573eb22c0368d75e6919540bf13024f47bc378cd43b00ce28a0f3d5bc664d6c6d06cc8adc17e8efcfde28a5fc47e870f6ddad6263ec671b00b7adb6c789924d34a72051d26877740cbf8abaf35ad60740b6a74aa4456cceae1baff474ad4af499312dfdf2f37115a581b69aa1b22cfc67ce1cddd91c1aadd17916e77ce3917810efb3dc87d742ff2d63721fc58097aa27d93b007c3e7474bc3547b148aba4b4b929679c4d902471e7485061a1fedc2ecc3e44cff6d2fe0169dcc8fc9acae8a960d536a03784565bcb342f2ab3a5dae738a9c7818ed2eef3d40e47165baa20b99daa45e11f8791943a599886c3dea8ce938d2b43c7931a57c3d4377c00711cba754ec9f4a48191b59889054c87f923056f344a3b59518fa3799c54f5be1a2cecf09f033f5dfd094e5bfb1235179187e69c019e62ca6ba22e4fd3852263a86fb081313b5ab1d6ed4ba8b0428d1448b1c5744f9ea6691cde57e06b2d700c0258781a96a632fda5564cfb37d18d9968d253d37507a5b82e3bbec6f4f967721b918c1860751ce07cf46d5b648e8c78d4cd3fbb59c3cd2df91848802f784f90c815e4cad1a71025bc4001712aea4befca347dd66b55c85e2facd9a43166fa7c7dcd6e08f62b232b9a9d803e997192002ab75b1acef1e1ae01fbdd502f4186d40e70af18bfe93b0880e50e87ef861ea903c1ce99592c22035356bafade5aef244ac692865ca3b676256569527ad002977f53bcfdd225c56892e3fb4bed15a12ec870eb54cbabf24a573c039727c1c0a0ae6b79f61096c2bff1be51dfaacb69154b50ff12d3885944791f0518cb963b8269f3166cec373db3fc698f3182ce57305b3536385f715fddf692c5e976abed830e52a03452237b6efd737fecef0c8ef4e7d53f599f00e4bda11e0a9cef99f6af5b8c8869c6c2d8084798f425081a55160a2201e7dcab9635a46d25070be96ba966d0569a711c4c55918bef1d211f5ef839becdae046948bbd044515b5bcc07aca979353d24d4054046486efa5581ed7592a3c84bceab78b9f1002840c24f07066cb9988853bf66797df4a243cea1cfc94eb77af700f57ab227c43e024b40fbee007992d0ca2c9a897426cf451b776acd7f29b39233735c4abfeeae307b17c94608b0a8941b4d3ac4384a1011df3d1d6ac06808233bf1b6495185"}}, @ibss={0x6, 0x2}, @ibss={0x6, 0x2, 0x1}, @tim={0x5, 0xb3, {0x1f, 0x30, 0x8, "37ce56515361a56b839bcbb16c990b623d6c6907affb424038928079774bcf7aff24231f7bcd7241f801ca4f60cf6ede2211fc9f1e0c0db9a52173aef59341a567952e9ec7cf9650868215b214fc4e90357bf66d02deebed41a419f1acdd8626efaeb9c7cb8c9243b5aa2176f78e0b4554c23e233e359295b241b48134b3a3d388e2f9c242d25e220e9bd871d2398157b912dfd01c5183693064e523b97e65cc2d199099fecb8ee64dc954a95f00696f"}}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xffffff81}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3170}, 0x1, 0x0, 0x0, 0x40004}, 0x20004040) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r5, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) write$selinux_attr(r6, &(0x7f0000000080)='system_u:object_r:crack_db_t:s0\x00', 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000004c0)=ANY=[@ANYBLOB="1f000000000000000000000001000000020000000100008005000000000000003f0000000000000008000000000000000a05000000000000000000000000000000000000000000000c28000000000000000000000000000004000000000000008900000000000000ff00000000000000000000000000000000000000000000000002ec3a0000000000400000000000008000000000000000faffffffffffffffd5ce0000000000000000000000000000000000000000000000180000000000000000000000000000ff7f00000000000008000000000000000000000000000000000000000000000000000000000000000c2400000000000000000000114ae75103ef4b000000000000000000000080000000000000000000ebb4e41c5deb3d4ea90e9ec200000000000000000000000000041c00000000000000000000000000002505cc938d65452510292c08d5f72ba00d6595b770b319edcf136ba94857e858b8d3190f4e39879fcf48f6945258d98bedb2d3538967500174c5821f55c76d636df223870fc720a4b4a5cb9dd483edde0047032c0460a6d895284c3bfc695ef9588b0d9e9fb7574478f87b6dc68f19d62bea3a471d8ebde270b077389a6818af25ca1fafe68feebfb2c5c400f8f466e3686284761492"]) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x2, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000280)="680375ce23e18a9df21440475194735ebbfb4f3192b056200d1cf2313914d2654494f5abd77a8e2b8c8e1c556e37bc1dd6ef0ed0a1ada05297a690d66897ec89cc3efb6cc58a599ac1500345a8f3030c", 0x50, 0x1ff}, {&(0x7f0000003a40)="249be3311a5028b02b09017e30cb8aef078ac3c5201e311b38696456b9b3915782eafb841b949d78bf46d714bea8ea353c36d555b92891cff8b064757e419e6fd56e30224957252aa2fdf42e695ebfcbb7ba34fcb2eaae5d913bec3648f86c0d7fabef858fbc25463004ce5514725da5b2130186da00f25d983e641b3b9d789709977526009bc3cd6589283e236e456ee6911a8a28d1f77fbafb4cccdc2c10404e569b7a447cdb6c933f7662ccc3a90589e4511b8e78d55b9e342c023e06979a1cf1c33a745fb297256378c7f5d960efc4d043fe606d80d99de86ebdc590d96ea04af512d7788f3439000000000000000000", 0xf2, 0xf2}, {&(0x7f0000000400)="b99f445e4d8abcdd5c61f04cc67c8ece25b8a3f6950f8186217fc35ec7", 0x1d, 0x5}], 0xc008, &(0x7f0000000740)={[{@uid={'uid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, '$&&'}}, {@uid_lt}, {@seclabel}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0xe469}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x64, 0x34, 0x61, 0x65, 0x38, 0x36], 0x2d, [0x32, 0x34, 0x31, 0x31], 0x2d, [0x35, 0x35, 0x63, 0x33], 0x2d, [0x36, 0xa3, 0x33, 0x66], 0x2d, [0x65, 0x36, 0x37, 0x31, 0x31, 0x61, 0x61, 0x39]}}}]}) 02:34:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 34) 02:34:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1362.565567] audit: type=1326 audit(1643942099.519:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8234 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1362.567962] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1362.572479] FAULT_INJECTION: forcing a failure. [ 1362.572479] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.573774] CPU: 1 PID: 8232 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1362.574711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1362.575947] Call Trace: [ 1362.576227] [ 1362.576471] dump_stack_lvl+0x8b/0xb3 [ 1362.576893] should_fail.cold+0x5/0xa [ 1362.577311] ? create_object.isra.0+0x3a/0xa20 [ 1362.577823] should_failslab+0x5/0x10 [ 1362.578273] kmem_cache_alloc+0x5b/0x480 [ 1362.578746] create_object.isra.0+0x3a/0xa20 [ 1362.579239] ? kasan_unpoison+0x23/0x50 [ 1362.579689] kmem_cache_alloc+0x239/0x480 [ 1362.580148] getname_kernel+0x4e/0x370 [ 1362.580570] open_exec+0x13/0x70 [ 1362.580940] load_misc_binary+0x942/0xb30 [ 1362.581389] bprm_execve+0x7f3/0x1960 [ 1362.581803] ? open_exec+0x70/0x70 [ 1362.582198] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1362.582794] ? copy_string_kernel+0x4c8/0x580 [ 1362.583279] do_execveat_common+0x727/0x890 [ 1362.583741] ? bprm_execve+0x1960/0x1960 [ 1362.584186] __x64_sys_execveat+0xe0/0x120 [ 1362.584382] loop2: detected capacity change from 0 to 4 [ 1362.584659] ? trace_hardirqs_on+0x38/0x190 [ 1362.586357] do_syscall_64+0x3b/0x90 [ 1362.586775] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1362.587332] RIP: 0033:0x7f245182fb19 [ 1362.587726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.589677] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1362.590502] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1362.591260] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1362.592066] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.592843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.593641] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1362.594440] 02:34:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:34:59 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1362.614173] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1362.645019] loop2: detected capacity change from 0 to 4 [ 1362.664752] EXT4-fs (loop2): Can't read superblock on 2nd try 02:34:59 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1362.691237] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 35) 02:34:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x75, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1362.788984] loop4: detected capacity change from 0 to 256 02:34:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) setresuid(0x0, r2, r2) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, r3, r3) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000280)=[{&(0x7f00000000c0)="c13eb5711775e522ed6f313223fe0c187329f153d6fa517138c82b7a4668", 0x1e, 0x3f}, {&(0x7f0000000180)="446e66e839745e9466923578f9f0e2d4701884c5c374bfc68ad4fe08f6c2e55f0c45d9e5c43c22ff05bfa3133e10bd1217652bc976337da3a09c0ae631449968c295012bfbde", 0x46, 0x10}], 0x20000a8, &(0x7f00000002c0)={[{'['}, {'\'$,\xba$^'}, {'vfat\x00'}, {'vfat\x00'}], [{@context={'context', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r2}}, {@euid_lt={'euid<', r3}}, {@smackfshat={'smackfshat', 0x3d, '^/%U]'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type}]}) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:34:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 53) [ 1362.818299] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:34:59 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1362.843917] FAULT_INJECTION: forcing a failure. [ 1362.843917] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.845259] CPU: 1 PID: 8252 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1362.846187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1362.847444] Call Trace: [ 1362.847738] [ 1362.848002] dump_stack_lvl+0x8b/0xb3 [ 1362.848457] should_fail.cold+0x5/0xa [ 1362.848905] ? create_object.isra.0+0x3a/0xa20 [ 1362.849431] should_failslab+0x5/0x10 [ 1362.849879] kmem_cache_alloc+0x5b/0x480 [ 1362.850344] create_object.isra.0+0x3a/0xa20 [ 1362.850809] ? kasan_unpoison+0x23/0x50 [ 1362.851255] kmem_cache_alloc+0x239/0x480 [ 1362.851700] getname_kernel+0x4e/0x370 [ 1362.851901] loop2: detected capacity change from 0 to 4 [ 1362.852126] open_exec+0x13/0x70 [ 1362.852144] load_misc_binary+0x942/0xb30 [ 1362.852169] bprm_execve+0x7f3/0x1960 [ 1362.852192] ? open_exec+0x70/0x70 [ 1362.854965] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1362.855569] ? copy_string_kernel+0x4c8/0x580 [ 1362.856057] do_execveat_common+0x727/0x890 [ 1362.856525] ? bprm_execve+0x1960/0x1960 [ 1362.856968] __x64_sys_execveat+0xe0/0x120 [ 1362.857433] ? trace_hardirqs_on+0x38/0x190 [ 1362.857937] do_syscall_64+0x3b/0x90 [ 1362.858358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1362.858909] RIP: 0033:0x7f245182fb19 [ 1362.859309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.861263] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1362.862112] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1362.862876] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1362.863642] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.864400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.865166] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1362.865957] [ 1362.871559] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1362.906218] loop2: detected capacity change from 0 to 4 [ 1362.931711] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1362.938050] FAULT_INJECTION: forcing a failure. [ 1362.938050] name failslab, interval 1, probability 0, space 0, times 0 [ 1362.939347] CPU: 1 PID: 8264 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1362.940218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1362.941400] Call Trace: [ 1362.941670] [ 1362.941910] dump_stack_lvl+0x8b/0xb3 [ 1362.942327] should_fail.cold+0x5/0xa [ 1362.942731] ? lock_downgrade+0x6d0/0x6d0 [ 1362.943169] ? create_object.isra.0+0x3a/0xa20 [ 1362.943657] should_failslab+0x5/0x10 [ 1362.944057] kmem_cache_alloc+0x5b/0x480 [ 1362.944498] create_object.isra.0+0x3a/0xa20 [ 1362.944961] ? kasan_unpoison+0x23/0x50 [ 1362.945387] kmem_cache_alloc+0x239/0x480 [ 1362.945825] anon_vma_clone+0xdc/0x580 [ 1362.946263] anon_vma_fork+0x82/0x6a0 [ 1362.946672] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1362.947194] ? __vm_enough_memory+0x184/0x360 [ 1362.947670] dup_mm+0x91b/0x1250 [ 1362.948051] ? replace_mm_exe_file+0x490/0x490 [ 1362.948534] ? __raw_spin_lock_init+0x36/0x110 [ 1362.949027] copy_process+0x384b/0x6cb0 [ 1362.949479] ? __cleanup_sighand+0xb0/0xb0 [ 1362.949948] ? lock_is_held_type+0xd7/0x130 [ 1362.950401] ? find_held_lock+0x2c/0x110 [ 1362.950838] ? kernel_clone+0x2f8/0xa60 [ 1362.951258] kernel_clone+0xe7/0xa60 [ 1362.951658] ? create_io_thread+0xf0/0xf0 [ 1362.952097] ? find_held_lock+0x2c/0x110 [ 1362.952528] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1362.953046] ? wait_for_completion_io+0x270/0x270 [ 1362.953571] __do_sys_clone+0xc8/0x110 [ 1362.954008] ? __do_sys_vfork+0xd0/0xd0 [ 1362.954433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1362.955029] ? vfs_write+0x188/0xae0 [ 1362.955434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1362.956003] do_syscall_64+0x3b/0x90 [ 1362.956401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1362.956955] RIP: 0033:0x7f466d7a6b19 [ 1362.957349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1362.959369] RSP: 002b:00007f466acfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1362.960192] RAX: ffffffffffffffda RBX: 00007f466d8ba020 RCX: 00007f466d7a6b19 [ 1362.960975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.961760] RBP: 00007f466acfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1362.962537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1362.963311] R13: 00007ffe7325c80f R14: 00007f466acfb300 R15: 0000000000022000 [ 1362.964100] [ 1363.037533] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:11 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:11 executing program 5: mlockall(0x0) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:11 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:35:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 36) 02:35:11 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x7, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r4, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100affd189700a844c184da", @ANYRES32=r4, @ANYBLOB="00000100000000002e2f66696c653100"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)="01", 0x1) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:11 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 54) 02:35:11 executing program 1: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1374.444314] loop4: detected capacity change from 0 to 256 [ 1374.449348] audit: type=1326 audit(1643942111.403:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8278 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1374.462553] loop2: detected capacity change from 0 to 4 [ 1374.466853] FAULT_INJECTION: forcing a failure. [ 1374.466853] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.469272] CPU: 0 PID: 8285 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1374.471034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1374.473446] Call Trace: [ 1374.473988] [ 1374.474487] dump_stack_lvl+0x8b/0xb3 [ 1374.475321] should_fail.cold+0x5/0xa [ 1374.476144] ? anon_vma_fork+0xed/0x6a0 [ 1374.477007] should_failslab+0x5/0x10 [ 1374.477819] kmem_cache_alloc+0x5b/0x480 [ 1374.478715] anon_vma_fork+0xed/0x6a0 [ 1374.479539] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1374.480607] ? __vm_enough_memory+0x184/0x360 [ 1374.481573] dup_mm+0x91b/0x1250 [ 1374.482347] ? replace_mm_exe_file+0x490/0x490 [ 1374.483335] ? __raw_spin_lock_init+0x36/0x110 [ 1374.484329] copy_process+0x384b/0x6cb0 [ 1374.485226] ? __cleanup_sighand+0xb0/0xb0 [ 1374.486159] ? lock_is_held_type+0xd7/0x130 [ 1374.487083] ? find_held_lock+0x2c/0x110 [ 1374.487954] ? kernel_clone+0x2f8/0xa60 [ 1374.488815] kernel_clone+0xe7/0xa60 [ 1374.489625] ? create_io_thread+0xf0/0xf0 [ 1374.490528] ? find_held_lock+0x2c/0x110 [ 1374.491406] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1374.492578] ? populate_seccomp_data+0x214/0x540 [ 1374.493589] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1374.494781] ? __seccomp_filter+0x5ab/0xff0 [ 1374.495697] ? wait_for_completion_io+0x270/0x270 [ 1374.496736] __do_sys_clone+0xc8/0x110 [ 1374.497576] ? __do_sys_vfork+0xd0/0xd0 [ 1374.498469] ? __secure_computing+0xb4/0x290 [ 1374.499415] do_syscall_64+0x3b/0x90 [ 1374.500222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1374.501316] RIP: 0033:0x7f466d7a6b19 [ 1374.502120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1374.506006] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1374.507622] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1374.509132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.510646] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 02:35:11 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1374.512154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1374.513826] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1374.515377] [ 1374.522485] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1374.527286] FAULT_INJECTION: forcing a failure. [ 1374.527286] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.528591] CPU: 1 PID: 8282 Comm: syz-executor.4 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1374.529510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1374.530761] Call Trace: [ 1374.531058] [ 1374.531307] dump_stack_lvl+0x8b/0xb3 [ 1374.531730] should_fail.cold+0x5/0xa [ 1374.532151] ? __alloc_file+0x21/0x240 [ 1374.532591] should_failslab+0x5/0x10 [ 1374.533011] kmem_cache_alloc+0x5b/0x480 [ 1374.533450] ? lock_chain_count+0x20/0x20 [ 1374.533912] __alloc_file+0x21/0x240 [ 1374.534332] alloc_empty_file+0x6d/0x170 [ 1374.534781] path_openat+0xe1/0x28a0 [ 1374.535199] ? lock_is_held_type+0xd7/0x130 [ 1374.535675] ? find_held_lock+0x2c/0x110 [ 1374.536120] ? path_lookupat+0x850/0x850 [ 1374.536599] do_filp_open+0x1aa/0x400 [ 1374.537044] ? may_open_dev+0xf0/0xf0 [ 1374.537483] ? lock_chain_count+0x20/0x20 [ 1374.537972] ? lock_is_held_type+0xd7/0x130 [ 1374.538479] ? find_held_lock+0x2c/0x110 [ 1374.538948] ? lock_release+0x3b2/0x6f0 [ 1374.539398] ? kmem_cache_alloc+0x239/0x480 [ 1374.539897] do_open_execat+0x116/0x740 [ 1374.540351] ? lock_is_held_type+0xd7/0x130 [ 1374.540853] ? __ia32_sys_uselib+0x40/0x40 [ 1374.541334] ? kmem_cache_alloc+0x332/0x480 [ 1374.541828] ? memcpy+0x39/0x60 [ 1374.542223] open_exec+0x42/0x70 [ 1374.542610] load_misc_binary+0x942/0xb30 [ 1374.543090] bprm_execve+0x7f3/0x1960 [ 1374.543531] ? open_exec+0x70/0x70 [ 1374.543944] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1374.544573] ? copy_string_kernel+0x4c8/0x580 [ 1374.545089] do_execveat_common+0x727/0x890 [ 1374.545580] ? bprm_execve+0x1960/0x1960 [ 1374.546053] __x64_sys_execveat+0xe0/0x120 [ 1374.546534] ? trace_hardirqs_on+0x38/0x190 [ 1374.547030] do_syscall_64+0x3b/0x90 [ 1374.547453] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1374.548040] RIP: 0033:0x7f245182fb19 [ 1374.548462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1374.550527] RSP: 002b:00007f244eda5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1374.551391] RAX: ffffffffffffffda RBX: 00007f2451942f60 RCX: 00007f245182fb19 [ 1374.552199] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 1374.553000] RBP: 00007f244eda51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1374.553804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1374.554609] R13: 00007ffe6f6d4c7f R14: 00007f244eda5300 R15: 0000000000022000 [ 1374.555426] [ 1374.596314] EXT4-fs (loop2): Can't read superblock on 2nd try 02:35:11 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1374.620334] loop2: detected capacity change from 0 to 4 02:35:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400001, 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) write(r2, &(0x7f00000000c0)="a263f909", 0xffffffffffffffc3) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1374.635591] EXT4-fs (loop2): Can't read superblock on 2nd try 02:35:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 37) [ 1374.690235] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:11 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x12c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) r3 = accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0/file0\x00'}) ioctl$CDROMRESET(r2, 0x5312) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1374.754091] loop2: detected capacity change from 0 to 4 02:35:11 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1c6}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1374.771759] EXT4-fs (loop2): Can't read superblock on 2nd try 02:35:11 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 55) [ 1374.803578] loop2: detected capacity change from 0 to 4 [ 1374.827292] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1374.861785] FAULT_INJECTION: forcing a failure. [ 1374.861785] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.864288] CPU: 0 PID: 8312 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1374.866072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1374.868495] Call Trace: [ 1374.869046] [ 1374.869529] dump_stack_lvl+0x8b/0xb3 [ 1374.870380] should_fail.cold+0x5/0xa [ 1374.871210] ? lock_downgrade+0x6d0/0x6d0 [ 1374.872121] ? create_object.isra.0+0x3a/0xa20 [ 1374.873134] should_failslab+0x5/0x10 [ 1374.873967] kmem_cache_alloc+0x5b/0x480 [ 1374.874890] create_object.isra.0+0x3a/0xa20 [ 1374.875864] ? kasan_unpoison+0x23/0x50 [ 1374.876758] kmem_cache_alloc+0x239/0x480 [ 1374.877677] anon_vma_clone+0xdc/0x580 [ 1374.878574] anon_vma_fork+0x82/0x6a0 [ 1374.879424] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1374.880517] ? __vm_enough_memory+0x184/0x360 [ 1374.881506] dup_mm+0x91b/0x1250 [ 1374.882289] ? replace_mm_exe_file+0x490/0x490 [ 1374.883302] ? __raw_spin_lock_init+0x36/0x110 [ 1374.884316] copy_process+0x384b/0x6cb0 [ 1374.885230] ? __cleanup_sighand+0xb0/0xb0 [ 1374.886193] ? lock_is_held_type+0xd7/0x130 [ 1374.887139] ? find_held_lock+0x2c/0x110 [ 1374.888042] ? kernel_clone+0x2f8/0xa60 [ 1374.888922] kernel_clone+0xe7/0xa60 [ 1374.889759] ? create_io_thread+0xf0/0xf0 [ 1374.890680] ? find_held_lock+0x2c/0x110 [ 1374.891578] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1374.892789] ? populate_seccomp_data+0x214/0x540 [ 1374.893839] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1374.895055] ? __seccomp_filter+0x5ab/0xff0 [ 1374.896000] ? wait_for_completion_io+0x270/0x270 [ 1374.897070] __do_sys_clone+0xc8/0x110 [ 1374.897928] ? __do_sys_vfork+0xd0/0xd0 [ 1374.898848] ? __secure_computing+0xb4/0x290 [ 1374.899829] do_syscall_64+0x3b/0x90 [ 1374.900656] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1374.901787] RIP: 0033:0x7f466d7a6b19 [ 1374.902603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1374.906618] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1374.908273] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1374.909830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1374.911397] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1374.912946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1374.914507] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1374.916082] 02:35:24 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x300}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:24 executing program 5: mlockall(0x0) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) umount2(&(0x7f0000000040)='./file1\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:24 executing program 1: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x480, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 56) 02:35:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1387.703721] loop2: detected capacity change from 0 to 4 [ 1387.727193] loop4: detected capacity change from 0 to 256 [ 1387.728432] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1387.733011] audit: type=1326 audit(1643942124.686:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8325 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1387.748324] loop2: detected capacity change from 0 to 4 [ 1387.750784] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1387.752910] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1387.760415] FAULT_INJECTION: forcing a failure. [ 1387.760415] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.762856] CPU: 1 PID: 8339 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1387.764530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1387.766825] Call Trace: [ 1387.767349] [ 1387.767805] dump_stack_lvl+0x8b/0xb3 [ 1387.768595] should_fail.cold+0x5/0xa [ 1387.769381] ? anon_vma_fork+0x1de/0x6a0 [ 1387.770244] should_failslab+0x5/0x10 [ 1387.771026] kmem_cache_alloc+0x5b/0x480 [ 1387.771876] anon_vma_fork+0x1de/0x6a0 [ 1387.772693] dup_mm+0x91b/0x1250 [ 1387.773413] ? replace_mm_exe_file+0x490/0x490 [ 1387.774366] ? __raw_spin_lock_init+0x36/0x110 [ 1387.775319] copy_process+0x384b/0x6cb0 [ 1387.776177] ? __cleanup_sighand+0xb0/0xb0 [ 1387.777056] ? lock_is_held_type+0xd7/0x130 [ 1387.777937] ? find_held_lock+0x2c/0x110 [ 1387.778779] ? kernel_clone+0x2f8/0xa60 [ 1387.779599] kernel_clone+0xe7/0xa60 [ 1387.780366] ? create_io_thread+0xf0/0xf0 [ 1387.781211] ? find_held_lock+0x2c/0x110 [ 1387.782035] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1387.783165] ? populate_seccomp_data+0x214/0x540 [ 1387.784127] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1387.785241] ? __seccomp_filter+0x5ab/0xff0 [ 1387.786108] ? wait_for_completion_io+0x270/0x270 [ 1387.787368] __do_sys_clone+0xc8/0x110 [ 1387.788313] ? __do_sys_vfork+0xd0/0xd0 [ 1387.789281] ? __secure_computing+0xb4/0x290 [ 1387.790357] do_syscall_64+0x3b/0x90 [ 1387.791240] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1387.792441] RIP: 0033:0x7f466d7a6b19 [ 1387.793303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1387.797553] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1387.799322] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1387.800971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1387.802637] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1387.804111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1387.805569] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1387.807068] 02:35:24 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) futimesat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000080)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom0\x00', 0x800, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r7, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x0, 0x0, [{{r1}, 0x4}, {{r5}, 0x3}, {{r6}, 0x80}, {{r7}, 0x20}, {{r4}, 0x9}]}) write(r4, &(0x7f0000000240)="01", 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xfd, 0xa8, @random="c8429527aec7efd20edb8e3d3f6cd7c4a828ce85f1ee5c65cc4316ac35b88e00fa260af65c8282ea7e8504f33bc57513a9d758b160e6ddacf424d8d6ff385cb100a9d34358b9621b1341d0d986d97ab16604bc603db7284fbca42ff3d7a0f422b20bf5422527e3da1d180e3c715f0e9065dbe4fbf44b73c607cc8c398153b9d47dfb3afec6a4cc1794ed18f6d2320224c0d68ea528038015f1f726622090054cae7becac3a4ebbce61c581b00fd6f245c11485cf19b827b57412fede55755090d3260aaed164326c9a9e9a775a76e8e0cb59ea0c2bbdd8a76c0f61822a902b9ac38ceb1b6a89aa12ee2e92aa0f8a31376ac5febbd0b5e14975"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x14c}}, 0x80000c1) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:24 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x500}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1387.884613] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2) [ 1387.912654] loop2: detected capacity change from 0 to 4 [ 1387.926585] EXT4-fs (loop2): Can't read superblock on 2nd try 02:35:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 57) 02:35:24 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1100}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1387.969478] loop4: detected capacity change from 0 to 256 02:35:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1388.007284] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000180)="a34c3cd828a3cf8d914627b01d2960ba37109818003c2dc2297d72222050f598d308ab7548192c794707fb2b0be66c3b415ff78489c940387e6e9ead730f22bdbcdd301f1b16d633072d69", 0x4b}, {&(0x7f0000000280)="dd9ded6a76407dd73851e898e3d296ac6c7a3cdb6092d80f2744bcb692aa63905dab233a096b313ef8d947b246c2b8f648fb043897a3299b164e8b77544b9fed862d56fc6de6cc5ca488cedcf24a5ea3523c602eaace5db018ca2f437999d825ed2830fa02970a666bef936c2e14ed3b0235d558f3245a870037b65c9f6e1ba98c760639e0f8858c305bd277aa08e734de596b0147a28df7415404d8e8547dfaf7fbfaf1bd131fd1a770d50576ac0befa748", 0xb2}, {&(0x7f0000000340)="2cde624654f8fb5002f9d403448efc059ff43be4a0671720a261832e1d1a74c7c067bde05db500", 0x27}, {&(0x7f0000000380)="d25bebdaf82f8e4f65313bb6b96609bb70c2503735aa6a4b9196cd7100c25781f10b5dbb8381fc37af03ee2ada5f6baeb4886c42156ef7566ece5eb30829e91e4428582776", 0x45}, {&(0x7f0000000400)="3ad5a8f5cb8d84f024a4e37b3cf33020a651f6b89d2796528b1d53a9d69dc90fc33ab1c6e5ee3d2b6a47713a81ba458e396b050bf96c1ee521303d57cab755e04cdeab753fcdaad043ebebe400afe4e17f7b3f03f6e4d385ff2eddecf1efa188", 0x60}, {&(0x7f00000004c0)="c9e737d753e6ee43e5e337fc8c8413866afcd2e7da8657d117ab55bd063f3e7c9000fbbd8dc3f19284746bf81afc8c83e6ce0b862c5ce3463824e94ad5f67a60008d1c304cdab48d5d97ae83f4c0d11cdd983bac58eb6a3e76609cf3bea615848d7b7e1e3836d6f0276b2c82b0bc48fcececb0acd9abdcd1918667188dc7b392e4184797b1f23cafa9f85ba9a0073d9535528a7c950f6ec07cda2e6e338431f7dc262b493914ddfc61d2ec72358db31cb0f0f6986b5c5fe54272c07dfa60decf65564b9ba67448d930d9f6b8e0e6f741de2f6fe1ef090735dbb0c2371dc68b539eefcc02cb519c6c19b85d906507", 0xee}, {&(0x7f00000005c0)="07e9303a2dee0e26ed6ce123da59c3f14ab89cc9cdfa32168494193c9ee7de661e32d7c5da14453f53ca0459300de1625d46318b2cc2b700c27ab36e1e0a6ec00999d4e27aeb218c870c755f85eb20ef15e3f9c12e92b89f2c4844d1d52d31bda0fc", 0x62}, {&(0x7f0000000640)="51bac73e8f3410241ca49487a022e13745d53fbd022aebfffa195c75d0fb182f31d1e2e57f4b54572c1e016398bb9c80f3fa40b8b3467bd41cac8d341a406bb537cbabaf974fe585a7a4ad56f4ec00c32c8835449b952b14e2e6f8fa8e711c94ffb8f490613bd867c969d516fab2082dad971becdd0b0f902e50cf28aecc8cb2d2045cb2d62e68e4d5211c3d9a1e967875494a4aa819a6eb253f5cc7d8ea47f4aac4e344d4bdca3ab08666ef8cda55df10694a1a1e8c8774d1116119e00b27e620a409b34ea4dd774fadc4545b5e410d4b4ec6f998583dc4", 0xd8}], 0x8, 0x5, 0x80) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pata_amd', 0x301000, 0x24) openat(r2, &(0x7f0000000080)='./file0\x00', 0x880, 0x4) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1388.061266] FAULT_INJECTION: forcing a failure. [ 1388.061266] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.063970] CPU: 1 PID: 8361 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1388.065673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1388.068065] Call Trace: [ 1388.068603] [ 1388.069073] dump_stack_lvl+0x8b/0xb3 [ 1388.069884] should_fail.cold+0x5/0xa [ 1388.070707] ? create_object.isra.0+0x3a/0xa20 [ 1388.071671] should_failslab+0x5/0x10 [ 1388.072461] kmem_cache_alloc+0x5b/0x480 [ 1388.073327] create_object.isra.0+0x3a/0xa20 [ 1388.074266] ? kasan_unpoison+0x23/0x50 [ 1388.075129] kmem_cache_alloc+0x239/0x480 [ 1388.076004] anon_vma_fork+0x1de/0x6a0 [ 1388.076848] dup_mm+0x91b/0x1250 [ 1388.077585] ? replace_mm_exe_file+0x490/0x490 [ 1388.078570] ? __raw_spin_lock_init+0x36/0x110 [ 1388.079536] copy_process+0x384b/0x6cb0 [ 1388.080416] ? __cleanup_sighand+0xb0/0xb0 [ 1388.081326] ? lock_is_held_type+0xd7/0x130 [ 1388.082243] ? find_held_lock+0x2c/0x110 [ 1388.083123] ? kernel_clone+0x2f8/0xa60 [ 1388.083961] kernel_clone+0xe7/0xa60 [ 1388.084761] ? create_io_thread+0xf0/0xf0 [ 1388.085629] ? find_held_lock+0x2c/0x110 [ 1388.086499] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1388.087649] ? populate_seccomp_data+0x214/0x540 [ 1388.088648] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1388.089812] ? __seccomp_filter+0x5ab/0xff0 [ 1388.090728] ? wait_for_completion_io+0x270/0x270 [ 1388.091743] __do_sys_clone+0xc8/0x110 [ 1388.092563] ? __do_sys_vfork+0xd0/0xd0 [ 1388.093424] ? __secure_computing+0xb4/0x290 [ 1388.094355] do_syscall_64+0x3b/0x90 [ 1388.095143] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1388.096210] RIP: 0033:0x7f466d7a6b19 [ 1388.096974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1388.100765] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1388.102351] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1388.103817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1388.105280] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.106751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1388.108540] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1388.110403] [ 1388.144292] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1401.673046] FAULT_INJECTION: forcing a failure. [ 1401.673046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1401.674486] CPU: 1 PID: 8376 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1401.675431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1401.676739] Call Trace: [ 1401.677038] [ 1401.677296] dump_stack_lvl+0x8b/0xb3 [ 1401.677750] should_fail.cold+0x5/0xa [ 1401.678205] prepare_alloc_pages+0x17b/0x500 [ 1401.678743] __alloc_pages+0x131/0x4e0 [ 1401.679200] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1401.679898] ? lock_release+0x3b2/0x6f0 [ 1401.680356] alloc_pages+0x1a0/0x2f0 [ 1401.680797] get_zeroed_page+0x14/0xa0 [ 1401.681248] __pud_alloc+0x33/0x270 [ 1401.681666] copy_page_range+0x35ba/0x47b0 [ 1401.682164] ? find_held_lock+0x2c/0x110 [ 1401.682647] ? lock_downgrade+0x6d0/0x6d0 [ 1401.683131] ? vm_iomap_memory+0x190/0x190 [ 1401.683621] ? up_write+0x148/0x460 [ 1401.684041] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1401.684671] ? __vma_link_rb+0x540/0x700 [ 1401.685140] dup_mm+0x961/0x1250 [ 1401.685536] ? replace_mm_exe_file+0x490/0x490 02:35:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:35:38 executing program 5: mlockall(0x5) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:38 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x2}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) statx(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000540)='./file1\x00', 0x4000, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, r3, r3) r4 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000340)='./file2\x00', 0x3, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000380)="00577559f7ff74082ad80d3fdcd00afb818d6758e36cfcaa13779743d28a86eb4f744d2f8170880c45d02a27f4f7c9", 0x2f, 0x444}], 0x9420, &(0x7f00000007c0)=ANY=[@ANYBLOB='nr_blocks=35t4,huge=advise,nr_inodes=mk-p1xe,mode=00000000000000000000010,uid=', @ANYRESHEX=r1, @ANYBLOB="c645f94b06000000000000ef81a31d78dae17369643e733e58675a613568d21ffd6df36f23cbc17bd88156f00ae49a1aefb3aa24dfa5f9dbebcfbeee9217c4f1df2729", @ANYRESDEC=r2, @ANYBLOB=',appraise_type=imasig,smackfstransmute=/dev/sr0\x00,uid=', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',\x00']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r6, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x113a40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)="01", 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x0) close(r7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc401, 0x0) execveat(r7, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x87e1e2f4ea158151) 02:35:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3) 02:35:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1fd2}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 58) [ 1401.686057] ? __raw_spin_lock_init+0x36/0x110 [ 1401.686878] copy_process+0x384b/0x6cb0 [ 1401.687388] ? __lock_acquire+0x164e/0x6120 [ 1401.687901] ? __cleanup_sighand+0xb0/0xb0 02:35:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) futimesat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000080)='./file1\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom0\x00', 0x800, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r7, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x0, 0x0, [{{r1}, 0x4}, {{r5}, 0x3}, {{r6}, 0x80}, {{r7}, 0x20}, {{r4}, 0x9}]}) write(r4, &(0x7f0000000240)="01", 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x14c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xfd, 0xa8, @random="c8429527aec7efd20edb8e3d3f6cd7c4a828ce85f1ee5c65cc4316ac35b88e00fa260af65c8282ea7e8504f33bc57513a9d758b160e6ddacf424d8d6ff385cb100a9d34358b9621b1341d0d986d97ab16604bc603db7284fbca42ff3d7a0f422b20bf5422527e3da1d180e3c715f0e9065dbe4fbf44b73c607cc8c398153b9d47dfb3afec6a4cc1794ed18f6d2320224c0d68ea528038015f1f726622090054cae7becac3a4ebbce61c581b00fd6f245c11485cf19b827b57412fede55755090d3260aaed164326c9a9e9a775a76e8e0cb59ea0c2bbdd8a76c0f61822a902b9ac38ceb1b6a89aa12ee2e92aa0f8a31376ac5febbd0b5e14975"}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x14c}}, 0x80000c1) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1401.688406] ? lock_is_held_type+0xd7/0x130 [ 1401.689030] ? find_held_lock+0x2c/0x110 [ 1401.689504] ? kernel_clone+0x2f8/0xa60 [ 1401.689956] kernel_clone+0xe7/0xa60 [ 1401.690384] ? perf_event_sched_in.isra.0+0x80/0x80 [ 1401.690973] ? create_io_thread+0xf0/0xf0 [ 1401.691351] loop4: detected capacity change from 0 to 256 [ 1401.691452] ? finish_task_switch.isra.0+0x226/0x870 [ 1401.693261] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1401.693857] ? populate_seccomp_data+0x214/0x540 [ 1401.694377] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1401.694986] ? __seccomp_filter+0x5ab/0xff0 [ 1401.695468] __do_sys_clone+0xc8/0x110 [ 1401.695880] ? __do_sys_vfork+0xd0/0xd0 [ 1401.696343] ? __secure_computing+0xb4/0x290 [ 1401.696835] do_syscall_64+0x3b/0x90 [ 1401.697249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1401.697809] RIP: 0033:0x7f466d7a6b19 [ 1401.698214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1401.700150] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1401.700988] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1401.701763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.702558] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1401.703336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1401.704104] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1401.704908] [ 1401.709836] loop2: detected capacity change from 0 to 4 [ 1401.712183] audit: type=1326 audit(1643942138.665:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8378 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1401.725251] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1401.736935] loop2: detected capacity change from 0 to 4 [ 1401.742907] loop1: detected capacity change from 0 to 256 [ 1401.746339] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1401.751766] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1401.756174] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x2000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1401.816693] loop2: detected capacity change from 0 to 5 02:35:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 59) [ 1401.862721] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1401.873578] loop2: detected capacity change from 0 to 5 [ 1401.877307] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1401.897556] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:38 executing program 5: mlockall(0x5) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1401.910642] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:38 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x2}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) statx(r0, &(0x7f0000000400)='./file1\x00', 0x0, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000540)='./file1\x00', 0x4000, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) setresuid(0x0, r3, r3) r4 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000340)='./file2\x00', 0x3, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000380)="00577559f7ff74082ad80d3fdcd00afb818d6758e36cfcaa13779743d28a86eb4f744d2f8170880c45d02a27f4f7c9", 0x2f, 0x444}], 0x9420, &(0x7f00000007c0)=ANY=[@ANYBLOB='nr_blocks=35t4,huge=advise,nr_inodes=mk-p1xe,mode=00000000000000000000010,uid=', @ANYRESHEX=r1, @ANYBLOB="c645f94b06000000000000ef81a31d78dae17369643e733e58675a613568d21ffd6df36f23cbc17bd88156f00ae49a1aefb3aa24dfa5f9dbebcfbeee9217c4f1df2729", @ANYRESDEC=r2, @ANYBLOB=',appraise_type=imasig,smackfstransmute=/dev/sr0\x00,uid=', @ANYRESDEC=r3, @ANYBLOB=',euid=', @ANYRESDEC, @ANYBLOB=',\x00']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r5) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r6, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x5) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x113a40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)="01", 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x0) close(r7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xc401, 0x0) execveat(r7, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x87e1e2f4ea158151) 02:35:38 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x7070c2, 0x80) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x8) write(r3, &(0x7f0000000240)="01", 0x1) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=0x101, 0x8, 0x3) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1401.922817] FAULT_INJECTION: forcing a failure. [ 1401.922817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1401.924229] CPU: 1 PID: 8398 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1401.925129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1401.926334] Call Trace: [ 1401.926611] [ 1401.926848] dump_stack_lvl+0x8b/0xb3 [ 1401.927260] should_fail.cold+0x5/0xa [ 1401.927675] prepare_alloc_pages+0x17b/0x500 [ 1401.928149] __alloc_pages+0x131/0x4e0 [ 1401.928569] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1401.929203] ? find_held_lock+0x2c/0x110 [ 1401.929641] ? lock_downgrade+0x6d0/0x6d0 [ 1401.930077] ? do_raw_spin_lock+0x121/0x260 [ 1401.930553] alloc_pages+0x1a0/0x2f0 [ 1401.930963] __pmd_alloc+0x37/0x680 [ 1401.931353] copy_page_range+0x3545/0x47b0 [ 1401.931791] ? queued_spin_lock_slowpath+0xcc/0x930 [ 1401.932341] ? lock_downgrade+0x6d0/0x6d0 [ 1401.932785] ? vm_iomap_memory+0x190/0x190 [ 1401.933236] ? up_write+0x148/0x460 [ 1401.933620] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1401.934200] ? __vma_link_rb+0x540/0x700 [ 1401.934667] dup_mm+0x961/0x1250 [ 1401.935038] ? replace_mm_exe_file+0x490/0x490 [ 1401.935525] ? __raw_spin_lock_init+0x36/0x110 [ 1401.936015] copy_process+0x384b/0x6cb0 [ 1401.936457] ? __cleanup_sighand+0xb0/0xb0 [ 1401.936907] ? lock_is_held_type+0xd7/0x130 [ 1401.937368] ? find_held_lock+0x2c/0x110 [ 1401.937803] ? kernel_clone+0x2f8/0xa60 [ 1401.938228] kernel_clone+0xe7/0xa60 [ 1401.938631] ? create_io_thread+0xf0/0xf0 [ 1401.939071] ? find_held_lock+0x2c/0x110 [ 1401.939503] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1401.940080] ? populate_seccomp_data+0x214/0x540 [ 1401.940635] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1401.941243] ? __seccomp_filter+0x5ab/0xff0 [ 1401.941715] ? wait_for_completion_io+0x270/0x270 [ 1401.942252] __do_sys_clone+0xc8/0x110 [ 1401.942673] ? __do_sys_vfork+0xd0/0xd0 [ 1401.943127] ? __secure_computing+0xb4/0x290 [ 1401.943615] do_syscall_64+0x3b/0x90 [ 1401.944029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1401.944589] RIP: 0033:0x7f466d7a6b19 [ 1401.944991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1401.947024] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1401.947848] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1401.948623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1401.949397] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1401.950171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1401.950958] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1401.951716] 02:35:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x4) 02:35:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x2c01}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1402.002743] loop1: detected capacity change from 0 to 256 [ 1402.018518] FAT-fs (loop1): invalid media value (0x40) [ 1402.019161] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1402.063557] loop2: detected capacity change from 0 to 12 [ 1402.101235] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1402.128208] loop2: detected capacity change from 0 to 12 [ 1402.150405] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:35:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:35:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x5) 02:35:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c00, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:35:52 executing program 5: mlockall(0x5) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:52 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 60) 02:35:52 executing program 1: mlockall(0x0) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:35:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0xfe8}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x3f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x4000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1415.656667] FAULT_INJECTION: forcing a failure. [ 1415.656667] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.657887] CPU: 0 PID: 8429 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1415.658817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1415.660079] Call Trace: [ 1415.660370] [ 1415.660601] dump_stack_lvl+0x8b/0xb3 [ 1415.660916] loop2: detected capacity change from 0 to 14 [ 1415.661045] should_fail.cold+0x5/0xa [ 1415.661067] ? __pmd_alloc+0x94/0x680 [ 1415.661083] should_failslab+0x5/0x10 [ 1415.663350] kmem_cache_alloc+0x5b/0x480 [ 1415.663818] ? alloc_pages+0x1a8/0x2f0 [ 1415.664272] __pmd_alloc+0x94/0x680 [ 1415.664661] copy_page_range+0x3545/0x47b0 [ 1415.665160] ? lock_downgrade+0x6d0/0x6d0 [ 1415.665641] ? vm_iomap_memory+0x190/0x190 [ 1415.666124] ? up_write+0x148/0x460 [ 1415.666532] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1415.667165] ? __vma_link_rb+0x540/0x700 [ 1415.667628] dup_mm+0x961/0x1250 [ 1415.668026] ? replace_mm_exe_file+0x490/0x490 [ 1415.668546] ? __raw_spin_lock_init+0x36/0x110 [ 1415.669061] copy_process+0x384b/0x6cb0 [ 1415.669536] ? __cleanup_sighand+0xb0/0xb0 [ 1415.669968] ? lock_is_held_type+0xd7/0x130 [ 1415.670456] ? find_held_lock+0x2c/0x110 [ 1415.670943] ? kernel_clone+0x2f8/0xa60 [ 1415.671398] kernel_clone+0xe7/0xa60 [ 1415.671819] ? create_io_thread+0xf0/0xf0 [ 1415.672294] ? find_held_lock+0x2c/0x110 [ 1415.672758] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1415.673386] ? populate_seccomp_data+0x214/0x540 [ 1415.673913] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1415.674541] ? __seccomp_filter+0x5ab/0xff0 [ 1415.674976] ? wait_for_completion_io+0x270/0x270 [ 1415.675528] __do_sys_clone+0xc8/0x110 [ 1415.675968] ? __do_sys_vfork+0xd0/0xd0 [ 1415.676451] ? __secure_computing+0xb4/0x290 [ 1415.676945] do_syscall_64+0x3b/0x90 [ 1415.677373] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1415.677951] RIP: 0033:0x7f466d7a6b19 [ 1415.678379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.680157] loop4: detected capacity change from 0 to 256 [ 1415.680470] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1415.680486] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1415.680499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.683936] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.684749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.685556] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1415.686373] [ 1415.690713] audit: type=1326 audit(1643942152.644:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8420 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1415.706831] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1415.715245] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1415.734360] loop2: detected capacity change from 0 to 14 02:35:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x60ff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1415.766489] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:35:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(r0, &(0x7f0000000200)='.\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)="cc9db14ac9cafa20", 0x8) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:35:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xc0ff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:35:52 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 61) [ 1415.841675] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:35:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x6) 02:35:52 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1415.874382] FAULT_INJECTION: forcing a failure. [ 1415.874382] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.875713] CPU: 0 PID: 8448 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1415.876595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1415.877723] Call Trace: [ 1415.878002] [ 1415.878247] dump_stack_lvl+0x8b/0xb3 [ 1415.878678] should_fail.cold+0x5/0xa [ 1415.879093] ? create_object.isra.0+0x3a/0xa20 [ 1415.879597] should_failslab+0x5/0x10 [ 1415.880008] kmem_cache_alloc+0x5b/0x480 [ 1415.880455] create_object.isra.0+0x3a/0xa20 [ 1415.880936] ? kasan_unpoison+0x23/0x50 [ 1415.881369] kmem_cache_alloc+0x239/0x480 [ 1415.881823] __pmd_alloc+0x94/0x680 [ 1415.882220] copy_page_range+0x3545/0x47b0 [ 1415.882709] ? lock_downgrade+0x6d0/0x6d0 [ 1415.883141] ? vm_iomap_memory+0x190/0x190 [ 1415.883600] ? up_write+0x148/0x460 [ 1415.883992] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1415.884587] ? __vma_link_rb+0x540/0x700 [ 1415.885032] dup_mm+0x961/0x1250 [ 1415.885416] ? replace_mm_exe_file+0x490/0x490 [ 1415.885913] ? __raw_spin_lock_init+0x36/0x110 [ 1415.886413] copy_process+0x384b/0x6cb0 [ 1415.886865] ? __cleanup_sighand+0xb0/0xb0 [ 1415.887327] ? lock_is_held_type+0xd7/0x130 [ 1415.887762] ? find_held_lock+0x2c/0x110 [ 1415.888205] ? kernel_clone+0x2f8/0xa60 [ 1415.888643] kernel_clone+0xe7/0xa60 [ 1415.889051] ? create_io_thread+0xf0/0xf0 [ 1415.889503] ? find_held_lock+0x2c/0x110 [ 1415.889943] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1415.890535] ? populate_seccomp_data+0x214/0x540 [ 1415.891037] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1415.891633] ? __seccomp_filter+0x5ab/0xff0 [ 1415.892100] ? wait_for_completion_io+0x270/0x270 [ 1415.892628] __do_sys_clone+0xc8/0x110 [ 1415.893051] ? __do_sys_vfork+0xd0/0xd0 [ 1415.893494] ? __secure_computing+0xb4/0x290 [ 1415.893969] do_syscall_64+0x3b/0x90 [ 1415.894375] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1415.894898] RIP: 0033:0x7f466d7a6b19 [ 1415.895299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1415.897130] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1415.897910] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1415.898691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.899461] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1415.900234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1415.900998] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1415.901780] 02:35:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1415.927666] loop2: detected capacity change from 0 to 16 [ 1415.932965] loop4: detected capacity change from 0 to 256 [ 1415.935870] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1415.964275] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1416.073805] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xc601}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:06 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:36:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:36:06 executing program 0: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000280)={[0xfffffffffffffff8]}, &(0x7f0000000080), &(0x7f0000000180)={r0, r1+60000000}, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7) 02:36:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 62) 02:36:06 executing program 1: mlockall(0x0) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:36:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7500, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1430.046029] loop2: detected capacity change from 0 to 58 [ 1430.048882] FAULT_INJECTION: forcing a failure. [ 1430.048882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1430.050171] CPU: 1 PID: 8480 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1430.051014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.052148] Call Trace: [ 1430.052407] [ 1430.052648] dump_stack_lvl+0x8b/0xb3 [ 1430.053050] should_fail.cold+0x5/0xa [ 1430.053450] prepare_alloc_pages+0x17b/0x500 [ 1430.053902] __alloc_pages+0x131/0x4e0 [ 1430.054303] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1430.054927] ? lock_is_held_type+0xd7/0x130 [ 1430.055366] ? find_held_lock+0x2c/0x110 [ 1430.055789] alloc_pages+0x1a0/0x2f0 [ 1430.056177] pte_alloc_one+0x16/0x1f0 [ 1430.056607] __pte_alloc+0x69/0x200 [ 1430.057075] ? pmd_install+0x250/0x250 [ 1430.057629] ? do_raw_spin_unlock+0x4f/0x210 [ 1430.058114] ? _raw_spin_unlock+0x24/0x40 [ 1430.058545] copy_page_range+0x1b84/0x47b0 [ 1430.059019] ? vm_iomap_memory+0x190/0x190 [ 1430.059459] ? up_write+0x148/0x460 [ 1430.059851] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1430.060453] ? __vma_link_rb+0x540/0x700 [ 1430.060894] dup_mm+0x961/0x1250 [ 1430.061276] ? replace_mm_exe_file+0x490/0x490 [ 1430.061789] ? __raw_spin_lock_init+0x36/0x110 [ 1430.062302] copy_process+0x384b/0x6cb0 [ 1430.062742] ? __cleanup_sighand+0xb0/0xb0 [ 1430.063202] ? lock_is_held_type+0xd7/0x130 [ 1430.063661] ? find_held_lock+0x2c/0x110 [ 1430.064102] ? kernel_clone+0x2f8/0xa60 [ 1430.064532] kernel_clone+0xe7/0xa60 [ 1430.064931] ? create_io_thread+0xf0/0xf0 [ 1430.065380] ? find_held_lock+0x2c/0x110 [ 1430.065826] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.066418] ? populate_seccomp_data+0x214/0x540 [ 1430.066962] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1430.067555] ? __seccomp_filter+0x5ab/0xff0 [ 1430.068018] ? wait_for_completion_io+0x270/0x270 [ 1430.068544] __do_sys_clone+0xc8/0x110 [ 1430.068972] ? __do_sys_vfork+0xd0/0xd0 [ 1430.069421] ? __secure_computing+0xb4/0x290 [ 1430.069901] do_syscall_64+0x3b/0x90 [ 1430.070312] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.070892] RIP: 0033:0x7f466d7a6b19 [ 1430.071294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.073280] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1430.074113] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1430.074889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1430.075665] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.076446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.077218] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1430.078000] [ 1430.079774] loop4: detected capacity change from 0 to 256 [ 1430.087549] audit: type=1326 audit(1643942167.041:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8481 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1430.098526] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1430.109548] loop2: detected capacity change from 0 to 58 [ 1430.114199] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1430.118760] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8004, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1430.155928] loop2: detected capacity change from 0 to 64 [ 1430.167422] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:07 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xd21f}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1430.185698] loop2: detected capacity change from 0 to 64 02:36:07 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 63) [ 1430.200014] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1430.237152] FAULT_INJECTION: forcing a failure. [ 1430.237152] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.237287] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.238472] CPU: 1 PID: 8495 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1430.238490] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.238500] Call Trace: [ 1430.238505] [ 1430.238511] dump_stack_lvl+0x8b/0xb3 [ 1430.238538] should_fail.cold+0x5/0xa [ 1430.238557] ? ptlock_alloc+0x1d/0x70 [ 1430.244149] should_failslab+0x5/0x10 [ 1430.244573] kmem_cache_alloc+0x5b/0x480 [ 1430.245042] ptlock_alloc+0x1d/0x70 [ 1430.245448] pte_alloc_one+0x68/0x1f0 [ 1430.245887] __pte_alloc+0x69/0x200 [ 1430.246301] ? pmd_install+0x250/0x250 [ 1430.246697] ? do_raw_spin_unlock+0x4f/0x210 [ 1430.247212] ? _raw_spin_unlock+0x24/0x40 [ 1430.247679] copy_page_range+0x1b84/0x47b0 [ 1430.248184] ? vm_iomap_memory+0x190/0x190 [ 1430.248664] ? up_write+0x148/0x460 [ 1430.249077] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1430.249691] ? __vma_link_rb+0x540/0x700 [ 1430.250150] dup_mm+0x961/0x1250 [ 1430.250549] ? replace_mm_exe_file+0x490/0x490 [ 1430.251022] ? __raw_spin_lock_init+0x36/0x110 [ 1430.251553] copy_process+0x384b/0x6cb0 [ 1430.252015] ? __cleanup_sighand+0xb0/0xb0 [ 1430.252452] ? lock_is_held_type+0xd7/0x130 [ 1430.252948] ? find_held_lock+0x2c/0x110 [ 1430.253420] ? kernel_clone+0x2f8/0xa60 [ 1430.253879] kernel_clone+0xe7/0xa60 [ 1430.254303] ? create_io_thread+0xf0/0xf0 [ 1430.254777] ? find_held_lock+0x2c/0x110 [ 1430.255203] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.255775] ? populate_seccomp_data+0x214/0x540 [ 1430.256257] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1430.256808] ? __seccomp_filter+0x5ab/0xff0 [ 1430.257245] ? wait_for_completion_io+0x270/0x270 [ 1430.257735] __do_sys_clone+0xc8/0x110 [ 1430.258131] ? __do_sys_vfork+0xd0/0xd0 [ 1430.258551] ? __secure_computing+0xb4/0x290 [ 1430.259010] do_syscall_64+0x3b/0x90 [ 1430.259392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.259908] RIP: 0033:0x7f466d7a6b19 [ 1430.260279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.262122] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1430.262926] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1430.263661] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1430.264413] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.265164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.265892] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1430.266664] 02:36:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf) 02:36:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1430.293502] loop2: detected capacity change from 0 to 127 [ 1430.304645] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:36:07 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x20010}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:07 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 64) [ 1430.419795] FAULT_INJECTION: forcing a failure. [ 1430.419795] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.420976] CPU: 1 PID: 8505 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1430.421757] loop4: detected capacity change from 0 to 256 [ 1430.421856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1430.424264] Call Trace: [ 1430.424539] [ 1430.424780] dump_stack_lvl+0x8b/0xb3 [ 1430.425200] should_fail.cold+0x5/0xa [ 1430.425584] ? create_object.isra.0+0x3a/0xa20 [ 1430.426093] should_failslab+0x5/0x10 [ 1430.426510] kmem_cache_alloc+0x5b/0x480 [ 1430.426970] create_object.isra.0+0x3a/0xa20 [ 1430.427452] ? kasan_unpoison+0x23/0x50 [ 1430.427897] kmem_cache_alloc+0x239/0x480 [ 1430.428349] ptlock_alloc+0x1d/0x70 [ 1430.428752] pte_alloc_one+0x68/0x1f0 [ 1430.429172] __pte_alloc+0x69/0x200 [ 1430.429566] ? pmd_install+0x250/0x250 [ 1430.429956] ? do_raw_spin_unlock+0x4f/0x210 [ 1430.430436] ? _raw_spin_unlock+0x24/0x40 [ 1430.430845] copy_page_range+0x1b84/0x47b0 [ 1430.431350] ? vm_iomap_memory+0x190/0x190 [ 1430.431822] ? up_write+0x148/0x460 [ 1430.432218] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1430.432824] ? __vma_link_rb+0x540/0x700 [ 1430.433275] dup_mm+0x961/0x1250 [ 1430.433660] ? replace_mm_exe_file+0x490/0x490 [ 1430.434156] ? __raw_spin_lock_init+0x36/0x110 [ 1430.434654] copy_process+0x384b/0x6cb0 [ 1430.435109] ? __cleanup_sighand+0xb0/0xb0 [ 1430.435598] ? lock_is_held_type+0xd7/0x130 [ 1430.436078] ? find_held_lock+0x2c/0x110 [ 1430.436521] ? kernel_clone+0x2f8/0xa60 [ 1430.436962] kernel_clone+0xe7/0xa60 [ 1430.437380] ? create_io_thread+0xf0/0xf0 [ 1430.437843] ? find_held_lock+0x2c/0x110 [ 1430.438287] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1430.438898] ? populate_seccomp_data+0x214/0x540 [ 1430.439409] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1430.439947] ? __seccomp_filter+0x5ab/0xff0 [ 1430.440408] ? wait_for_completion_io+0x270/0x270 [ 1430.440939] __do_sys_clone+0xc8/0x110 [ 1430.441366] ? __do_sys_vfork+0xd0/0xd0 [ 1430.441814] ? __secure_computing+0xb4/0x290 [ 1430.442284] do_syscall_64+0x3b/0x90 [ 1430.442689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.443251] RIP: 0033:0x7f466d7a6b19 [ 1430.443651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1430.445638] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1430.446468] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1430.447245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1430.448018] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.448796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.449564] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1430.450345] [ 1430.471355] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1430.537888] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1444.226395] loop2: detected capacity change from 0 to 1024 02:36:21 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:36:21 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:36:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x10) 02:36:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x3ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:36:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 65) 02:36:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', 0x3f, 0x3, &(0x7f0000001900)=[{&(0x7f0000001680)="82a8631b09644f4773bcfda3789cce7464ca2837c64a61bf0b7f7b30c604930d730993a7e82a0ed4e5566438a5bac3ba4ab0158af6e8a73a982c3d0dbfc44a56b1e79542528757a02877c1060ab04e3b2a5846afe9b6481be5ccb9ad8dedbeee834c48570af15928d15617bd806954ee8c73e1d56bef65b1c79dc117f6fec6f3f0866ec3f86e0d20625ee4fb75fb6dc20597f247bb16f9fe5d680a35320138d4fff9249f3cffc4ad3a8c31bbb9e13eccb2f84cd6d21b31eeae9665be851ce47f07cba2d395efde78aee1d63528f25bee9d75", 0xd2, 0x6}, {&(0x7f0000001780)="a68890482c8dc8b3433f9bb7e8ee8b4b5ae1d88fcd792327f62015e254310d66247f3139e10d530225a523d375ef0d02d869500a5b5226d32b92b33c7fcb399810d7cbd7cedb9b5a9ab67a6e4b55a695dcf8f9b7eaae8768bccc46b38dd6e422c62ee352d4d38178c7b6c118b36fd242a57596eb5ed655b0220a2f2fa3", 0x7d, 0x7}, {&(0x7f0000001800)="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", 0xfb, 0x4}], 0x800, &(0x7f0000001a40)={[{@huge_advise}, {@huge_advise}, {@gid={'gid', 0x3d, r0}}]}) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) stat(&(0x7f0000002480)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', 0x3f, 0x3, &(0x7f0000001900)=[{&(0x7f0000001680)="82a8631b09644f4773bcfda3789cce7464ca2837c64a61bf0b7f7b30c604930d730993a7e82a0ed4e5566438a5bac3ba4ab0158af6e8a73a982c3d0dbfc44a56b1e79542528757a02877c1060ab04e3b2a5846afe9b6481be5ccb9ad8dedbeee834c48570af15928d15617bd806954ee8c73e1d56bef65b1c79dc117f6fec6f3f0866ec3f86e0d20625ee4fb75fb6dc20597f247bb16f9fe5d680a35320138d4fff9249f3cffc4ad3a8c31bbb9e13eccb2f84cd6d21b31eeae9665be851ce47f07cba2d395efde78aee1d63528f25bee9d75", 0xd2, 0x6}, {&(0x7f0000001780)="a68890482c8dc8b3433f9bb7e8ee8b4b5ae1d88fcd792327f62015e254310d66247f3139e10d530225a523d375ef0d02d869500a5b5226d32b92b33c7fcb399810d7cbd7cedb9b5a9ab67a6e4b55a695dcf8f9b7eaae8768bccc46b38dd6e422c62ee352d4d38178c7b6c118b36fd242a57596eb5ed655b0220a2f2fa3", 0x7d, 0x7}, {&(0x7f0000001800)="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", 0xfb, 0x4}], 0x800, &(0x7f0000001a40)={[{@huge_advise}, {@huge_advise}, {@gid={'gid', 0x3d, r2}}]}) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', 0x3f, 0x3, &(0x7f0000001900)=[{&(0x7f0000001680)="82a8631b09644f4773bcfda3789cce7464ca2837c64a61bf0b7f7b30c604930d730993a7e82a0ed4e5566438a5bac3ba4ab0158af6e8a73a982c3d0dbfc44a56b1e79542528757a02877c1060ab04e3b2a5846afe9b6481be5ccb9ad8dedbeee834c48570af15928d15617bd806954ee8c73e1d56bef65b1c79dc117f6fec6f3f0866ec3f86e0d20625ee4fb75fb6dc20597f247bb16f9fe5d680a35320138d4fff9249f3cffc4ad3a8c31bbb9e13eccb2f84cd6d21b31eeae9665be851ce47f07cba2d395efde78aee1d63528f25bee9d75", 0xd2, 0x6}, {&(0x7f0000001780)="a68890482c8dc8b3433f9bb7e8ee8b4b5ae1d88fcd792327f62015e254310d66247f3139e10d530225a523d375ef0d02d869500a5b5226d32b92b33c7fcb399810d7cbd7cedb9b5a9ab67a6e4b55a695dcf8f9b7eaae8768bccc46b38dd6e422c62ee352d4d38178c7b6c118b36fd242a57596eb5ed655b0220a2f2fa3", 0x7d, 0x7}, {&(0x7f0000001800)="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", 0xfb, 0x4}], 0x800, &(0x7f0000001a40)={[{@huge_advise}, {@huge_advise}, {@gid={'gid', 0x3d, r3}}]}) getgroups(0x1, &(0x7f00000002c0)=[0x0]) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/250, 0xfa}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/143, 0x8f}], 0x5, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000980)=""/98, 0x62}, {&(0x7f0000000a00)=""/18, 0x12}, {&(0x7f0000000a40)=""/58, 0x3a}, {&(0x7f0000000a80)=""/54, 0x36}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x5, &(0x7f0000001b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/26, 0x1a}, {&(0x7f0000001cc0)=""/113, 0x71}, {&(0x7f0000001d40)=""/225, 0xe1}, {&(0x7f0000001e40)=""/121, 0x79}, {&(0x7f0000001ec0)=""/213, 0xd5}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000020c0), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002140)=""/51, 0x33}, {&(0x7f0000002180)=""/18, 0x12}], 0x2, &(0x7f0000002200)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x4, 0x20, &(0x7f00000023c0)) setxattr$system_posix_acl(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [{0x8, 0x4, r0}, {0x8, 0x2, r1}, {0x8, 0x6, r2}, {0x8, 0x0, r3}, {0x8, 0x4, r4}, {0x8, 0x1, 0xee00}, {0x8, 0x6, r5}], {0x10, 0x2}, {0x20, 0x6}}, 0x5c, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r7, &(0x7f0000000240)="01", 0x1) close(r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x1}, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1444.254378] FAULT_INJECTION: forcing a failure. [ 1444.254378] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.255666] CPU: 1 PID: 8523 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1444.256527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1444.257740] Call Trace: [ 1444.258008] [ 1444.258255] dump_stack_lvl+0x8b/0xb3 [ 1444.258667] should_fail.cold+0x5/0xa [ 1444.259067] ? vm_area_dup+0x78/0x290 [ 1444.259486] should_failslab+0x5/0x10 [ 1444.259885] kmem_cache_alloc+0x5b/0x480 [ 1444.260317] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1444.260849] vm_area_dup+0x78/0x290 [ 1444.261243] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1444.261825] ? copy_page_range+0x2cbb/0x47b0 [ 1444.262318] ? vm_area_alloc+0x110/0x110 [ 1444.262755] ? vm_iomap_memory+0x190/0x190 [ 1444.263201] ? up_write+0x148/0x460 [ 1444.263583] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1444.264166] ? __vma_link_rb+0x540/0x700 [ 1444.264595] dup_mm+0x53f/0x1250 [ 1444.264960] ? replace_mm_exe_file+0x490/0x490 [ 1444.265436] ? __raw_spin_lock_init+0x36/0x110 [ 1444.265926] copy_process+0x384b/0x6cb0 [ 1444.266376] ? __cleanup_sighand+0xb0/0xb0 [ 1444.266832] ? lock_is_held_type+0xd7/0x130 [ 1444.267314] ? find_held_lock+0x2c/0x110 [ 1444.267743] ? kernel_clone+0x2f8/0xa60 [ 1444.268165] kernel_clone+0xe7/0xa60 [ 1444.268552] ? create_io_thread+0xf0/0xf0 [ 1444.268982] ? find_held_lock+0x2c/0x110 [ 1444.269404] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1444.270012] ? populate_seccomp_data+0x214/0x540 [ 1444.270517] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1444.271131] ? __seccomp_filter+0x5ab/0xff0 [ 1444.271574] ? wait_for_completion_io+0x270/0x270 [ 1444.272104] __do_sys_clone+0xc8/0x110 [ 1444.272527] ? __do_sys_vfork+0xd0/0xd0 [ 1444.272965] ? __secure_computing+0xb4/0x290 [ 1444.273441] do_syscall_64+0x3b/0x90 [ 1444.273838] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1444.274376] RIP: 0033:0x7f466d7a6b19 [ 1444.274766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.276679] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1444.277479] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1444.278234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.278978] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.279757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.280502] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1444.281268] [ 1444.282472] loop4: detected capacity change from 0 to 256 [ 1444.283229] audit: type=1326 audit(1643942181.236:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8527 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1444.291549] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x40000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1444.308647] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1444.327320] loop2: detected capacity change from 0 to 1024 02:36:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat(r0, &(0x7f0000000180)='./file1\x00', 0x323040, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) openat2(r1, &(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000080)={0x3, 0x60, 0x10}, 0x18) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1444.358589] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x13) [ 1444.373300] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:21 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000004c0)={{r0}, "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"}) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x801c0, 0x123) [ 1444.458458] loop4: detected capacity change from 0 to 256 02:36:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1fffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 66) [ 1444.476819] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1444.506525] loop2: detected capacity change from 0 to 4096 [ 1444.515792] FAULT_INJECTION: forcing a failure. [ 1444.515792] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.517010] CPU: 1 PID: 8554 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1444.517859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1444.519020] Call Trace: [ 1444.519299] [ 1444.519537] dump_stack_lvl+0x8b/0xb3 [ 1444.519950] should_fail.cold+0x5/0xa [ 1444.520353] ? create_object.isra.0+0x3a/0xa20 [ 1444.520835] should_failslab+0x5/0x10 [ 1444.521228] kmem_cache_alloc+0x5b/0x480 [ 1444.521659] create_object.isra.0+0x3a/0xa20 [ 1444.522119] ? kasan_unpoison+0x23/0x50 [ 1444.522544] kmem_cache_alloc+0x239/0x480 [ 1444.522977] vm_area_dup+0x78/0x290 [ 1444.523379] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1444.523959] ? copy_page_range+0x2cbb/0x47b0 [ 1444.524445] ? vm_area_alloc+0x110/0x110 [ 1444.524885] ? vm_iomap_memory+0x190/0x190 [ 1444.525330] ? up_write+0x148/0x460 [ 1444.525713] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1444.526285] ? __vma_link_rb+0x540/0x700 [ 1444.526721] dup_mm+0x53f/0x1250 [ 1444.527095] ? replace_mm_exe_file+0x490/0x490 [ 1444.527589] ? __raw_spin_lock_init+0x36/0x110 [ 1444.528075] copy_process+0x384b/0x6cb0 [ 1444.528511] ? __cleanup_sighand+0xb0/0xb0 [ 1444.528973] ? lock_is_held_type+0xd7/0x130 [ 1444.529428] ? find_held_lock+0x2c/0x110 [ 1444.529863] ? kernel_clone+0x2f8/0xa60 [ 1444.530286] kernel_clone+0xe7/0xa60 [ 1444.530680] ? create_io_thread+0xf0/0xf0 [ 1444.531133] ? find_held_lock+0x2c/0x110 [ 1444.531554] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1444.532131] ? populate_seccomp_data+0x214/0x540 [ 1444.532640] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1444.533216] ? __seccomp_filter+0x5ab/0xff0 [ 1444.533657] ? wait_for_completion_io+0x270/0x270 [ 1444.534181] __do_sys_clone+0xc8/0x110 [ 1444.534598] ? __do_sys_vfork+0xd0/0xd0 [ 1444.535027] ? __secure_computing+0xb4/0x290 [ 1444.535500] do_syscall_64+0x3b/0x90 [ 1444.535907] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1444.536445] RIP: 0033:0x7f466d7a6b19 [ 1444.536827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1444.538733] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1444.539532] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1444.540270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1444.541002] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.541731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1444.542470] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1444.543241] 02:36:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x400000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1444.560755] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1444.587020] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1444.600451] loop2: detected capacity change from 0 to 4096 [ 1444.622699] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:36:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:36:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8002, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x900, 0xc2) write(r1, &(0x7f0000000240)="01", 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf0) 02:36:35 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 67) 02:36:35 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x80ffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:36:35 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1458.103796] loop2: detected capacity change from 0 to 32768 [ 1458.105141] loop4: detected capacity change from 0 to 256 [ 1458.116336] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.126484] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1458.134864] loop1: detected capacity change from 0 to 127 [ 1458.147592] loop2: detected capacity change from 0 to 32768 [ 1458.150387] FAULT_INJECTION: forcing a failure. [ 1458.150387] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.152780] CPU: 1 PID: 8580 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1458.154471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1458.156797] Call Trace: [ 1458.157320] [ 1458.157785] dump_stack_lvl+0x8b/0xb3 [ 1458.158590] should_fail.cold+0x5/0xa [ 1458.159407] ? vm_area_dup+0x78/0x290 [ 1458.160203] should_failslab+0x5/0x10 [ 1458.160985] kmem_cache_alloc+0x5b/0x480 [ 1458.161835] vm_area_dup+0x78/0x290 [ 1458.162600] ? lock_release+0x3b2/0x6f0 [ 1458.163451] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1458.164413] ? lock_downgrade+0x6d0/0x6d0 [ 1458.165247] ? copy_page_range+0x2cbb/0x47b0 [ 1458.166155] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1458.167185] ? avc_has_perm_noaudit+0x1ef/0x390 02:36:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='+{\x00', &(0x7f00000000c0)='\x00'], &(0x7f0000000380)=[&(0x7f00000001c0)='\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)=']{\x00', &(0x7f0000000300)='@-\x00', &(0x7f0000000340)='vfat\x00'], 0x800) [ 1458.168174] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1458.169419] ? vm_area_alloc+0x110/0x110 [ 1458.170256] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.171393] ? selinux_vm_enough_memory+0x10f/0x170 [ 1458.172424] ? selinux_sctp_sk_clone+0x370/0x370 [ 1458.173412] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.174541] ? percpu_counter_add_batch+0xb4/0x170 [ 1458.175566] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1458.176580] ? __vm_enough_memory+0x184/0x360 [ 1458.177492] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1458.178557] dup_mm+0x53f/0x1250 [ 1458.179262] ? replace_mm_exe_file+0x490/0x490 [ 1458.180223] ? __raw_spin_lock_init+0x36/0x110 [ 1458.181155] copy_process+0x384b/0x6cb0 [ 1458.181999] ? __cleanup_sighand+0xb0/0xb0 [ 1458.182868] ? lock_is_held_type+0xd7/0x130 [ 1458.183763] ? find_held_lock+0x2c/0x110 [ 1458.184591] ? kernel_clone+0x2f8/0xa60 [ 1458.185413] kernel_clone+0xe7/0xa60 [ 1458.186173] ? create_io_thread+0xf0/0xf0 02:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1458.187030] ? find_held_lock+0x2c/0x110 [ 1458.187959] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.189088] ? populate_seccomp_data+0x214/0x540 [ 1458.190030] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1458.191130] ? __seccomp_filter+0x5ab/0xff0 [ 1458.191990] ? wait_for_completion_io+0x270/0x270 [ 1458.192972] __do_sys_clone+0xc8/0x110 [ 1458.193766] ? __do_sys_vfork+0xd0/0xd0 [ 1458.194601] ? __secure_computing+0xb4/0x290 [ 1458.195494] do_syscall_64+0x3b/0x90 [ 1458.196241] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1458.197254] RIP: 0033:0x7f466d7a6b19 [ 1458.198001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.202783] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 02:36:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2f0) [ 1458.204982] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1458.207031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1458.208687] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.210300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.211936] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1458.213598] [ 1458.215684] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.218244] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1458.224270] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096) 02:36:35 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xf0ff1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1458.290480] loop4: detected capacity change from 0 to 256 02:36:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=@v1={0x2, "0aef0b00f588a73870a141e5ddb0838ea995"}, 0x13, 0x2) close(r0) creat(&(0x7f0000000300)='./file1\x00', 0xc1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000340)=0x3f, 0x800) write(r1, &(0x7f0000000240)="01", 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x139080, 0x0) close(r1) unlink(&(0x7f00000002c0)='./file1\x00') execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:35 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:36:35 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1458.344721] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1458.424494] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.369496] loop2: detected capacity change from 0 to 98304 02:36:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:36:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:36:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) r3 = accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0/file0\x00'}) ioctl$CDROMRESET(r2, 0x5312) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:36:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x100814, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x210080, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x28) 02:36:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x300) 02:36:48 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 68) 02:36:48 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1471.381926] loop4: detected capacity change from 0 to 256 [ 1471.382326] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1471.384379] loop1: detected capacity change from 0 to 256 [ 1471.393388] FAULT_INJECTION: forcing a failure. [ 1471.393388] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.394696] CPU: 0 PID: 8626 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1471.395595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1471.396803] Call Trace: [ 1471.397079] [ 1471.397326] dump_stack_lvl+0x8b/0xb3 [ 1471.397747] should_fail.cold+0x5/0xa [ 1471.398167] ? create_object.isra.0+0x3a/0xa20 [ 1471.398682] should_failslab+0x5/0x10 [ 1471.399097] kmem_cache_alloc+0x5b/0x480 [ 1471.399551] create_object.isra.0+0x3a/0xa20 [ 1471.400024] ? kasan_unpoison+0x23/0x50 [ 1471.400468] kmem_cache_alloc+0x239/0x480 [ 1471.400928] vm_area_dup+0x78/0x290 [ 1471.401333] ? lock_release+0x3b2/0x6f0 [ 1471.401764] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1471.402276] ? lock_downgrade+0x6d0/0x6d0 [ 1471.402738] ? copy_page_range+0x2cbb/0x47b0 [ 1471.403235] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1471.403816] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1471.404341] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1471.404892] ? vm_area_alloc+0x110/0x110 [ 1471.405362] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1471.405990] ? selinux_vm_enough_memory+0x10f/0x170 [ 1471.406550] ? selinux_sctp_sk_clone+0x370/0x370 [ 1471.407088] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1471.407707] ? percpu_counter_add_batch+0xb4/0x170 [ 1471.408265] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1471.408834] ? __vm_enough_memory+0x184/0x360 [ 1471.409345] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1471.409939] dup_mm+0x53f/0x1250 [ 1471.410339] ? replace_mm_exe_file+0x490/0x490 [ 1471.410860] ? __raw_spin_lock_init+0x36/0x110 [ 1471.411390] copy_process+0x384b/0x6cb0 [ 1471.411873] ? __cleanup_sighand+0xb0/0xb0 [ 1471.412364] ? lock_is_held_type+0xd7/0x130 [ 1471.412851] ? find_held_lock+0x2c/0x110 [ 1471.413319] ? kernel_clone+0x2f8/0xa60 [ 1471.413780] kernel_clone+0xe7/0xa60 [ 1471.414207] ? create_io_thread+0xf0/0xf0 [ 1471.414680] ? find_held_lock+0x2c/0x110 [ 1471.415143] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1471.415767] ? populate_seccomp_data+0x214/0x540 [ 1471.416310] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1471.416929] ? __seccomp_filter+0x5ab/0xff0 [ 1471.417421] ? wait_for_completion_io+0x270/0x270 [ 1471.417968] __do_sys_clone+0xc8/0x110 [ 1471.418414] ? __do_sys_vfork+0xd0/0xd0 [ 1471.418882] ? __secure_computing+0xb4/0x290 [ 1471.419398] do_syscall_64+0x3b/0x90 [ 1471.419840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1471.420421] RIP: 0033:0x7f466d7a6b19 [ 1471.420834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.422912] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1471.423767] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1471.424582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1471.425379] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.426173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.426979] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1471.427819] 02:36:48 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x2000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1471.437740] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.439408] loop2: detected capacity change from 0 to 98304 02:36:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1471.442320] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.450116] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:36:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1471.495861] audit: type=1326 audit(1643942208.449:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8612 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f582df36b19 code=0x0 02:36:48 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x3000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1471.538918] loop2: detected capacity change from 0 to 131072 02:36:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) openat(r1, &(0x7f0000000040)='./file0\x00', 0x400000, 0xb0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1471.561653] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1471.573630] loop2: detected capacity change from 0 to 131072 [ 1471.581988] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1471.588171] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:48 executing program 5: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:36:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x480) 02:36:48 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x4000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:36:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1471.659771] loop4: detected capacity change from 0 to 256 [ 1471.677619] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.680456] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:36:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) r3 = accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0/file0\x00'}) ioctl$CDROMRESET(r2, 0x5312) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:36:48 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x82800, 0x80) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1471.708477] loop2: detected capacity change from 0 to 163840 [ 1471.728247] loop1: detected capacity change from 0 to 256 [ 1471.735340] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1471.747929] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.784359] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1471.869532] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:01 executing program 5: mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:37:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) r3 = accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0/file0\x00'}) ioctl$CDROMRESET(r2, 0x5312) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:37:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 69) [ 1484.454885] loop1: detected capacity change from 0 to 256 02:37:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x5000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x500) 02:37:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:01 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket(0x23, 0x4, 0x6cf74b0a) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept(r4, &(0x7f0000000740)=@can, &(0x7f00000007c0)=0x80) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r5, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r6, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r7, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3, r3, &(0x7f0000000280)="9020ebc03f01d9e639dfe6258a878d6306bcef7f956cd09b716cae6c8d98fe8102e3cbc71ef3b8de07c3d6212a6981db131f3d37bf474ee6719b869fcf5334c099e4478ad2f56f551208b7b1f7dbb92e15ab4e063ed77147b7331ad16cebe04038dc9aa4dedf5e6d73bf20e529adcbe75e7b207003b2a441175adbc2cb1d2113d4fb97f0c6afeb6bef166d31f85ee3332cc95213e070f1f1f116cb2d988f2efc9605914583d745f210abbf89443a9e8f809710476cf00bbfaeeabf43fe33a925602080feecfa4b5d7b", 0xc9, 0x3, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x200, 0xffffffffffffffff, &(0x7f0000000080)="11eb5f18ca16b5fce450f8dafed5b3ee50adfaeb754104693e27f7", 0x1b, 0x20, 0x0, 0x2, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r6, &(0x7f0000000180)="21cc524d495c60c2b42f00dcb9d3cf4700ce19da90", 0x15, 0x800, 0x0, 0x6, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000000380)="339313b574cdab26803e0719e4c91759abcba7478810036232dab75321c210ebfeb7b8fa559e7e67ff574f930acdc045f8b35bc78d83274d977efdefd36efa1ed5cc6de4ef25b9ee6c3b45c65a85dc00c8998ab879a523f38b0f9f1580bf5ad8a14f5cb4371f955493d56dffddf4b2bab725db93f3fe99f60b73b552cdd8f1125dde8467aafac8e1d0cf8219d2cae6633de86ec82a303e78773bb64d0e76b6c7451a73776a3dce754cfe894dea2006836c79130361f6a09f8a33f4ece2c60614921834682246ae98675e835f7bae62189b5edc4d97f44969e938c323f22c53b506318fdc2116b5", 0xe7, 0x6, 0x0, 0x0, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x0, r7, &(0x7f0000000500)="8022a946f4029025dbe8c4ab55673150deb03b4b302d0e6c6813bfae39c93fabe81f75b7a1385501e1d60620ab40e86adb060f93b99ceb0dc8612158e17a4c09281912ade591cc4752102b6a303a4bd95b9049b570680858fbfed5e53a756f3b5666643fa7a2b44e53cd326f230d18bc084a9cbac2b1e080fe3cb49e83731d5ed6956fc8cbb8bca81d3661b484f15397526a9ce3f033dcafd1b8b506c94ad00547aaad74d37c1989c69685e2a4df5efb428566a7268b4b1ef48894bcdd8896f83abda18fc7a7c1c725bd1817fe5a76ef1b9fe01deb45e4e7cdb34cbf6b9ae2fdf3da805bd42a90debd8a72359863bdec93cff77de3e4", 0xf6, 0x4, 0x0, 0x1, r8}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000000680)="0cbac3d0", 0x4, 0x7fff, 0x0, 0x2, r2}]) 02:37:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1484.489849] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1484.512628] FAULT_INJECTION: forcing a failure. [ 1484.512628] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.515306] CPU: 0 PID: 8682 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1484.517179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1484.519700] Call Trace: [ 1484.520279] [ 1484.520781] dump_stack_lvl+0x8b/0xb3 [ 1484.521657] should_fail.cold+0x5/0xa [ 1484.522533] ? anon_vma_clone+0xdc/0x580 [ 1484.523475] should_failslab+0x5/0x10 [ 1484.524355] kmem_cache_alloc+0x5b/0x480 [ 1484.525292] anon_vma_clone+0xdc/0x580 [ 1484.526207] anon_vma_fork+0x82/0x6a0 [ 1484.527081] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1484.528225] ? __vm_enough_memory+0x184/0x360 02:37:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x8000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1484.529412] dup_mm+0x91b/0x1250 [ 1484.530229] ? replace_mm_exe_file+0x490/0x490 [ 1484.531272] ? __raw_spin_lock_init+0x36/0x110 [ 1484.532337] copy_process+0x384b/0x6cb0 [ 1484.533274] ? __cleanup_sighand+0xb0/0xb0 [ 1484.534236] ? lock_is_held_type+0xd7/0x130 [ 1484.535208] ? find_held_lock+0x2c/0x110 [ 1484.536124] ? kernel_clone+0x2f8/0xa60 [ 1484.537019] kernel_clone+0xe7/0xa60 [ 1484.537854] ? create_io_thread+0xf0/0xf0 [ 1484.538782] ? find_held_lock+0x2c/0x110 [ 1484.539702] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1484.540928] ? populate_seccomp_data+0x214/0x540 [ 1484.540966] loop2: detected capacity change from 0 to 196608 [ 1484.541989] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1484.543820] ? __seccomp_filter+0x5ab/0xff0 [ 1484.544779] ? wait_for_completion_io+0x270/0x270 [ 1484.545866] __do_sys_clone+0xc8/0x110 [ 1484.546748] ? __do_sys_vfork+0xd0/0xd0 [ 1484.547687] ? __secure_computing+0xb4/0x290 [ 1484.548675] do_syscall_64+0x3b/0x90 [ 1484.549523] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1484.550666] RIP: 0033:0x7f466d7a6b19 [ 1484.551486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.555567] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1484.557253] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1484.558826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1484.560414] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.561982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1484.563551] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1484.565167] [ 1484.571209] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1484.587766] loop2: detected capacity change from 0 to 196608 [ 1484.588221] loop4: detected capacity change from 0 to 256 [ 1484.604843] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1484.608739] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1484.671319] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1484.680830] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1500.833453] loop4: detected capacity change from 0 to 256 [ 1500.845429] FAULT_INJECTION: forcing a failure. [ 1500.845429] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.845843] loop1: detected capacity change from 0 to 256 [ 1500.846733] CPU: 0 PID: 8712 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1500.848795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1500.850016] Call Trace: [ 1500.850304] [ 1500.850547] dump_stack_lvl+0x8b/0xb3 [ 1500.850978] should_fail.cold+0x5/0xa [ 1500.851400] ? lock_downgrade+0x6d0/0x6d0 [ 1500.851854] ? create_object.isra.0+0x3a/0xa20 [ 1500.852370] should_failslab+0x5/0x10 [ 1500.852792] kmem_cache_alloc+0x5b/0x480 [ 1500.853247] create_object.isra.0+0x3a/0xa20 [ 1500.853742] ? kasan_unpoison+0x23/0x50 [ 1500.854185] kmem_cache_alloc+0x239/0x480 [ 1500.854653] anon_vma_clone+0xdc/0x580 [ 1500.855091] anon_vma_fork+0x82/0x6a0 [ 1500.855508] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1500.856054] ? __vm_enough_memory+0x184/0x360 [ 1500.856550] dup_mm+0x91b/0x1250 [ 1500.856935] ? replace_mm_exe_file+0x490/0x490 [ 1500.857442] ? __raw_spin_lock_init+0x36/0x110 [ 1500.857944] copy_process+0x384b/0x6cb0 [ 1500.858402] ? __cleanup_sighand+0xb0/0xb0 [ 1500.858864] ? lock_is_held_type+0xd7/0x130 [ 1500.859340] ? find_held_lock+0x2c/0x110 [ 1500.859791] ? kernel_clone+0x2f8/0xa60 [ 1500.860248] kernel_clone+0xe7/0xa60 [ 1500.860659] ? create_io_thread+0xf0/0xf0 [ 1500.861114] ? find_held_lock+0x2c/0x110 [ 1500.861554] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1500.862152] ? populate_seccomp_data+0x214/0x540 [ 1500.862667] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1500.863255] ? __seccomp_filter+0x5ab/0xff0 [ 1500.863716] ? wait_for_completion_io+0x270/0x270 [ 1500.864270] __do_sys_clone+0xc8/0x110 [ 1500.864697] ? __do_sys_vfork+0xd0/0xd0 [ 1500.865145] ? __secure_computing+0xb4/0x290 [ 1500.865634] do_syscall_64+0x3b/0x90 [ 1500.866046] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1500.866599] RIP: 0033:0x7f466d7a6b19 [ 1500.867013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.869247] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1500.870106] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1500.870910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.871691] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.872470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1500.873239] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1500.874010] [ 1500.877652] loop2: detected capacity change from 0 to 229376 02:37:17 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) 02:37:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x600) 02:37:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0x1f, 0x8, [0x89f, 0x4, 0x7, 0xff], &(0x7f0000000040)=[0x0]}) 02:37:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:37:17 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x10000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) r3 = accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0/file0\x00'}) ioctl$CDROMRESET(r2, 0x5312) 02:37:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 70) [ 1500.890228] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1500.900910] loop2: detected capacity change from 0 to 229376 [ 1500.908155] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1500.918856] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1500.924343] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0xfffffce9}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000040)='./file2\x00') chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1500.987273] loop2: detected capacity change from 0 to 262144 [ 1500.997111] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1501.008048] loop2: detected capacity change from 0 to 262144 [ 1501.013112] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:37:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:37:17 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x10000200}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1501.083910] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x700) 02:37:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) accept4(r2, &(0x7f0000000180)=@phonet, &(0x7f0000000040)=0x80, 0x80800) ioctl$CDROMRESET(r2, 0x5312) 02:37:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 71) [ 1501.123639] loop2: detected capacity change from 0 to 264192 [ 1501.143554] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1501.145649] FAULT_INJECTION: forcing a failure. [ 1501.145649] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.146968] CPU: 0 PID: 8741 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1501.147889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1501.149130] Call Trace: [ 1501.149414] [ 1501.149654] dump_stack_lvl+0x8b/0xb3 [ 1501.150084] should_fail.cold+0x5/0xa [ 1501.150499] ? anon_vma_fork+0xed/0x6a0 [ 1501.150936] should_failslab+0x5/0x10 [ 1501.151348] kmem_cache_alloc+0x5b/0x480 [ 1501.151799] anon_vma_fork+0xed/0x6a0 [ 1501.152234] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1501.152773] ? __vm_enough_memory+0x184/0x360 [ 1501.153269] dup_mm+0x91b/0x1250 [ 1501.153659] ? replace_mm_exe_file+0x490/0x490 [ 1501.154159] ? __raw_spin_lock_init+0x36/0x110 [ 1501.154654] copy_process+0x384b/0x6cb0 [ 1501.155111] ? __cleanup_sighand+0xb0/0xb0 [ 1501.155582] ? lock_is_held_type+0xd7/0x130 [ 1501.156068] ? find_held_lock+0x2c/0x110 [ 1501.156521] ? kernel_clone+0x2f8/0xa60 [ 1501.156963] kernel_clone+0xe7/0xa60 [ 1501.157390] ? create_io_thread+0xf0/0xf0 [ 1501.157853] ? find_held_lock+0x2c/0x110 [ 1501.158302] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1501.158895] ? populate_seccomp_data+0x214/0x540 [ 1501.159410] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1501.160018] ? __seccomp_filter+0x5ab/0xff0 [ 1501.160486] ? wait_for_completion_io+0x270/0x270 [ 1501.161012] __do_sys_clone+0xc8/0x110 [ 1501.161450] ? __do_sys_vfork+0xd0/0xd0 [ 1501.161901] ? __secure_computing+0xb4/0x290 [ 1501.162377] do_syscall_64+0x3b/0x90 [ 1501.162786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1501.163346] RIP: 0033:0x7f466d7a6b19 [ 1501.163750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1501.165746] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1501.166563] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1501.167324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1501.168108] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1501.168860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1501.169636] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1501.170419] [ 1501.178319] loop4: detected capacity change from 0 to 256 [ 1501.179100] loop1: detected capacity change from 0 to 256 [ 1501.184741] loop2: detected capacity change from 0 to 264192 [ 1501.195125] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1501.199326] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1501.212713] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1501.257703] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1501.312914] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:32 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 72) 02:37:32 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x11000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:32 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) (fail_nth: 1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:37:32 executing program 0: fcntl$getflags(0xffffffffffffffff, 0xb) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(r0, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x10) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) 02:37:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x18000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:37:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r2, &(0x7f0000000080)='./file1\x00', 0x101001, 0x105) ioctl$CDROMRESET(r2, 0x5312) 02:37:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf00) [ 1515.755376] loop1: detected capacity change from 0 to 256 [ 1515.761992] loop2: detected capacity change from 0 to 264192 [ 1515.764659] loop4: detected capacity change from 0 to 256 [ 1515.774870] FAULT_INJECTION: forcing a failure. [ 1515.774870] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.777604] CPU: 0 PID: 8765 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1515.779502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1515.782117] Call Trace: [ 1515.782710] [ 1515.783229] dump_stack_lvl+0x8b/0xb3 [ 1515.784135] should_fail.cold+0x5/0xa [ 1515.785066] ? create_object.isra.0+0x3a/0xa20 [ 1515.786176] should_failslab+0x5/0x10 [ 1515.787064] kmem_cache_alloc+0x5b/0x480 [ 1515.788005] create_object.isra.0+0x3a/0xa20 [ 1515.789030] ? kasan_unpoison+0x23/0x50 [ 1515.789949] kmem_cache_alloc+0x239/0x480 [ 1515.790907] anon_vma_fork+0xed/0x6a0 [ 1515.791779] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1515.792935] ? __vm_enough_memory+0x184/0x360 [ 1515.793975] dup_mm+0x91b/0x1250 [ 1515.794778] ? replace_mm_exe_file+0x490/0x490 [ 1515.795864] ? __raw_spin_lock_init+0x36/0x110 [ 1515.797255] copy_process+0x384b/0x6cb0 [ 1515.798506] ? __cleanup_sighand+0xb0/0xb0 [ 1515.799799] ? lock_is_held_type+0xd7/0x130 [ 1515.800876] ? find_held_lock+0x2c/0x110 [ 1515.801825] ? kernel_clone+0x2f8/0xa60 [ 1515.802762] kernel_clone+0xe7/0xa60 [ 1515.803641] ? create_io_thread+0xf0/0xf0 [ 1515.804621] ? find_held_lock+0x2c/0x110 [ 1515.805554] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1515.806800] ? populate_seccomp_data+0x214/0x540 [ 1515.807883] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1515.809165] ? __seccomp_filter+0x5ab/0xff0 [ 1515.810146] ? wait_for_completion_io+0x270/0x270 [ 1515.811261] __do_sys_clone+0xc8/0x110 [ 1515.812172] ? __do_sys_vfork+0xd0/0xd0 [ 1515.813127] ? __secure_computing+0xb4/0x290 [ 1515.814127] do_syscall_64+0x3b/0x90 [ 1515.814986] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1515.816133] RIP: 0033:0x7f466d7a6b19 [ 1515.816993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1515.821147] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1515.822846] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1515.824488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1515.826093] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1515.827696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.829314] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1515.830952] [ 1515.848892] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:37:32 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x1ffff000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') [ 1515.873677] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1515.881883] loop2: detected capacity change from 0 to 264192 [ 1515.917997] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:37:32 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000700)=[{&(0x7f0000000780)="601c6d6b646f736689254300080120000400004000f80000200040000300000000000000018700308912bc51c66b71d8574c32cec0f2e553368a228cc58fac5e3249b9f16e9145e2f883674bbd5a2fecc1bea4e94683c19e900a91f29d389c3edbe7a379fc7611cf2f91db311716e0b1c71464b57b54a29cee06893b5bfe15b3a80caa7029206dcf1fc12e6e0d4288edfd43d38a861a3170b23ddd9894db085988bf56065df3d55125f5f54897a71dc2835fa61ca25967c1e0", 0xb9}, {0x0, 0x0, 0x10000}, {&(0x7f0000000280)="5e31fa3d6e2ee3ff44f511b1b33d890b5e50c27175fcf4118844f328c41f7d36e5c940e80489b498ad8af74dfb11af5216c2a504877fcd42c6f71b570e0db2e07f25eed30a994e54888fb62a272531c95086580229507fd2c5af20dd97aab55d2bae2bb7796e7c0e7c8fa4ffbfea9535c3b22a494aa151f172908031b7eec09cfe24805437d8b4646750648883b16843fa2fec311ac533d536aa15126eca1da80eb100b30dca98b47c0519685358b6acb9d4", 0xb2, 0xfffffffffffffffd}, {&(0x7f0000000340)="f6b44a54365dee88796f9e1c4c89a46b7de3873204d19870186ecde207a4d28e18efd6c755d868abf54a636bc37441e0e6050f6eaa67fd20c848060a1fba51ae1077867cdc4501345290ababd77eb654c619324774f171bb376265efab8a2c70ef0d7dd13a97e189028972e5171d2ffc3e83eeefa7b594e28c37a0786e233d1ce6ab3edb7dde7b8237807fe179983ef081caa1bc3213e7bb143867bd153ada100a66603b2570dc1e9494fd8caf574bb32383fcc590488f468d527d7e6956b97a185305293edff7e97f0a6d18381e9750fe9dbe48a148e14bb69420b9b9f936d21cae59bdcaaa17af138d18c2155839aa27ac50ffc826266e7c87cb88", 0xfc, 0x10000}, {&(0x7f0000000180)="308978f362cd01a111d665c14253e7b003354cd4f8ca774a2f0e8f5f773236f5aae626ddbd066128fdcacc8898f7505247525590e40475e1680516987225ef1286a20c18256a057e1b9392d0852232103ac51f74dd48cfe04ed6456015849e71f95b03fc919c279e41d8f17e08a45601a5", 0x71, 0x100}], 0x2, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=0x0]) chdir(&(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000880)='./file1\x00', 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x241002, 0x0) openat(r0, &(0x7f0000000b40)='./file0\x00', 0xa2002, 0x108) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="2e88778ad32f5425a5a031"], 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r3 = eventfd(0x4) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000440)=0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000b00), 0x80000, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x4, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000b80)=""/163, 0xa3}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/238, 0xee}]}, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) execveat(0xffffffffffffffff, &(0x7f0000000900)='./file1\x00', &(0x7f0000000980)=[&(0x7f0000000940)='!\x89!&\'$\'\x00'], &(0x7f0000000ac0)=[&(0x7f00000009c0)='vfat\x00', &(0x7f0000000a00)='/dev/sr0\x00', &(0x7f0000000a40)='\x00', &(0x7f0000000a80)='vfat\x00'], 0x400) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000000c0)="a8b6f43c9c2dc89a5238ec3cb69207987b17231a6279f5a6c7a9875f3f6cdc") openat(r0, &(0x7f00000008c0)='./file1\x00', 0x0, 0x8f) 02:37:32 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x20000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1516.005675] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:37:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CDROMRESET(r2, 0x5312) 02:37:32 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:33 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 73) [ 1516.081855] audit: type=1326 audit(1643942253.034:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8786 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1516.089298] loop1: detected capacity change from 0 to 256 [ 1516.110146] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1516.124342] FAULT_INJECTION: forcing a failure. [ 1516.124342] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.126119] CPU: 1 PID: 8794 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1516.127382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1516.129135] Call Trace: [ 1516.129527] [ 1516.129880] dump_stack_lvl+0x8b/0xb3 [ 1516.130481] should_fail.cold+0x5/0xa [ 1516.131072] ? lock_downgrade+0x6d0/0x6d0 [ 1516.131711] ? create_object.isra.0+0x3a/0xa20 [ 1516.132437] should_failslab+0x5/0x10 [ 1516.133025] kmem_cache_alloc+0x5b/0x480 [ 1516.133665] create_object.isra.0+0x3a/0xa20 [ 1516.134366] ? kasan_unpoison+0x23/0x50 [ 1516.134525] loop2: detected capacity change from 0 to 264192 [ 1516.134985] kmem_cache_alloc+0x239/0x480 [ 1516.136993] anon_vma_clone+0xdc/0x580 [ 1516.137622] anon_vma_fork+0x82/0x6a0 [ 1516.138214] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1516.138992] ? __vm_enough_memory+0x184/0x360 [ 1516.139703] dup_mm+0x91b/0x1250 [ 1516.140240] ? replace_mm_exe_file+0x490/0x490 [ 1516.140944] ? __raw_spin_lock_init+0x36/0x110 [ 1516.141688] copy_process+0x384b/0x6cb0 [ 1516.142327] ? __cleanup_sighand+0xb0/0xb0 [ 1516.143001] ? lock_is_held_type+0xd7/0x130 [ 1516.143686] ? find_held_lock+0x2c/0x110 [ 1516.144322] ? kernel_clone+0x2f8/0xa60 [ 1516.144935] kernel_clone+0xe7/0xa60 [ 1516.145510] ? create_io_thread+0xf0/0xf0 [ 1516.146173] ? find_held_lock+0x2c/0x110 [ 1516.146801] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1516.147643] ? populate_seccomp_data+0x214/0x540 [ 1516.148380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1516.149229] ? __seccomp_filter+0x5ab/0xff0 [ 1516.149906] ? wait_for_completion_io+0x270/0x270 [ 1516.150674] __do_sys_clone+0xc8/0x110 [ 1516.151270] ? __do_sys_vfork+0xd0/0xd0 [ 1516.151938] ? __secure_computing+0xb4/0x290 [ 1516.152635] do_syscall_64+0x3b/0x90 [ 1516.153210] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1516.154015] RIP: 0033:0x7f466d7a6b19 [ 1516.154567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.157369] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1516.158518] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1516.159605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1516.160680] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.161743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.162841] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1516.163931] 02:37:33 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x21000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1516.199159] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:37:33 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x2c010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1516.237936] loop2: detected capacity change from 0 to 264192 [ 1516.249445] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1516.256870] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1516.682573] FAULT_INJECTION: forcing a failure. [ 1516.682573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.685215] CPU: 0 PID: 8762 Comm: syz-executor.5 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1516.687004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1516.689461] Call Trace: [ 1516.690024] [ 1516.690512] dump_stack_lvl+0x8b/0xb3 [ 1516.691369] should_fail.cold+0x5/0xa [ 1516.692233] _copy_to_user+0x2e/0x150 [ 1516.693076] simple_read_from_buffer+0xcc/0x160 [ 1516.694094] proc_fail_nth_read+0x194/0x220 [ 1516.695029] ? proc_exe_link+0x1d0/0x1d0 [ 1516.695903] ? security_file_permission+0xb1/0xd0 [ 1516.696967] ? proc_exe_link+0x1d0/0x1d0 [ 1516.697839] vfs_read+0x1b6/0x5f0 [ 1516.698608] ksys_read+0x12d/0x250 [ 1516.699384] ? __ia32_sys_pwrite64+0x230/0x230 [ 1516.700389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.701516] do_syscall_64+0x3b/0x90 [ 1516.702334] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1516.703447] RIP: 0033:0x7f582dee969c [ 1516.704258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1516.708208] RSP: 002b:00007f582b4ac170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1516.709839] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f582dee969c [ 1516.711371] RDX: 000000000000000f RSI: 00007f582b4ac1e0 RDI: 0000000000000003 [ 1516.712921] RBP: 00007f582b4ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.714450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.715978] R13: 00007ffc44bacc2f R14: 00007f582b4ac300 R15: 0000000000022000 [ 1516.717540] 02:37:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 74) 02:37:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1300) 02:37:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x5) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400200, 0x142) 02:37:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:37:46 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:37:46 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x3f000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:37:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$CDROMRESET(r2, 0x5312) 02:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x75000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1529.464488] loop2: detected capacity change from 0 to 264192 [ 1529.470190] loop4: detected capacity change from 0 to 256 [ 1529.474703] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1529.477660] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.496434] audit: type=1326 audit(1643942266.450:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8810 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1529.502942] loop2: detected capacity change from 0 to 264192 [ 1529.513205] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1529.517161] FAULT_INJECTION: forcing a failure. [ 1529.517161] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.519495] CPU: 1 PID: 8823 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1529.521159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1529.523407] Call Trace: [ 1529.523925] [ 1529.524388] dump_stack_lvl+0x8b/0xb3 [ 1529.525195] should_fail.cold+0x5/0xa [ 1529.525991] ? create_object.isra.0+0x3a/0xa20 [ 1529.526949] should_failslab+0x5/0x10 [ 1529.527722] kmem_cache_alloc+0x5b/0x480 [ 1529.528593] create_object.isra.0+0x3a/0xa20 [ 1529.529518] ? kasan_unpoison+0x23/0x50 [ 1529.530364] kmem_cache_alloc+0x239/0x480 [ 1529.531231] anon_vma_fork+0x1de/0x6a0 [ 1529.532068] dup_mm+0x91b/0x1250 [ 1529.532834] ? replace_mm_exe_file+0x490/0x490 [ 1529.533801] ? __raw_spin_lock_init+0x36/0x110 [ 1529.534770] copy_process+0x384b/0x6cb0 [ 1529.535643] ? __cleanup_sighand+0xb0/0xb0 [ 1529.536571] ? lock_is_held_type+0xd7/0x130 [ 1529.537465] ? find_held_lock+0x2c/0x110 [ 1529.538313] ? kernel_clone+0x2f8/0xa60 [ 1529.539150] kernel_clone+0xe7/0xa60 [ 1529.539934] ? create_io_thread+0xf0/0xf0 [ 1529.540802] ? find_held_lock+0x2c/0x110 [ 1529.541641] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1529.542774] ? populate_seccomp_data+0x214/0x540 [ 1529.543748] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1529.544873] ? __seccomp_filter+0x5ab/0xff0 [ 1529.545715] ? wait_for_completion_io+0x270/0x270 [ 1529.546688] __do_sys_clone+0xc8/0x110 [ 1529.547464] ? __do_sys_vfork+0xd0/0xd0 [ 1529.548286] ? __secure_computing+0xb4/0x290 [ 1529.549181] do_syscall_64+0x3b/0x90 [ 1529.549927] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1529.550934] RIP: 0033:0x7f466d7a6b19 [ 1529.551665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1529.555253] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1529.556767] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1529.558171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.559579] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1529.560994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1529.562392] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1529.563802] [ 1529.564499] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2000) [ 1529.575724] loop1: detected capacity change from 0 to 256 [ 1529.592597] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.599764] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 02:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80040000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:37:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x2000008, &(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="c78f20b12a6efdd4eaf015f7616e29ee3a9db142353f4aa17b03c1f28f085f26822c40ee114beb8c46953cae1361081466caf21deba5620edca01b5cce05c8d8808ab59f85e4adce381fb5a55806466218c654822f5b1c5e", @ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x5, 0x8, 0x2000000000000, 0x2, 0x1, 0x5551}) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000080), 0x84800) 02:37:46 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0x40000000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1529.636643] loop4: detected capacity change from 0 to 256 [ 1529.654502] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r2, 0x5312) [ 1529.660079] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.685447] loop2: detected capacity change from 0 to 264192 [ 1529.697417] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:37:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:37:46 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xc6010000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1529.738978] loop1: detected capacity change from 0 to 256 [ 1529.746490] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.756566] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:37:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f00) 02:37:46 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 75) 02:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1529.792382] loop4: detected capacity change from 0 to 256 [ 1529.814803] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.821751] loop2: detected capacity change from 0 to 264192 [ 1529.842844] FAULT_INJECTION: forcing a failure. [ 1529.842844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1529.844108] CPU: 0 PID: 8856 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1529.844930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1529.846063] Call Trace: [ 1529.846321] [ 1529.846551] dump_stack_lvl+0x8b/0xb3 [ 1529.846952] should_fail.cold+0x5/0xa [ 1529.847347] prepare_alloc_pages+0x17b/0x500 [ 1529.847801] __alloc_pages+0x131/0x4e0 [ 1529.848206] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1529.848851] ? lock_release+0x3b2/0x6f0 [ 1529.849260] alloc_pages+0x1a0/0x2f0 [ 1529.849651] get_zeroed_page+0x14/0xa0 [ 1529.850043] __pud_alloc+0x33/0x270 [ 1529.850411] copy_page_range+0x35ba/0x47b0 [ 1529.850851] ? find_held_lock+0x2c/0x110 [ 1529.851276] ? lock_downgrade+0x6d0/0x6d0 [ 1529.851698] ? vm_iomap_memory+0x190/0x190 [ 1529.852121] ? up_write+0x148/0x460 [ 1529.852521] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1529.853025] ? __vma_link_rb+0x540/0x700 [ 1529.853446] dup_mm+0x961/0x1250 [ 1529.853801] ? replace_mm_exe_file+0x490/0x490 [ 1529.854269] ? __raw_spin_lock_init+0x36/0x110 [ 1529.854733] copy_process+0x384b/0x6cb0 [ 1529.855184] ? __cleanup_sighand+0xb0/0xb0 [ 1529.855621] ? lock_is_held_type+0xd7/0x130 [ 1529.856094] ? find_held_lock+0x2c/0x110 02:37:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) [ 1529.856549] ? kernel_clone+0x2f8/0xa60 [ 1529.857128] kernel_clone+0xe7/0xa60 [ 1529.857545] ? create_io_thread+0xf0/0xf0 [ 1529.857985] ? find_held_lock+0x2c/0x110 [ 1529.858430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1529.859016] ? populate_seccomp_data+0x214/0x540 [ 1529.859518] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1529.860107] ? __seccomp_filter+0x5ab/0xff0 [ 1529.860583] ? wait_for_completion_io+0x270/0x270 [ 1529.861108] __do_sys_clone+0xc8/0x110 [ 1529.861516] ? __do_sys_vfork+0xd0/0xd0 [ 1529.861961] ? __secure_computing+0xb4/0x290 [ 1529.862447] do_syscall_64+0x3b/0x90 [ 1529.862853] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1529.863404] RIP: 0033:0x7f466d7a6b19 [ 1529.863802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1529.865803] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1529.866592] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1529.867359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.868129] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1529.868904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1529.869665] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1529.870455] [ 1529.872280] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.879958] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1529.895764] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1529.921674] loop2: detected capacity change from 0 to 264192 [ 1529.951095] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1529.982678] loop1: detected capacity change from 0 to 256 [ 1530.000191] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1530.051185] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x8004) 02:38:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x252000, 0x50) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) openat(r1, &(0x7f0000000080)='./file0\x00', 0x102, 0x122) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x244000, 0x2) 02:38:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') 02:38:01 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x2) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x3) 02:38:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 76) 02:38:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:38:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) 02:38:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xd21f0000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.268166] loop2: detected capacity change from 0 to 264192 [ 1544.279619] loop4: detected capacity change from 0 to 256 [ 1544.282788] loop1: detected capacity change from 0 to 256 [ 1544.289516] FAULT_INJECTION: forcing a failure. [ 1544.289516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1544.291621] CPU: 1 PID: 8876 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1544.292983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1544.294824] Call Trace: [ 1544.295249] [ 1544.295618] dump_stack_lvl+0x8b/0xb3 [ 1544.296268] should_fail.cold+0x5/0xa [ 1544.296920] prepare_alloc_pages+0x17b/0x500 [ 1544.297655] __alloc_pages+0x131/0x4e0 [ 1544.298321] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1544.299339] ? find_held_lock+0x2c/0x110 [ 1544.300035] ? lock_downgrade+0x6d0/0x6d0 [ 1544.300764] ? do_raw_spin_lock+0x121/0x260 [ 1544.301498] alloc_pages+0x1a0/0x2f0 [ 1544.302133] __pmd_alloc+0x37/0x680 [ 1544.302740] copy_page_range+0x3545/0x47b0 [ 1544.303482] ? lock_downgrade+0x6d0/0x6d0 [ 1544.304190] ? vm_iomap_memory+0x190/0x190 [ 1544.304907] ? up_write+0x148/0x460 [ 1544.305522] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1544.306362] ? __vma_link_rb+0x540/0x700 [ 1544.307056] dup_mm+0x961/0x1250 [ 1544.307639] ? replace_mm_exe_file+0x490/0x490 [ 1544.308407] ? __raw_spin_lock_init+0x36/0x110 [ 1544.309197] copy_process+0x384b/0x6cb0 [ 1544.309891] ? __cleanup_sighand+0xb0/0xb0 [ 1544.310639] ? lock_is_held_type+0xd7/0x130 [ 1544.311397] ? find_held_lock+0x2c/0x110 [ 1544.312100] ? kernel_clone+0x2f8/0xa60 [ 1544.312790] kernel_clone+0xe7/0xa60 [ 1544.313448] ? create_io_thread+0xf0/0xf0 [ 1544.314174] ? find_held_lock+0x2c/0x110 [ 1544.314854] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1544.315807] ? populate_seccomp_data+0x214/0x540 [ 1544.316610] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1544.317582] ? __seccomp_filter+0x5ab/0xff0 [ 1544.318289] ? wait_for_completion_io+0x270/0x270 [ 1544.319144] __do_sys_clone+0xc8/0x110 [ 1544.319794] ? __do_sys_vfork+0xd0/0xd0 [ 1544.320514] ? __secure_computing+0xb4/0x290 [ 1544.321283] do_syscall_64+0x3b/0x90 [ 1544.321940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1544.322816] RIP: 0033:0x7f466d7a6b19 [ 1544.323469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.326557] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1544.327849] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1544.329076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.330303] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1544.331538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.332805] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1544.334042] [ 1544.335797] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:38:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xe4ffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.338163] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.343566] audit: type=1326 audit(1643942281.242:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8874 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1544.353962] loop2: detected capacity change from 0 to 264192 [ 1544.357474] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.383520] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:38:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) fchmod(r1, 0xd3) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1544.421204] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf000) 02:38:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 77) [ 1544.442169] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) 02:38:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:38:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) [ 1544.499755] loop4: detected capacity change from 0 to 256 02:38:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xff600000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.505096] FAULT_INJECTION: forcing a failure. [ 1544.505096] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.507292] CPU: 1 PID: 8895 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1544.508227] loop1: detected capacity change from 0 to 256 [ 1544.508717] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1544.511268] Call Trace: [ 1544.511737] [ 1544.512135] dump_stack_lvl+0x8b/0xb3 [ 1544.512659] loop2: detected capacity change from 0 to 264192 [ 1544.512850] should_fail.cold+0x5/0xa [ 1544.514137] ? __pmd_alloc+0x94/0x680 [ 1544.514814] should_failslab+0x5/0x10 [ 1544.515496] kmem_cache_alloc+0x5b/0x480 [ 1544.516225] ? alloc_pages+0x1a8/0x2f0 [ 1544.516936] __pmd_alloc+0x94/0x680 [ 1544.517595] copy_page_range+0x3545/0x47b0 [ 1544.518397] ? lock_downgrade+0x6d0/0x6d0 [ 1544.519141] ? vm_iomap_memory+0x190/0x190 [ 1544.519912] ? up_write+0x148/0x460 [ 1544.520553] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1544.521460] ? __vma_link_rb+0x540/0x700 [ 1544.522199] dup_mm+0x961/0x1250 [ 1544.522834] ? replace_mm_exe_file+0x490/0x490 [ 1544.523659] ? __raw_spin_lock_init+0x36/0x110 [ 1544.524488] copy_process+0x384b/0x6cb0 [ 1544.525247] ? __cleanup_sighand+0xb0/0xb0 [ 1544.526029] ? lock_is_held_type+0xd7/0x130 [ 1544.526804] ? find_held_lock+0x2c/0x110 [ 1544.527537] ? kernel_clone+0x2f8/0xa60 [ 1544.528260] kernel_clone+0xe7/0xa60 [ 1544.528944] ? create_io_thread+0xf0/0xf0 [ 1544.529694] ? find_held_lock+0x2c/0x110 [ 1544.530433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1544.531414] ? populate_seccomp_data+0x214/0x540 [ 1544.532276] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1544.533259] ? __seccomp_filter+0x5ab/0xff0 [ 1544.534025] ? wait_for_completion_io+0x270/0x270 [ 1544.534886] __do_sys_clone+0xc8/0x110 [ 1544.535588] ? __do_sys_vfork+0xd0/0xd0 [ 1544.536322] ? __secure_computing+0xb4/0x290 [ 1544.537128] do_syscall_64+0x3b/0x90 [ 1544.537802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1544.538733] RIP: 0033:0x7f466d7a6b19 [ 1544.539390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1544.542674] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1544.544034] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1544.545325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1544.546588] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1544.547861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1544.549129] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1544.550422] 02:38:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffc00000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.557920] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1544.559825] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.561245] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:01 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffff0300}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1544.616157] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1544.623360] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:14 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:38:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 02:38:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r1, 0x5312) 02:38:14 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="9ba9ad0d09182e7f188cd495c1bc07547843615e27394e286ce61cbd4f19cb6df99780acbd9643170066e0c5f16a318979938f5b0dc9d5d3f44cb821419d75956c572ac15055835655c4c84b73ca5c7f0b1d7164c2748bcfa21f4d812dfefefe19238f2ed670347d315957b569fa16726f239c660c69c4d83413f0f91bebeaf3be47feb864cbc0157574801876951e894df055bfd069ea26b14e1dfbd5a65750f679b631636c7ff8ea22b57cb41d2b5b0af385b875eee2d249d7cca24ee9a51a8c3b19e1a256763a6d82cc2556e06250d0aace3fdce0318944b685547d7f24d86c185cb14f", @ANYRES16=0x0, @ANYRES16, @ANYBLOB="3b13286691727abe7232b9aefd57cbc5e81fc669627346c74009d95f7766c1dab44314b3f88eb366fff49ae40b4bd5bef83741349c5550bfdb92b3bf5bf5ce3ac09dd98488a6d9b6aec1dca3d914a5e5a181eff990074fb7f78dc2fd9f2e224edd7e129f4dcab9706fa05994c0f5ec644079b03947", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:38:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:38:14 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffff1f00}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:38:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 78) 02:38:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf002) [ 1557.577193] audit: type=1326 audit(1643942294.531:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8918 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1557.585352] loop1: detected capacity change from 0 to 256 [ 1557.598582] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1557.622411] FAULT_INJECTION: forcing a failure. [ 1557.622411] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.623687] CPU: 1 PID: 8926 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1557.624563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1557.625765] Call Trace: [ 1557.625891] loop2: detected capacity change from 0 to 264192 [ 1557.626030] [ 1557.626037] dump_stack_lvl+0x8b/0xb3 [ 1557.626064] should_fail.cold+0x5/0xa [ 1557.628295] ? create_object.isra.0+0x3a/0xa20 [ 1557.628796] should_failslab+0x5/0x10 [ 1557.629201] kmem_cache_alloc+0x5b/0x480 [ 1557.629643] create_object.isra.0+0x3a/0xa20 [ 1557.630106] ? kasan_unpoison+0x23/0x50 [ 1557.630534] kmem_cache_alloc+0x239/0x480 [ 1557.630983] __pmd_alloc+0x94/0x680 [ 1557.631383] copy_page_range+0x3545/0x47b0 [ 1557.631864] ? lock_downgrade+0x6d0/0x6d0 [ 1557.632311] ? vm_iomap_memory+0x190/0x190 [ 1557.632792] ? up_write+0x148/0x460 [ 1557.633176] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1557.633708] ? __vma_link_rb+0x540/0x700 [ 1557.634142] dup_mm+0x961/0x1250 [ 1557.634514] ? replace_mm_exe_file+0x490/0x490 [ 1557.634998] ? __raw_spin_lock_init+0x36/0x110 [ 1557.635482] copy_process+0x384b/0x6cb0 [ 1557.635920] ? __cleanup_sighand+0xb0/0xb0 [ 1557.636378] ? lock_is_held_type+0xd7/0x130 [ 1557.636846] ? find_held_lock+0x2c/0x110 [ 1557.637278] ? kernel_clone+0x2f8/0xa60 [ 1557.637707] kernel_clone+0xe7/0xa60 [ 1557.638104] ? create_io_thread+0xf0/0xf0 [ 1557.638541] ? find_held_lock+0x2c/0x110 [ 1557.638967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1557.639547] ? populate_seccomp_data+0x214/0x540 [ 1557.640048] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1557.640623] ? __seccomp_filter+0x5ab/0xff0 [ 1557.641103] ? wait_for_completion_io+0x270/0x270 [ 1557.641623] __do_sys_clone+0xc8/0x110 [ 1557.642044] ? __do_sys_vfork+0xd0/0xd0 [ 1557.642473] ? __secure_computing+0xb4/0x290 [ 1557.642946] do_syscall_64+0x3b/0x90 [ 1557.643344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1557.643881] RIP: 0033:0x7f466d7a6b19 [ 1557.644268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1557.644663] loop4: detected capacity change from 0 to 256 [ 1557.646154] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1557.646169] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1557.646178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1557.646186] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1557.646195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1557.651077] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1557.651829] [ 1557.669037] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r1, 0x5312) [ 1557.674033] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1557.694485] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1557.717521] loop2: detected capacity change from 0 to 264192 [ 1557.747696] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1557.772912] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 02:38:29 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x4) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) [ 1572.842692] loop4: detected capacity change from 0 to 256 02:38:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x80001) 02:38:29 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffff8000}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1572.852098] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:29 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6e1c4019}}, './file2\x00'}) close(r1) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000280)="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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) close(r3) write(r2, &(0x7f0000000080)="f90f5af6ab0ae5d9bb374e1fffc4e0adbfa5a26198316b00a9ece25f1abdf8ee6091ae4e0c5c2988", 0x28) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:38:29 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 79) 02:38:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffdfc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1572.881824] FAULT_INJECTION: forcing a failure. [ 1572.881824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1572.883190] CPU: 0 PID: 8957 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1572.883643] audit: type=1326 audit(1643942309.837:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8953 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 [ 1572.884066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1572.884079] Call Trace: [ 1572.884084] [ 1572.884089] dump_stack_lvl+0x8b/0xb3 [ 1572.890436] should_fail.cold+0x5/0xa [ 1572.890856] prepare_alloc_pages+0x17b/0x500 [ 1572.891335] __alloc_pages+0x131/0x4e0 [ 1572.891760] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1572.892439] ? lock_is_held_type+0xd7/0x130 [ 1572.892920] ? find_held_lock+0x2c/0x110 [ 1572.893394] alloc_pages+0x1a0/0x2f0 [ 1572.893821] pte_alloc_one+0x16/0x1f0 [ 1572.894255] __pte_alloc+0x69/0x200 [ 1572.894665] ? pmd_install+0x250/0x250 [ 1572.895104] ? do_raw_spin_unlock+0x4f/0x210 [ 1572.895598] ? _raw_spin_unlock+0x24/0x40 [ 1572.896063] copy_page_range+0x1b84/0x47b0 [ 1572.896554] ? vm_iomap_memory+0x190/0x190 [ 1572.897042] ? up_write+0x148/0x460 [ 1572.897449] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1572.897983] ? __vma_link_rb+0x540/0x700 [ 1572.898446] dup_mm+0x961/0x1250 [ 1572.898834] ? replace_mm_exe_file+0x490/0x490 [ 1572.899352] ? __raw_spin_lock_init+0x36/0x110 [ 1572.899863] copy_process+0x384b/0x6cb0 [ 1572.900338] ? __cleanup_sighand+0xb0/0xb0 [ 1572.900799] ? lock_is_held_type+0xd7/0x130 [ 1572.901300] ? find_held_lock+0x2c/0x110 [ 1572.901759] ? kernel_clone+0x2f8/0xa60 [ 1572.902209] kernel_clone+0xe7/0xa60 [ 1572.902627] ? create_io_thread+0xf0/0xf0 [ 1572.903095] ? find_held_lock+0x2c/0x110 [ 1572.903553] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1572.904164] ? populate_seccomp_data+0x214/0x540 [ 1572.904699] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1572.905333] ? __seccomp_filter+0x5ab/0xff0 [ 1572.905815] ? wait_for_completion_io+0x270/0x270 [ 1572.906363] __do_sys_clone+0xc8/0x110 [ 1572.906797] ? __do_sys_vfork+0xd0/0xd0 [ 1572.907256] ? __secure_computing+0xb4/0x290 [ 1572.907748] do_syscall_64+0x3b/0x90 [ 1572.908169] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1572.908741] RIP: 0033:0x7f466d7a6b19 [ 1572.909171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.911214] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1572.912057] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1572.912857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1572.913629] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1572.914426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1572.915187] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1572.915994] 02:38:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r1, 0x5312) [ 1572.922865] loop2: detected capacity change from 0 to 264192 [ 1572.923592] loop1: detected capacity change from 0 to 256 02:38:29 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffffff7f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 02:38:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100000) [ 1572.942667] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1572.943532] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1572.945555] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1572.959172] loop2: detected capacity change from 0 to 264192 [ 1572.972550] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1572.991884] loop4: detected capacity change from 0 to 256 02:38:29 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffffffe4}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1573.031934] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1573.045778] loop2: detected capacity change from 0 to 264192 02:38:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1573.053234] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:38:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20042, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4002, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000004c0)={{r2}, "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"}) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1573.067921] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1573.087688] loop2: detected capacity change from 0 to 264192 02:38:30 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 80) [ 1573.096500] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1573.128177] FAULT_INJECTION: forcing a failure. [ 1573.128177] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1573.129577] CPU: 0 PID: 8981 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1573.130462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1573.131687] Call Trace: [ 1573.131960] [ 1573.132212] dump_stack_lvl+0x8b/0xb3 [ 1573.132635] should_fail.cold+0x5/0xa [ 1573.133056] prepare_alloc_pages+0x17b/0x500 [ 1573.133537] __alloc_pages+0x131/0x4e0 [ 1573.133957] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1573.134600] ? lock_is_held_type+0xd7/0x130 [ 1573.135065] ? find_held_lock+0x2c/0x110 [ 1573.135503] alloc_pages+0x1a0/0x2f0 [ 1573.135914] pte_alloc_one+0x16/0x1f0 [ 1573.136336] __pte_alloc+0x69/0x200 [ 1573.136731] ? pmd_install+0x250/0x250 [ 1573.137168] ? do_raw_spin_unlock+0x4f/0x210 [ 1573.137643] ? _raw_spin_unlock+0x24/0x40 [ 1573.138097] copy_page_range+0x1b84/0x47b0 [ 1573.138607] ? vm_iomap_memory+0x190/0x190 [ 1573.139085] ? up_write+0x148/0x460 [ 1573.139495] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1573.140058] ? __vma_link_rb+0x540/0x700 [ 1573.140525] dup_mm+0x961/0x1250 [ 1573.140918] ? replace_mm_exe_file+0x490/0x490 [ 1573.141438] ? __raw_spin_lock_init+0x36/0x110 [ 1573.141951] copy_process+0x384b/0x6cb0 [ 1573.142415] ? __cleanup_sighand+0xb0/0xb0 [ 1573.142904] ? lock_is_held_type+0xd7/0x130 [ 1573.143382] ? find_held_lock+0x2c/0x110 [ 1573.143836] ? kernel_clone+0x2f8/0xa60 [ 1573.144284] kernel_clone+0xe7/0xa60 [ 1573.144708] ? create_io_thread+0xf0/0xf0 [ 1573.145192] ? find_held_lock+0x2c/0x110 [ 1573.145651] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1573.146244] ? populate_seccomp_data+0x214/0x540 [ 1573.146772] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1573.147385] ? __seccomp_filter+0x5ab/0xff0 [ 1573.147866] ? wait_for_completion_io+0x270/0x270 [ 1573.148412] __do_sys_clone+0xc8/0x110 [ 1573.148849] ? __do_sys_vfork+0xd0/0xd0 [ 1573.149324] ? __secure_computing+0xb4/0x290 [ 1573.149818] do_syscall_64+0x3b/0x90 [ 1573.150236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1573.150813] RIP: 0033:0x7f466d7a6b19 [ 1573.151224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.153280] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1573.153645] loop1: detected capacity change from 0 to 256 [ 1573.154125] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1573.154137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1573.154146] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1573.154155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.154163] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1573.154188] [ 1573.165731] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000) [ 1573.191525] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1573.279983] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:38:44 executing program 5: mlockall(0x5) mlockall(0x3) mlockall(0x0) mlockall(0x4) mlockall(0x7) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) 02:38:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, 0x0) 02:38:44 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200), 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(r0, &(0x7f0000000180)='./file1\x00', 0xe4480, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/21, 0x15, 0x2, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:38:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) [ 1587.531356] loop2: detected capacity change from 0 to 264192 02:38:44 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1587.532952] audit: type=1326 audit(1643942324.484:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9000 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa019b98b19 code=0x0 02:38:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf0ffff) [ 1587.549589] loop4: detected capacity change from 0 to 256 02:38:44 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 81) [ 1587.558386] FAULT_INJECTION: forcing a failure. [ 1587.558386] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.559653] CPU: 0 PID: 9009 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1587.560531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1587.561750] Call Trace: [ 1587.562024] [ 1587.562261] dump_stack_lvl+0x8b/0xb3 [ 1587.562691] should_fail.cold+0x5/0xa [ 1587.563115] ? create_object.isra.0+0x3a/0xa20 [ 1587.563645] should_failslab+0x5/0x10 [ 1587.564049] kmem_cache_alloc+0x5b/0x480 [ 1587.564491] create_object.isra.0+0x3a/0xa20 [ 1587.564962] ? kasan_unpoison+0x23/0x50 [ 1587.565423] kmem_cache_alloc+0x239/0x480 [ 1587.565866] ptlock_alloc+0x1d/0x70 [ 1587.566255] pte_alloc_one+0x68/0x1f0 [ 1587.566677] __pte_alloc+0x69/0x200 [ 1587.567075] ? pmd_install+0x250/0x250 [ 1587.567494] ? do_raw_spin_unlock+0x4f/0x210 [ 1587.567971] ? _raw_spin_unlock+0x24/0x40 [ 1587.568424] copy_page_range+0x1b84/0x47b0 [ 1587.568907] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1587.569491] ? vm_iomap_memory+0x190/0x190 [ 1587.569936] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1587.570512] ? vma_gap_callbacks_rotate+0xae/0x290 [ 1587.571066] ? vma_gap_callbacks_rotate+0x20f/0x290 [ 1587.571604] dup_mm+0x961/0x1250 [ 1587.572002] ? replace_mm_exe_file+0x490/0x490 [ 1587.572174] loop1: detected capacity change from 0 to 256 [ 1587.572493] ? __raw_spin_lock_init+0x36/0x110 [ 1587.572517] copy_process+0x384b/0x6cb0 [ 1587.574580] ? __cleanup_sighand+0xb0/0xb0 [ 1587.575039] ? lock_is_held_type+0xd7/0x130 [ 1587.575528] ? find_held_lock+0x2c/0x110 [ 1587.575961] ? kernel_clone+0x2f8/0xa60 [ 1587.576423] kernel_clone+0xe7/0xa60 [ 1587.576832] ? create_io_thread+0xf0/0xf0 [ 1587.577311] ? find_held_lock+0x2c/0x110 [ 1587.577755] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1587.578377] ? populate_seccomp_data+0x214/0x540 [ 1587.578893] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1587.579522] ? __seccomp_filter+0x5ab/0xff0 [ 1587.579990] ? wait_for_completion_io+0x270/0x270 [ 1587.580550] __do_sys_clone+0xc8/0x110 [ 1587.580980] ? __do_sys_vfork+0xd0/0xd0 [ 1587.581458] ? __secure_computing+0xb4/0x290 [ 1587.581944] do_syscall_64+0x3b/0x90 [ 1587.582376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1587.582933] RIP: 0033:0x7f466d7a6b19 [ 1587.583353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.585364] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1587.586220] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1587.586992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1587.587806] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.588580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.589399] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1587.590179] [ 1587.592664] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1587.594524] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1587.604439] loop2: detected capacity change from 0 to 264192 [ 1587.608089] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1587.610585] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:38:44 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0}, 0x58) 02:38:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1000000) [ 1587.647420] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:38:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1587.702688] loop4: detected capacity change from 0 to 256 [ 1587.703952] loop2: detected capacity change from 0 to 264192 02:38:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) [ 1587.714527] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1587.716532] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:38:44 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3, 0x0, 0x0}, 0x58) [ 1587.735255] loop2: detected capacity change from 0 to 264192 02:38:44 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f00000004c0), 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f0000000180)={0x0, 0xfffffffffffffffc, 0x0, 0x0, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/247, 0xf7}]}, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@msize}, {@msize={'msize', 0x3d, 0x6}}, {@posixacl}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@appraise}]}}) write(r2, &(0x7f0000000240)="01", 0x1) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r4, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1587.748215] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1587.785192] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1587.797463] loop1: detected capacity change from 0 to 256 02:38:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1000800) 02:38:44 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 82) 02:38:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x225c17d03, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1587.826240] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1587.847082] loop2: detected capacity change from 0 to 264192 [ 1587.849369] FAULT_INJECTION: forcing a failure. [ 1587.849369] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.849470] loop4: detected capacity change from 0 to 256 [ 1587.850604] CPU: 0 PID: 9040 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1587.852569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1587.853778] Call Trace: [ 1587.854061] [ 1587.854303] dump_stack_lvl+0x8b/0xb3 [ 1587.854728] should_fail.cold+0x5/0xa [ 1587.855149] ? vm_area_dup+0x78/0x290 [ 1587.855566] should_failslab+0x5/0x10 [ 1587.855980] kmem_cache_alloc+0x5b/0x480 [ 1587.856415] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1587.856962] vm_area_dup+0x78/0x290 [ 1587.857368] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1587.857967] ? copy_page_range+0x2cbb/0x47b0 [ 1587.858475] ? vm_area_alloc+0x110/0x110 [ 1587.858926] ? vm_iomap_memory+0x190/0x190 [ 1587.859383] ? up_write+0x148/0x460 [ 1587.859777] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1587.860320] ? __vma_link_rb+0x540/0x700 [ 1587.860772] dup_mm+0x53f/0x1250 [ 1587.861150] ? replace_mm_exe_file+0x490/0x490 [ 1587.861661] ? __raw_spin_lock_init+0x36/0x110 [ 1587.862164] copy_process+0x384b/0x6cb0 [ 1587.862607] ? __cleanup_sighand+0xb0/0xb0 [ 1587.863073] ? lock_is_held_type+0xd7/0x130 [ 1587.863539] ? find_held_lock+0x2c/0x110 [ 1587.863994] ? kernel_clone+0x2f8/0xa60 [ 1587.864436] kernel_clone+0xe7/0xa60 [ 1587.864840] ? create_io_thread+0xf0/0xf0 [ 1587.865305] ? find_held_lock+0x2c/0x110 [ 1587.865759] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1587.866346] ? populate_seccomp_data+0x214/0x540 [ 1587.866879] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1587.867465] ? __seccomp_filter+0x5ab/0xff0 [ 1587.867950] ? wait_for_completion_io+0x270/0x270 [ 1587.868470] __do_sys_clone+0xc8/0x110 [ 1587.868906] ? __do_sys_vfork+0xd0/0xd0 [ 1587.869366] ? __secure_computing+0xb4/0x290 [ 1587.869878] do_syscall_64+0x3b/0x90 [ 1587.870283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1587.870864] RIP: 0033:0x7f466d7a6b19 [ 1587.871269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1587.873337] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1587.874173] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1587.874956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1587.875736] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1587.876520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1587.877312] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1587.878114] [ 1587.889327] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1587.925138] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1588.004549] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 83) 02:39:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:00 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4e0000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:00 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r0, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev, @dev}}}], 0x20}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x29, 0x3, 0xdf, 0xff, 0x20, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8000, 0xb7, 0x844}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev, @dev}}}], 0x20}}], 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @broadcast}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev, @dev}}}], 0x20}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x68, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'!'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'm!:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x48801}, 0x0) mlockall(0x5) mlockall(0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:39:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1000800) 02:39:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2000000) 02:39:00 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0}, 0x58) [ 1603.249244] loop1: detected capacity change from 0 to 256 [ 1603.270508] loop4: detected capacity change from 0 to 256 [ 1603.277108] loop6: detected capacity change from 0 to 256 [ 1603.279085] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.292540] loop2: detected capacity change from 0 to 264192 [ 1603.298556] FAULT_INJECTION: forcing a failure. [ 1603.298556] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.301119] CPU: 0 PID: 9065 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1603.302897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1603.305292] Call Trace: [ 1603.305862] [ 1603.306335] dump_stack_lvl+0x8b/0xb3 [ 1603.307178] should_fail.cold+0x5/0xa [ 1603.307995] ? create_object.isra.0+0x3a/0xa20 [ 1603.308994] should_failslab+0x5/0x10 [ 1603.309808] kmem_cache_alloc+0x5b/0x480 [ 1603.310699] create_object.isra.0+0x3a/0xa20 [ 1603.311651] ? kasan_unpoison+0x23/0x50 [ 1603.312527] kmem_cache_alloc+0x239/0x480 [ 1603.313427] vm_area_dup+0x78/0x290 [ 1603.314261] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1603.315443] ? copy_page_range+0x2cbb/0x47b0 [ 1603.316434] ? vm_area_alloc+0x110/0x110 [ 1603.317324] ? vm_iomap_memory+0x190/0x190 [ 1603.318245] ? up_write+0x148/0x460 [ 1603.319033] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1603.320106] ? __vma_link_rb+0x540/0x700 [ 1603.320995] dup_mm+0x53f/0x1250 [ 1603.321760] ? replace_mm_exe_file+0x490/0x490 [ 1603.322752] ? __raw_spin_lock_init+0x36/0x110 [ 1603.323749] copy_process+0x384b/0x6cb0 [ 1603.324645] ? __cleanup_sighand+0xb0/0xb0 [ 1603.325586] ? lock_is_held_type+0xd7/0x130 [ 1603.326513] ? find_held_lock+0x2c/0x110 [ 1603.327389] ? kernel_clone+0x2f8/0xa60 [ 1603.328253] kernel_clone+0xe7/0xa60 [ 1603.329067] ? create_io_thread+0xf0/0xf0 [ 1603.329974] ? find_held_lock+0x2c/0x110 [ 1603.330853] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 02:39:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3000000) [ 1603.332034] ? populate_seccomp_data+0x214/0x540 [ 1603.333214] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1603.334419] ? __seccomp_filter+0x5ab/0xff0 [ 1603.335336] ? wait_for_completion_io+0x270/0x270 [ 1603.336394] __do_sys_clone+0xc8/0x110 [ 1603.337244] ? __do_sys_vfork+0xd0/0xd0 [ 1603.338145] ? __secure_computing+0xb4/0x290 [ 1603.339103] do_syscall_64+0x3b/0x90 [ 1603.339919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1603.341026] RIP: 0033:0x7f466d7a6b19 [ 1603.341828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1603.345779] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1603.347489] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1603.349021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1603.350555] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1603.352083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1603.353623] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1603.355181] 02:39:00 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x5, 0x0, 0x0}, 0x58) [ 1603.361793] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.365426] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1603.369361] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.372343] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.384875] loop2: detected capacity change from 0 to 264192 [ 1603.406276] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1603.410284] loop4: detected capacity change from 0 to 256 [ 1603.437188] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:00 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000) 02:39:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7ffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:00 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x8, 0x0, 0x0}, 0x58) 02:39:00 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x25) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) close(r4) r5 = memfd_create(&(0x7f0000002e00)='(]#%\x00', 0x1) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r6, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r7, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r8, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r9, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r10 = signalfd4(r0, &(0x7f0000003240)={[0xf2e]}, 0x8, 0xc00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000280)="54fd1a9e65d312cd60ce441c653ded1c25cba3e6f3d1d927805152677629aeec15020c8f252b0ad66364fb566985c203a08bd66619eb3d495c9f9a5096d62de4007a8edb7857ea79047152f7735d7b31ce7b65bdf214d80bcaef6cdfbf67b35a5f95421061f279a9bc7d1ca1594b7ffac10fef8dea2945e00029508374907f763f9ea68dd035b3413688b2ab822ef6daf6399cf1f115c057b8ca93303162e01af18d5f67cb2f1dd2505dd21244b6576e940cf7d968398b74b4d2ee209f56bba0211d08e2e335e8831f5679147771a669136a60b24998b9580079761ebb56ad9e13984bca7ecde4", 0xe7}, {&(0x7f0000000380)="a40d3b30b6c54ce503471ecf754d875c82903dba007130720d6fef42ced6319797d64aeef3cc23b2350610d655a87e74246bfbc0ae143a1772f5981ef47bec1411f6d2f2e48bba57a3b79e4e82cbb8f59089078e8cbc6a608e077ee707c4e694055a013da8770aca0f54c7576d8ebc104d71c5", 0x73}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="9f0c69a95cffee31c6e20a3c9ca1f2a6f7e327c751f9a0bc6774372cb6f3b74037c6c1ff2af80494888f607b055b8b4331f221ce28fae6cef5d4ba496ee9c9186b1f9419bb20e0fc71622f3fee583b065017c648dec5b13476b5941f3a6360dad2ab519de1e780da91d2915c35da6867e4f70d716a7a6c7587ad28ab63eabd8d20c46a2f1f9b5a2d1f288ae5cf1125161c2a4c7052bed4316e96bc22d36a71b5394d701d11fb7315e1e33df494dc94ccd01d1f756a620fd29b17ab636d0635cce8489e4b64d7d219c5d07cb3", 0xcc}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000400)="42b038c110106f1f3b2821b92da9f68f41ec326a7149979efb0009e4bbdc960ed9dcbfab7521917d8041c6d5a4571d13b02d575128f3e2fe1adf80a12a9d4e53fa2020b03054e051857ac4772416a6", 0x4f}, {&(0x7f00000025c0)="24a532e1b260c98ce44c06254fd766ffd32907ea9fa09e3e7efc09df18bbe5076a1c5f62746b15bfe49d4d013e6663ce7270982b496692fbdc821ae7c03ebd95da9481a11d5b88251fdae14a04842716610986095c66b813c9fcb17b81d8f9bcbc951506e445adad38a0c3c07d4c5bc49dd9802800a80af4cdf562fb0d101bd55c55d8f69783060bd02b723c0d8478549e5d033847178c84c213675c92e8836c46981faabb4e815a65d5d33dd1fa6c233b21ce79acfa5f4d1ba96323e5dcd0625b000c8052891a9c6ae54a14aea4106dec561117d1a3a529770dd9b8ef90e5d5f07d39098fd800c0aa21badc79a0c0f317847caaf4e57ea8", 0xf8}], 0x7, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x20, 0x10}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002800)="f5ec1dc5d3910c00e92dd9be4eaa89d57a95fd26c35ed0d052fd8c237945a0e31d908f9497354a74bed1763244b028e35a08c6315a971e3bc6d49bb348da6c095e733ef81c77361a06028d2571cba3de82a15e3594180dda73a71f2d012baabad4fd89f6d979026e5bcce8eb25d3bab9daf5b79170059b113673ae424a61db1c39fcf8c50f4a7afd95f7b2d4943f", 0x8e}, {&(0x7f00000028c0)="f5d75b0d096502b9110dfac874c386a193aae0133fd8065f005ea4eb3047538692f3b4753547e95ab08dbda131f8477c5fe422804761a07e7a672e5c45815fc59cd55b4b0f5c0b3d5e4917", 0x4b}, {&(0x7f0000002940)="f18612a8fb35d4bb4fef8976660545543a3ad2d3696746e395254bb521360f43802d3d9cd0a3417267f476cfd5feeda5bcb0866a9e069966b157074089eba6fcb2c95d9417054400fb6ea05086449af5d038fee1140e5cad6f8a6533992b69565bc40c698fbe3fe4246116ab01b31b0374f3fe14dc379b733ffa1fbd722ddbe70241f60d73f578b55adc", 0x8a}, {&(0x7f0000002a00)="fb749b42e51d641cf2b5fb1d561c0ba580ff683c5af85040b690df7d5c3bf7d558ab6a61259662b1d8d8462b7817cfac9050d5b66f303a850945aa28c3375e69bf654d43aea13bb4d5e0343b026c117979488520491e15fac04660ba26673406113f8ffb7fc37670a6435ac8fd1063ea9ba3dea00980ea56b6b0e42f480f58b53b1e44", 0x83}, {&(0x7f0000002ac0)="0d0849507d1f73d56647c9614560bb8d5bed05d22c2eaad3efc68e22665597ffe141fa1a4f4b20e306b4aaee6bdfc53f5e6a5e", 0x33}, {&(0x7f0000002b00)="8dd1a8007c032a795cbe4212bf964b3b2291f55d196ec45884653e053e76d801", 0x20}, {&(0x7f0000002b40)="1173394efd589aafa01c6a56c4e55d37dafcfbaaf86110c3e86d449b5d6cd3de0c1db7b162973f1dd0d2c549085768d487c89c57b9d274b1fb523d29baeecd4e5056a9e3c344202aaad7d4cba551f7ee3fafc5b4c9d5638e7f280ff34d2e053d4177332f5858ce66ce9d16201dcfe3645f95691f21403898152dd74f9008ea57364d3401601500af86ff5b58962ed4aa7e67ec5cc8f8788886ba2041f0c0b0e4f72a3d0d2996e1dcf8601bb39e4156", 0xaf}, {&(0x7f0000002c00)="fea5e5ed151320472257dc1fd179527711b4ccf2af42d1224dbb86de379090f7876ae2b57c2161885b", 0x29}, {&(0x7f0000002c40)="881263fa2c4d307b9b9baa79babcf87ed6e88b2307f5b18b05b978e77be63ac498f8faa26ea9ff2a57cea54c220cfe4d4a8ce521b7b97c3bf46a53e18ed14b3ab53336c8a1b75a7fcbaeca81d4f5f265ad5cc9b219697bc02b572315d2c0b7a9a8ef1821be6c90b7b489c058ffacb420226779b9ad04a8d0adb0e8eabcf92dbcfdf9a25bb339a7c7ea40c51a9c4fed6dec786a1c5f36704e65415b475371fccedd6660d430ac053fa5548aca29f4a5ac1390d836b5705c5965406517dfd9b5d126aa0329d24e", 0xc6}], 0x9, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x40081}}, {{&(0x7f0000002e80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002f00)="2a72ad06d8cd57b166f1515b5eea0508d78c24aa676160e4980d02c9659a590f2bdfc15be8ce648c8644d3787850b6d13c111b08870d507b1c36656d30daf22e4069de2433807d9ade350c7b3df582c40dadd9cddd93c639023d16ba600de2499e060987e617f1f5f5bac8373001411fcf33dbb308ab5d427f4dcc534180de8af3d7f59d05ac9ab88bd2ae09b6fabbc04bf89522cec1cdb06c361420915bc965a3642ffc2cea7f79f1a0a6c7f4e4e373fa64e7811978b47c8310183ae2852aadc06659c8de9b24e6edda5370524e7bbf44d0d4a877584c4bc09f04fc5e", 0xdd}, {&(0x7f0000003000)="3afe5532a698828c203ef7c0500c6544a16798279c5e46fe9a8fa95e701936b69791a58f2c4f7b622eb2a7e9e7d4e468c1229dea130263388d5f516d0efc2b5c11f7b6224f4d4e76f8b954242141ba2b897d57d30fb4c113ce57", 0x5a}, {&(0x7f0000003080)="fe2fee62cd08a27369c2cd9d7ebec028fea07a41a4640a7264fc183589afc737367459ad98d0e0c28e1fcbf37b2492a09bd27b42", 0x34}, {&(0x7f00000030c0)="30e54148c49b06ea432e4f8cacb554926c84e652add22f5b248cbb93be299f97555f2b6667555483fea95f681d15abaf8b4981f9078f4ce6e149057254bc86ed68bca13302b1f8a673a80406da741d9585c249612d6cfad533104127a663c10d0286630e26b2f4efbf40bb6737afed33dee8a7b28d1ce7", 0x77}, {&(0x7f0000003140)="f6f1c19ad286deabd727e1aa0921b5f6b979d5799d4e97f9b7ac3f00a6883726eb5c609abb77ddafaed68d8f10a836a1db73c5366a9dde905c349f739d5cb185d2ca1cda7d2d64a4d5773fe1bbd0827b8beb767c1854040d9fcabd", 0x5b}], 0x5, &(0x7f0000003280)=[@rights={{0x28, 0x1, 0x1, [r6, r7, r0, r8, r9, r10]}}], 0x28, 0x20000800}}], 0x3, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x4000000) [ 1603.521357] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.536631] loop2: detected capacity change from 0 to 264192 [ 1603.536864] loop6: detected capacity change from 0 to 256 [ 1603.551375] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1603.555275] loop4: detected capacity change from 0 to 256 [ 1603.563306] loop2: detected capacity change from 0 to 264192 [ 1603.569429] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.572068] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1603.574409] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.626033] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1603.681243] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:14 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10, 0x0, 0x0}, 0x58) 02:39:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x5000000) 02:39:14 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:14 executing program 5: mlockall(0x9) mlockall(0x1) mlockall(0x1) mlockall(0x1) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0xc000)=nil, 0x3000) 02:39:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 84) 02:39:14 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3000000) 02:39:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000001c0)='./file1\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r0, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000180)=0x80, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1617.652377] loop4: detected capacity change from 0 to 256 [ 1617.657814] loop2: detected capacity change from 0 to 264192 [ 1617.661807] FAULT_INJECTION: forcing a failure. [ 1617.661807] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.664248] CPU: 0 PID: 9109 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1617.666030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1617.668454] Call Trace: [ 1617.668999] [ 1617.669476] dump_stack_lvl+0x8b/0xb3 [ 1617.670333] should_fail.cold+0x5/0xa [ 1617.671165] ? vm_area_dup+0x78/0x290 [ 1617.671997] should_failslab+0x5/0x10 [ 1617.672812] kmem_cache_alloc+0x5b/0x480 [ 1617.673708] vm_area_dup+0x78/0x290 [ 1617.674507] ? lock_release+0x3b2/0x6f0 [ 1617.675366] ? avc_has_perm_noaudit+0x1c8/0x390 [ 1617.676368] ? lock_downgrade+0x6d0/0x6d0 [ 1617.677261] ? copy_page_range+0x2cbb/0x47b0 [ 1617.678243] ? __sanitizer_cov_trace_cmp2+0x22/0x80 [ 1617.679335] ? avc_has_perm_noaudit+0x1ef/0x390 [ 1617.680335] ? avc_has_extended_perms+0xeb0/0xeb0 [ 1617.681386] ? vm_area_alloc+0x110/0x110 [ 1617.682288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1617.683473] ? selinux_vm_enough_memory+0x10f/0x170 [ 1617.684559] ? selinux_sctp_sk_clone+0x370/0x370 [ 1617.685589] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1617.686790] ? percpu_counter_add_batch+0xb4/0x170 [ 1617.687865] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1617.688931] ? __vm_enough_memory+0x184/0x360 [ 1617.689912] ? security_vm_enough_memory_mm+0x8b/0xc0 [ 1617.691030] dup_mm+0x53f/0x1250 [ 1617.691788] ? replace_mm_exe_file+0x490/0x490 [ 1617.692794] ? __raw_spin_lock_init+0x36/0x110 [ 1617.693802] copy_process+0x384b/0x6cb0 [ 1617.694705] ? __cleanup_sighand+0xb0/0xb0 [ 1617.695634] ? lock_is_held_type+0xd7/0x130 [ 1617.696570] ? find_held_lock+0x2c/0x110 [ 1617.697450] ? kernel_clone+0x2f8/0xa60 [ 1617.698336] kernel_clone+0xe7/0xa60 [ 1617.699158] ? create_io_thread+0xf0/0xf0 [ 1617.700066] ? find_held_lock+0x2c/0x110 [ 1617.700949] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1617.702141] ? populate_seccomp_data+0x214/0x540 [ 1617.703165] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1617.704347] ? __seccomp_filter+0x5ab/0xff0 [ 1617.705269] ? wait_for_completion_io+0x270/0x270 [ 1617.706329] __do_sys_clone+0xc8/0x110 [ 1617.707175] ? __do_sys_vfork+0xd0/0xd0 [ 1617.708067] ? __secure_computing+0xb4/0x290 [ 1617.709027] do_syscall_64+0x3b/0x90 [ 1617.709858] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.710964] RIP: 0033:0x7f466d7a6b19 [ 1617.711757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.715720] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1617.717345] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1617.718882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1617.720406] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.721943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.723467] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1617.725021] [ 1617.750409] loop6: detected capacity change from 0 to 256 [ 1617.759235] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1617.762905] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1617.768428] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1617.792539] loop2: detected capacity change from 0 to 264192 [ 1617.828745] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1617.831691] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:39:14 executing program 6: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x4) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:39:14 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x11, 0x0, 0x0}, 0x58) 02:39:14 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:14 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)="42d5", 0x2}, {&(0x7f0000000280)="90a9f32152df11e240238b5c3d9b74e6e3f3716f4d498d3f365fd714e2dbaab244c68c66c3155180c56e0ac2660acd2dab70b215d14e6fd74b8f3622d2116e684f71e00a5a86f414afe2e678973efd75b6c273373e8c6c51541df4b7023ee592970fb596e31c3957ac2f28e090b230c8f2bb8b142acfd1e0902e0a91979868cc6222", 0x82}, {&(0x7f0000000840)="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", 0x1000}], 0x3, 0x37, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r3, &(0x7f0000000340)=[{&(0x7f00000004c0)="9d4d7f36836bf4efbd9e8513caf1070965105805fdac6597ad1ce621e1dff5b3c6622daf073e71f9fed301461dde26e6782489f6a294d1a2ee1f25e03a0c525324bb5132aa6bfa3552e23077000000000000830d8771a83279c08f96ff6b688f69fa2a99d82a82853c8497c0c9f660e35432e0319b431d0637d5ffcb93cbd267c30b40815533b5ddffe7db7e333455374bc3de7e88ce092de04e07a75af28f932f10acc77f757028a33ce87ee7e836b6c1e129eb5ad4a25dfffad5c6cdde32a4ec49151b75a27dcff4e1e5", 0xcb}], 0x1, 0x800, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="621c6d6689254300080120000400004000f800002000400003000000000000010000000000", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC, @ANYBLOB="a24434e35360a64c11317373d6b94cf14a602a9fdbdc9355047bf70e5b51efe8d066fb5187370b6b5c77df86ad4f70010100005c1c3247fc8486e364289aa37f9bbcec0dc3c8b75720fcb0998a02b98be2195ac81c144d0100010000000000f349ea2b1dc1236155e16b90ab492e694d5a86d59e5fbeb5b8d986bf57838d2485f7d96f7c0e1e9683b8782195696ba12fe41ecb29199e9d442436dbf1a975d3a083f5ad19f850968106e8e882a6fa675c3ed13b4ede150f9d493f523b26d0c249c9b01a4e57173d7ad994de3ae7f1f681945d00000000000000", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRESDEC, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES64=0x0, @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:sound_device_t:s0\x00', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)="01", 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x585e02, 0x0) close_range(r6, r2, 0x0) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1617.889295] audit: type=1401 audit(1643942354.843:99): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 [ 1617.910914] audit: type=1401 audit(1643942354.864:100): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:sound_device_t:s0 02:39:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x6000000) 02:39:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 85) [ 1617.931495] loop4: detected capacity change from 0 to 256 [ 1617.940513] FAULT_INJECTION: forcing a failure. [ 1617.940513] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1617.941784] CPU: 1 PID: 9135 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1617.942628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1617.943812] Call Trace: [ 1617.944081] [ 1617.944319] dump_stack_lvl+0x8b/0xb3 [ 1617.944744] should_fail.cold+0x5/0xa [ 1617.945150] prepare_alloc_pages+0x17b/0x500 [ 1617.945621] __alloc_pages+0x131/0x4e0 [ 1617.946054] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1617.946693] ? lock_is_held_type+0xd7/0x130 [ 1617.947154] ? find_held_lock+0x2c/0x110 [ 1617.947593] alloc_pages+0x1a0/0x2f0 [ 1617.947997] pte_alloc_one+0x16/0x1f0 [ 1617.948414] __pte_alloc+0x69/0x200 [ 1617.948799] ? pmd_install+0x250/0x250 [ 1617.949218] ? do_raw_spin_unlock+0x4f/0x210 [ 1617.949678] ? _raw_spin_unlock+0x24/0x40 [ 1617.950127] copy_page_range+0x1b84/0x47b0 [ 1617.950566] ? lockdep_hardirqs_on+0x79/0x100 [ 1617.951067] ? vm_iomap_memory+0x190/0x190 [ 1617.951507] ? up_write+0x148/0x460 [ 1617.951898] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1617.952425] ? __vma_link_rb+0x540/0x700 [ 1617.952863] dup_mm+0x961/0x1250 [ 1617.953235] ? replace_mm_exe_file+0x490/0x490 [ 1617.953724] ? __raw_spin_lock_init+0x36/0x110 [ 1617.954206] copy_process+0x384b/0x6cb0 [ 1617.954651] ? __cleanup_sighand+0xb0/0xb0 [ 1617.955103] ? lock_is_held_type+0xd7/0x130 [ 1617.955556] ? find_held_lock+0x2c/0x110 [ 1617.955980] ? kernel_clone+0x2f8/0xa60 [ 1617.956407] kernel_clone+0xe7/0xa60 [ 1617.956799] ? create_io_thread+0xf0/0xf0 [ 1617.957238] ? find_held_lock+0x2c/0x110 [ 1617.957667] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1617.959084] ? populate_seccomp_data+0x214/0x540 [ 1617.960237] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1617.961573] ? __seccomp_filter+0x5ab/0xff0 [ 1617.962622] ? wait_for_completion_io+0x270/0x270 [ 1617.963800] __do_sys_clone+0xc8/0x110 [ 1617.964760] ? __do_sys_vfork+0xd0/0xd0 [ 1617.965795] ? __secure_computing+0xb4/0x290 [ 1617.966878] do_syscall_64+0x3b/0x90 [ 1617.967646] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1617.968687] RIP: 0033:0x7f466d7a6b19 [ 1617.969438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1617.973085] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1617.974636] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1617.976058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1617.977487] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1617.978928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1617.980354] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1617.981820] [ 1617.997302] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:14 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x21, 0x0, 0x0}, 0x58) 02:39:14 executing program 1: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x84200, 0x0) pwrite64(r1, &(0x7f0000000280)="cfc7d031437cbcc949adb583d86a678153228d5bc4e6417bb3decf935bddc870c30631ef0c03c297abe79fa99ebb27e5509058475af6081c61b5976d6a534c77170ec891d4ddef0a090233801d54121d9c63123ff664cb7b27535768d11ff040f3e1dce131fa771d6011b9f7fa222d8412e9e04919374fbc60a27f56b9bc993febabec5ff78878bb4cb89f4dec22c555453b737190e65cd5de6266824abc96", 0x9f, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/mcfilter6\x00') sendfile(r3, r2, &(0x7f0000000500)=0x7fff, 0xffffffffffffffff) r4 = getpid() chdir(&(0x7f00000000c0)='./file1\x00') process_vm_writev(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4108, 0x100c}, {&(0x7f0000000440)=""/22, 0x16}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/201, 0xc9}, {&(0x7f00000024c0)=""/223, 0xdf}], 0x5, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='net/kcm\x00') close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7000000) [ 1618.087308] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1618.187593] loop4: detected capacity change from 0 to 256 [ 1618.220269] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1618.327344] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:28 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x12c, 0x0, 0x0}, 0x58) 02:39:28 executing program 6: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x4) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:39:28 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 02:39:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:29 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000000280)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0]) chdir(&(0x7f0000000140)='./file0\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat(r3, &(0x7f0000000300)='./file0\x00', 0x100) openat(r2, &(0x7f0000000240)='./file0\x00', 0x80000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r4) syz_open_procfs(0x0, &(0x7f0000000040)='attr/prev\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)="de64bb1664aa62652e4ce6b36921be3cc289a4c840a6ebf2a951cc4c11528ff015695bc6b0bed301545dcba9b3030d34c6b12025e11941ee193c74bf7b46136a54333cd6a7d2fa282245596197f5bacb56706e355d8adcadadd17b01dbe8e938822edd34f9b7c20ab290225f4c0b", 0x6e) r6 = pidfd_getfd(r5, r1, 0x0) write(r6, &(0x7f0000000080)="01bff3d6f7117611e04ad27c8f043c8e914f6e343f296710550c5dc6c70a934c70fce3638ace6c3c20b847857039bf1652ad6e5eddf6927e", 0x38) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '!:+\''}, {}, {0x20, '[[,'}, {}], 0xa, "370dda4dcba3ff7802269c76c24d8e258eeb1c79fe94044801ab0b8adc054c88a33fe20afc7b95053f491d53c9db1066d492ec4a7e15fc8aba04cd1c3e5d3cd622725601d2582100c47366841756d396a3af"}, 0x68) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:29 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 86) 02:39:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf000000) [ 1632.075522] FAULT_INJECTION: forcing a failure. [ 1632.075522] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.076817] CPU: 0 PID: 9171 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1632.077689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1632.078938] Call Trace: [ 1632.079231] [ 1632.079473] dump_stack_lvl+0x8b/0xb3 [ 1632.079896] should_fail.cold+0x5/0xa [ 1632.080329] ? anon_vma_clone+0xdc/0x580 [ 1632.080778] should_failslab+0x5/0x10 [ 1632.081195] kmem_cache_alloc+0x5b/0x480 [ 1632.081638] anon_vma_clone+0xdc/0x580 [ 1632.082098] anon_vma_fork+0x82/0x6a0 [ 1632.082517] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1632.083062] ? __vm_enough_memory+0x184/0x360 [ 1632.083554] dup_mm+0x91b/0x1250 [ 1632.083948] ? replace_mm_exe_file+0x490/0x490 [ 1632.084456] ? __raw_spin_lock_init+0x36/0x110 [ 1632.084970] copy_process+0x384b/0x6cb0 [ 1632.085436] ? __cleanup_sighand+0xb0/0xb0 [ 1632.085926] ? lock_is_held_type+0xd7/0x130 [ 1632.086417] ? find_held_lock+0x2c/0x110 [ 1632.086584] loop2: detected capacity change from 0 to 264192 [ 1632.086876] ? kernel_clone+0x2f8/0xa60 [ 1632.088175] kernel_clone+0xe7/0xa60 [ 1632.088594] ? create_io_thread+0xf0/0xf0 [ 1632.089068] ? find_held_lock+0x2c/0x110 [ 1632.089521] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1632.090155] ? populate_seccomp_data+0x214/0x540 [ 1632.090680] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1632.091302] ? __seccomp_filter+0x5ab/0xff0 [ 1632.091787] ? wait_for_completion_io+0x270/0x270 [ 1632.092345] __do_sys_clone+0xc8/0x110 [ 1632.092778] ? __do_sys_vfork+0xd0/0xd0 [ 1632.093244] ? __secure_computing+0xb4/0x290 [ 1632.093730] do_syscall_64+0x3b/0x90 [ 1632.094166] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1632.094737] RIP: 0033:0x7f466d7a6b19 [ 1632.095161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.097196] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1632.098052] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1632.098835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1632.099597] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.100375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1632.101131] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1632.101931] [ 1632.102596] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1632.105723] loop4: detected capacity change from 0 to 256 [ 1632.118358] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:29 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1c6, 0x0, 0x0}, 0x58) [ 1632.130611] loop2: detected capacity change from 0 to 264192 [ 1632.143452] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:39:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xfffffff) [ 1632.158829] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:29 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x300, 0x0, 0x0}, 0x58) [ 1632.219366] loop4: detected capacity change from 0 to 256 02:39:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1632.239577] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:29 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10204, 0x90) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1632.276290] loop2: detected capacity change from 0 to 264192 [ 1632.292457] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1632.308126] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:41 executing program 5: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) [ 1644.570840] loop4: detected capacity change from 0 to 256 [ 1644.579860] loop2: detected capacity change from 0 to 264192 02:39:41 executing program 6: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x4) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:39:41 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMRESET(r0, 0x5312) 02:39:41 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 87) 02:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x13000000) 02:39:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) bind$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x37dc12502000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:41 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x500, 0x0, 0x0}, 0x58) [ 1644.594043] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1644.595687] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1644.605774] loop2: detected capacity change from 0 to 264192 [ 1644.617963] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1644.630275] FAULT_INJECTION: forcing a failure. [ 1644.630275] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.632736] CPU: 0 PID: 9226 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1644.634497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1644.636886] Call Trace: [ 1644.637432] [ 1644.637908] dump_stack_lvl+0x8b/0xb3 [ 1644.638748] should_fail.cold+0x5/0xa [ 1644.639567] ? lock_downgrade+0x6d0/0x6d0 [ 1644.640454] ? create_object.isra.0+0x3a/0xa20 [ 1644.641449] should_failslab+0x5/0x10 [ 1644.642287] kmem_cache_alloc+0x5b/0x480 [ 1644.643174] create_object.isra.0+0x3a/0xa20 [ 1644.644111] ? kasan_unpoison+0x23/0x50 [ 1644.644978] kmem_cache_alloc+0x239/0x480 [ 1644.645869] anon_vma_clone+0xdc/0x580 [ 1644.646749] anon_vma_fork+0x82/0x6a0 [ 1644.647594] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1644.648659] ? __vm_enough_memory+0x184/0x360 02:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f000000) [ 1644.649621] dup_mm+0x91b/0x1250 [ 1644.650532] ? replace_mm_exe_file+0x490/0x490 [ 1644.651513] ? __raw_spin_lock_init+0x36/0x110 [ 1644.652494] copy_process+0x384b/0x6cb0 [ 1644.653381] ? __cleanup_sighand+0xb0/0xb0 [ 1644.654330] ? lock_is_held_type+0xd7/0x130 [ 1644.655194] ? find_held_lock+0x2c/0x110 [ 1644.656007] ? kernel_clone+0x2f8/0xa60 [ 1644.656802] kernel_clone+0xe7/0xa60 [ 1644.657562] ? create_io_thread+0xf0/0xf0 [ 1644.658414] ? find_held_lock+0x2c/0x110 [ 1644.659227] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1644.660318] ? populate_seccomp_data+0x214/0x540 [ 1644.661267] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1644.662594] ? __seccomp_filter+0x5ab/0xff0 [ 1644.663460] ? wait_for_completion_io+0x270/0x270 [ 1644.664631] __do_sys_clone+0xc8/0x110 [ 1644.665424] ? __do_sys_vfork+0xd0/0xd0 [ 1644.666441] ? __secure_computing+0xb4/0x290 [ 1644.667332] do_syscall_64+0x3b/0x90 [ 1644.668236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1644.669278] RIP: 0033:0x7f466d7a6b19 [ 1644.670178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.673834] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1644.675528] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1644.677031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1644.678538] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.680047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1644.681543] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1644.683086] 02:39:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1644.685151] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1644.713704] loop2: detected capacity change from 0 to 264192 [ 1644.729912] loop4: detected capacity change from 0 to 256 02:39:41 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) 02:39:41 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1100, 0x0, 0x0}, 0x58) [ 1644.755589] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1644.765614] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:39:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}, {&(0x7f0000000080)="093ad23e6450457fc971efc1b1399a7acd81f4b20c0136ec42ae12832739deaa0b7d8526c318a8239b6069ee210e933d57e5c3ca44", 0x35, 0x3}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESDEC]) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1f1100, 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) recvfrom$unix(r1, &(0x7f0000000280)=""/248, 0xf8, 0x2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:41 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1fd2, 0x0, 0x0}, 0x58) [ 1644.821548] loop2: detected capacity change from 0 to 264192 [ 1644.836269] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1644.884820] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:41 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) 02:39:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x80040000) [ 1644.955488] loop4: detected capacity change from 0 to 256 [ 1644.969433] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1645.011952] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:54 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2000, 0x0, 0x0}, 0x58) 02:39:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{}, {0x77359400}}) open$dir(&(0x7f0000000040)='./file1\x00', 0x2800, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xa82, 0xc1) readlinkat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/131, 0x83) write(r2, &(0x7f0000000240)="01", 0x1) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000380)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) close(r2) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000340)) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:54 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 88) 02:39:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:54 executing program 1: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) 02:39:54 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) mlockall(0x0) mlockall(0x4) 02:39:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f000000) [ 1657.151749] loop4: detected capacity change from 0 to 256 02:39:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x807f0000) [ 1657.163549] loop2: detected capacity change from 0 to 264192 [ 1657.178294] loop6: detected capacity change from 0 to 256 [ 1657.182997] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1657.187095] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1657.193794] FAULT_INJECTION: forcing a failure. [ 1657.193794] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.194446] loop2: detected capacity change from 0 to 264192 [ 1657.196719] CPU: 0 PID: 9265 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1657.199331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1657.202229] Call Trace: [ 1657.202835] [ 1657.203304] dump_stack_lvl+0x8b/0xb3 [ 1657.204104] should_fail.cold+0x5/0xa [ 1657.204881] ? anon_vma_clone+0xdc/0x580 [ 1657.205741] should_failslab+0x5/0x10 [ 1657.206540] kmem_cache_alloc+0x5b/0x480 [ 1657.207384] anon_vma_clone+0xdc/0x580 [ 1657.208210] anon_vma_fork+0x82/0x6a0 [ 1657.209003] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1657.210018] ? __vm_enough_memory+0x184/0x360 [ 1657.210950] dup_mm+0x91b/0x1250 [ 1657.211663] ? replace_mm_exe_file+0x490/0x490 [ 1657.212591] ? __raw_spin_lock_init+0x36/0x110 [ 1657.213556] copy_process+0x384b/0x6cb0 [ 1657.214428] ? __cleanup_sighand+0xb0/0xb0 [ 1657.215320] ? lock_is_held_type+0xd7/0x130 [ 1657.216208] ? find_held_lock+0x2c/0x110 [ 1657.217059] ? kernel_clone+0x2f8/0xa60 [ 1657.217870] kernel_clone+0xe7/0xa60 [ 1657.218656] ? create_io_thread+0xf0/0xf0 [ 1657.219511] ? find_held_lock+0x2c/0x110 [ 1657.220348] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1657.221476] ? populate_seccomp_data+0x214/0x540 [ 1657.222627] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1657.223779] ? __seccomp_filter+0x5ab/0xff0 [ 1657.224652] ? wait_for_completion_io+0x270/0x270 [ 1657.225657] __do_sys_clone+0xc8/0x110 [ 1657.226567] ? __do_sys_vfork+0xd0/0xd0 [ 1657.227433] ? __secure_computing+0xb4/0x290 [ 1657.228346] do_syscall_64+0x3b/0x90 [ 1657.229121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1657.230165] RIP: 0033:0x7f466d7a6b19 [ 1657.230923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.234654] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1657.236221] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1657.237652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1657.239109] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.240540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.241970] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1657.243460] [ 1657.259674] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1657.279954] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x8cffffff) 02:39:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:54 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2c01, 0x0, 0x0}, 0x58) [ 1657.328721] loop4: detected capacity change from 0 to 256 [ 1657.342249] loop2: detected capacity change from 0 to 264192 02:39:54 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMRESET(r0, 0x5312) [ 1657.345144] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1657.354819] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:39:54 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3f00, 0x0, 0x0}, 0x58) [ 1657.402418] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:39:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe5ffffff) 02:39:54 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r1, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001840)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd=r0, 0x1, 0x2, 0x8, 0xa, 0x1, {0x2, r4}}, 0x5) close(r3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) flock(0xffffffffffffffff, 0x0) process_vm_writev(r5, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/198, 0xc6}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f00000015c0)=""/253, 0xfd}, {&(0x7f0000000440)=""/46, 0x2e}], 0x8, &(0x7f0000001800)=[{&(0x7f0000001740)=""/158, 0x9e}], 0x1, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:39:54 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1657.486059] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:39:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf0020000) 02:40:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1669.645685] FAULT_INJECTION: forcing a failure. [ 1669.645685] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.646957] CPU: 1 PID: 9329 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1669.647840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1669.649029] Call Trace: [ 1669.649306] [ 1669.649542] dump_stack_lvl+0x8b/0xb3 [ 1669.649962] should_fail.cold+0x5/0xa [ 1669.650385] ? lock_downgrade+0x6d0/0x6d0 [ 1669.650847] ? create_object.isra.0+0x3a/0xa20 [ 1669.651340] should_failslab+0x5/0x10 [ 1669.651752] kmem_cache_alloc+0x5b/0x480 [ 1669.652189] create_object.isra.0+0x3a/0xa20 [ 1669.652662] ? kasan_unpoison+0x23/0x50 [ 1669.653097] kmem_cache_alloc+0x239/0x480 [ 1669.653538] anon_vma_clone+0xdc/0x580 [ 1669.653974] anon_vma_fork+0x82/0x6a0 [ 1669.654379] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1669.654942] ? __vm_enough_memory+0x184/0x360 [ 1669.655434] dup_mm+0x91b/0x1250 [ 1669.655812] ? replace_mm_exe_file+0x490/0x490 [ 1669.656314] ? __raw_spin_lock_init+0x36/0x110 [ 1669.656810] copy_process+0x384b/0x6cb0 [ 1669.657269] ? __cleanup_sighand+0xb0/0xb0 [ 1669.657735] ? lock_is_held_type+0xd7/0x130 [ 1669.658210] ? find_held_lock+0x2c/0x110 [ 1669.658656] ? kernel_clone+0x2f8/0xa60 [ 1669.659097] kernel_clone+0xe7/0xa60 [ 1669.659502] ? create_io_thread+0xf0/0xf0 [ 1669.659958] ? find_held_lock+0x2c/0x110 [ 1669.660396] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.660999] ? populate_seccomp_data+0x214/0x540 [ 1669.661505] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1669.662101] ? __seccomp_filter+0x5ab/0xff0 [ 1669.662577] ? wait_for_completion_io+0x270/0x270 [ 1669.663107] __do_sys_clone+0xc8/0x110 [ 1669.663536] ? __do_sys_vfork+0xd0/0xd0 [ 1669.663986] ? __secure_computing+0xb4/0x290 [ 1669.664483] do_syscall_64+0x3b/0x90 [ 1669.664889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.665439] RIP: 0033:0x7f466d7a6b19 [ 1669.665838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.667803] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1669.668629] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1669.669413] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1669.670321] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.671093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.671867] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1669.672653] [ 1669.675154] loop2: detected capacity change from 0 to 264192 [ 1669.675556] loop4: detected capacity change from 0 to 256 02:40:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4000, 0x0, 0x0}, 0x58) 02:40:06 executing program 6: mlockall(0x9) mlockall(0x1) mlockall(0x1) mlockall(0x1) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0xc000)=nil, 0x3000) 02:40:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:40:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf6ffffff) 02:40:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 89) 02:40:06 executing program 5: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x59e3, 0x0, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xc2, 0x2, 0x80, 0x1, 0x3, "a4520346d6a5e787b1aab8eb4e57f423fbfdb8"}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000140)=""/148) io_uring_enter(r4, 0x74fe, 0x1b0d, 0x3, &(0x7f0000000040)={[0x394cffde]}, 0x8) mlockall(0x3) mlockall(0x2) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mlockall(0x1) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x800, 0x7, 0xffffffffd303c43a, 0x6, 0xffffffffffffffff}) shmat(r5, &(0x7f0000ff9000/0x3000)=nil, 0x4000) 02:40:06 executing program 1: mlockall(0x9) mlockall(0x1) mlockall(0x1) mlockall(0x1) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0xc000)=nil, 0x3000) [ 1669.682206] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1669.693625] loop2: detected capacity change from 0 to 264192 [ 1669.698299] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1800000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1669.737574] loop2: detected capacity change from 0 to 264192 [ 1669.747545] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1669.757216] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x60ff, 0x0, 0x0}, 0x58) [ 1669.773814] loop2: detected capacity change from 0 to 264192 [ 1669.792439] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000700)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@version_u}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@version_9p2000}, {@cachetag={'cachetag', 0x3d, '$['}}], [{@appraise_type}]}}) close(r2) r3 = getpid() rt_sigqueueinfo(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffc4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x800) 02:40:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 90) 02:40:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1c00000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1669.867626] FAULT_INJECTION: forcing a failure. [ 1669.867626] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.868940] CPU: 1 PID: 9345 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1669.869813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1669.871045] Call Trace: [ 1669.871316] [ 1669.871551] dump_stack_lvl+0x8b/0xb3 [ 1669.871978] should_fail.cold+0x5/0xa [ 1669.872390] ? lock_downgrade+0x6d0/0x6d0 [ 1669.872843] ? create_object.isra.0+0x3a/0xa20 [ 1669.873332] should_failslab+0x5/0x10 [ 1669.873741] kmem_cache_alloc+0x5b/0x480 [ 1669.874188] create_object.isra.0+0x3a/0xa20 [ 1669.874665] ? kasan_unpoison+0x23/0x50 [ 1669.875094] kmem_cache_alloc+0x239/0x480 [ 1669.875540] anon_vma_clone+0xdc/0x580 [ 1669.875967] anon_vma_fork+0x82/0x6a0 [ 1669.876381] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1669.876915] ? __vm_enough_memory+0x184/0x360 [ 1669.877401] dup_mm+0x91b/0x1250 [ 1669.877784] ? replace_mm_exe_file+0x490/0x490 [ 1669.878290] ? __raw_spin_lock_init+0x36/0x110 [ 1669.878810] copy_process+0x384b/0x6cb0 [ 1669.879264] ? __cleanup_sighand+0xb0/0xb0 [ 1669.879748] ? lock_is_held_type+0xd7/0x130 [ 1669.880217] ? find_held_lock+0x2c/0x110 [ 1669.880662] ? kernel_clone+0x2f8/0xa60 [ 1669.881119] kernel_clone+0xe7/0xa60 [ 1669.881529] ? create_io_thread+0xf0/0xf0 [ 1669.881986] ? find_held_lock+0x2c/0x110 [ 1669.882433] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1669.883049] ? populate_seccomp_data+0x214/0x540 [ 1669.883585] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1669.884185] ? __seccomp_filter+0x5ab/0xff0 [ 1669.884652] ? wait_for_completion_io+0x270/0x270 [ 1669.885186] __do_sys_clone+0xc8/0x110 [ 1669.885615] ? __do_sys_vfork+0xd0/0xd0 [ 1669.886061] ? __secure_computing+0xb4/0x290 [ 1669.886557] do_syscall_64+0x3b/0x90 [ 1669.886969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1669.887529] RIP: 0033:0x7f466d7a6b19 [ 1669.887927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1669.889882] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1669.890726] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1669.891500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1669.892272] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.893036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.893803] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1669.894601] [ 1669.897640] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xc0ff, 0x0, 0x0}, 0x58) [ 1669.911728] 9pnet_virtio: no channels available for device syz 02:40:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xfffff000) [ 1669.951174] loop4: detected capacity change from 0 to 256 [ 1669.961753] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1670.003267] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xffffff0f) 02:40:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7500000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:40:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xc601, 0x0, 0x0}, 0x58) [ 1670.062862] loop4: detected capacity change from 0 to 256 [ 1670.071744] loop2: detected capacity change from 0 to 264192 [ 1670.079263] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1670.090232] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1670.105319] loop2: detected capacity change from 0 to 264192 [ 1670.114195] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1670.139154] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1670.668305] 9pnet_virtio: no channels available for device syz 02:40:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8004000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:40:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:40:20 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x1) 02:40:20 executing program 1: mlockall(0x9) mlockall(0x1) mlockall(0x1) mlockall(0x1) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0xc000)=nil, 0x3000) 02:40:20 executing program 6: mlockall(0x9) mlockall(0x1) mlockall(0x1) mlockall(0x1) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0xc000)=nil, 0x3000) 02:40:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xd21f, 0x0, 0x0}, 0x58) [ 1683.904631] loop4: detected capacity change from 0 to 256 [ 1683.920042] loop2: detected capacity change from 0 to 264192 [ 1683.924100] FAULT_INJECTION: forcing a failure. [ 1683.924100] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.926497] CPU: 0 PID: 9388 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1683.928151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1683.930408] Call Trace: [ 1683.930945] [ 1683.931398] dump_stack_lvl+0x8b/0xb3 [ 1683.932178] should_fail.cold+0x5/0xa [ 1683.932948] ? create_object.isra.0+0x3a/0xa20 [ 1683.933876] should_failslab+0x5/0x10 [ 1683.934636] kmem_cache_alloc+0x5b/0x480 [ 1683.935471] create_object.isra.0+0x3a/0xa20 [ 1683.936361] ? kasan_unpoison+0x23/0x50 [ 1683.937177] kmem_cache_alloc+0x239/0x480 [ 1683.938018] anon_vma_fork+0xed/0x6a0 [ 1683.938812] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1683.939810] ? __vm_enough_memory+0x184/0x360 [ 1683.940715] dup_mm+0x91b/0x1250 [ 1683.941425] ? replace_mm_exe_file+0x490/0x490 [ 1683.942349] ? __raw_spin_lock_init+0x36/0x110 [ 1683.943287] copy_process+0x384b/0x6cb0 [ 1683.944121] ? __cleanup_sighand+0xb0/0xb0 [ 1683.944981] ? lock_is_held_type+0xd7/0x130 [ 1683.945845] ? find_held_lock+0x2c/0x110 [ 1683.946658] ? kernel_clone+0x2f8/0xa60 [ 1683.947490] kernel_clone+0xe7/0xa60 [ 1683.948250] ? create_io_thread+0xf0/0xf0 [ 1683.949093] ? find_held_lock+0x2c/0x110 [ 1683.949908] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1683.951016] ? populate_seccomp_data+0x214/0x540 [ 1683.951966] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1683.953066] ? __seccomp_filter+0x5ab/0xff0 [ 1683.953920] ? wait_for_completion_io+0x270/0x270 [ 1683.954909] __do_sys_clone+0xc8/0x110 [ 1683.955697] ? __do_sys_vfork+0xd0/0xd0 [ 1683.956526] ? __secure_computing+0xb4/0x290 [ 1683.957412] do_syscall_64+0x3b/0x90 [ 1683.958167] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1683.959208] RIP: 0033:0x7f466d7a6b19 [ 1683.959948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.963592] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1683.965103] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1683.966517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1683.967941] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.969357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1683.970784] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1683.972222] [ 1683.977148] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1683.997040] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xffffff8c) 02:40:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 91) 02:40:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x20010, 0x0, 0x0}, 0x58) [ 1684.022504] loop2: detected capacity change from 0 to 264192 02:40:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xffffffe5) [ 1684.040718] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1684.052992] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) pwrite64(r2, &(0x7f0000000040)="08ddff4fd0f0b30f1b13fe25aa1aead583f04fbe429d28462a8343878e60b9e2942da4adee8e3f604ecc946da649ffa0e3dbdea2e6bcdfd90e904fb5846f0443d896c341569db6add2dac8472d6d663d532712c629a5642d868be2c933abb2e8171fb57a8336d64428b831422837b28534ee36fb2b6eb2c07bbda91395d60e", 0x7f, 0x5) [ 1684.095147] loop4: detected capacity change from 0 to 256 [ 1684.109311] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1684.176117] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1684.183227] loop2: detected capacity change from 0 to 264192 [ 1684.203056] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1684.221738] loop2: detected capacity change from 0 to 264192 [ 1684.247084] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3ffff, 0x0, 0x0}, 0x58) 02:40:38 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x59e3, 0x0, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xc2, 0x2, 0x80, 0x1, 0x3, "a4520346d6a5e787b1aab8eb4e57f423fbfdb8"}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000140)=""/148) io_uring_enter(r4, 0x74fe, 0x1b0d, 0x3, &(0x7f0000000040)={[0x394cffde]}, 0x8) mlockall(0x3) mlockall(0x2) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mlockall(0x1) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x800, 0x7, 0xffffffffd303c43a, 0x6, 0xffffffffffffffff}) shmat(r5, &(0x7f0000ff9000/0x3000)=nil, 0x4000) 02:40:38 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x5) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x3) mlockall(0x1) mlockall(0x3) mlockall(0x1) 02:40:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:40:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xfffffff6) 02:40:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r1, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect(r1, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x0, 0x4}, 0x80) syz_open_dev$sg(&(0x7f0000000380), 0xfff, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8402, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x60) close(r2) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='rootfs\x00', 0x8, &(0x7f0000000340)='^\x00') execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:40:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 92) 02:40:38 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x59e3, 0x0, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xc2, 0x2, 0x80, 0x1, 0x3, "a4520346d6a5e787b1aab8eb4e57f423fbfdb8"}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000140)=""/148) io_uring_enter(r4, 0x74fe, 0x1b0d, 0x3, &(0x7f0000000040)={[0x394cffde]}, 0x8) mlockall(0x3) mlockall(0x2) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mlockall(0x1) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x800, 0x7, 0xffffffffd303c43a, 0x6, 0xffffffffffffffff}) shmat(r5, &(0x7f0000ff9000/0x3000)=nil, 0x4000) [ 1701.249748] loop2: detected capacity change from 0 to 264192 [ 1701.278078] FAULT_INJECTION: forcing a failure. [ 1701.278078] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.279626] CPU: 0 PID: 9431 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1701.280685] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1701.281036] loop4: detected capacity change from 0 to 256 [ 1701.282158] Call Trace: [ 1701.282167] [ 1701.282173] dump_stack_lvl+0x8b/0xb3 [ 1701.282204] should_fail.cold+0x5/0xa [ 1701.284823] ? anon_vma_fork+0x1de/0x6a0 [ 1701.285359] should_failslab+0x5/0x10 [ 1701.285857] kmem_cache_alloc+0x5b/0x480 [ 1701.286400] anon_vma_fork+0x1de/0x6a0 [ 1701.286923] dup_mm+0x91b/0x1250 [ 1701.287405] ? replace_mm_exe_file+0x490/0x490 [ 1701.288012] ? __raw_spin_lock_init+0x36/0x110 [ 1701.288617] copy_process+0x384b/0x6cb0 [ 1701.289162] ? __cleanup_sighand+0xb0/0xb0 [ 1701.289723] ? lock_is_held_type+0xd7/0x130 [ 1701.290288] ? find_held_lock+0x2c/0x110 [ 1701.290817] ? kernel_clone+0x2f8/0xa60 [ 1701.291358] kernel_clone+0xe7/0xa60 [ 1701.291854] ? create_io_thread+0xf0/0xf0 [ 1701.292399] ? find_held_lock+0x2c/0x110 [ 1701.292931] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1701.293651] ? populate_seccomp_data+0x214/0x540 [ 1701.294167] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1701.294888] ? __seccomp_filter+0x5ab/0xff0 [ 1701.295462] ? wait_for_completion_io+0x270/0x270 [ 1701.296101] __do_sys_clone+0xc8/0x110 [ 1701.296607] ? __do_sys_vfork+0xd0/0xd0 [ 1701.297148] ? __secure_computing+0xb4/0x290 [ 1701.297726] do_syscall_64+0x3b/0x90 [ 1701.298224] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1701.298895] RIP: 0033:0x7f466d7a6b19 [ 1701.299396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.301786] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1701.302770] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1701.303700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1701.304621] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.305423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.306184] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1701.306976] 02:40:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x40000, 0x0, 0x0}, 0x58) [ 1701.341529] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:38 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366892543000801200004006475ad5600002000f97de302d56e6acfa7a8e4e3b769e54000030000000000000001", 0x34}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) openat(r4, &(0x7f0000000340)='./file0\x00', 0x801, 0x3) r5 = openat(r3, &(0x7f0000000080)='./file1\x00', 0xfd4f07383ba2df28, 0x11b) close(0xffffffffffffffff) write(r5, &(0x7f0000000240)="01", 0x1) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r6, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r0, r7, &(0x7f0000000040)=0x7ff, 0x1) [ 1701.370477] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1701.417559] loop2: detected capacity change from 0 to 264192 [ 1701.422865] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:38 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1fffff, 0x0, 0x0}, 0x58) 02:40:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xc0ff7f0000) [ 1701.478173] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="0100fb0000000046ff000038a7b900", @ANYRES32=0xffffffffffffffff, @ANYBLOB="3b060000000200002e2f66696c653100"]) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="3f60fc65b78d416c7a433fbd2db3ca510c6969c165a793ae836c6836f89d93a299dc27b96c23e03eef90f8834d145f41413791a2dbc019fe87bfcce814") r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0xc5}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = signalfd(r0, &(0x7f0000000280)={[0x9]}, 0x8) fspick(r4, &(0x7f0000000340)='./file0\x00', 0x0) close(r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r6, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) write(r6, &(0x7f00000003c0)="6f23320e00faffba3e354d20ba7358e97222cbaa5a11bf0000000000000000008a2c5e6d1709000000a8c3fa3c471fa320b4d823aa96d782cd000000402b967f51774d29d67a7b38b954bc43e5ec4dea8ee9454e0238c2773f59d4775f1c222e3c44bc47e65d90aa9c85d3c8256b2b4d383ddd3592fb6cf3f6d8149a27d417da2f7eca516b13e6de74ba3cd42018ebaf816916635fc76c7474", 0x99) close(r5) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r7, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) linkat(r0, &(0x7f0000000040)='./file0\x00', r7, &(0x7f00000001c0)='./file1\x00', 0x1000) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:40:38 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 93) 02:40:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfcfdffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1701.539702] loop2: detected capacity change from 0 to 264192 [ 1701.554516] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1701.587542] FAULT_INJECTION: forcing a failure. [ 1701.587542] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.588721] CPU: 0 PID: 9451 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1701.589536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1701.590733] Call Trace: [ 1701.591042] [ 1701.591276] dump_stack_lvl+0x8b/0xb3 [ 1701.591675] should_fail.cold+0x5/0xa [ 1701.592064] ? create_object.isra.0+0x3a/0xa20 [ 1701.592540] should_failslab+0x5/0x10 [ 1701.592923] kmem_cache_alloc+0x5b/0x480 [ 1701.593346] create_object.isra.0+0x3a/0xa20 [ 1701.593791] ? kasan_unpoison+0x23/0x50 [ 1701.594203] kmem_cache_alloc+0x239/0x480 [ 1701.594623] anon_vma_fork+0x1de/0x6a0 [ 1701.595044] dup_mm+0x91b/0x1250 [ 1701.595402] ? replace_mm_exe_file+0x490/0x490 [ 1701.595867] ? __raw_spin_lock_init+0x36/0x110 [ 1701.596332] copy_process+0x384b/0x6cb0 [ 1701.596750] ? __cleanup_sighand+0xb0/0xb0 [ 1701.597182] ? lock_is_held_type+0xd7/0x130 [ 1701.597644] ? find_held_lock+0x2c/0x110 [ 1701.598081] ? kernel_clone+0x2f8/0xa60 [ 1701.598511] kernel_clone+0xe7/0xa60 [ 1701.598914] ? create_io_thread+0xf0/0xf0 [ 1701.599368] ? find_held_lock+0x2c/0x110 [ 1701.599795] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1701.600375] ? populate_seccomp_data+0x214/0x540 [ 1701.600878] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1701.601464] ? __seccomp_filter+0x5ab/0xff0 [ 1701.601926] ? wait_for_completion_io+0x270/0x270 [ 1701.602447] __do_sys_clone+0xc8/0x110 [ 1701.602873] ? __do_sys_vfork+0xd0/0xd0 [ 1701.603323] ? __secure_computing+0xb4/0x290 [ 1701.603734] loop4: detected capacity change from 0 to 256 [ 1701.603803] do_syscall_64+0x3b/0x90 [ 1701.605339] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1701.605890] RIP: 0033:0x7f466d7a6b19 [ 1701.606286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1701.608268] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1701.609087] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1701.609848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1701.610591] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1701.611347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1701.612099] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1701.612872] 02:40:38 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1701.639185] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1701.767162] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1715.884745] loop4: detected capacity change from 0 to 256 02:40:52 executing program 5: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:40:52 executing program 1: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x59e3, 0x0, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r4, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xc2, 0x2, 0x80, 0x1, 0x3, "a4520346d6a5e787b1aab8eb4e57f423fbfdb8"}) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000140)=""/148) io_uring_enter(r4, 0x74fe, 0x1b0d, 0x3, &(0x7f0000000040)={[0x394cffde]}, 0x8) mlockall(0x3) mlockall(0x2) mlockall(0x0) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) mlockall(0x1) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7, 0x800, 0x7, 0xffffffffd303c43a, 0x6, 0xffffffffffffffff}) shmat(r5, &(0x7f0000ff9000/0x3000)=nil, 0x4000) 02:40:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7f8000000000) 02:40:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x400000, 0x0, 0x0}, 0x58) 02:40:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfeffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:40:52 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 94) 02:40:52 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xc0ff7f0000) 02:40:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:wireless_device_t:s0\x00', 0x27, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1715.895764] loop6: detected capacity change from 0 to 256 [ 1715.901467] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x80ffff, 0x0, 0x0}, 0x58) [ 1715.907171] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1715.909333] FAULT_INJECTION: forcing a failure. [ 1715.909333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1715.910631] CPU: 1 PID: 9475 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1715.911501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1715.912675] Call Trace: [ 1715.912948] [ 1715.913189] dump_stack_lvl+0x8b/0xb3 [ 1715.913603] should_fail.cold+0x5/0xa [ 1715.914016] prepare_alloc_pages+0x17b/0x500 [ 1715.914489] __alloc_pages+0x131/0x4e0 [ 1715.914903] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1715.915557] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1715.916119] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1715.916681] ? lock_is_held_type+0xd7/0x130 [ 1715.917143] alloc_pages+0x1a0/0x2f0 [ 1715.917548] pte_alloc_one+0x16/0x1f0 [ 1715.917962] __pte_alloc+0x69/0x200 [ 1715.918354] ? pmd_install+0x250/0x250 [ 1715.918777] copy_page_range+0x1b84/0x47b0 [ 1715.919259] ? vm_iomap_memory+0x190/0x190 [ 1715.919709] ? up_write+0x148/0x460 [ 1715.920096] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1715.920620] ? __vma_link_rb+0x540/0x700 [ 1715.921056] dup_mm+0x961/0x1250 [ 1715.921429] ? replace_mm_exe_file+0x490/0x490 [ 1715.921918] ? __raw_spin_lock_init+0x36/0x110 [ 1715.922410] copy_process+0x384b/0x6cb0 [ 1715.922851] ? __cleanup_sighand+0xb0/0xb0 [ 1715.923322] ? lock_is_held_type+0xd7/0x130 [ 1715.923785] ? find_held_lock+0x2c/0x110 [ 1715.924216] ? kernel_clone+0x2f8/0xa60 [ 1715.924639] kernel_clone+0xe7/0xa60 [ 1715.925040] ? create_io_thread+0xf0/0xf0 [ 1715.925477] ? find_held_lock+0x2c/0x110 [ 1715.925914] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1715.926596] ? populate_seccomp_data+0x214/0x540 [ 1715.927112] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1715.927703] ? __seccomp_filter+0x5ab/0xff0 [ 1715.928173] ? wait_for_completion_io+0x270/0x270 [ 1715.928690] __do_sys_clone+0xc8/0x110 [ 1715.929105] ? __do_sys_vfork+0xd0/0xd0 [ 1715.929543] ? __secure_computing+0xb4/0x290 [ 1715.930006] do_syscall_64+0x3b/0x90 [ 1715.930405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1715.930944] RIP: 0033:0x7f466d7a6b19 [ 1715.931403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.933334] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1715.934125] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1715.934865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1715.935633] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.936387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.937145] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1715.937914] [ 1715.942464] loop2: detected capacity change from 0 to 264192 02:40:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffc0000000) [ 1715.967573] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:52 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xf00000, 0x0, 0x0}, 0x58) [ 1716.000018] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1716.000357] loop4: detected capacity change from 0 to 256 [ 1716.016802] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1716.022221] loop2: detected capacity change from 0 to 264192 [ 1716.030899] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:40:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x404400, 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1716.099771] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:53 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 95) 02:40:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7f8000000000) [ 1716.147142] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:40:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffffe00000) 02:40:53 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xf0ff1f, 0x0, 0x0}, 0x58) [ 1716.231400] loop6: detected capacity change from 0 to 256 [ 1716.252759] FAULT_INJECTION: forcing a failure. [ 1716.252759] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.255395] CPU: 1 PID: 9500 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1716.257196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1716.259692] Call Trace: [ 1716.260250] [ 1716.260748] dump_stack_lvl+0x8b/0xb3 [ 1716.261611] should_fail.cold+0x5/0xa [ 1716.262466] ? create_object.isra.0+0x3a/0xa20 [ 1716.263508] should_failslab+0x5/0x10 [ 1716.264340] kmem_cache_alloc+0x5b/0x480 [ 1716.265242] create_object.isra.0+0x3a/0xa20 [ 1716.266212] ? kasan_unpoison+0x23/0x50 [ 1716.267100] kmem_cache_alloc+0x239/0x480 [ 1716.268031] anon_vma_fork+0x1de/0x6a0 [ 1716.268906] dup_mm+0x91b/0x1250 [ 1716.269679] ? replace_mm_exe_file+0x490/0x490 [ 1716.270690] ? __raw_spin_lock_init+0x36/0x110 [ 1716.271714] copy_process+0x384b/0x6cb0 [ 1716.272629] ? __cleanup_sighand+0xb0/0xb0 [ 1716.273572] ? lock_is_held_type+0xd7/0x130 [ 1716.274517] ? find_held_lock+0x2c/0x110 [ 1716.275433] ? kernel_clone+0x2f8/0xa60 [ 1716.276287] kernel_clone+0xe7/0xa60 [ 1716.277035] ? create_io_thread+0xf0/0xf0 [ 1716.277857] ? find_held_lock+0x2c/0x110 [ 1716.278662] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1716.279750] ? populate_seccomp_data+0x214/0x540 [ 1716.280684] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1716.281765] ? __seccomp_filter+0x5ab/0xff0 [ 1716.282607] ? wait_for_completion_io+0x270/0x270 [ 1716.283588] __do_sys_clone+0xc8/0x110 [ 1716.284362] ? __do_sys_vfork+0xd0/0xd0 [ 1716.285177] ? __secure_computing+0xb4/0x290 [ 1716.286049] do_syscall_64+0x3b/0x90 [ 1716.286794] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1716.287812] RIP: 0033:0x7f466d7a6b19 [ 1716.288541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1716.292138] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1716.293621] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1716.295012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.296417] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1716.297809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1716.299208] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1716.300627] [ 1716.311573] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1716.416749] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 96) 02:41:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:06 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 02:41:06 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x5) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x3) mlockall(0x1) mlockall(0x3) mlockall(0x1) 02:41:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1000000, 0x0, 0x0}, 0x58) [ 1729.416137] loop4: detected capacity change from 0 to 256 [ 1729.433903] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1729.443723] loop2: detected capacity change from 0 to 264192 [ 1729.445913] FAULT_INJECTION: forcing a failure. [ 1729.445913] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.447376] CPU: 1 PID: 9523 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1729.448422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1729.449867] Call Trace: [ 1729.450154] 02:41:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x7fffffefe000) 02:41:06 executing program 6: mlockall(0x5) mlockall(0x1) mlockall(0x7) mlockall(0x5) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x3) mlockall(0x1) mlockall(0x3) mlockall(0x1) 02:41:06 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x803, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x140, 0x138) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1729.450441] dump_stack_lvl+0x8b/0xb3 [ 1729.451084] should_fail.cold+0x5/0xa [ 1729.451600] ? create_object.isra.0+0x3a/0xa20 [ 1729.452144] should_failslab+0x5/0x10 [ 1729.452519] kmem_cache_alloc+0x5b/0x480 [ 1729.452925] create_object.isra.0+0x3a/0xa20 [ 1729.453358] ? kasan_unpoison+0x23/0x50 [ 1729.453760] kmem_cache_alloc+0x239/0x480 [ 1729.454171] ptlock_alloc+0x1d/0x70 [ 1729.454527] pte_alloc_one+0x68/0x1f0 [ 1729.454915] __pte_alloc+0x69/0x200 [ 1729.455305] ? pmd_install+0x250/0x250 [ 1729.455743] copy_page_range+0x1b84/0x47b0 [ 1729.456223] ? vm_iomap_memory+0x190/0x190 [ 1729.456682] ? up_write+0x148/0x460 [ 1729.457067] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1729.457598] ? __vma_link_rb+0x540/0x700 [ 1729.458031] dup_mm+0x961/0x1250 [ 1729.458404] ? replace_mm_exe_file+0x490/0x490 [ 1729.458884] ? __raw_spin_lock_init+0x36/0x110 [ 1729.459374] copy_process+0x384b/0x6cb0 [ 1729.459790] ? __cleanup_sighand+0xb0/0xb0 [ 1729.460240] ? lock_is_held_type+0xd7/0x130 [ 1729.460699] ? find_held_lock+0x2c/0x110 [ 1729.461130] ? kernel_clone+0x2f8/0xa60 [ 1729.461551] kernel_clone+0xe7/0xa60 [ 1729.461953] ? create_io_thread+0xf0/0xf0 [ 1729.462393] ? find_held_lock+0x2c/0x110 [ 1729.462830] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.463428] ? populate_seccomp_data+0x214/0x540 [ 1729.463924] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1729.464497] ? __seccomp_filter+0x5ab/0xff0 [ 1729.464952] ? wait_for_completion_io+0x270/0x270 [ 1729.465470] __do_sys_clone+0xc8/0x110 [ 1729.465886] ? __do_sys_vfork+0xd0/0xd0 [ 1729.466333] ? __secure_computing+0xb4/0x290 [ 1729.466796] do_syscall_64+0x3b/0x90 [ 1729.467194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1729.467745] RIP: 0033:0x7f466d7a6b19 [ 1729.468145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.470067] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1729.470861] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1729.471631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.472385] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.473132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.473888] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1729.474653] [ 1729.486886] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1729.500592] loop2: detected capacity change from 0 to 264192 [ 1729.510854] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1729.515261] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe0ffff7f0000) 02:41:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff0700, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2000000, 0x0, 0x0}, 0x58) [ 1729.564479] loop4: detected capacity change from 0 to 256 02:41:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2003, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000080)='./file1\x00', 0xa00, 0x5) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1729.612743] loop2: detected capacity change from 0 to 264192 [ 1729.632079] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1729.632684] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1729.651581] loop2: detected capacity change from 0 to 264192 [ 1729.670661] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:41:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 97) [ 1729.738241] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1729.748026] FAULT_INJECTION: forcing a failure. [ 1729.748026] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.749330] CPU: 1 PID: 9550 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1729.750195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1729.751389] Call Trace: [ 1729.751662] [ 1729.751897] dump_stack_lvl+0x8b/0xb3 [ 1729.752308] should_fail.cold+0x5/0xa [ 1729.752710] ? vm_area_dup+0x78/0x290 [ 1729.753116] should_failslab+0x5/0x10 [ 1729.753512] kmem_cache_alloc+0x5b/0x480 [ 1729.753937] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1729.754471] vm_area_dup+0x78/0x290 [ 1729.754866] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1729.755461] ? copy_page_range+0x2cbb/0x47b0 [ 1729.755961] ? vm_area_alloc+0x110/0x110 [ 1729.756402] ? vm_iomap_memory+0x190/0x190 [ 1729.756859] ? up_write+0x148/0x460 [ 1729.757243] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1729.757764] ? __vma_link_rb+0x540/0x700 [ 1729.758205] dup_mm+0x53f/0x1250 [ 1729.758581] ? replace_mm_exe_file+0x490/0x490 [ 1729.759073] ? __raw_spin_lock_init+0x36/0x110 [ 1729.759584] copy_process+0x384b/0x6cb0 [ 1729.760045] ? __cleanup_sighand+0xb0/0xb0 [ 1729.760498] ? lock_is_held_type+0xd7/0x130 [ 1729.760952] ? find_held_lock+0x2c/0x110 [ 1729.761382] ? kernel_clone+0x2f8/0xa60 [ 1729.761809] kernel_clone+0xe7/0xa60 [ 1729.762205] ? create_io_thread+0xf0/0xf0 [ 1729.762653] ? find_held_lock+0x2c/0x110 [ 1729.763095] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.763689] ? populate_seccomp_data+0x214/0x540 [ 1729.764199] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1729.764780] ? __seccomp_filter+0x5ab/0xff0 [ 1729.765234] ? wait_for_completion_io+0x270/0x270 [ 1729.765756] __do_sys_clone+0xc8/0x110 [ 1729.766172] ? __do_sys_vfork+0xd0/0xd0 [ 1729.766616] ? __secure_computing+0xb4/0x290 [ 1729.767082] do_syscall_64+0x3b/0x90 [ 1729.767498] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1729.768047] RIP: 0033:0x7f466d7a6b19 [ 1729.768433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1729.770362] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1729.771156] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1729.771939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.772680] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1729.773426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1729.774176] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1729.774941] 02:41:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3000000, 0x0, 0x0}, 0x58) 02:41:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x10000000000000) [ 1729.863610] loop4: detected capacity change from 0 to 256 [ 1729.864289] loop2: detected capacity change from 0 to 264192 02:41:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400, 0x0, 0x10}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x8, 0x7800, 0x401, 0x80, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x66, 0x0, 0x6, 0x0, 0x0, @local, @multicast2, {[@generic={0x86, 0x6, "873c779e"}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', r3, 0x10, 0x1, 0x200, 0x4, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x66, 0x0, 0x81, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@end, @noop]}}}}}) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1729.890009] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1729.905542] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1729.948266] loop2: detected capacity change from 0 to 264192 [ 1729.966146] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1729.981610] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:41:20 executing program 6: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 02:41:20 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 98) 02:41:20 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) 02:41:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) fchmod(0xffffffffffffffff, 0x20) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:41:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x20000000000000) 02:41:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x4000000, 0x0, 0x0}, 0x58) [ 1743.639187] loop4: detected capacity change from 0 to 256 [ 1743.651554] loop2: detected capacity change from 0 to 264192 02:41:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:20 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000002000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000002000/0x2000)=nil, 0x0) [ 1743.660542] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 1743.669414] FAULT_INJECTION: forcing a failure. [ 1743.669414] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.671702] CPU: 1 PID: 9576 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1743.673307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1743.675500] Call Trace: [ 1743.676020] [ 1743.676454] dump_stack_lvl+0x8b/0xb3 [ 1743.677218] should_fail.cold+0x5/0xa [ 1743.677971] ? create_object.isra.0+0x3a/0xa20 [ 1743.678882] should_failslab+0x5/0x10 [ 1743.679634] kmem_cache_alloc+0x5b/0x480 [ 1743.680455] create_object.isra.0+0x3a/0xa20 [ 1743.681326] ? kasan_unpoison+0x23/0x50 [ 1743.682115] kmem_cache_alloc+0x239/0x480 [ 1743.682935] vm_area_dup+0x78/0x290 [ 1743.683681] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1743.684760] ? copy_page_range+0x2cbb/0x47b0 [ 1743.685661] ? vm_area_alloc+0x110/0x110 [ 1743.686468] ? vm_iomap_memory+0x190/0x190 [ 1743.687302] ? up_write+0x148/0x460 [ 1743.688033] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1743.689006] ? __vma_link_rb+0x540/0x700 [ 1743.689813] dup_mm+0x53f/0x1250 [ 1743.690504] ? replace_mm_exe_file+0x490/0x490 [ 1743.691407] ? __raw_spin_lock_init+0x36/0x110 [ 1743.692336] copy_process+0x384b/0x6cb0 [ 1743.693157] ? __cleanup_sighand+0xb0/0xb0 [ 1743.694000] ? lock_is_held_type+0xd7/0x130 [ 1743.694845] ? find_held_lock+0x2c/0x110 [ 1743.695651] ? kernel_clone+0x2f8/0xa60 [ 1743.696439] kernel_clone+0xe7/0xa60 [ 1743.697185] ? create_io_thread+0xf0/0xf0 [ 1743.698000] ? find_held_lock+0x2c/0x110 [ 1743.698797] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.699881] ? populate_seccomp_data+0x214/0x540 [ 1743.700814] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1743.701892] ? __seccomp_filter+0x5ab/0xff0 [ 1743.702730] ? wait_for_completion_io+0x270/0x270 [ 1743.703715] __do_sys_clone+0xc8/0x110 [ 1743.704486] ? __do_sys_vfork+0xd0/0xd0 [ 1743.705302] ? __secure_computing+0xb4/0x290 [ 1743.706167] do_syscall_64+0x3b/0x90 [ 1743.706904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1743.707922] RIP: 0033:0x7f466d7a6b19 [ 1743.708675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1743.712287] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1743.713762] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1743.715143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.716534] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1743.717923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1743.719307] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1743.720719] [ 1743.742563] loop2: detected capacity change from 0 to 264192 02:41:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x5000000, 0x0, 0x0}, 0x58) 02:41:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe0efffff7f0000) [ 1743.798326] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) 02:41:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080119c88d5529e770900a0400004000f80500000040000300bbc3dde97c728330f0d4741a0308a543fe5141dabf14e595d6185016e8d7a6bf", 0x45}, {0x0, 0x0, 0x8010000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:41:20 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:20 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x8000000, 0x0, 0x0}, 0x58) 02:41:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf0ffffffffffff) 02:41:36 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0xe) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:41:36 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xe0ffff7f0000) 02:41:36 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x6}, {0x0}], 0x0, &(0x7f0000001880)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES64=r0, @ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r3, &(0x7f0000000040)='./file0\x00', 0x40000, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:41:36 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10000000, 0x0, 0x0}, 0x58) 02:41:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2003, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) openat(r0, &(0x7f0000000080)='./file1\x00', 0xa00, 0x5) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:41:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 99) [ 1759.944489] loop1: detected capacity change from 0 to 256 [ 1759.950230] loop2: detected capacity change from 0 to 264192 [ 1759.952471] loop6: detected capacity change from 0 to 256 [ 1759.957816] loop4: detected capacity change from 0 to 256 [ 1759.966334] FAULT_INJECTION: forcing a failure. [ 1759.966334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1759.968847] CPU: 0 PID: 9628 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1759.970600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1759.972964] Call Trace: [ 1759.973484] [ 1759.973933] dump_stack_lvl+0x8b/0xb3 [ 1759.974723] should_fail.cold+0x5/0xa [ 1759.975522] prepare_alloc_pages+0x17b/0x500 [ 1759.976445] __alloc_pages+0x131/0x4e0 [ 1759.977247] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 1759.978465] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1759.979532] ? lock_chain_count+0x20/0x20 [ 1759.980400] ? lock_is_held_type+0xd7/0x130 [ 1759.981357] alloc_pages+0x1a0/0x2f0 [ 1759.982167] pte_alloc_one+0x16/0x1f0 [ 1759.982952] __pte_alloc+0x69/0x200 [ 1759.983702] ? pmd_install+0x250/0x250 [ 1759.984513] copy_page_range+0x1b84/0x47b0 [ 1759.985406] ? lock_release+0x3b2/0x6f0 [ 1759.986234] ? vm_iomap_memory+0x190/0x190 [ 1759.987092] ? down_write+0xde/0x150 [ 1759.987911] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1759.988919] ? __vma_link_rb+0x540/0x700 [ 1759.989769] dup_mm+0x961/0x1250 [ 1759.990490] ? replace_mm_exe_file+0x490/0x490 [ 1759.991437] ? __raw_spin_lock_init+0x36/0x110 [ 1759.992395] copy_process+0x384b/0x6cb0 [ 1759.993282] ? __cleanup_sighand+0xb0/0xb0 [ 1759.994188] ? lock_is_held_type+0xd7/0x130 [ 1759.995072] ? find_held_lock+0x2c/0x110 [ 1759.995931] ? kernel_clone+0x2f8/0xa60 [ 1759.996751] kernel_clone+0xe7/0xa60 [ 1759.997545] ? create_io_thread+0xf0/0xf0 [ 1759.998420] ? find_held_lock+0x2c/0x110 [ 1759.999276] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1760.000427] ? populate_seccomp_data+0x214/0x540 [ 1760.001426] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1760.002577] ? __seccomp_filter+0x5ab/0xff0 [ 1760.003476] ? wait_for_completion_io+0x270/0x270 [ 1760.004521] __do_sys_clone+0xc8/0x110 [ 1760.005347] ? __do_sys_vfork+0xd0/0xd0 [ 1760.006208] ? __secure_computing+0xb4/0x290 [ 1760.007139] do_syscall_64+0x3b/0x90 [ 1760.007936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1760.009018] RIP: 0033:0x7f466d7a6b19 [ 1760.009793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.013630] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1760.015191] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1760.016667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.018113] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.019558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.021037] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1760.022508] [ 1760.038203] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1760.040195] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10000200, 0x0, 0x0}, 0x58) [ 1760.109879] loop2: detected capacity change from 0 to 264192 [ 1760.130522] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1760.132330] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100000000000000) 02:41:37 executing program 6: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:41:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) poll(&(0x7f0000000080)=[{r2, 0x2104}], 0x1, 0x2) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1760.235545] loop4: detected capacity change from 0 to 256 [ 1760.246432] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1760.261864] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x11000000, 0x0, 0x0}, 0x58) 02:41:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:41:37 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 100) 02:41:37 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000004c0)={{r0}, "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"}) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1760.392517] loop2: detected capacity change from 0 to 264192 [ 1760.403058] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x100080000000000) 02:41:37 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x1ffff000, 0x0, 0x0}, 0x58) [ 1760.443806] FAULT_INJECTION: forcing a failure. [ 1760.443806] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.446112] CPU: 0 PID: 9653 Comm: syz-executor.7 Not tainted 5.17.0-rc2-next-20220203 #1 [ 1760.447724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1760.449929] Call Trace: [ 1760.450418] [ 1760.450844] dump_stack_lvl+0x8b/0xb3 [ 1760.451604] should_fail.cold+0x5/0xa [ 1760.452363] ? vm_area_dup+0x78/0x290 [ 1760.453111] should_failslab+0x5/0x10 [ 1760.453827] kmem_cache_alloc+0x5b/0x480 [ 1760.454598] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1760.455573] vm_area_dup+0x78/0x290 [ 1760.456279] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1760.457316] ? copy_page_range+0x2cbb/0x47b0 [ 1760.458188] ? vm_area_alloc+0x110/0x110 [ 1760.458964] ? vm_iomap_memory+0x190/0x190 [ 1760.459763] ? up_write+0x148/0x460 [ 1760.460474] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1760.461411] ? __vma_link_rb+0x540/0x700 [ 1760.462186] dup_mm+0x53f/0x1250 [ 1760.462844] ? replace_mm_exe_file+0x490/0x490 [ 1760.463715] ? __raw_spin_lock_init+0x36/0x110 [ 1760.464596] copy_process+0x384b/0x6cb0 [ 1760.465388] ? __cleanup_sighand+0xb0/0xb0 [ 1760.466189] ? lock_is_held_type+0xd7/0x130 [ 1760.466994] ? find_held_lock+0x2c/0x110 [ 1760.467752] ? kernel_clone+0x2f8/0xa60 [ 1760.468519] kernel_clone+0xe7/0xa60 [ 1760.469224] ? create_io_thread+0xf0/0xf0 [ 1760.470002] ? find_held_lock+0x2c/0x110 [ 1760.470760] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1760.471740] ? populate_seccomp_data+0x214/0x540 [ 1760.472651] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1760.473679] ? __seccomp_filter+0x5ab/0xff0 [ 1760.474478] ? wait_for_completion_io+0x270/0x270 [ 1760.475386] __do_sys_clone+0xc8/0x110 [ 1760.476137] ? __do_sys_vfork+0xd0/0xd0 [ 1760.476904] ? __secure_computing+0xb4/0x290 [ 1760.477728] do_syscall_64+0x3b/0x90 [ 1760.478432] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1760.479350] RIP: 0033:0x7f466d7a6b19 [ 1760.480034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1760.483305] RSP: 002b:00007f466ad1c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1760.484709] RAX: ffffffffffffffda RBX: 00007f466d8b9f60 RCX: 00007f466d7a6b19 [ 1760.485986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1760.487254] RBP: 00007f466ad1c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1760.488579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1760.489904] R13: 00007ffe7325c80f R14: 00007f466ad1c300 R15: 0000000000022000 [ 1760.491278] [ 1760.530820] loop4: detected capacity change from 0 to 256 [ 1760.546603] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1760.558110] loop2: detected capacity change from 0 to 264192 [ 1760.600621] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x0, 0x0, 0x0, 0x0, 0x0) 02:41:51 executing program 5: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0xfffffffffffffe59, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x8, 0x5}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x5, 0x18, "7d18ae269b4f6faa7d5f5dad677f10a6aeb9d3"}) mlockall(0x1) mlockall(0x7) mlockall(0x6) r2 = shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) mlockall(0x0) 02:41:51 executing program 6: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:41:51 executing program 1: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:41:51 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="605d25c2fe2cddde4a5e6837307c1df0875d531c6d6b646f736689a72c4dfc32d8424c00004000f8000020e03f00030000", 0x31}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:41:51 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x20000000, 0x0, 0x0}, 0x58) 02:41:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000000000000) 02:41:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1774.577464] loop2: detected capacity change from 0 to 264192 [ 1774.582880] loop4: detected capacity change from 0 to 256 [ 1774.590873] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:51 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x21000000, 0x0, 0x0}, 0x58) [ 1774.645767] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1774.646872] loop2: detected capacity change from 0 to 264192 02:41:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x300000000000000) 02:41:51 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file1\x00', 0x200080, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='h\x00', &(0x7f0000000180)='@@\x00'], &(0x7f0000000540)=[&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)=',}@\x15^$+\\(]-\'\xbe$)$:\x00', &(0x7f0000000340)='[&://]\x00', &(0x7f0000000380)=',:@]\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='#\x00', &(0x7f00000004c0)='vfat\x00', &(0x7f0000000500)='vfat\x00'], 0x1000) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r3, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8bb) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) execveat(r1, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000600)=',:@]\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='@@\x00', &(0x7f0000000700)='h\x00', &(0x7f0000000740)='!.\xd1:\x00', &(0x7f0000000780)='vfat\x00', &(0x7f00000007c0)=',:@]\x00', &(0x7f0000000840)='\x00'], &(0x7f0000000a40)=[&(0x7f0000000900)='/proc/thread-self/attr/current\x00', &(0x7f0000000940)=',}@\x15^$+\\(]-\'\xbe$)$:\x00', &(0x7f0000000980)=',}@\x15^$+\\(]-\'\xbe$)$:\x00', &(0x7f00000009c0)='%+\x00', &(0x7f0000000a00)='\x00'], 0x400) [ 1774.711344] loop4: detected capacity change from 0 to 256 02:41:51 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2c010000, 0x0, 0x0}, 0x58) 02:41:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x8, 0x0, 0x0, 0x0, 0x0) [ 1774.738278] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1774.813509] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:41:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x400000000000000) [ 1774.857964] loop4: detected capacity change from 0 to 256 [ 1774.870601] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1774.906594] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:06 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x2) shmctl$IPC_RMID(0x0, 0x0) mlockall(0x1) 02:42:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x11, 0x0, 0x0, 0x0, 0x0) 02:42:06 executing program 6: mlockall(0x4) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:42:06 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x80000, &(0x7f0000001a40)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="cdf3c75d3391961bbcdd47a3594227dd21005d25cfe2c84cdb3b12cfbf0c6bb24ec94fe09608efef9bc1a3a3b6dec45677c35553ac8836f6f1b3d56a714cd479b491bd9076cddd791d808298027c39f732e2ea0b5a8023c1fff833ea511785514bbc9f618320e93e98c15ed1cd9d1af6bf97557183aee1a0aee8264c96a46c60e35b918f0dbb12d0900e8529da1e8341a3e8a62f9218a06cfe6903d0fa98fa8a673bff5ff0ebbeea4199b8c2ba9bad5ec241dad5a014d784d670551a76b04760730d9d83985a7e3095a83668073af16a0ff48ee17321cc9ccea67207", @ANYRESOCT]) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200200, 0xb0) write(r3, &(0x7f0000000240)="01", 0x1) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x4000, 0x100) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) openat(r4, &(0x7f0000000080)='./file0\x00', 0x402802, 0x99) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r6, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000001a00)=0x3, 0x4) close(r3) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x40, 0x6, &(0x7f00000018c0)=[{&(0x7f0000000340)="ef814aff55b2e179658ef6dd6d555dab3c0831b97720d60d55bab94cfcaaa161337472875ab4e516eff64dc910483e32f262330a7d6b93456012dd99980bbd68edd416ad98fd5a3813e80c2312b572e9638b0ed6c7564dc7e21a5b6394837be130f3dd9598cc87d97290bfeb7d510a9dc1db38118d600af0a0232e342f9de76a33c08d33c6b66935bbe96d400b9d2e36aecf222de2e8aee056", 0x99, 0x51}, {&(0x7f0000000700)="5df77bc5433f210648e18cb51e8030418b920efd902fe9eff97b15eaed25866683d886d42ee6788bee163e7aba7424767b62ec47a939b8e2ff7272b08c8b6625d8aba3b541b78b51afdae714b649fa284bec67c93c14d13fb26b487b250df6f914ecda359e246207089a2ce7922b10d10a9ae37988d8ccaca168a6574cdf0cb2d7c76bf36b9555e9000c4ca3908a157d0d26fdef7a873af3431cc6c22ab29dd324cc18d3de7fff265ba9b36e7f2d82d6faa9a2ac1950913e086530fc773cf9aac098e65c792efbf0fa2002f2036f2a2c968cd039eb38c8260f4a8e39156b400ebb911cf51ad4bd1272883306f8f2ceb51a9ffa3f654125", 0xf7, 0x3}, {&(0x7f0000000400)="f81fa46998e524b217ab758f033481cfeb67e59cc5693587ffd86a41c5e381f5708e9e149f635be4cc15906c690ee1c63f8b06c31a38cef8c1d1e86b847893d47a43453b984fcf4a", 0x48, 0x1}, {&(0x7f0000000840)="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", 0x1000, 0x1}, {&(0x7f0000001840)="f8b9cc41af094be226bee931726beb63bde3d09c5c276b3b8ae78053eacd618a4e3b", 0x22, 0x4}, {&(0x7f0000001880)="8f24d84e55b3507ce2304b8f895f95ba3d75cc85a05c912e7931", 0x1a, 0xfffffffffffffffd}], 0x800042, &(0x7f0000001980)={[{@fat=@usefree}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee01}}, {@dots}], [{@obj_type}, {@dont_measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}, {@hash}]}) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x3f000000, 0x0, 0x0}, 0x58) [ 1789.600257] loop4: detected capacity change from 0 to 256 [ 1789.615156] loop1: detected capacity change from 0 to 264192 [ 1789.625180] loop2: detected capacity change from 0 to 264192 02:42:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xf, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:42:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x500000000000000) 02:42:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1789.658157] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x40000000, 0x0, 0x0}, 0x58) 02:42:06 executing program 1: fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0xfffffffffffffe59, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x8, 0x5}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r1, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x5, 0x18, "7d18ae269b4f6faa7d5f5dad677f10a6aeb9d3"}) mlockall(0x1) mlockall(0x7) mlockall(0x6) r2 = shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) mlockall(0x0) [ 1789.762370] loop2: detected capacity change from 0 to 264192 [ 1789.814866] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, 0x1) ioctl$SG_IO(r1, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r1, &(0x7f0000000040)='./file1\x00', 0x141000, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) close(r3) ppoll(&(0x7f0000000080), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={[0x27]}, 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:06 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x1100, 0x0, 0x0, 0x0, 0x0) 02:42:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x600000000000000) 02:42:06 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xc6010000, 0x0, 0x0}, 0x58) 02:42:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1b, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1789.984608] loop2: detected capacity change from 0 to 264192 [ 1790.047630] loop2: detected capacity change from 0 to 264192 02:42:21 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="605d25c2fe2cddde4a5e6837307c1df0875d531c6d6b646f736689a72c4dfc32d8424c00004000f8000020e03f00030000", 0x31}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="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"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:21 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x5800) mlockall(0x6) mlockall(0x6) 02:42:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xd21f0000, 0x0, 0x0}, 0x58) 02:42:21 executing program 0: chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x700000000000000) [ 1804.615669] loop2: detected capacity change from 0 to 264192 [ 1804.623174] loop1: detected capacity change from 0 to 256 02:42:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x3f00, 0x0, 0x0, 0x0, 0x0) 02:42:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x27, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:42:21 executing program 6: mlockall(0x4) mlockall(0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) [ 1804.628019] loop4: detected capacity change from 0 to 256 [ 1804.640837] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value 02:42:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x20010, 0x0, 0x0, 0x0, 0x0) [ 1804.652465] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xe4ffffff, 0x0, 0x0}, 0x58) 02:42:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xfe, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:42:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x6b0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='nl80211\x00', &(0x7f00000002c0)='./file1\x00', r3) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) ioctl$FITHAW(r0, 0xc0045878) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1804.742513] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x3f00, 0x0, 0x0, 0x0, 0x0) 02:42:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0xf00000000000000) 02:42:21 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xff600000, 0x0, 0x0}, 0x58) 02:42:21 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x20200, 0x0, 0x0, 0x0, 0x0) 02:42:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x300, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:42:34 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffc00000, 0x0, 0x0}, 0x58) 02:42:34 executing program 5: mlockall(0x3) mlockall(0x1) mlockall(0x2) mlockall(0x3) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) 02:42:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x1300000000000000) 02:42:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x6b0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x73}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r3, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='nl80211\x00', &(0x7f00000002c0)='./file1\x00', r3) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) ioctl$FITHAW(r0, 0xc0045878) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x80000, 0x0, 0x0, 0x0, 0x0) 02:42:34 executing program 6: mlockall(0x4) mlockall(0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:42:34 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x6}, {0x0, 0x0, 0x10000}], 0x8001, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x505300, 0x40) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:34 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xfffe, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) [ 1817.116529] loop1: detected capacity change from 0 to 256 [ 1817.127319] loop4: detected capacity change from 0 to 256 [ 1817.130884] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:34 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffff0300, 0x0, 0x0}, 0x58) [ 1817.156239] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$SG_IO(r2, 0x5306, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x100) 02:42:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x101000, 0x0, 0x0, 0x0, 0x0) 02:42:34 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffff1f00, 0x0, 0x0}, 0x58) 02:42:34 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0xf0ff1f, 0x0, 0x0, 0x0, 0x0) [ 1817.274553] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1817.309134] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:34 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffff8000, 0x0, 0x0}, 0x58) 02:42:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3f00000000000000) 02:42:34 executing program 1: mlockall(0x5) mlockall(0x1) mlockall(0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x5800) mlockall(0x6) mlockall(0x6) 02:42:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x404141, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1817.355173] loop4: detected capacity change from 0 to 256 [ 1817.375684] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1817.428806] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:49 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffffff7f, 0x0, 0x0}, 0x58) 02:42:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x40080, 0x187) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:49 executing program 5: mlockall(0x5) mlockall(0x1) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mlockall(0x0) 02:42:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x8004000000000000) 02:42:49 executing program 6: mlockall(0x4) mlockall(0x1) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:42:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x664e2, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@resuid}, {@max_batch_time}]}) 02:42:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x200000000000000) 02:42:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x1000000, 0x0, 0x0, 0x0, 0x0) 02:42:49 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0xffffffe4, 0x0, 0x0}, 0x58) [ 1832.484360] loop1: detected capacity change from 0 to 256 [ 1832.506061] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1832.509601] loop4: detected capacity change from 0 to 256 [ 1832.515738] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20c2, 0x0) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0/file0\x00', 0x4c2c00, 0x108) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/59, 0x3b}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40000041) execveat(r2, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000440)='#\x00'], &(0x7f0000000540)=[&(0x7f0000000500)='/proc/thread-self/attr/current\x00'], 0x800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev2(r4, &(0x7f0000000800)=[{&(0x7f0000000200)="9d", 0x1}], 0x1, 0x37, 0x0, 0x0) write(r4, &(0x7f00000001c0)="0184f7059c71c65ae5bb467633520ec287595e1194a537b1d444ed94861c119ddaeeefd176a0", 0x26) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) openat(r3, &(0x7f0000000180)='./file0\x00', 0x220940, 0x18a) [ 1832.571794] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:49 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2000000000, 0x0, 0x0}, 0x58) 02:42:49 executing program 1: mlockall(0x3) mlockall(0x1) mlockall(0x2) mlockall(0x3) mlockall(0x7) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) [ 1832.658864] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 02:42:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x8, &(0x7f0000000b40)=[{&(0x7f0000000280)="f41a6f16ee511d944bec4d886956c548e7151c11251539b53b7dfd87c3844e45991df8728b78071435533bec58bd36ee19d91630deda87e7bfa7e0031f27e5b2d07084586fc602c668381733bb674097ebbcaaa78239acd14e61119f1af6f5215698405e2f736046234e4af6f907647a7bc7c189cf3768d71ee66d119fcb5d85f847cfecaf4e4601600490f613d5bd64838546bcc560", 0x96, 0x6}, {&(0x7f0000000340)="7f528a8a2bd158c6832dc9238bd4e3ebd650996330a358acfb7a3d0085576a61bbb7d0b9a660a81b0de7ec0be70b354f0553edc832d689fb8ee52e12dcb2abcca57c198c89619a0907cb5ea2aefc1b3eebf12e4485f0dbe79192ff13d2d0607a4031bbe7f1db7cf770fd0a1d4b6ac8cc7b7026cc2692a90ca3d3fd733893f09a7c8f32f940eeb486b046a32bd03f9eaea21a0ce2464cb9e328a4d25442195d3ce67bd8f4a4255ce833abbf487aab5ddf6e2ec20fdea3de284dd3e05402542100d01b5e28502febb08eb33b99b4f72185ca14", 0xd2, 0xff}, {&(0x7f00000000c0)="bb1d283c1f3531498d8e4470f768dfdcedbb7de834d2e2f19fc6a360b0fe57", 0x1f, 0x7fff}, {&(0x7f00000004c0)="9585fad76486b98522a91ed1a702ea6f0b3860ace741aa5acb2f9991267f07b310f136400c4c300a58b163a70089ab2659ec4d79ba7064be057603ef9f8911feded76f2a183e4456d561d1b6061d6bb80a07c2f618730dd43a1da455574ea8e15e537b515805bd0e21a2ffd87087bc8905af656a170a63654edb8cb54b98f28901e32f73ef80bcce893604fd610ff6fa5051b7a3842093", 0x97, 0x7}, {&(0x7f0000000180)="df426b9704d60d55c65f78e33515068a701eb35b013ddd83793fffc58a26e0ae0523dd7ef4912f46e21fcca28bbd77c518027445615501ea43eeb8963bbba5d310aeead699e7a5632dd773f60981f9", 0x4f, 0xa9}, {&(0x7f0000000580)="509e83cebe9d0f1a85b262231e1327b2c4c057bfc4c9c2a7a7f3543f2d7d11115708e6344839c79d2441074b96901f4787cea8152592988bf9827bd17b057874244ef0c6c303725e0ea36d29d8fcc70071c4c3956d17c45ded95842493358b43bb0d30e94fa33558a7f6e3db5f8979453c30600e018f2ba8e80c1102ac28", 0x7e, 0x7fff}, {&(0x7f0000000600)="2758752f66588177fff76f4c5911dcbb9f85bbbcd86d2b02d4afcfaa3be2d1a2de298284b1ebc0ab4f7f35301074cbca4b7e23c75b73eb67a054da324943b056384658108fd7f8adda8d968a698d56a150d5d1496f280135034455586092253906f8124362f9e805478d6fbff735ea5dbfe0f2f437907d104a3682198c544568742e18ef4800a756f73e99182f2b9e0b3edc95", 0x93, 0x80000000}, {&(0x7f0000000a80)="53670e0d5262238826618eca25545b6e7f1f274197047a0fe9d0214970e884c854639173017f3ede236cfb9f33e342ef8893b5da8f88f0b260f771eefb818d3683f2da78744f96b022a5e5ec31c17c096e2effd35fb385fa4fbbb1cd87cff8b13c16a1dbb860c9a8fde4743d26b1dcf8a8fff8931730a3724cea32b9b766c0a7ecf9f65d23e2ab293c86cd35d19872bf4f74", 0x92, 0x6}], 0x12800, &(0x7f0000000780)={[{@session={'session', 0x3d, 0x28}}, {@nocompress}, {@cruft}, {@session={'session', 0x3d, 0x2f}}, {@unhide}], [{@measure}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x40, 0xf8) syz_mount_image$tmpfs(&(0x7f0000000440), &(0x7f0000000800)='./file0\x00', 0x5, 0x3, &(0x7f0000000980)=[{&(0x7f0000000840)="cc9e63922b03866a462b84307cf2e8ef0e96338a47a70334b824b953d466cb19722ddc7743adcbf025ae757c3122b33712c14c0776f9ef031140dc72161fd9ee94dad7b579e31782f2d2cd8c5d5df43530014863fa057d0899c8a0c84bd68f3a3c014c8af8", 0x65, 0x7}, {&(0x7f00000008c0)="4fa25bd0d893e274f185de2acf363d5ea3550c4d1161b9138597318d431a5fbc4e69578ab3e07a15a5d92bc84eb20487f899fba2148a55d9014b1f56d798da39f4534b9ceb15f72bd0e28ef2bff5d4e0c80abe125b08b1d08824b13bbfdf76d8199ab37bce", 0x65, 0x3}, {&(0x7f0000000940)="134daf12ff888294ca", 0x9, 0x101}], 0x480, &(0x7f0000000a00)={[{@huge_within_size}], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, 'unhide'}}, {@obj_user={'obj_user', 0x3d, 'measure'}}]}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 02:42:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x8cffffff00000000) 02:42:49 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x2100000000, 0x0, 0x0}, 0x58) 02:42:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clone(0x8000000, 0x0, 0x0, 0x0, 0x0) [ 1832.746381] loop4: detected capacity change from 0 to 256 02:42:49 executing program 3: clone3(&(0x7f0000000100)={0x12336b500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x10000000000, 0x0, 0x0}, 0x58) [ 1832.776019] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1832.891567] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1847.179747] kmemleak: 5 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800cb53800 (size 512): comm "syz-executor.7", pid 9923, jiffies 4296499641 (age 23.835s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace: [<00000000d325ba8c>] do_seccomp+0x2d5/0x27e0 [<00000000d024038b>] do_syscall_64+0x3b/0x90 [<000000007f7751a6>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffffc90000713000 (size 4096): comm "syz-executor.7", pid 9923, jiffies 4296499641 (age 23.835s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000a0d9567f>] __vmalloc_node_range+0xd45/0x10d0 [<000000004e9dfdbe>] __vmalloc_node+0xb5/0x100 [<0000000091c362d9>] bpf_prog_alloc_no_stats+0x38/0x340 [<0000000023b897ae>] bpf_prog_alloc+0x24/0x170 [<00000000817203a7>] bpf_prog_create_from_user+0xad/0x2e0 [<00000000b8a2361b>] do_seccomp+0x325/0x27e0 [<00000000d024038b>] do_syscall_64+0x3b/0x90 [<000000007f7751a6>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff88801d269000 (size 2048): comm "syz-executor.7", pid 9923, jiffies 4296499641 (age 23.835s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000bc8c0bc0>] bpf_prog_alloc_no_stats+0xeb/0x340 [<0000000023b897ae>] bpf_prog_alloc+0x24/0x170 [<00000000817203a7>] bpf_prog_create_from_user+0xad/0x2e0 [<00000000b8a2361b>] do_seccomp+0x325/0x27e0 [<00000000d024038b>] do_syscall_64+0x3b/0x90 [<000000007f7751a6>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff8880170b6960 (size 16): comm "syz-executor.7", pid 9923, jiffies 4296499641 (age 23.835s) hex dump (first 16 bytes): 01 00 ec 20 80 88 ff ff 80 a7 32 1d 80 88 ff ff ... ......2..... backtrace: [<000000004d3c250b>] bpf_prog_store_orig_filter+0x7b/0x1e0 [<00000000b6d868c1>] bpf_prog_create_from_user+0x1c6/0x2e0 [<00000000b8a2361b>] do_seccomp+0x325/0x27e0 [<00000000d024038b>] do_syscall_64+0x3b/0x90 [<000000007f7751a6>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: memory leak unreferenced object 0xffff88801d32a780 (size 8): comm "syz-executor.7", pid 9923, jiffies 4296499642 (age 23.834s) hex dump (first 8 bytes): 06 00 00 00 00 00 ff 7f ........ backtrace: [<00000000b3642a3e>] kmemdup+0x23/0x50 [<00000000f4da2831>] bpf_prog_store_orig_filter+0x103/0x1e0 [<00000000b6d868c1>] bpf_prog_create_from_user+0x1c6/0x2e0 [<00000000b8a2361b>] do_seccomp+0x325/0x27e0 [<00000000d024038b>] do_syscall_64+0x3b/0x90 [<000000007f7751a6>] entry_SYSCALL_64_after_hwframe+0x44/0xae BUG: leak checking failed VM DIAGNOSIS: 02:43:14 Registers: info registers vcpu 0 RAX=ffffffff840a39a0 RBX=ffffffff85032600 RCX=ffffffff840863a1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85007e40 R8 =0000000000000001 R9 =ffff88806ce38b93 R10=ffffed100d9c7172 R11=0000000000000001 R12=fffffbfff0a064c0 R13=ffffffff858c80d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff840a39ab RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09acb0f648 CR3=000000000d8e4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 40fdbf0000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 799e0ac883dda016 86ed4805cc6bc48b YMM09=0000000000000000 0000000000000000 efcef44fcc6bc23f 2fd8795bcc69eb1b YMM10=0000000000000000 0000000000000000 69b05050a5021606 bb8e5937cc69ebf8 YMM11=0000000000000000 0000000000000000 cc5549fdcb969dc7 a53ff34aa5001e3c YMM12=0000000000000000 0000000000000000 971b78989165e7b7 cec2d52d7c12fcdd YMM13=0000000000000000 0000000000000000 656e6f6c630a297d 5d7d303030306666 YMM14=0000000000000000 0000000000000000 2c307830202c3030 3030303031783028 YMM15=0000000000000000 0000000000000000 0a29307830202c30 7830202c30783020 info registers vcpu 1 RAX=ffffffff840a39a0 RBX=ffff8880081b1ac0 RCX=ffffffff840863a1 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888008217e78 R8 =0000000000000001 R9 =ffff88806cf38b93 R10=ffffed100d9e7172 R11=0000000000000001 R12=ffffed1001036358 R13=ffffffff858c80d0 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff840a39ab RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff1b4668c0 CR3=000000000d8e4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4132e1b000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000