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"}, {0x98, 0x114, 0x8f0, "ed1c2c4a0b0f929ac2e532e268a1d09bf6aa8d23b53cb25978d70d39ed10b48aba964d8b70847744c86b398d81571b67ececf85a587336474b6660296792b07102df5ba11626806207c118abcba3615c80c2a04bbf306268e9cbc656949a04649a15fa33fb01bf304083bcbe00a812b6217f1b300dbe925a861b154a2b5d915ba5ccf553"}], 0x1258}}, {{&(0x7f0000009480)=@caif=@util={0x25, "3f88fdc85505edda14e0704a0a30bd54"}, 0x80, &(0x7f00000096c0)=[{&(0x7f0000009500)="ce29ff98ada59206dc1d1e519f096061f297b4f886c5ac90427b4dde547eebcebbf8120a883a64d2d616480be7e72274a50e918eb6660adde5c0ac31ff6e111ca491fc7a38b36d73d2d3a5092acfc7bfe731a6274f4f6c4f6afc34e8efa9c7685c6ead811842d0b45c76560c5bded9425ded4aa636902fe4ecdaf8052949c92897a52bdf4aa149b13100435169229e0b3c54dd883a1e8a8473fc5a5360b8ff3d225368f8a0bd6d541c30baad71f236e5c26b6230d66da08a7b23d9548027b8a529fceebf97517ddffe546bf8fcbb68455027", 0xd2}, {&(0x7f0000009600)="d38b41d5074c98fdb5be95fa66fdf98e0490fd2b92e423f7192d4f2ea294341f5c80de303fcd51e3c3daa43526546d86ec9170bff813a15cdcd0c5f65ab929325dd0f2f9e95edf4dcc197c5854e6cb132bc86fff08e1a7d5d4f0c84e34f9e52466f4e36f129b497517a8d716f0d268014c91a2fc5a8e3a1f7bccb4ef07ca39e5bbc76350d86ef3c2e0a840a54645f43467995d458ffcd8a418a266", 0x9b}], 0x2}}], 0x8, 0x22004840) 11:11:34 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:11:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup2(r0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x100, 0x139) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x4b45, &(0x7f0000000080)) 11:11:34 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f73665df41100080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000bde670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000bde670325132510000e670325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000bde670325132510000e670325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000bde670325132510000e67032510b0064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000bde670325132510000e67032510300000000002e2e2020202020202020201000bde670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000bde670325132510000e670325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) creat(&(0x7f0000000080)='./file0\x00', 0x3) openat(r0, &(0x7f0000000040)='./file0\x00', 0x210201, 0x0) 11:11:34 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = getuid() setresuid(r1, r0, r2) r3 = fork() tkill(r3, 0x36) 11:11:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:11:34 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x5, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}, {&(0x7f00000000c0)="c2f94d0887417a0e5373dfe7d2cddd8174e71f579f985f57ecaae4bf4594a60b2804fa8943ffe9d26fb511ed873e6bd66d1dad2b664a958ca4a970495ede55501f647715866c0043b409a635c6440f70bdb3463624010b770b0692d1ebcdfd6c7b7657b2a935eaeb38f2fa822e247b2c736a11e970b86b7220c555", 0x7b, 0x1}, {&(0x7f0000000140)="69a2fb5164b0d3a0cdf0fbdb9be742e3c741da25c34549883105f32dab8377bca35ef95443", 0x25, 0x8001}, {&(0x7f0000000340)="0c258db43ce7533cce3f18736e2e2869c310002799bc7db0b8949a3160227a3667facb0e8692f04d3a0e05522fcdf65ef0cb42816a7109176894c7d21a34a2c39ed5768ba67543c1d6de5b1e7bb826f81fb06df766b24880a4b454fe14159b25eb01c29598e57e966d7f19b8206091", 0x6f, 0x700000000000}, {&(0x7f00000003c0)="205516923194ba089fd3a346faf9ce2f33a49c4322a78d0d219835623bab3235c4786956dc", 0x25, 0x2}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:47 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x4, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}, {&(0x7f00000000c0)="c2f94d0887417a0e5373dfe7d2cddd8174e71f579f985f57ecaae4bf4594a60b2804fa8943ffe9d26fb511ed873e6bd66d1dad2b664a958ca4a970495ede55501f647715866c0043b409a635c6440f70bdb3463624010b770b0692d1ebcdfd6c7b7657b2a935eaeb38f2fa822e247b2c736a11e970b86b7220c555", 0x7b, 0x1}, {&(0x7f0000000140)="69a2fb5164b0d3a0cdf0fbdb9be742e3c741da25c34549883105f32dab8377bca35ef95443", 0x25, 0x8001}, {&(0x7f0000000340)="0c258db43ce7533cce3f18736e2e2869c310002799bc7db0b8949a3160227a3667facb0e8692f04d3a0e05522fcdf65ef0cb42816a7109176894c7d21a34a2c39ed5768ba67543c1d6de5b1e7bb826f81fb06df766b24880a4b454fe14159b25eb01c29598e57e966d7f19b8206091", 0x6f, 0x700000000000}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:47 executing program 0: prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 11:11:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1056e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f00000000c0)={0x80002, 0x0, 0xfffffffe, 0x7ff, 0x1}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x7, 0xfffffffffffffffe}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x4, 0x2, 0x1, 0xd76}) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) 11:11:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:11:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfec4) fallocate(r0, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 11:11:47 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:11:47 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r2, 0x3, &(0x7f0000000240)=[&(0x7f0000000080)={0x4004800, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)="dc648cbc4bb6a78b302e8944aa5ba0bf879f48ea98f5441f5a66d671139de9547b3c864fa73c60416bdaf18eb42af18e1185b5a75e885f833bfb2a3aaa799d6bc0ad7384f4", 0x45, 0x800, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000180)="df78c2a3806e2a0efc23419bd85a3ecbb9e1f8dcd8936d50568fe65e5e3751a73e33ab984416454b98b566fab8955ad4069b1e3a5ce5ad53a4357743bf0b2ae72ee706c8b9f3503dcf08e5e17729603f2a8a51290c0d5e6e909817df383a605b31661a00c8100027964d27d3114b95edfe6f4df43d69b3", 0x77, 0x1, 0x0, 0x2}]) io_destroy(r2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x97, 0x20, 0x0, 0x1f, 0x0, 0x7, 0x10000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x2, @perf_bp={&(0x7f0000000280)}, 0x800, 0xf, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7173}, r3, 0x9, r0, 0x0) 11:11:47 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, r0, 0x0) r2 = fork() tkill(r2, 0x36) 11:11:47 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}, {&(0x7f00000000c0)="c2f94d0887417a0e5373dfe7d2cddd8174e71f579f985f57ecaae4bf4594a60b2804fa8943ffe9d26fb511ed873e6bd66d1dad2b664a958ca4a970495ede55501f647715866c0043b409a635c6440f70bdb3463624010b770b0692d1ebcdfd6c7b7657b2a935eaeb38f2fa822e247b2c736a11e970b86b7220c555", 0x7b, 0x1}, {&(0x7f0000000140)="69a2fb5164b0d3a0cdf0fbdb9be742e3c741da25c34549883105f32dab8377bca35ef95443", 0x25, 0x8001}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:47 executing program 1: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x80) creat(&(0x7f0000000080)='./file0\x00', 0x145) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) fdatasync(r0) 11:11:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:11:58 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:11:58 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}, {&(0x7f00000000c0)="c2f94d0887417a0e5373dfe7d2cddd8174e71f579f985f57ecaae4bf4594a60b2804fa8943ffe9d26fb511ed873e6bd66d1dad2b664a958ca4a970495ede55501f647715866c0043b409a635c6440f70bdb3463624010b770b0692d1ebcdfd6c7b7657b2a935eaeb38f2fa822e247b2c736a11e970b86b7220c555", 0x7b, 0x1}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:58 executing program 0: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, r0, 0x0) r2 = fork() tkill(r2, 0x36) 11:11:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:11:58 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393232393032313400"/192, 0xc0, 0x6}, {&(0x7f0000010100)="000000000000000000000000e5ae81319b144b749b1668edf97c22c3010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000005a00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012600)="200000008442d6528442d65200000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="8081000000c04000dbf4655fdbf4655fdbf4655f00000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000010000000000000000000000000000000000000020000000000000000000000000000000dbf4655f00"/160, 0xa0, 0x4600}, {&(0x7f0000012800)="c041000000300000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x4a00}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000000840)="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", 0x16a, 0x4b00}, {&(0x7f0000012b00)="ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c680ee85000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012c00)="ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3239323239303231342f66696c65302f66696c653000000000000000000000000000000000000000000000f2528e4f000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4d00}, {&(0x7f0000000640)="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", 0x1d6, 0x4e00}, {&(0x7f0000012f00)="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", 0x100, 0x5000}, {&(0x7f0000013000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013400)="504d4d00504d4dffdcf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033350075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00d5a42d68d2a2720bed6a0da4fa4ed96782a4f8b9f9752a2136171e2a95df1fd6bdf61745b4082ec8200157bb10b8794629201ba7118e6537b3c7d8f34fefc67d1743a8c7421071b67a1c4b57ec726f989a180bf2ff663094ac0d764820"]) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1400000000000, 0x3, &(0x7f0000000540)=[{&(0x7f0000000180), 0x0, 0x2}, {&(0x7f0000000400)="b48fb40d4fe56b11a959f034bb79f70d152a2ca9e28f38d1710d0964f85e512f17a11409884eae3119accb7374b335fa27d2fcc6fc21172dec58464ced5d65b9004de4297be3150e9df98394c974ee33f804638f5c7281e9875307e1d463257a79c99396595237969a2eb98af0216eac3a18725ee71a34", 0x77, 0xff}, {&(0x7f0000000480)="0dac3719a218dba20cb6098ea829cf7de0b7d08e8fc293a94eef40d5520ce3403d6365de56b55710f8c274e19e7d33889c718373783123eb8f2bd675a8ebd05b5fbf94f54f9b9a68c806635a2d052c59de3fe5134fa9bd38b45ced4c85004f01587408a2516966c57b30977f391a65d268294515c05f8b758b304f0d096f143dbd6e79fb6f0d49b25f4453a18ac5e24d501d7f04457fbb1375875224e7a1ef465427c57c7a69b86a3b", 0xa9, 0xa1}], 0x8000, &(0x7f00000005c0)={[{@block_validity}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@uid_gt}]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000c40)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setresuid(r4, r2, r5) r6 = getegid() setgid(r6) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r6}, {0x8, 0x3, r7}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) truncate(&(0x7f0000000c80)='./file0\x00', 0x9) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {}, [{0x2, 0x3, 0xee00}, {0x2, 0x3, r1}, {0x2, 0x5, 0xee01}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, r2}], {}, [{0x8, 0x2}, {0x8, 0x5, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x0) 11:11:58 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, r0, 0x0) r2 = fork() tkill(r2, 0x36) 11:11:58 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:11:58 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 326.045461] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 11:11:58 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:58 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:11:58 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, r0, 0x0) r2 = fork() tkill(r2, 0x36) 11:11:58 executing program 1: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f00000001c0)="6265c2859c0b7b1458a8a97df353d8f02091afaedc15d4357bb57d38dc88c38ffbed4ad1c99ea48ac27bbb9e2e3941b01afeebed93322ce529291cf4182baefea362d4687051e4a0f15b6f5c40cc2a1eb25ddb43ffb909c6d2b8f9dcb3aab605686e4fd99ac7c1634e2f88486b66bfe410ced914a3eab833cd4b565fb12773f618366242c5c873bfc3b492a317741ffe12022c7cc0b3e1b33ff8bc5d1f131aa9b52d2d81eb980476ba51ede6e4cbe31b6e1d764c36002b88498928e03c3d256cdcbb59579f44cd", 0xc7, 0xfffffffffffffff7}, {&(0x7f00000000c0)="c2f94d0887417a0e5373dfe7d2cddd8174e71f579f985f57ecaae4bf4594a60b2804fa8943ffe9d26fb511ed873e6bd66d1dad2b664a958ca4a970495ede55501f647715866c0043b409a635c6440f70bdb3463624010b770b0692d1ebcdfd6c7b7657b2a935eaeb38f2fa822e247b2c736a11e970b86b7220c555", 0x7b, 0x1}], 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:11:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r3, 0x3856883e067d7d5b, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 11:12:09 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393232393032313400"/192, 0xc0, 0x6}, {&(0x7f0000010100)="000000000000000000000000e5ae81319b144b749b1668edf97c22c3010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000005a00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012600)="200000008442d6528442d65200000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="8081000000c04000dbf4655fdbf4655fdbf4655f00000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000010000000000000000000000000000000000000020000000000000000000000000000000dbf4655f00"/160, 0xa0, 0x4600}, {&(0x7f0000012800)="c041000000300000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x4a00}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000000840)="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", 0x16a, 0x4b00}, {&(0x7f0000012b00)="ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c680ee85000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012c00)="ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3239323239303231342f66696c65302f66696c653000000000000000000000000000000000000000000000f2528e4f000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4d00}, {&(0x7f0000000640)="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", 0x1d6, 0x4e00}, {&(0x7f0000012f00)="ed81000064000000dcf4655fdcf4655fdcf4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c3a671b11000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x5000}, {&(0x7f0000013000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013400)="504d4d00504d4dffdcf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033350075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00d5a42d68d2a2720bed6a0da4fa4ed96782a4f8b9f9752a2136171e2a95df1fd6bdf61745b4082ec8200157bb10b8794629201ba7118e6537b3c7d8f34fefc67d1743a8c7421071b67a1c4b57ec726f989a180bf2ff663094ac0d764820"]) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1400000000000, 0x3, &(0x7f0000000540)=[{&(0x7f0000000180), 0x0, 0x2}, {&(0x7f0000000400)="b48fb40d4fe56b11a959f034bb79f70d152a2ca9e28f38d1710d0964f85e512f17a11409884eae3119accb7374b335fa27d2fcc6fc21172dec58464ced5d65b9004de4297be3150e9df98394c974ee33f804638f5c7281e9875307e1d463257a79c99396595237969a2eb98af0216eac3a18725ee71a34", 0x77, 0xff}, {&(0x7f0000000480)="0dac3719a218dba20cb6098ea829cf7de0b7d08e8fc293a94eef40d5520ce3403d6365de56b55710f8c274e19e7d33889c718373783123eb8f2bd675a8ebd05b5fbf94f54f9b9a68c806635a2d052c59de3fe5134fa9bd38b45ced4c85004f01587408a2516966c57b30977f391a65d268294515c05f8b758b304f0d096f143dbd6e79fb6f0d49b25f4453a18ac5e24d501d7f04457fbb1375875224e7a1ef465427c57c7a69b86a3b", 0xa9, 0xa1}], 0x8000, &(0x7f00000005c0)={[{@block_validity}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@uid_gt}]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000c40)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setresuid(r4, r2, r5) r6 = getegid() setgid(r6) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r6}, {0x8, 0x3, r7}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) truncate(&(0x7f0000000c80)='./file0\x00', 0x9) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {}, [{0x2, 0x3, 0xee00}, {0x2, 0x3, r1}, {0x2, 0x5, 0xee01}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, r2}], {}, [{0x8, 0x2}, {0x8, 0x5, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x0) 11:12:09 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:12:09 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:12:09 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @empty}, {0x6, @remote}, 0x5a, {0x2, 0x4e22, @broadcast}, 'veth1_to_bond\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000000040)="000000000000001ddecccc006856d49a00cc4371bd6a7c893f280045010040a818715213e989f9c560348e8a2547ad4579b6f748ddacc62d376bc4ba1c7fc50d31c13a698fc074aa493a9a0a940778db4de9014fa9d0db453b22226e69b7cd7f25bcacf2677aa3f9bfb47e7b6c1e0dd75830975a09ad9c0286106b05122df58610c9687739266207e198dbc53a607b8e3456d29cbdaf7424dd2cc366198861578e10a9ab9853f9054094c878ec50332e5367d5070b6942384615", 0xba, 0x4df}, {&(0x7f0000000140)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x6}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed410000000400001c00655fddf4655fddf4655f000000000000020020", 0x1d, 0x100001500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}], 0x0, &(0x7f0000013b00)=ANY=[@ANYBLOB="17"]) r0 = syz_io_uring_complete(0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e20, @private=0xa010101}, 0xa4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='bridge0\x00', 0x4, 0x6, 0x101}) 11:12:09 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32393232393032313400"/192, 0xc0, 0x6}, {&(0x7f0000010100)="000000000000000000000000e5ae81319b144b749b1668edf97c22c3010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000005a00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012600)="200000008442d6528442d65200000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012700)="8081000000c04000dbf4655fdbf4655fdbf4655f00000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000010000000000000000000000000000000000000020000000000000000000000000000000dbf4655f00"/160, 0xa0, 0x4600}, {&(0x7f0000012800)="c041000000300000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x4a00}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f000000000000000000000000000002ea00"/64, 0x40, 0x4a80}, {&(0x7f0000000840)="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", 0x16a, 0x4b00}, {&(0x7f0000012b00)="ed8100001a040000dcf4655fdcf4655fdcf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000c680ee85000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4c00}, {&(0x7f0000012c00)="ffa1000026000000dcf4655fdcf4655fdcf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3239323239303231342f66696c65302f66696c653000000000000000000000000000000000000000000000f2528e4f000000000000000000000000000000000000000000000000200000008442d6528442d6528442d652dcf4655f8442d6520000000000000000", 0xa0, 0x4d00}, {&(0x7f0000000640)="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", 0x1d6, 0x4e00}, {&(0x7f0000012f00)="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", 0x100, 0x5000}, {&(0x7f0000013000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013200)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013300)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013400)="504d4d00504d4dffdcf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033350075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00d5a42d68d2a2720bed6a0da4fa4ed96782a4f8b9f9752a2136171e2a95df1fd6bdf61745b4082ec8200157bb10b8794629201ba7118e6537b3c7d8f34fefc67d1743a8c7421071b67a1c4b57ec726f989a180bf2ff663094ac0d764820"]) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1400000000000, 0x3, &(0x7f0000000540)=[{&(0x7f0000000180), 0x0, 0x2}, {&(0x7f0000000400)="b48fb40d4fe56b11a959f034bb79f70d152a2ca9e28f38d1710d0964f85e512f17a11409884eae3119accb7374b335fa27d2fcc6fc21172dec58464ced5d65b9004de4297be3150e9df98394c974ee33f804638f5c7281e9875307e1d463257a79c99396595237969a2eb98af0216eac3a18725ee71a34", 0x77, 0xff}, {&(0x7f0000000480)="0dac3719a218dba20cb6098ea829cf7de0b7d08e8fc293a94eef40d5520ce3403d6365de56b55710f8c274e19e7d33889c718373783123eb8f2bd675a8ebd05b5fbf94f54f9b9a68c806635a2d052c59de3fe5134fa9bd38b45ced4c85004f01587408a2516966c57b30977f391a65d268294515c05f8b758b304f0d096f143dbd6e79fb6f0d49b25f4453a18ac5e24d501d7f04457fbb1375875224e7a1ef465427c57c7a69b86a3b", 0xa9, 0xa1}], 0x8000, &(0x7f00000005c0)={[{@block_validity}], [{@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@uid_gt}]}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000c40)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) setresuid(r4, r2, r5) r6 = getegid() setgid(r6) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r6}, {0x8, 0x3, r7}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) truncate(&(0x7f0000000c80)='./file0\x00', 0x9) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {}, [{0x2, 0x3, 0xee00}, {0x2, 0x3, r1}, {0x2, 0x5, 0xee01}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, r2}], {}, [{0x8, 0x2}, {0x8, 0x5, 0xee00}, {0x8, 0x0, r3}, {0x8, 0x0, r6}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x0) 11:12:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0xd00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0x3f, @mcast2, 0x10000}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x20, 0xcb, 0x80, 0x8, 0x0, 0x4, 0x20011, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x4, @perf_bp={&(0x7f0000000180), 0x2d04a598b3f55890}, 0x2000, 0x4, 0x4, 0x1, 0x1ff, 0x1ff, 0x9, 0x0, 0x4, 0x0, 0x5}, r2, 0xd, 0xffffffffffffffff, 0x2) r3 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)="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", 0x5ad}], 0x1}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000740), 0x400, 0x101000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'veth0_macvtap\x00', 0x0}) sendmsg$inet6(r4, &(0x7f0000003180)={&(0x7f0000000780)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f00000007c0)="feb8fa838a173e2b384ba4ecf008d33d37bb04116f2b68783c5fdeec7ff329948bee4014d3959821d5a5dcd0dfb4a6bdf158d4f710efed832cc8019d705c3fb6e64abdacfe19e80b51d23aaa29108be6683f76802bd53dab0e0bf30518972b0baa94c2e8ebadf6f3e6a62c15e609783eda962e1791304bc82b75cfeb5ffa29394055c0c7bb23d8", 0x87}], 0x2, &(0x7f0000001680)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00"/32, @ANYRES32=r5, @ANYBLOB="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"], 0x2a8}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f00000015c0)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x3ff, @empty, 0x9}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="f531adfc0638ac2df668da4248423e0e95c22acc0e3c0a9256d14f5dc3129c430e3f", 0x22}, {&(0x7f00000003c0)="fd6340f43217a0fa5db1a976f8e251b8fafb5081b7d3ece7d2cb03d5af", 0x1d}, {&(0x7f0000000400)="0521d581c96de2ea3bc8ca4e24ed2c212aa9ffa7d4d156c8b8763f198603adc6522c6c8a7948c4d8defd453a", 0x2c}, {&(0x7f0000000440)="a11c41bc67478655d03d76ab076e9515079e3f36a64f85787683b018d12a3c1e767dd5ed9d973daebb2136cb3c51b584ceaeef2cde92f35dcede01b93243b1cc9ba50d2621d73f648d8087fc739ba4c6c5f898b2f75581acefa848353725660fabae15e1be6d4ba68b48d9623edea275995d1bd42f602364262e4fe0fb5966c80fb339c22179bafd9ac06c90706eeecd394f56784f4abe10c80ab6e10cfb5859139f0c28fcf7b0c2b9cd3710128f5d0d58a311f932a7c3a84da7c310f3f2f7aa522c65defc9a04505563b2", 0xcb}, {&(0x7f0000000540)="fd4bb5b5f741208726fbd1899b277327a7dc0654e3f284b8671b5e11e4ddfe274c830a9e9a71d6c5be4dc3f5358583fa788b421be7645bf23351b5b998d24fe858e6e3fc2e446526f241e89ad1c599e041d28b73a86faaeb9b4adf5e28095493449b1af430d10773582dab59fa9b82391a4ce9637b439f7c00a6380114", 0x7d}], 0x5}}, {{&(0x7f0000000640)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000001180)="e0afa08a5d0c0945f2018ba2d9985396eac39f9af04d33200782cd0a689009035decad2afd2202a19db8d34be1c70bb578830535625acaac5e81a94e74945f7abc6408246098f48b84987066ff77aeaccf95c10ac59c78b7a75a11838575905ada8ffdd93cb5f7f5bdd2c67705d385905487535c1d967a72fd632cab91592124ae14b381da5a5efaaf5d9c207a9f28f45ac01431f0432622825f5f3944c511a29589a65cdb9673932eae67630eca313a11e0df4daffc3912da13b49da774492e6ed7ac492a3817ce8685a828772d42bf66c5c4f4d8a6d8c921e62199142186e7e19f16d0", 0xe4}], 0x1}}, {{&(0x7f00000006c0)={0xa, 0x4e20, 0xfffffffc, @loopback, 0x9}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001280)="f5669f76557fc23df9f0f50d1aca8cd6fa6c5a5e858d27f54ab701143856de2a4dd76499b2cb78824191eee684863cac41d59e02fad34bd462672f1e3fd0be7c6cd17a701cb72cb7dc769b07cadf8599fa6e266a79eae2cde49b17cd71d3a4de1923452cb1963926", 0x68}, {&(0x7f0000001300)="d5a9f27fdedb586a8ec9c0fab670f4907d3f57e873c152caa4decbab67548b3b07190eb78cb27a374e21dc7ed10a21b37d95ac3209fd354cfed10e639807cf6f2923702c36bcbcf5c1ee8458769ac3e891619d868bc87defc6d8206d362234e463afdb11ce1c2635c2bb9fcde3a0322c976a85279e7ac5c9055f35cb9d64268d161ca71c0e991229fc867a2bf8f138f7921c08963790be01dd3d62814ccef138f34d911255aac7f1131fc529aed943d05336231f201b95864f8f56959b4d78625a0ed3d917459ac1c815f56af582e7c9f0fa66808feb34b1fdc18efd45", 0xdd}, {&(0x7f0000001400)="fd8b39300f1344e8c38d0b2ba43566e04ec3779dd37edb1ec6f5d7f6ec13d69da26f4b6bf87404e6e4c6a1e46d47c85faae0118288e1384517b8c7e3fd580dac63c8201ff32939d6cfd940267614b30de4568da316076ede3f728174735d8fb924e49524e1b6cccb0e0897abdb4fae2981ada8e6bc91974bf29a2b3a4f6b5795af0866700b1c1c054222f5b6e8a92097100e403532f2cb3be84496f92cdd5090c8b7e4244f92d485de365079f2c0e685ed4f606c2db12e9bd0586211", 0xbc}, {&(0x7f0000000700)="e75ef52bd3c871a19ee02aed5eba5fa805ec91f4065c83189f9e5c49fe407c", 0x1f}, {&(0x7f00000014c0)="7cad5161e0825a4b4367fd6d656e5e84f423f45fff2639d7981cb352365b6bfe37499d58accc43cf19e86aad95b61d8876ffa12675b2ba3d43504824952a74fa19504d983fd839a4531ccc41a314ead5f94d75b9d0d99e99b03f2425fe35aee3301dbdc45e803b3feb039b4564882bec34879c8bc4a4aaf3", 0x78}], 0x5}}], 0x3, 0x80) 11:12:09 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() setresuid(r1, r0, r2) r3 = fork() tkill(r3, 0x36) 11:12:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000001800)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) [ 337.537181] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 337.550954] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 337.569722] EXT4-fs (loop0): Unrecognized mount option "" or missing value 11:12:10 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:10 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getuid() setresuid(0x0, r0, r1) r2 = fork() tkill(r2, 0x36) 11:12:10 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:12:10 executing program 0: r0 = fork() ptrace(0x10, r0) r1 = fork() move_pages(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) ptrace$setopts(0x4206, r1, 0xfffffffffffffffe, 0x18) syz_io_uring_setup(0x55f1, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x0, 0x0) 11:12:10 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r8 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) io_uring_enter(r8, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r11) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r7, 0x7ff, 0x6, 0x8000, 0xa, 0x1, {0x1, r11}}, 0x247b) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 11:12:10 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:12:10 executing program 6: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x1000002, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0x5ab6}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:12:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x9}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x100) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)="c12f10a85e7b9729eaa6f08a54b1d8ab6273b049fb7bb69b4661677600972481ef430cb4c8a3c32383b9db5b3d2a2c9e73a9f732fea34ccb27aa87ba810f046193f3847b2b10318e722923c052c414a48b2ded8807ce812d16aeaa81319b34399fceaa6a1a89554cee67c6da036cfe2267657eaa1d3870692dc627c8fbe8b81a", 0x80, 0x102, 0x1}, 0x7fff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x3}) 11:12:10 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:10 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:12:10 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = getuid() setresuid(0x0, r0, r1) r2 = fork() tkill(r2, 0x36) 11:12:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000280)={0xffff, 0x10, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0]}) r2 = socket$packet(0x11, 0x3, 0x300) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000240)=@v1={0x1000000, [{0xc, 0x13}]}, 0xc, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r3, &(0x7f0000000180)="a7", 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, r6}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x10044008) 11:12:21 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) mkdirat(r1, &(0x7f0000000000)='./file1\x00', 0x41) 11:12:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x9}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x20010, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x0, 0x100) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, &(0x7f0000000140)="c12f10a85e7b9729eaa6f08a54b1d8ab6273b049fb7bb69b4661677600972481ef430cb4c8a3c32383b9db5b3d2a2c9e73a9f732fea34ccb27aa87ba810f046193f3847b2b10318e722923c052c414a48b2ded8807ce812d16aeaa81319b34399fceaa6a1a89554cee67c6da036cfe2267657eaa1d3870692dc627c8fbe8b81a", 0x80, 0x102, 0x1}, 0x7fff) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x0, 0x3}) 11:12:21 executing program 2: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002580)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r8 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) io_uring_enter(r8, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r11) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd=r7, 0x7ff, 0x6, 0x8000, 0xa, 0x1, {0x1, r11}}, 0x247b) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r12, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 11:12:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:21 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setresuid(0x0, r0, r1) r2 = fork() tkill(r2, 0x36) 11:12:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:12:21 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 11:12:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:12:21 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 11:12:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x8, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x3}}}, 0x88) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x2000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 11:12:21 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setresuid(0x0, r0, r1) r2 = fork() tkill(r2, 0x36) 11:12:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:12:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:12:21 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e34343631303034383400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000dff4ef821ec34de5a68f275e28ea4831010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000901431899014318900000000d7f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d8f4655fd8f4655fd8f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000014a8ae8200000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d8f4655fd8f4655fd8f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000500000000000000000000000000000000000000000000000000000000000000000000000000000001c98117600000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d8f4655fd8f4655fd8f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3434363130303438342f66696c65302f66696c653000000000000000000000000000000000000000000000125dc13800000000000000000000000000000000000000000000000020000000901431899014318990143189d8f4655f901431890000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0079cd6b46ba66cfaa5c2589430e14156c2ae8fb59e1a67ccdfb0ae653cda2856249d9907a346b6bdd74a094"]) 11:12:21 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2, 0x4, 0x1c}, @random="00ded1f4ff00", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="64e7d326c1e3", @private, @multicast, @remote}}}}, 0x0) syz_emit_ethernet(0x1015, &(0x7f0000000140)={@random="3fd28f03b404", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x9, 0x23, "620abe3f9192ad5d4ebbfa47c19fa7832c94aba152bde369e1b5aec1814d3fbdd9f0b11041c1d0b2d07e636e2df0e39fbba352e5c9ead2e7e671bd4fd5422dbd3752e7a732945268a5c4fabe9b55efc50a9e1faa588661c33f3f4b756a3caafa206dd7fd74874f7daa2dae1a5c606f426188d94831c7f4519c072f0a614b1cb7384cd2182b070539d8624c2c410766ef85b3ece2a14ace20283355b8e89bbf5e102891db52cf9ddc5b132a60dd5df77f6e047ab159ff037b87eadb3d43f0b422e9894c70202e07b944150225cd04fda3a929eef54d6613249249df658b2c549766cedf11713a28c9dac37a0c8bba10171b8443f76006defb6d0c644a16b3e514a21ab0c3a9d076b79593334d0ac894befed748aee02fa1bb694960a5c3f8242c58c5fa7829ea8132404dfdb1875f1b28def6ba00b6896cb5b92da27858fbcfc58520ed34e2693a5f7609de25e4049f95a7d574f89ee4f7d8d796187129ed9ac7f1a6385c2ba169de7de4a76ba76564bdbe2da68f9dbc41b6b879a957c5bd97dba9c4f11386d65e7861d084fb64c02ed36232ac659eddfc5602a669c036595d8275e6b9345870936ed43efa639998d1daa03c599b91addbdad1e328215ebc745ca091dbaf4c81c6ebac598270d770edf9c6f5e08e529ca48773106b7b48f5494bbbfd1ff1bf334f77b9fa37b62013b82686cf6fbe8d5e1327a4f6f97938cf559a22c832272daa79f403256e24e3bf9762196ba403f4777704d64ccf1df8a7a3387febd145b405fe127232893335c6ac2907736a5efc5e4450c090c596990bf944bb5ac81dfa35065f7ba91320617735e41c4348943d3e8a3ad6d5733064f74501a06514068a4c414594d1ded911d070c65b9c478a1a0f0a4b932ca528b9e6223dae6f3de8506d6f12341be7d747a85d537efcaabafe58bd45ea1e1f593d917d652649d9def9f046a21afc650515251e6720959112baba33d3ae20b3649f4493f147773acd23e02b860880fe8581cdfed5e479da0d7640d263f2db63e4bbf3282546980d0b9558d57de9bf3cad83aee4cffea7e0c03c8e5478aa0fb22052e071c84e17abc18d2a3a6f3bcf57d6d7304fc39e9d798c27302500dedf63b11497e180ec65dbc531fc30bb19d9719d21f64a4d626de01eacc82a915c5198155f895e12f8e785dc9824281e133b9c5150a92214c9fe512823d931736bdff42ad3468cd7fecc07f264b4f51fcd09227ef9f9b644d9e813f4352b07ab8ef477a1d135fcc88c561471759b414b9991dd2c87d40f00346970f471bd23293fd7943fd3176ee2746b308c2438b8344ec844045edd27243a9b4277c2f0c81d39326d8ef2b0ec100d59f1bdb32398b0b7558b5bc90301511eee07d78a6596e3ffb2d7c34219a8a899d58d60e4d4b9333376d7c8a4eac78b57f2fdabe992aed72353807307e03059b5b8db3930cffc29b6a5724cb923ba1205a8b33c6f68050c5364f0b5934b8cef557a4cc50ded1bd15960503b220290a776ccf42d61d683a4cc8555b9926b41054b825ea051fb3fe38b9408b82818b0e4e268a5123aac4ccc150db5d520a54345dcfb267ed39ccd3599d903d7e96ba9a542a3d0fc69dcb9cc6c9d271b259d32352faa2dc8fa343e79de1827ac687e5f043bf6b411d0b9eb02db5f2777388119ca5afc876a29781d9fd252f8f5b708fb8a26bd006ecaae738e09c1f9a9fba3dfc78a4fa1ccc304365cef170c7e5f627648ad55e40bcdbe6f2cdc5c7e4542ec41b0c15cd75845fa77cbffe7891f6ca06d27a443908bb9a11aa35253d0155a224fedd531d0f79c2f34c9d489599698264850ee47ca95f364a3ab496a0a11914c15028a3f76d71d9aee0d8c51e97282912071682f88c206e0510dadbd440b2e4a27d64084d78a8637536d640933d867763a40ad2b439a2ea674eaf23eb45a989ae1fffc8d29323d751b889b6ce48c066f69e2e256874daff99cac15fc8b186ecaec950b1e6802f89a98d3a5dd3a491170eb95a210c8d99124c69acb762d8735c69158ebc0d24c36f8d8ff3d78b077205a95e3c9ac25ab435beb897ec77dcc3c43e0fa562daf6423c0ce41982b3ff3a2b1e7b8af9e44d7f7cbb0c55166b9deb45b2a029fc2c659a70e0908beba89061a51ec7519315049166823b6a293275d36da82e292d5cfb4c471d5686c97572ff281478a8817a892e8654c6dfc41174c46853655aae0047eb98c155a01d5c5d415929d33f19116013cb47eeebf64142c8c2b3aba46f6906c97bf1385848485e9f5f6d57fc83e2fc11c350f76c1e47c3ab998d0f0f88864736a2bcf2a8f648a6d7d53ace6a7b0ca999a42826fec8c2177d8925ebf5c2e1c943bcbcbf60d6537ad1afe726261ff4ccad87c3e6459fa97ccb45276361700b01ad5d007512ed42e559fe5ab73c090d30df883c5ed0df24ed01d64a072def02bf94710918463829e6637e5e9239d272a1841dc8c3bdebf476590d4e61763dd663e0c35458edd7812215c146066f953d396129210e567e532c187341c4672a09b7ac13307f6099a89df653264a89f93439a633800df2a654153d2d249d1d92ae36c971ec13b8509c076aebccee3ab8eecd13c28b9f2b77f1a07c056435f8fc9ea5bfbb37f7dd5498481ccf952dffdd782490eb16366d85599e00b45e3aab09935ccf051fee3001a7a146001e8bf37c31e58d80dd6189499761bb9925636251d87e734894f0fc0d5fea409f804c7eee4f122748cd978b4527166f842d5b2e63989d2022beaa26d8cd2fe43ef9223625a9bdec049bafa90e32ec7f080e4a700eac21083140b6159f17f5440874682c8663ddaf2e4bda681ee9a0c31247af441062923b2d9b03218190858d57c6989272cb7f762d2d011040aff47e8ed6c4b27cba00a8feb924e5e175d521c1d17e6f3974bdfd5acbd86bd8667c523462cbbd64ef8675a3279980b6a59e304ba8af96f1d02da3747e312a23ee775d2d9bf6da572e793e0463077ac40853559accc5c90e01201c41f6a2211fca6ba5b4fdbe5b4cd8b47bbe419cffe30848c6153cf6cc2592c1d313dbffb251766c09a965792a03c41d8e4ed68d7ed5a6d8cae57c647c83b1fc49bb2770f73d5028bcf43b24abd7f5088e288115efd3a3b675ccec29ef116faa60711a2ab86eac78b9714df8bacc7ce060a8f74495e1b50ac1a9c668c57cb835d520583f7ed7b6857e79e46a2b1e4fb79a6bddbca0bb99cb50ba486dcf48dd1019ff13d092cafe6bcab4cb28189d7478cc86924fee533609f2d93612cdcfad9998d54d89f40ace87bb7bc8ff6d61e9193f0663120085cec9eab0c69cae201673943e76d585752cfeab8ebd1eed6d65c0e107dd5c08bb4604489323fb8c07909fa26f12b975dde020d6975f33efd2c5ad334cc1673bd9adc0cedbff77b78f867ee7fbbc344353f83575eab24a996a5c5c33cf2794404e58e157d687a02218c0e7d009ddf1f5708612de2f2b65610b3971a771b2f4d58f756ce852122b0223fc85e3a46efeab3971a47ac4079733826e2ebf706f4a2c601fe288d7fd4174eca1fa614e0a809e3d5370a3f71d38baadeb2b7e7a21444cdec1f714feb663587a20770057f368f1c7d1f95f8e1576d157e60d32d8a93ab96ffae2aac3e6f14db25b607d68264b5e113fa5120113b61169f0a5dae98b53290bf012802fd3f585c14f98378ad0db30ea3681ec22601abd10b241a12f419857160aaa5662174f91a8dcebee1e08edacb8afc4932f67e6684618398e5b93f8aafba311e2a805be6d6480b3080f253d3f92460ff52197bceca705fc221f854ceae8e228812e9a494c79880fd0b1f051b82eb5b61ee3dd51f750820efc431148c60dc3dbad9af4e473623b45c39e23e414affb2b11d6007d77ead8683435415ed1b37247b9a7cac3bcc64441428b60119ba2dc298bfe41274538fa204947cb896635061e66206b89bc7c9a24e695fb28819cf77efb5023624b4d82beaf817dd33c958e47b63ba804883102468e4d0351a955d8b453e8bc91bdbaa2bc0974accc2d032c015ed869d922d9afd5d623190a2adf917e9c749a0f03d578d9f415478196cab5974c24902f539a20dc40b4ffd4635581d56f118a3fed0611a962806df730d2c2a29dc93225a615efb11ecbe5880379735e8dbb977320467dcfc97b2125b30e6c30c0bbce45dd032a9a3a98e51ac207e78db74e3d87a6b23a7907ae1e090cfe330e4932ef596997e0346e0efc8716b62eaa72fcced4b7391f6e9284f55fbdb260b9f7115dc7fcfe69c063f06984b2c9f8e8226bf2542e092288007a1fb05ff4842400139e73300620da3a1749c0f9fc47d44d8195cc94e5fe31a6999ac0b806f9dfc11d8b358647d376530e80290cbe4a091bcdd2db86f66fb1b6ed972fb1c948518c513a218e6fb5140a14054af98073dff86c1124871df52e4ff77765d8fcd6b67d42e7e279344c7931e77e395968b4051561ab618739a753a4e9ffb9445e482c994612d7f238769f0198cbbc187087d4a3b18f539f96bbba9a9a1f0e94038c038e61a12d346feea54a9a46520ff980586320c68b569f44cbb97c313c30ccb24dffde8dcf20739e1897109bbac1bcc2c62da129579f71c16e8ff2079782c9d8014278bb3c3947fc177db7b234f203c255eb9ece4a6f02ea8bdff93d546d94f27a06ccb53ecdb619033a00cbd7df15aa9317dd6595c3c2151d1d4b601fcecdd7e57f3266093ed03bb1dfda8daf60a3321bb5d18af3106eb007ab946d51dc8ef5f3a0d6818fa1cb37a23d26ff22d29de2d44fdd887f6a889ffe6bc5ad6b700f9ed9f053f5dda11142ebc43b1ff8f2c07bc21690a5233ffbe2fc0aafcabadee7b07a40bd6623a2897025a0a84ba91f1d02ac1545d7d09294f48013be64f8bf3471e6bd1d9aa22d4f6c81ddb39449ee357218881870b4f2bd39d2ca822bdd1cb580dc7cf3401a15876b9580b9509491b292115f7a0e6ad5421d0098f517cc9d946f509f6fd6df6d7f32d02a758a1b11062865bce9ebeb72b717b5829edd75335e348311b9e49b4d89ad1524b503ff6c4522a9c844445be0f83f20b15819d8c61213f3d60726cf2da3f6731c19d286d5fd684ae24e072d325e3ece36d52a3b61c16d292d039987e17a2f14080519102bd577286f933abf98d453481c5cd75f2766c1e2e7ee40c8858b52da15a5869767b7e3ec5b86209ab39f52f9855efbc80ffc903cef91d63b6b0362360a8ad8c76918e0cc381398ed1a023b370337d80d62577e9f0d4f67563047a8fea418f96e7933147a52ce4211c0226dbc8955196d36b4ebef6b6ffae9e94f266bca38cb7545d0caa63e2864c753bceb108f807294f2e9ef2b677251f0a35be12e9964a1204d256903021ec376762939cd7a49742e1e9d09a6d76e07204b516c525fd8f0ed7ec3a6a7a3d8354b3a9255668165f134cc1e831278461374df8f10c6414d12db9588d841a50f6ec640ff12867513b15550adfebac3ad7a40753e65bc75f91a1c4f342748c7fb4e088acc060f0d356986b52e5f7de514d1f875a1d78d58e824b664c209e9c05d74149a9a98701585b555653fad631ec19f6f6aff4122c4030e6c7b3208561e6a84f69a1b1b1dca77ecb5565f1c81a2b9934ab851b4785e026aba9b453bbe6c95cec1ded04604c44184697e180d14ce589bf323031e21e7994e0c3da286f28010833ae5cc3b311b84e3aa5cf64b0b63944c0740c3e29bc8cb2981b20585f4613f42f485a7dbf4dd0e5d5064bf0c26209cc0f0b5e2ab07711e83525390b581bf4812f9d"}}}}, &(0x7f0000001180)={0x1, 0x3, [0x545, 0x4f4, 0x2c7, 0x896]}) syz_emit_ethernet(0x81, &(0x7f0000000080)={@empty, @multicast, @val={@val={0x9100, 0x4, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x805, {0x3, 0x5f, 0x1b, "3a3ea497840f337dcc5a5ee3b7abf95f9285b1f550c9cd07730917561b8561064776ce48a0b415c70de1af351a422c310ab55b0b3cf58714f6fdde16642023d7349a27c7e731d297949a2cfc45a40b5741e27b767fb9cc56792327454d1754f503c9e6e8639467ee"}}}}, &(0x7f0000000000)={0x0, 0x2, [0xa73, 0x434, 0xc6c, 0x150]}) 11:12:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) [ 349.654290] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 361.527441] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 11:12:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x3e7, &(0x7f0000000580)=0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x4004800, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 11:12:40 executing program 3: stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() setresuid(0x0, r0, r1) r2 = fork() tkill(r2, 0x36) 11:12:40 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0) 11:12:40 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x108, r0, 0x111, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0x100000001}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x100000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0xffffffffffff891f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffa}}]}, 0x108}, 0x1, 0x0, 0x0, 0x44840}, 0x80) 11:12:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f00000190c0)=ANY=[], 0xfda6) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/67) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) 11:12:40 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 11:12:40 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:40 executing program 2: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0xfd, 0xf7, 0x8, 0x0, 0x2, 0x10, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24d, 0x1, @perf_config_ext={0x0, 0x7f}, 0x500, 0x4, 0x0, 0x6, 0x7, 0x7, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffff9}, r0, 0x8, 0xffffffffffffffff, 0x0) 11:12:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x3, 0x9, 0x7, 0xff, 0xffffffffffffffa1}}, &(0x7f0000000140), 0x1000) 11:12:40 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) [ 368.313014] tmpfs: Bad value for 'mpol' 11:12:40 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:12:40 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:40 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46d9f486c88b035c12470200000000008000000000000003003e000100000000000000000000004000000000000000ae01000000000000000000000000380001000000000000000300000000000000000000000000000000000000000000000000000000000000b9b36f87110d1e8eee5b1cfd17fa04e2bdeb5132a3a5e5e4ed3a8c0969f5fec8011240dd1195cd6094965dcbdb8a9a2abdfcf653cb24739b7de0468f83e5b63d114ef012912aa745382336ac1a24feafe908df7a78055d184315586cdaa96b97c9e32102174e517c874350c83435a5dd21969097298070c19fa496f829014290302daead6a7e30d1c209ce8277bbcde05d1ff28884765b837a086b25809d4f6df233ca5bd59828ac3cf7749c3ecc154b66f0392ca5745cdbe449b583d5f244196d71ede753cc1cb366cef98ae5b6d187be6ce2c02e150181381f72da8d64d0d2cedc6187de0f41bb176ff7f8236151ee20da611c9d693b09f7e5589e4b44f19fb27ef9db29a7a0c9a4bb7ee0af32b966e6649190c0c080c6bb0aee505ee664561aed99e59c06cc109388bce8766f7a60dedfdb5ba9e613ce2f928f69aefe85780c4d67a3f08af876c04c67"], 0xa78) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1/file0\x00', 0x42000, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) [ 368.332719] tmpfs: Bad value for 'mpol' 11:12:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x10, 0x0, 0x1, [@generic="913624a8"]}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8001}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x11d4, 0x35, 0x110, 0x70bd2d, 0x25dfdbfe, {0x3}, [@nested={0x1024, 0x39, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x1f, 0x0, 0x0, @pid}, @generic="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", @typed={0x8, 0x59, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x5e, 0x0, 0x0, @fd}]}, @nested={0x18, 0x6e, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@remote}]}, @nested={0x88, 0xa, 0x0, 0x1, [@generic="9ab20495f80110f10b865a78aeec2e8a61832b58227b76c1b93bd19c3627e893f565f23130c1d0d0e2b838240e3cfe042712772e020d3a2d62d77dc52dfca73e65f560e5cae7f437d4303b3110224ea67dc304385bd73d967d8a87e17cd94e2b90288c6dbc336d0ceb4cce82cc3d9e3d9260464886652a6200252435305847a287f4f782"]}, @nested={0x6f, 0x6d, 0x0, 0x1, [@typed={0x4, 0x17}, @generic="a25951543b5025aee7f2c8ea1f0eddc39cacb7c933828273ed3f88615ad9713f1feb87df6d2e89de183add5cf59cb00a6e4917c95b47d6a88564a3698cb3fc", @typed={0x14, 0x82, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x1b}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x81}, @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @generic="9b0b974079b89f12b2d2d56455416bc8f7c4f050f392120910311aad919cc1ec1239394ca6eadda79d7da9ba40055a465d2381e24eb6e4e31d217cc1cafb6d89da05cf097773346aeb41348b970b37d3dc7c97355196ea004a9a8f18477b989bbc20bcff4fc870db573364ed4f63a325a1a62ab8188d0702fcaa96e5c56872de29ca9afe5a3e21e0e1b1"]}, 0x11d4}, 0x1, 0x0, 0x0, 0x840}, 0x2000c088) 11:12:40 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x36) 11:12:40 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r3 = syz_io_uring_complete(r1) io_uring_enter(r3, 0x2a19, 0xa0b5, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) [ 368.425233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=5267 comm=syz-executor.1 [ 368.429478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5267 comm=syz-executor.1 [ 368.443811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=5270 comm=syz-executor.1 [ 368.447641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=5270 comm=syz-executor.1 11:12:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) fcntl$lock(r0, 0x6, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x4, 0x3, 0x3000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) 11:12:52 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:12:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa78) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1/file0\x00', 0x42000, 0x10) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) 11:12:52 executing program 1: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10020004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x2, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38383037323533333400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000713aa3a4ba984e5d8a0373c06ca5ba29010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000b48320edc2622a6afcc123a1a6d130c4000000000000000000200020000100"/64, 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000060ed753160ed753100000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000def4655fdef4655fdef4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000322728ea0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000def4655fdef4655fdef4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feb0eba70000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3838303732353333342f66696c65302f66696c653000000000000000000000000000000000000000000000e06e12cc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x2200}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x3fff}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800)) 11:12:52 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:12:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:52 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() setresuid(0x0, 0x0, 0x0) r0 = fork() tkill(r0, 0x36) 11:12:52 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = dup2(r3, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) r6 = dup2(r5, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000000240)=""/61, 0x3d}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0xc800}, 0x0) readv(r7, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 11:12:53 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:12:53 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 11:12:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r0, 0x0, 0x200f5ef, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file1\x00', 0x0) fchmod(r3, 0x0) 11:12:53 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() setresuid(0x0, 0x0, 0x0) r0 = fork() tkill(r0, 0x36) 11:12:53 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:12:53 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) openat(r0, &(0x7f0000000000)='./file0/file2\x00', 0x82, 0x40) 11:12:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0xf8, 0xfa}, 'port1\x00', 0x28, 0x2, 0x3a47, 0x80000000, 0x2, 0x6, 0x15, 0x0, 0x2, 0x90}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000300)='./file1\x00', 0x2000, 0x140) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) write$sndseq(r3, &(0x7f0000000240)=[{0x4c, 0x40, 0x5, 0x3f, @time={0x8b2, 0x2}, {0x3, 0x9}, {0x1, 0x3}, @connect={{0x4}, {0x20}}}, {0x92, 0xff, 0x2, 0x80, @time={0x5, 0x80000000}, {0x2}, {0x40, 0x4}, @time=@tick=0x7}, {0x7, 0x7, 0x1, 0x95, @time={0x115b, 0x1}, {0x5, 0x81}, {0x1a, 0x80}, @time=@time={0x9a, 0x3ff}}, {0x20, 0x80, 0x8, 0x3d, @tick=0x64933020, {0xfc, 0xff}, {0x4}, @control={0x3, 0x2, 0x3}}, {0x40, 0x4, 0x7f, 0xaa, @time={0x9, 0x200}, {0x40, 0x2}, {0x87, 0x2}, @control={0x80, 0x1, 0x4}}, {0x1, 0x2, 0x7, 0xff, @time={0x7, 0x1}, {0x5, 0xff}, {0x3}, @time=@tick=0x10001}], 0xa8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1}}, 0x0, 0x0, 0xc, 0x0, "c397668d6a93487de247e21acef7c1e213e61df87dc668b4524397b467cb4d930c41e7d17fc4d1d7a611bc13817dd940b85f40ba8399c28b8e8e04b757721bcd5d22a8518cf68b1bc510cd57bab7dd05"}, 0xd8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 11:12:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) fcntl$lock(r0, 0x6, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x4, 0x3, 0x3000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) 11:12:53 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:05 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 11:13:05 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 11:13:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="30050000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fddbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:13:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0x0, 0x9, 0x9, 0x101, 0x9}) syz_open_dev$vcsn(&(0x7f0000000040), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0xe61a}) ppoll(&(0x7f0000000380)=[{}, {r1, 0x2020}], 0x2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x4c6400, 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r3, r0, 0x0, 0xd315) 11:13:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) fcntl$lock(r0, 0x6, 0x0) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000100)={'\x00', 0x4, 0x3, 0x3000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f00000002c0)=ANY=[@ANYBLOB="010027000637836e51785f31680bceb918e1e0473d6733eef2702a5a7a317dc59a44025bfcae779cb2c93998a8224836b9f7fd58c2832d6fc8a97b1840d90daf5f651ef27f0b46b1168ad1007d27554e99bf911bfe257d0a78960e1c9eb6edc0f5b4ba7dec5d44e972593ae709551edf2fae7c91706e72a82871118e777e0fa724808a8426ce78d8c1019eea683f64851091db612caa3873dc7c974db192da950cc39964dddfd001f214906cbb794e03484c0e25885cb4114934b7f6f48b9092e6ecda916275d5426e431fd6f1a6cd1ab02c9373d9fe11047af1bb9e92df549823dca47d108121ab29c3ec860f9a447cdea7d9a3f70475a80010c8ca4ab06796412be5fdbf6e18120b9acb8878e573"]) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) 11:13:05 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:05 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = getegid() setgid(r1) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r1}, {0x8, 0x3, r2}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) lchown(&(0x7f0000000180)='./file0\x00', r0, r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffff8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x2) 11:13:05 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() setresuid(0x0, 0x0, 0x0) r0 = fork() tkill(r0, 0x36) [ 393.566817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 393.583911] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:13:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2a}, 0x0, 0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1ff, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) 11:13:06 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 393.599575] syz-executor.1 (5369) used greatest stack depth: 23168 bytes left 11:13:06 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) fork() tkill(0x0, 0x36) 11:13:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="30050000", @ANYRES16=r1, @ANYBLOB="00022cbd7000fddbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x530}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:13:06 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}]}) [ 393.805471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 393.873525] ISOFS: Unable to identify CD-ROM format. 11:13:19 executing program 0: syz_io_uring_setup(0x70d7, &(0x7f0000000040)={0x0, 0xe427, 0x10, 0x1}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = fork() process_vm_writev(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/187, 0x107}], 0x1, &(0x7f0000000000)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, 0x0) 11:13:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x100) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x200, 0x148) r3 = socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x7ffffffc) 11:13:19 executing program 6: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}]}) 11:13:19 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 11:13:19 executing program 4 (fault-call:2 fault-nth:0): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:19 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) fork() tkill(0x0, 0x36) 11:13:19 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) fork() tkill(0x0, 0x36) 11:13:19 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 406.909025] FAULT_INJECTION: forcing a failure. [ 406.909025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 406.910467] CPU: 1 PID: 5415 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 406.911298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 406.912603] Call Trace: [ 406.912920] dump_stack+0x107/0x163 [ 406.913353] should_fail.cold+0x5/0xa [ 406.913822] _copy_from_user+0x2e/0x1b0 [ 406.914314] __copy_msghdr_from_user+0x91/0x4b0 [ 406.914871] ? __ia32_sys_shutdown+0x70/0x70 [ 406.915447] ? perf_trace_lock+0xac/0x490 [ 406.915932] ? __lock_acquire+0xbc2/0x5b20 [ 406.916426] sendmsg_copy_msghdr+0xa1/0x160 [ 406.916934] ? __ia32_sys_recvmmsg+0x260/0x260 [ 406.917462] ? perf_trace_lock+0xac/0x490 [ 406.917928] ? lock_downgrade+0x6d0/0x6d0 [ 406.918406] ? __lockdep_reset_lock+0x180/0x180 [ 406.918948] ___sys_sendmsg+0xc6/0x170 [ 406.919454] ? sendmsg_copy_msghdr+0x160/0x160 [ 406.920035] ? __fget_files+0x228/0x410 [ 406.920428] ? lock_downgrade+0x6d0/0x6d0 [ 406.920838] ? find_held_lock+0x2c/0x110 [ 406.921250] ? __fget_files+0x251/0x410 [ 406.921646] ? __fget_light+0xea/0x280 [ 406.922034] __sys_sendmsg+0xe5/0x1b0 [ 406.922526] ? __sys_sendmsg_sock+0xb0/0xb0 [ 406.923007] ? rcu_read_lock_any_held+0x69/0x90 [ 406.923605] ? fput_many+0x2f/0x1a0 [ 406.924073] ? ksys_write+0x1a5/0x250 [ 406.924598] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 406.925320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 406.925937] ? trace_hardirqs_on+0x5b/0x180 [ 406.926494] do_syscall_64+0x33/0x40 [ 406.926969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 406.927678] RIP: 0033:0x466609 [ 406.928113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 406.930459] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.931497] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 406.932404] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 406.933339] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.934285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.935207] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:13:19 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 11:13:19 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) fork() tkill(0x0, 0x36) 11:13:19 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6, 0x95, 0x3, 0x5fe2, 0xf969, 0x6}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="000100001600010f000000000000000000000000000000000000ffffac1e0001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc0000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="aa25a4dd4a4221e3c79226cb71d4dbb965190f50b87d284fa54689d68088a44ef9c1952833089900c2c5dff6c9f944e78fb760457f1ea02547b978ab8015fee9cf3a24a3165f36b04b"], 0x100}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0xe6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) ioctl$TIOCEXCL(r3, 0x540c) r4 = syz_open_pts(r3, 0x4100) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000001c0)={0xff, "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"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) r5 = memfd_create(&(0x7f0000000040)='/dev/net/tun\x00', 0x6) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000740)={0x0, 0x8}) dup3(r2, r1, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) [ 407.014820] ISOFS: Unable to identify CD-ROM format. 11:13:19 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:19 executing program 4 (fault-call:2 fault-nth:1): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000000c0)={0x80000001, 0x200, 0x20}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x4) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x99, "391eb6a451980240"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) [ 407.121050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33608 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.131703] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 11:13:19 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b36, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/216) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 11:13:19 executing program 7: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:13:19 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) [ 407.194410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50422 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.205498] FAULT_INJECTION: forcing a failure. [ 407.205498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.207444] CPU: 0 PID: 5444 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 407.208637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 407.208642] Call Trace: [ 407.208657] dump_stack+0x107/0x163 [ 407.208673] should_fail.cold+0x5/0xa [ 407.208691] _copy_from_user+0x2e/0x1b0 [ 407.208707] iovec_from_user+0x139/0x3f0 [ 407.208723] __import_iovec+0x67/0x590 [ 407.208734] ? __ia32_sys_shutdown+0x70/0x70 [ 407.208744] ? perf_trace_lock+0xac/0x490 [ 407.208764] import_iovec+0x83/0xb0 [ 407.208780] sendmsg_copy_msghdr+0x12d/0x160 [ 407.208793] ? __ia32_sys_recvmmsg+0x260/0x260 [ 407.208808] ? lock_downgrade+0x6d0/0x6d0 [ 407.208822] ? __lockdep_reset_lock+0x180/0x180 [ 407.208836] ___sys_sendmsg+0xc6/0x170 [ 407.208849] ? sendmsg_copy_msghdr+0x160/0x160 [ 407.208864] ? __fget_files+0x228/0x410 [ 407.208875] ? lock_downgrade+0x6d0/0x6d0 [ 407.208887] ? find_held_lock+0x2c/0x110 [ 407.208906] ? __fget_files+0x251/0x410 [ 407.208925] ? __fget_light+0xea/0x280 [ 407.208943] __sys_sendmsg+0xe5/0x1b0 [ 407.208954] ? __sys_sendmsg_sock+0xb0/0xb0 [ 407.208965] ? rcu_read_lock_any_held+0x69/0x90 [ 407.208980] ? fput_many+0x2f/0x1a0 [ 407.208992] ? ksys_write+0x1a5/0x250 [ 407.209010] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 407.209023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 407.209035] ? trace_hardirqs_on+0x5b/0x180 [ 407.209049] do_syscall_64+0x33/0x40 [ 407.209062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 407.209071] RIP: 0033:0x466609 [ 407.209083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 407.209090] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.209104] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 407.209110] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 407.209118] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 407.209125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.209132] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 407.328054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=18432 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.372067] ISOFS: Unable to identify CD-ROM format. [ 407.411997] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=89 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.413867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=143 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.415672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=179 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.417359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=224 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.425135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.426890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=109 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 [ 407.448119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5426 comm=syz-executor.2 11:13:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x100) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x200, 0x148) r3 = socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x7ffffffc) 11:13:32 executing program 7 (fault-call:0 fault-nth:0): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:13:32 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:32 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6, 0x95, 0x3, 0x5fe2, 0xf969, 0x6}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="000100001600010f000000000000000000000000000000000000ffffac1e0001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc0000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="aa25a4dd4a4221e3c79226cb71d4dbb965190f50b87d284fa54689d68088a44ef9c1952833089900c2c5dff6c9f944e78fb760457f1ea02547b978ab8015fee9cf3a24a3165f36b04b"], 0x100}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="73793132e421144efcd7201d820aa329484204914a54371c605d20152111f0bd8b5bcccb3864a05a2b9cd4e7de886a14caa4bbe7b5532fad71e770f31f011f20b6a1d8f22438f14917e1e1a46d4abdc144b7d5a4a1cf0df1f026bdcd8a78df0c52994181bf3f27a8630e2134c339452b523575bfc584b6ded4f50414b99051234e4fcde5a73db4fae258dbb9184e459b7656c3b48ae42bed721d8e2caf1453b12e8155e1fa3ab4b12b3a9ff7823c805b1903018e06ca4f597ea6991fd864594bf705380cb80b0096bc233ddcf28d79399de45a7376e700000000000000000022000000000000006242e11b7e4400444484e5a3c8524f1198df21cdb2e375ff82f036a19d6b558a77330112262a2c77a5c837ac68ab74bd5f8d03dd9fc781585d7e4e297f17273ba0ab2816fe9d3f7ed20e0595268dfb890779a5e7280cb6e56ad5a7fd02"], 0xe6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) ioctl$TIOCEXCL(r3, 0x540c) r4 = syz_open_pts(r3, 0x4100) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000001c0)={0xff, "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"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) r5 = memfd_create(&(0x7f0000000040)='/dev/net/tun\x00', 0x6) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000740)={0x0, 0x8}) dup3(r2, r1, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) 11:13:32 executing program 4 (fault-call:2 fault-nth:2): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:32 executing program 3 (fault-call:4 fault-nth:0): setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) 11:13:32 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x770, 0x5}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000180)={0x2000}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x4, 0x5050, 0x82d7, 0x8, 0x1614, 0xa25}) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xf53}}, 0x0) 11:13:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f00000000c0)={0x80000001, 0x200, 0x20}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x4) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x99, "391eb6a451980240"}) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) [ 419.912519] FAULT_INJECTION: forcing a failure. [ 419.912519] name failslab, interval 1, probability 0, space 0, times 1 [ 419.914959] CPU: 0 PID: 5467 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 419.916347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 419.918651] Call Trace: [ 419.919203] dump_stack+0x107/0x163 [ 419.919975] should_fail.cold+0x5/0xa [ 419.920758] ? __do_sys_memfd_create+0xfb/0x450 [ 419.921709] should_failslab+0x5/0x10 [ 419.922497] __kmalloc+0x72/0x3e0 [ 419.923208] __do_sys_memfd_create+0xfb/0x450 [ 419.924086] ? ksys_write+0x1a5/0x250 [ 419.924800] ? memfd_file_seals_ptr+0x150/0x150 [ 419.925751] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 419.926819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 419.927880] do_syscall_64+0x33/0x40 [ 419.928640] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 419.929683] RIP: 0033:0x466609 [ 419.930339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.934104] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 419.935667] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 419.937121] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 419.938563] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 419.940028] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 419.941479] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 419.988077] FAULT_INJECTION: forcing a failure. [ 419.988077] name failslab, interval 1, probability 0, space 0, times 0 [ 419.990189] CPU: 1 PID: 5477 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 419.991401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 419.993423] Call Trace: [ 419.993881] dump_stack+0x107/0x163 [ 419.994545] should_fail.cold+0x5/0xa [ 419.995231] ? __alloc_skb+0x6d/0x620 [ 419.995247] should_failslab+0x5/0x10 [ 419.995259] kmem_cache_alloc_node+0x55/0x370 [ 419.995277] __alloc_skb+0x6d/0x620 [ 419.995307] netlink_sendmsg+0x94f/0xd90 [ 419.995327] ? netlink_unicast+0x7e0/0x7e0 [ 419.995351] ? netlink_unicast+0x7e0/0x7e0 [ 419.995364] sock_sendmsg+0x150/0x190 [ 419.995378] ____sys_sendmsg+0x709/0x870 [ 419.995393] ? kernel_sendmsg+0x50/0x50 11:13:32 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x6, 0x95, 0x3, 0x5fe2, 0xf969, 0x6}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="000100001600010f000000000000000000000000000000000000ffffac1e0001ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc0000000000000000000000000000000000000033000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00", @ANYRES32=0x0, @ANYBLOB="aa25a4dd4a4221e3c79226cb71d4dbb965190f50b87d284fa54689d68088a44ef9c1952833089900c2c5dff6c9f944e78fb760457f1ea02547b978ab8015fee9cf3a24a3165f36b04b"], 0x100}}, 0x0) write$binfmt_misc(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0xe6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bridge\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) ioctl$TIOCEXCL(r3, 0x540c) r4 = syz_open_pts(r3, 0x4100) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000001c0)={0xff, "9ca356af0882e7e69595350162d5553728a68aa7a95238f1287b8962abe61e4fddd1543e3f2da49ddb795fc55215439fc902e93d8f81ae53f8ae05832a1a7d00003b560af0a549c1d01dfdb489a77c0d96769570743998eaf5b11c4d9ed0bc82858dd30ce515a21706bdef93a16f7449ed24ada4cae72557caed0fbdc71feb968b3e23b3a0750eb9a7713f0972f8b726090c6560c790836dbefcbf8710a67608166bcd4c72f67f1764837ca69597b9a4b50af64d984b31ce8d1e640ac933a805d77e8e139106d78f0b3f511156598ca2f55011ef566dfe96a4f463abc42d110adff694647b7d32e0cdac97df1131690d8dabb6d14cd6e3c9e3a8f334d0a9fd039e0322e1467434279b72369780288bc3f59284ccd586637d6ea8b10977e3d6880a260031e514aa91c27da4e6c2cc5a9105ced13e316c14d12b519616c164d625d1ad23bc6aedf7e5e61d9ed7917a300e8dc6f600084f0c07355328a1decaea809f85cd52904683ed211211796eb4f2cd7342192fd9b04e06b761e98b68894dfcb302ee515fb29d7887785ff72ebb3eedb5acf5c48be52ce45e48414dfa621e74f39485456c1a29c5ee7d3be72f73b4983cdaa41377c42bf5d62a0732846a8dbeb86e9b4770e79bfeb4355c1905b38ca2bef0ccd4af085c5b4395247dfec8761acebb654fa184ef53789e2e175def68b102613315bf9580336ed3579dee66259f"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) r5 = memfd_create(&(0x7f0000000040)='/dev/net/tun\x00', 0x6) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000740)={0x0, 0x8}) dup3(r2, r1, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) [ 419.995404] ? __ia32_sys_recvmmsg+0x260/0x260 [ 419.995422] ? lock_downgrade+0x6d0/0x6d0 [ 419.995437] ? __lockdep_reset_lock+0x180/0x180 [ 419.995454] ___sys_sendmsg+0xf3/0x170 [ 419.995469] ? sendmsg_copy_msghdr+0x160/0x160 [ 419.995485] ? __fget_files+0x228/0x410 [ 419.995498] ? lock_downgrade+0x6d0/0x6d0 [ 419.995512] ? find_held_lock+0x2c/0x110 [ 419.995533] ? __fget_files+0x251/0x410 [ 419.995552] ? __fget_light+0xea/0x280 [ 419.995572] __sys_sendmsg+0xe5/0x1b0 [ 419.995584] ? __sys_sendmsg_sock+0xb0/0xb0 [ 419.995596] ? rcu_read_lock_any_held+0x69/0x90 [ 419.995627] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 419.995642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 419.995655] ? trace_hardirqs_on+0x5b/0x180 [ 419.995670] do_syscall_64+0x33/0x40 [ 419.995685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 419.995694] RIP: 0033:0x466609 [ 419.995708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.995716] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.995732] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 419.995740] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 419.995747] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 11:13:32 executing program 7 (fault-call:0 fault-nth:1): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 419.995755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.995763] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:13:32 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x7f, 0x80, 0x9, 0x0, 0xfffffffffffff001, 0x400, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xcae7, 0x2, @perf_config_ext={0x4}, 0x2048, 0x1, 0xffffffc1, 0x6, 0x5, 0x5469, 0x0, 0x0, 0xffff288c, 0x0, 0x1}, r1, 0x6, r0, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x100000001}]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x86, 0x3, 0x17, 0x0, 0x6, 0x9404, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x24a, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x41, 0x1ff, 0xffffff80, 0x1, 0x7, 0x1721d78e, 0x4, 0x0, 0x800, 0x0, 0xffffffffffff7fff}, r2, 0xffffffffffffffff, r3, 0x9) [ 420.127669] FAULT_INJECTION: forcing a failure. [ 420.127669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.130733] CPU: 1 PID: 5478 Comm: syz-executor.3 Not tainted 5.10.56 #1 [ 420.132383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 420.135108] Call Trace: [ 420.135772] dump_stack+0x107/0x163 [ 420.136535] should_fail.cold+0x5/0xa [ 420.137203] FAULT_INJECTION: forcing a failure. [ 420.137203] name failslab, interval 1, probability 0, space 0, times 0 [ 420.137314] _copy_to_user+0x2e/0x180 [ 420.140343] simple_read_from_buffer+0xcc/0x160 [ 420.141294] proc_fail_nth_read+0x194/0x220 [ 420.142175] ? proc_sessionid_read+0x220/0x220 [ 420.143112] ? security_file_permission+0x24e/0x570 [ 420.144164] ? proc_sessionid_read+0x220/0x220 [ 420.145103] vfs_read+0x228/0x580 [ 420.145819] ksys_read+0x12d/0x250 [ 420.146551] ? __ia32_sys_pwrite64+0x230/0x230 [ 420.147499] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 420.148562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 420.149618] do_syscall_64+0x33/0x40 [ 420.150375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.151424] RIP: 0033:0x41935c [ 420.152075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 420.155827] RSP: 002b:00007f5bece2a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.157377] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 420.158829] RDX: 000000000000000f RSI: 00007f5bece2a1e0 RDI: 0000000000000003 [ 420.160290] RBP: 00007f5bece2a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.161739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.163190] R13: 00007ffcbbe1024f R14: 00007f5bece2a300 R15: 0000000000022000 [ 420.164679] CPU: 0 PID: 5485 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 420.166064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 420.168380] Call Trace: [ 420.168915] dump_stack+0x107/0x163 [ 420.169795] should_fail.cold+0x5/0xa [ 420.170574] ? create_object.isra.0+0x3a/0xa20 [ 420.171515] should_failslab+0x5/0x10 [ 420.172290] kmem_cache_alloc+0x5b/0x350 [ 420.173122] create_object.isra.0+0x3a/0xa20 [ 420.174014] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 420.175052] __kmalloc+0x16e/0x3e0 [ 420.175789] __do_sys_memfd_create+0xfb/0x450 [ 420.176698] ? ksys_write+0x1a5/0x250 [ 420.177464] ? memfd_file_seals_ptr+0x150/0x150 [ 420.178416] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 420.179510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 420.180561] do_syscall_64+0x33/0x40 [ 420.181311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.182351] RIP: 0033:0x466609 [ 420.183004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.186750] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 420.188317] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 420.189767] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 420.191219] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 420.192673] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 420.194125] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 11:13:32 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x0, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:32 executing program 4 (fault-call:2 fault-nth:3): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 420.304889] selinux_netlink_send: 19 callbacks suppressed [ 420.304905] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33608 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.345849] FAULT_INJECTION: forcing a failure. [ 420.345849] name failslab, interval 1, probability 0, space 0, times 0 [ 420.348327] CPU: 0 PID: 5495 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 420.349711] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 420.352026] Call Trace: [ 420.352570] dump_stack+0x107/0x163 [ 420.353315] should_fail.cold+0x5/0xa [ 420.354096] ? create_object.isra.0+0x3a/0xa20 [ 420.355027] should_failslab+0x5/0x10 [ 420.355827] kmem_cache_alloc+0x5b/0x350 [ 420.356669] create_object.isra.0+0x3a/0xa20 [ 420.357566] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 420.358606] kmem_cache_alloc_node+0x169/0x370 [ 420.359557] __alloc_skb+0x6d/0x620 [ 420.360310] netlink_sendmsg+0x94f/0xd90 [ 420.361167] ? netlink_unicast+0x7e0/0x7e0 [ 420.362048] ? netlink_unicast+0x7e0/0x7e0 [ 420.362912] sock_sendmsg+0x150/0x190 [ 420.363695] ____sys_sendmsg+0x709/0x870 [ 420.364524] ? kernel_sendmsg+0x50/0x50 [ 420.365337] ? __ia32_sys_recvmmsg+0x260/0x260 [ 420.366272] ? lock_downgrade+0x6d0/0x6d0 [ 420.367118] ? __lockdep_reset_lock+0x180/0x180 [ 420.368092] ___sys_sendmsg+0xf3/0x170 [ 420.368894] ? sendmsg_copy_msghdr+0x160/0x160 [ 420.369834] ? __fget_files+0x228/0x410 [ 420.370643] ? lock_downgrade+0x6d0/0x6d0 [ 420.371500] ? find_held_lock+0x2c/0x110 [ 420.372336] ? __fget_files+0x251/0x410 [ 420.373156] ? __fget_light+0xea/0x280 [ 420.373962] __sys_sendmsg+0xe5/0x1b0 [ 420.374737] ? __sys_sendmsg_sock+0xb0/0xb0 [ 420.375651] ? rcu_read_lock_any_held+0x69/0x90 [ 420.376615] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 420.377691] ? syscall_enter_from_user_mode+0x1d/0x50 [ 420.378746] ? trace_hardirqs_on+0x5b/0x180 [ 420.379640] do_syscall_64+0x33/0x40 [ 420.380403] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.381454] RIP: 0033:0x466609 [ 420.382114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.385890] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.387457] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 420.388929] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 420.390403] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.391883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.393352] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:13:32 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:32 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={0x0, 0x770, 0x5}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000180)={0x2000}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x4, 0x5050, 0x82d7, 0x8, 0x1614, 0xa25}) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xf53}}, 0x0) [ 420.458923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50422 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 11:13:32 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x7f, 0x80, 0x9, 0x0, 0xfffffffffffff001, 0x400, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xcae7, 0x2, @perf_config_ext={0x4}, 0x2048, 0x1, 0xffffffc1, 0x6, 0x5, 0x5469, 0x0, 0x0, 0xffff288c, 0x0, 0x1}, r1, 0x6, r0, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x100000001}]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x86, 0x3, 0x17, 0x0, 0x6, 0x9404, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x24a, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x41, 0x1ff, 0xffffff80, 0x1, 0x7, 0x1721d78e, 0x4, 0x0, 0x800, 0x0, 0xffffffffffff7fff}, r2, 0xffffffffffffffff, r3, 0x9) [ 420.513899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=18432 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.587495] ISOFS: Unable to identify CD-ROM format. [ 420.630282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=89 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.633306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=143 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.636183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=179 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.639029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=224 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.676028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.678889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=109 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 [ 420.684515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5481 comm=syz-executor.2 11:13:45 executing program 7 (fault-call:0 fault-nth:2): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:13:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x100) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) openat(r2, &(0x7f0000000000)='./file1\x00', 0x200, 0x148) r3 = socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x7ffffffc) 11:13:45 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x7f, 0x80, 0x9, 0x0, 0xfffffffffffff001, 0x400, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xcae7, 0x2, @perf_config_ext={0x4}, 0x2048, 0x1, 0xffffffc1, 0x6, 0x5, 0x5469, 0x0, 0x0, 0xffff288c, 0x0, 0x1}, r1, 0x6, r0, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000540)=[{0x0, 0x0, 0x100000001}]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0x86, 0x3, 0x17, 0x0, 0x6, 0x9404, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x24a, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x41, 0x1ff, 0xffffff80, 0x1, 0x7, 0x1721d78e, 0x4, 0x0, 0x800, 0x0, 0xffffffffffff7fff}, r2, 0xffffffffffffffff, r3, 0x9) 11:13:45 executing program 4 (fault-call:2 fault-nth:4): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:45 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:45 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') open(&(0x7f0000001840)='./file1\x00', 0x680800, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x509182, 0x42) symlinkat(&(0x7f0000000040)='./file1\x00', r1, &(0x7f00000000c0)='./file1\x00') mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) openat(r1, &(0x7f0000001700)='./file0\x00', 0x0, 0xce) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) name_to_handle_at(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f0000001680)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0xfffffffd, 0x7, 0x4c13b72c, 0x8}}, &(0x7f00000016c0), 0x600) renameat(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000280)='./file0\x00') stat(&(0x7f00000017c0)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x2, 0x5, &(0x7f0000001540)=[{&(0x7f0000000300)="f6bfa4a9ac6cae447ce374467b5afc50b59472e611ac54323a0b88852571a87521af9c385abac5272f179d159f938f5e741c9629789546a081cf20b350536ebb11e45fe4149c60f11a040a3404517b08747a50ea764ee17892983b4d30fa2da351cc89c337feb29db97cf9677590549c91edfdd708c95b54effc5473b074d9e60da043106563194a5f6ea87461ab64ab2c5dfb3e890d6d416ccd5b5dd933eec7e8b3bc6831f294ae24f37f26989b786122fed0b338295f874f7db9cf22bd87c678217895bef72d23c4fbf5d0747f046253e2eaa299e4e8", 0xd7, 0xfffffffffffffff9}, {&(0x7f0000000400)="8a184efc2b987142a297ace631a506a4a014a292de8226728966f8de74e60e65560142a22fb4ea25884f1ee317ac7388a0d5b59c886250a2b663abc1e9411e3ea6c5d9894ddc85faac51c4029cb6fed36c82b2ea437faa5de3cae9f43694cc6fa93b8525c51b7c69ed0ba1c12fdac331aa77891b89c2cb124a970250182ad570876ad4", 0x83, 0x3}, {&(0x7f00000004c0), 0x0, 0x1ff}, {&(0x7f0000000500)="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", 0x1000, 0xfffffffffffffffd}, {&(0x7f0000001500)="522d7c913c86ec66f9a3e91127c8276ed32dff8c7714908df6f23a69ebb63fb432a5", 0x22, 0x9}], 0x2000, &(0x7f00000015c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x67, 0x65, 0x35, 0x5b]}}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x32]}}}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x2d, 0x36]}}}}, {@huge_always}, {@huge_within_size}, {@uid={'uid', 0x3d, r3}}, {@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x78, 0x25]}}, {@huge_advise}], [{@context={'context', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000001800), 0x4102, 0x0) 11:13:45 executing program 6: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setsig(r0, 0xa, 0x7) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file2\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file2\x00', 0x0) 11:13:45 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) [ 432.970212] FAULT_INJECTION: forcing a failure. [ 432.970212] name failslab, interval 1, probability 0, space 0, times 0 [ 432.972239] CPU: 0 PID: 5518 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 432.973155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 432.974664] Call Trace: [ 432.975032] dump_stack+0x107/0x163 [ 432.975542] should_fail.cold+0x5/0xa [ 432.976074] should_failslab+0x5/0x10 [ 432.976598] __kmalloc_node_track_caller+0x74/0x3f0 [ 432.977891] ? netlink_sendmsg+0x94f/0xd90 [ 432.978564] __alloc_skb+0xb1/0x620 [ 432.979787] netlink_sendmsg+0x94f/0xd90 [ 432.981089] ? netlink_unicast+0x7e0/0x7e0 [ 432.982507] ? netlink_unicast+0x7e0/0x7e0 [ 432.983915] sock_sendmsg+0x150/0x190 [ 432.985175] ____sys_sendmsg+0x709/0x870 [ 432.986530] ? kernel_sendmsg+0x50/0x50 [ 432.987861] ? __ia32_sys_recvmmsg+0x260/0x260 [ 432.989415] ? SOFTIRQ_verbose+0x10/0x10 [ 432.990822] ? lock_downgrade+0x6d0/0x6d0 [ 432.992254] ? __lockdep_reset_lock+0x180/0x180 [ 432.993743] ? SOFTIRQ_verbose+0x10/0x10 [ 432.995052] ___sys_sendmsg+0xf3/0x170 [ 432.996324] ? sendmsg_copy_msghdr+0x160/0x160 [ 432.997825] ? __fget_files+0x228/0x410 [ 432.999123] ? lock_downgrade+0x6d0/0x6d0 [ 433.000431] ? find_held_lock+0x2c/0x110 [ 433.001755] ? __fget_files+0x251/0x410 [ 433.003057] ? __fget_light+0xea/0x280 [ 433.004343] __sys_sendmsg+0xe5/0x1b0 [ 433.005523] ? __sys_sendmsg_sock+0xb0/0xb0 [ 433.006929] ? rcu_read_lock_any_held+0x69/0x90 [ 433.008411] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 433.009899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 433.011267] ? trace_hardirqs_on+0x5b/0x180 [ 433.012459] do_syscall_64+0x33/0x40 [ 433.013484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 433.014969] RIP: 0033:0x466609 [ 433.016071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.022098] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.024572] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 433.026865] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 433.029088] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 433.031314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.033512] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:13:45 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:45 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) [ 433.047989] FAULT_INJECTION: forcing a failure. [ 433.047989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.051844] CPU: 0 PID: 5523 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 433.054128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 433.057382] Call Trace: [ 433.058091] dump_stack+0x107/0x163 [ 433.059211] should_fail.cold+0x5/0xa [ 433.060337] _copy_from_user+0x2e/0x1b0 [ 433.061568] __do_sys_memfd_create+0x16d/0x450 [ 433.062999] ? memfd_file_seals_ptr+0x150/0x150 [ 433.064473] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 433.066132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 433.067774] do_syscall_64+0x33/0x40 [ 433.068922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 433.070534] RIP: 0033:0x466609 [ 433.071564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 433.077317] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 433.079725] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 433.081946] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 433.084189] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 433.086464] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 433.088693] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 11:13:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x9, 0x4, 0x4, 0x10, @local, @mcast1, 0x1, 0x7800, 0x9, 0x80}}) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x1ff, 0x4) sendmsg$inet6(r0, &(0x7f00000015c0)={&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdrdstopts={{0xe8, 0x29, 0x37, {0x3c, 0x19, '\x00', [@pad1, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private2}, @generic={0xf7, 0x80, "b0c14d2801d99a91723d865d7ed71d3de76710bb54ef53d0256b70872e350b13baf2b77c1354e5e72d52e087c4898a9795878202dd499d7d53006c342e315dca703cfa3061b5da0d9a21d92922d2328d8a229091d5f6ebd4575a8a4e7b63f3fb58d9897859d4ed2e6d15dc20aae047a1be0f5d41e92c9f74b958405fbb34311b"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8}]}}}], 0xe8}, 0x0) 11:13:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010000000000fbdbdf25ac141400000000000000000000000000fe8800000000000000000000000001010000000000800000020000abd2000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000000000000000000000000000000000000000000000008000"/112], 0xb8}}, 0x0) [ 433.236669] selinux_netlink_send: 14 callbacks suppressed [ 433.236682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33608 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.279825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50422 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.354187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=18432 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.417660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=89 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.421224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=143 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.423031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=179 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.424829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=224 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.427455] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.429311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=109 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 [ 433.432540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5532 comm=syz-executor.2 11:13:58 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0xee) 11:13:58 executing program 7 (fault-call:0 fault-nth:3): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:13:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x2, 0xffffffff) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x8, @remote}, {0x304, @link_local}, 0x4, {0x2, 0xfffc, @private}}) 11:13:58 executing program 2: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x4000000) syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@huge_within_size}]}) 11:13:58 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:13:58 executing program 4 (fault-call:2 fault-nth:5): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010000000000fbdbdf25ac141400000000000000000000000000fe8800000000000000000000000001010000000000800000020000abd2000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000000000000000000000000000000000000000000000008000"/112], 0xb8}}, 0x0) 11:13:58 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 445.701147] tmpfs: Unsupported parameter 'huge' [ 445.735008] FAULT_INJECTION: forcing a failure. [ 445.735008] name failslab, interval 1, probability 0, space 0, times 0 [ 445.736773] CPU: 1 PID: 5566 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 445.737719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 445.740439] Call Trace: [ 445.740846] dump_stack+0x107/0x163 [ 445.740863] FAULT_INJECTION: forcing a failure. [ 445.740863] name failslab, interval 1, probability 0, space 0, times 0 [ 445.743099] should_fail.cold+0x5/0xa [ 445.743675] ? create_object.isra.0+0x3a/0xa20 [ 445.744413] should_failslab+0x5/0x10 [ 445.744990] kmem_cache_alloc+0x5b/0x350 [ 445.745630] create_object.isra.0+0x3a/0xa20 [ 445.746280] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 445.747040] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 445.747822] ? netlink_sendmsg+0x94f/0xd90 [ 445.748489] __alloc_skb+0xb1/0x620 [ 445.749719] netlink_sendmsg+0x94f/0xd90 [ 445.750319] ? netlink_unicast+0x7e0/0x7e0 [ 445.750949] ? netlink_unicast+0x7e0/0x7e0 [ 445.751624] sock_sendmsg+0x150/0x190 [ 445.752791] ____sys_sendmsg+0x709/0x870 [ 445.753377] ? kernel_sendmsg+0x50/0x50 [ 445.754208] ? __ia32_sys_recvmmsg+0x260/0x260 [ 445.754890] ? lock_downgrade+0x6d0/0x6d0 [ 445.755540] ? __lockdep_reset_lock+0x180/0x180 [ 445.757079] ___sys_sendmsg+0xf3/0x170 [ 445.757705] ? sendmsg_copy_msghdr+0x160/0x160 [ 445.758415] ? __fget_files+0x228/0x410 [ 445.759023] ? lock_downgrade+0x6d0/0x6d0 [ 445.759955] ? find_held_lock+0x2c/0x110 [ 445.760623] ? __fget_files+0x251/0x410 [ 445.761159] ? __fget_light+0xea/0x280 [ 445.761720] __sys_sendmsg+0xe5/0x1b0 [ 445.762262] ? __sys_sendmsg_sock+0xb0/0xb0 [ 445.762858] ? rcu_read_lock_any_held+0x69/0x90 [ 445.763509] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 445.764247] ? syscall_enter_from_user_mode+0x1d/0x50 [ 445.764970] ? trace_hardirqs_on+0x5b/0x180 [ 445.765608] do_syscall_64+0x33/0x40 [ 445.766143] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.766903] RIP: 0033:0x466609 [ 445.767366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.770168] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.771294] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 445.772381] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 445.773459] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 445.774524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.775587] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 445.776706] CPU: 0 PID: 5562 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 445.777823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 445.779530] Call Trace: [ 445.780000] dump_stack+0x107/0x163 [ 445.780539] should_fail.cold+0x5/0xa [ 445.781083] ? shmem_alloc_inode+0x18/0x40 [ 445.781718] ? shmem_alloc_inode+0x18/0x40 [ 445.782356] should_failslab+0x5/0x10 [ 445.782925] kmem_cache_alloc+0x5b/0x350 [ 445.783533] ? shmem_destroy_inode+0x70/0x70 [ 445.784206] shmem_alloc_inode+0x18/0x40 [ 445.784818] ? shmem_destroy_inode+0x70/0x70 [ 445.785461] alloc_inode+0x63/0x230 [ 445.786018] new_inode+0x23/0x240 [ 445.786545] shmem_get_inode+0x15e/0xbc0 [ 445.787162] __shmem_file_setup+0xb8/0x310 [ 445.787820] ? _copy_from_user+0xfb/0x1b0 [ 445.788439] __do_sys_memfd_create+0x271/0x450 [ 445.789120] ? memfd_file_seals_ptr+0x150/0x150 [ 445.789818] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 445.790610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 445.791379] do_syscall_64+0x33/0x40 [ 445.791971] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 445.792734] RIP: 0033:0x466609 [ 445.793227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.795947] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 445.797078] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 445.798131] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 445.799178] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 445.800247] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 445.801309] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 11:13:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x401000, 0x4) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$VT_SETMODE(r0, 0x4b64, 0x0) 11:13:58 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0xc}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000002) dup3(r1, r0, 0x0) pwritev2(r2, &(0x7f0000001240)=[{&(0x7f0000000140)="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"}, {&(0x7f0000001140)="10c15fc36cdda9454330f12417617fd09d9a11c84c20f1f1c8217b35c05feb54bf29873a453c4c9adabc29f011bdae972c8645f38109c7ee5f476a5a6e649b99ef094eb907f52e7f484e0ea5698cc1c7b7f741c5e9e3ebcbe18209653f8a8ff3ce5aa24facd9c8fba7a85bd01783e8bf627b03a5565a3753c2cbafa31a62bf42afc33f1b2b178ab9c9b4cc0e923e681b39863d94ef772189e3e140e8f0a398c64a5754c11c2ab3290c684332cbe27cd8677a38f256df5a3ecdbbbdc158d7e035ad59f1530d947bcbf53535626021835a57a21c1fc866a12525db8c940b5e8a0e0612c6407f27038be65da4bad71d6e7f3bfdcfbb"}, {&(0x7f0000001280)="df8a6444650b86048bcba82cc1f5033e047cb6b6faa3128bfc68578d1575ffa63c98cf0c5453701c0c86e8686f7442edeb47a87ba126eb1d99e6ada8956ab78d7db6d9b9374ca269d1cdf96ee4ef6e1b5524d968bb35f4dc59aaf233d42f1eda6e9c41436e108875e98e50e29285633ba4bc1b6a123e1e9ffcd2bfaff0292e100a7f98184d8a1cebc19a2ed0d5923e5703d56f20807e3cb591d917620f695f600500"/177}], 0xfffffffffffff89, 0xfca, 0x8001, 0x1d) dup2(r2, r3) dup2(r0, r1) 11:13:58 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:58 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, 0x0) 11:13:58 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x4000) 11:13:58 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127d, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x5, 0xb91, 0x8, 0xc672}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x100000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3f, 0x401, 0x8, 0x3, 0x3}) 11:13:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010000000000fbdbdf25ac141400000000000000000000000000fe8800000000000000000000000001010000000000800000020000abd2000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000000000000000000000000000000000000000000000008000"/112], 0xb8}}, 0x0) 11:13:58 executing program 5 (fault-call:2 fault-nth:0): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 445.996676] FAULT_INJECTION: forcing a failure. [ 445.996676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.998429] CPU: 1 PID: 5587 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 445.999334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 446.000846] Call Trace: [ 446.001204] dump_stack+0x107/0x163 [ 446.001702] should_fail.cold+0x5/0xa [ 446.002215] _copy_from_user+0x2e/0x1b0 [ 446.002748] __copy_msghdr_from_user+0x91/0x4b0 [ 446.003370] ? __ia32_sys_shutdown+0x70/0x70 [ 446.003972] ? perf_trace_lock+0xac/0x490 [ 446.004520] ? __lock_acquire+0x1666/0x5b20 [ 446.005151] ? __lock_acquire+0xbc2/0x5b20 [ 446.005751] sendmsg_copy_msghdr+0xa1/0x160 [ 446.006331] ? __ia32_sys_recvmmsg+0x260/0x260 [ 446.006937] ? perf_trace_lock+0xac/0x490 [ 446.007489] ? lock_downgrade+0x6d0/0x6d0 [ 446.008053] ? __lockdep_reset_lock+0x180/0x180 [ 446.008759] ___sys_sendmsg+0xc6/0x170 [ 446.009340] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.010027] ? __fget_files+0x228/0x410 [ 446.010600] ? lock_downgrade+0x6d0/0x6d0 [ 446.011081] ? find_held_lock+0x2c/0x110 [ 446.011747] ? __fget_files+0x251/0x410 [ 446.012290] ? __fget_light+0xea/0x280 [ 446.012834] __sys_sendmsg+0xe5/0x1b0 [ 446.013258] ? __sys_sendmsg_sock+0xb0/0xb0 [ 446.013773] ? rcu_read_lock_any_held+0x69/0x90 [ 446.014439] ? fput_many+0x2f/0x1a0 [ 446.014913] ? ksys_write+0x1a5/0x250 [ 446.015464] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 446.016167] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.016896] ? trace_hardirqs_on+0x5b/0x180 [ 446.017467] do_syscall_64+0x33/0x40 [ 446.017996] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.018667] RIP: 0033:0x466609 [ 446.019093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.021488] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.022419] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 446.023380] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 446.024315] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.025311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.026115] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:13:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:13:58 executing program 7 (fault-call:0 fault-nth:4): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:13:58 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0xee00) 11:13:58 executing program 4 (fault-call:2 fault-nth:6): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:13:58 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010000000000fbdbdf25ac141400000000000000000000000000fe8800000000000000000000000001010000000000800000020000abd2000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000000000000000000000000000000000000000000000008000"/112], 0xb8}}, 0x0) [ 446.152465] blktrace: Concurrent blktraces are not allowed on loop4 [ 446.170209] FAULT_INJECTION: forcing a failure. [ 446.170209] name failslab, interval 1, probability 0, space 0, times 0 [ 446.171793] CPU: 1 PID: 5607 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 446.172770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 446.174340] Call Trace: [ 446.174716] dump_stack+0x107/0x163 [ 446.175230] should_fail.cold+0x5/0xa [ 446.175788] ? create_object.isra.0+0x3a/0xa20 [ 446.176433] should_failslab+0x5/0x10 [ 446.176969] kmem_cache_alloc+0x5b/0x350 [ 446.177547] create_object.isra.0+0x3a/0xa20 [ 446.178161] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 446.178882] kmem_cache_alloc+0x159/0x350 [ 446.179459] ? shmem_destroy_inode+0x70/0x70 [ 446.180079] shmem_alloc_inode+0x18/0x40 [ 446.180752] ? shmem_destroy_inode+0x70/0x70 [ 446.181366] alloc_inode+0x63/0x230 [ 446.181896] new_inode+0x23/0x240 [ 446.182385] shmem_get_inode+0x15e/0xbc0 [ 446.182963] __shmem_file_setup+0xb8/0x310 [ 446.183567] ? _copy_from_user+0xfb/0x1b0 [ 446.184174] __do_sys_memfd_create+0x271/0x450 [ 446.184818] ? memfd_file_seals_ptr+0x150/0x150 [ 446.185502] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 446.186228] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.186964] do_syscall_64+0x33/0x40 [ 446.187499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.188275] RIP: 0033:0x466609 [ 446.188737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.191353] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 446.192448] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 446.193475] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 446.194468] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 446.195489] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 446.196600] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 446.219475] FAULT_INJECTION: forcing a failure. [ 446.219475] name failslab, interval 1, probability 0, space 0, times 0 [ 446.221213] CPU: 0 PID: 5608 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 446.222185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 446.223894] Call Trace: [ 446.224295] dump_stack+0x107/0x163 [ 446.224851] should_fail.cold+0x5/0xa [ 446.225393] ? __skb_ext_alloc+0x19/0x80 [ 446.225966] should_failslab+0x5/0x10 [ 446.226533] kmem_cache_alloc+0x5b/0x350 [ 446.227145] __skb_ext_alloc+0x19/0x80 [ 446.227736] skb_ext_add+0x504/0x670 [ 446.228261] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 446.229026] __alloc_skb+0x3c1/0x620 [ 446.229582] netlink_sendmsg+0x94f/0xd90 [ 446.230204] ? netlink_unicast+0x7e0/0x7e0 [ 446.230847] ? netlink_unicast+0x7e0/0x7e0 [ 446.231489] sock_sendmsg+0x150/0x190 [ 446.232098] ____sys_sendmsg+0x709/0x870 [ 446.232713] ? kernel_sendmsg+0x50/0x50 [ 446.233296] ? __ia32_sys_recvmmsg+0x260/0x260 [ 446.233975] ? lock_downgrade+0x6d0/0x6d0 [ 446.234589] ? __lockdep_reset_lock+0x180/0x180 [ 446.235284] ___sys_sendmsg+0xf3/0x170 [ 446.235868] ? sendmsg_copy_msghdr+0x160/0x160 [ 446.236558] ? __fget_files+0x228/0x410 [ 446.237134] ? lock_downgrade+0x6d0/0x6d0 [ 446.237748] ? find_held_lock+0x2c/0x110 [ 446.238355] ? __fget_files+0x251/0x410 [ 446.238951] ? __fget_light+0xea/0x280 [ 446.239575] __sys_sendmsg+0xe5/0x1b0 [ 446.240174] ? __sys_sendmsg_sock+0xb0/0xb0 [ 446.240812] ? rcu_read_lock_any_held+0x69/0x90 [ 446.241533] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 446.242318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 446.243103] ? trace_hardirqs_on+0x5b/0x180 [ 446.243769] do_syscall_64+0x33/0x40 [ 446.244333] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 446.245093] RIP: 0033:0x466609 [ 446.245573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.248278] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.249402] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 446.250507] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 446.251575] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 446.252635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.253685] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 446.353563] ISOFS: Unable to identify CD-ROM format. 11:14:11 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0xc}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000080000002) dup3(r1, r0, 0x0) pwritev2(r2, &(0x7f0000001240)=[{&(0x7f0000000140)="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"}, {&(0x7f0000001140)="10c15fc36cdda9454330f12417617fd09d9a11c84c20f1f1c8217b35c05feb54bf29873a453c4c9adabc29f011bdae972c8645f38109c7ee5f476a5a6e649b99ef094eb907f52e7f484e0ea5698cc1c7b7f741c5e9e3ebcbe18209653f8a8ff3ce5aa24facd9c8fba7a85bd01783e8bf627b03a5565a3753c2cbafa31a62bf42afc33f1b2b178ab9c9b4cc0e923e681b39863d94ef772189e3e140e8f0a398c64a5754c11c2ab3290c684332cbe27cd8677a38f256df5a3ecdbbbdc158d7e035ad59f1530d947bcbf53535626021835a57a21c1fc866a12525db8c940b5e8a0e0612c6407f27038be65da4bad71d6e7f3bfdcfbb"}, {&(0x7f0000001280)="df8a6444650b86048bcba82cc1f5033e047cb6b6faa3128bfc68578d1575ffa63c98cf0c5453701c0c86e8686f7442edeb47a87ba126eb1d99e6ada8956ab78d7db6d9b9374ca269d1cdf96ee4ef6e1b5524d968bb35f4dc59aaf233d42f1eda6e9c41436e108875e98e50e29285633ba4bc1b6a123e1e9ffcd2bfaff0292e100a7f98184d8a1cebc19a2ed0d5923e5703d56f20807e3cb591d917620f695f600500"/177}], 0xfffffffffffff89, 0xfca, 0x8001, 0x1d) dup2(r2, r3) dup2(r0, r1) 11:14:11 executing program 7 (fault-call:0 fault-nth:5): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:14:11 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x127d, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x5, 0xb91, 0x8, 0xc672}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x100000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0x3f, 0x401, 0x8, 0x3, 0x3}) 11:14:11 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:14:11 executing program 5 (fault-call:2 fault-nth:1): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:11 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0xee0000) 11:14:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) 11:14:11 executing program 4 (fault-call:2 fault-nth:7): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 459.160154] FAULT_INJECTION: forcing a failure. [ 459.160154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.161817] CPU: 1 PID: 5636 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 459.162712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 459.164270] Call Trace: [ 459.164631] dump_stack+0x107/0x163 [ 459.165122] should_fail.cold+0x5/0xa [ 459.165661] _copy_from_user+0x2e/0x1b0 [ 459.166213] iovec_from_user+0x139/0x3f0 [ 459.166780] __import_iovec+0x67/0x590 [ 459.167307] ? __ia32_sys_shutdown+0x70/0x70 [ 459.167895] ? perf_trace_lock+0xac/0x490 [ 459.168503] import_iovec+0x83/0xb0 [ 459.169007] sendmsg_copy_msghdr+0x12d/0x160 [ 459.169605] ? __ia32_sys_recvmmsg+0x260/0x260 [ 459.169813] FAULT_INJECTION: forcing a failure. [ 459.169813] name failslab, interval 1, probability 0, space 0, times 0 [ 459.170227] ? lock_downgrade+0x6d0/0x6d0 [ 459.172296] ? __lockdep_reset_lock+0x180/0x180 [ 459.172944] ___sys_sendmsg+0xc6/0x170 [ 459.173493] ? sendmsg_copy_msghdr+0x160/0x160 [ 459.174133] ? __fget_files+0x228/0x410 [ 459.174687] ? lock_downgrade+0x6d0/0x6d0 [ 459.175264] ? find_held_lock+0x2c/0x110 [ 459.176006] ? __fget_files+0x251/0x410 [ 459.176594] ? __fget_light+0xea/0x280 [ 459.177124] __sys_sendmsg+0xe5/0x1b0 [ 459.177657] ? __sys_sendmsg_sock+0xb0/0xb0 [ 459.178215] ? rcu_read_lock_any_held+0x69/0x90 [ 459.178827] ? fput_many+0x2f/0x1a0 [ 459.179307] ? ksys_write+0x1a5/0x250 [ 459.179820] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 459.180528] ? syscall_enter_from_user_mode+0x1d/0x50 [ 459.181197] ? trace_hardirqs_on+0x5b/0x180 [ 459.181754] do_syscall_64+0x33/0x40 [ 459.182242] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.182905] RIP: 0033:0x466609 [ 459.183325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.185703] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.186682] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 459.187598] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 459.188549] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 459.189463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.190350] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 459.191243] CPU: 0 PID: 5642 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 459.192233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 459.193657] Call Trace: [ 459.194016] dump_stack+0x107/0x163 [ 459.194479] should_fail.cold+0x5/0xa [ 459.194970] ? security_inode_alloc+0x34/0x160 [ 459.195534] should_failslab+0x5/0x10 [ 459.196040] kmem_cache_alloc+0x5b/0x350 [ 459.196559] security_inode_alloc+0x34/0x160 [ 459.197120] inode_init_always+0x503/0xc90 [ 459.197662] alloc_inode+0x84/0x230 [ 459.198127] new_inode+0x23/0x240 [ 459.198571] shmem_get_inode+0x15e/0xbc0 [ 459.199095] __shmem_file_setup+0xb8/0x310 [ 459.199641] ? _copy_from_user+0xfb/0x1b0 [ 459.200203] __do_sys_memfd_create+0x271/0x450 [ 459.200795] ? memfd_file_seals_ptr+0x150/0x150 [ 459.200995] FAULT_INJECTION: forcing a failure. [ 459.200995] name failslab, interval 1, probability 0, space 0, times 0 [ 459.201395] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 459.201412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 459.201429] do_syscall_64+0x33/0x40 [ 459.201449] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.205343] RIP: 0033:0x466609 [ 459.205764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.208077] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 459.209037] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 459.209943] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 459.210846] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 459.212614] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 459.214687] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 459.216428] CPU: 1 PID: 5638 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 459.217457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 459.219152] Call Trace: [ 459.219556] dump_stack+0x107/0x163 [ 459.220134] should_fail.cold+0x5/0xa [ 459.220708] ? ___slab_alloc+0x151/0x700 [ 459.221321] ? create_object.isra.0+0x3a/0xa20 [ 459.222017] should_failslab+0x5/0x10 [ 459.222600] kmem_cache_alloc+0x5b/0x350 [ 459.223227] create_object.isra.0+0x3a/0xa20 [ 459.223828] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 459.224604] kmem_cache_alloc+0x159/0x350 [ 459.225240] __skb_ext_alloc+0x19/0x80 [ 459.225845] skb_ext_add+0x504/0x670 [ 459.226413] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 459.227230] __alloc_skb+0x3c1/0x620 [ 459.227802] netlink_sendmsg+0x94f/0xd90 [ 459.228446] ? netlink_unicast+0x7e0/0x7e0 [ 459.229090] ? netlink_unicast+0x7e0/0x7e0 [ 459.229738] sock_sendmsg+0x150/0x190 [ 459.230319] ____sys_sendmsg+0x709/0x870 [ 459.230938] ? kernel_sendmsg+0x50/0x50 [ 459.231542] ? __ia32_sys_recvmmsg+0x260/0x260 [ 459.232240] ? lock_downgrade+0x6d0/0x6d0 [ 459.232909] ? __lockdep_reset_lock+0x180/0x180 [ 459.233641] ___sys_sendmsg+0xf3/0x170 [ 459.234232] ? sendmsg_copy_msghdr+0x160/0x160 [ 459.234928] ? __fget_files+0x228/0x410 [ 459.235522] ? lock_downgrade+0x6d0/0x6d0 [ 459.236181] ? find_held_lock+0x2c/0x110 [ 459.236808] ? __fget_files+0x251/0x410 [ 459.237418] ? __fget_light+0xea/0x280 [ 459.238024] __sys_sendmsg+0xe5/0x1b0 [ 459.238604] ? __sys_sendmsg_sock+0xb0/0xb0 [ 459.239245] ? rcu_read_lock_any_held+0x69/0x90 [ 459.239978] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 459.240775] ? syscall_enter_from_user_mode+0x1d/0x50 [ 459.241540] ? trace_hardirqs_on+0x5b/0x180 [ 459.242191] do_syscall_64+0x33/0x40 [ 459.242754] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.243533] RIP: 0033:0x466609 [ 459.244048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.246815] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.247973] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 459.249006] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 459.250025] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 459.251051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.252101] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:14:11 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x40000000) 11:14:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd2b, 0x25dfdbfc, 0xffffffff, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000001) 11:14:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:14:11 executing program 5 (fault-call:2 fault-nth:2): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 459.448752] FAULT_INJECTION: forcing a failure. [ 459.448752] name failslab, interval 1, probability 0, space 0, times 0 [ 459.451456] CPU: 0 PID: 5662 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 459.452441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 459.454409] Call Trace: [ 459.454807] dump_stack+0x107/0x163 [ 459.455342] should_fail.cold+0x5/0xa [ 459.455912] ? __alloc_skb+0x6d/0x620 [ 459.456462] should_failslab+0x5/0x10 [ 459.457021] kmem_cache_alloc_node+0x55/0x370 [ 459.457691] __alloc_skb+0x6d/0x620 [ 459.458242] netlink_sendmsg+0x94f/0xd90 [ 459.458850] ? netlink_unicast+0x7e0/0x7e0 [ 459.459491] ? netlink_unicast+0x7e0/0x7e0 [ 459.460153] sock_sendmsg+0x150/0x190 [ 459.460728] ____sys_sendmsg+0x709/0x870 [ 459.461330] ? kernel_sendmsg+0x50/0x50 [ 459.461912] ? __ia32_sys_recvmmsg+0x260/0x260 [ 459.462586] ? lock_downgrade+0x6d0/0x6d0 [ 459.463182] ? __lockdep_reset_lock+0x180/0x180 [ 459.463875] ___sys_sendmsg+0xf3/0x170 [ 459.464462] ? sendmsg_copy_msghdr+0x160/0x160 [ 459.465151] ? __fget_files+0x228/0x410 [ 459.465734] ? lock_downgrade+0x6d0/0x6d0 [ 459.466335] ? find_held_lock+0x2c/0x110 [ 459.466942] ? __fget_files+0x251/0x410 [ 459.467544] ? __fget_light+0xea/0x280 [ 459.468168] __sys_sendmsg+0xe5/0x1b0 [ 459.468748] ? __sys_sendmsg_sock+0xb0/0xb0 [ 459.469397] ? rcu_read_lock_any_held+0x69/0x90 [ 459.470104] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 459.470897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 459.471647] ? trace_hardirqs_on+0x5b/0x180 [ 459.472315] do_syscall_64+0x33/0x40 [ 459.472868] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.473626] RIP: 0033:0x466609 [ 459.474106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.476827] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.477931] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 459.478950] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 459.480003] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 459.481039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.482069] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:14:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:14:11 executing program 7 (fault-call:0 fault-nth:6): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 459.545749] FAULT_INJECTION: forcing a failure. [ 459.545749] name failslab, interval 1, probability 0, space 0, times 0 [ 459.547449] CPU: 0 PID: 5664 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 459.548429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 459.550097] Call Trace: [ 459.550446] dump_stack+0x107/0x163 [ 459.550934] should_fail.cold+0x5/0xa [ 459.551610] ? create_object.isra.0+0x3a/0xa20 [ 459.552256] should_failslab+0x5/0x10 [ 459.552753] kmem_cache_alloc+0x5b/0x350 [ 459.553285] create_object.isra.0+0x3a/0xa20 [ 459.553850] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 459.554507] kmem_cache_alloc+0x159/0x350 [ 459.555049] security_inode_alloc+0x34/0x160 [ 459.555619] inode_init_always+0x503/0xc90 [ 459.556188] alloc_inode+0x84/0x230 [ 459.556671] new_inode+0x23/0x240 [ 459.557136] shmem_get_inode+0x15e/0xbc0 [ 459.557756] __shmem_file_setup+0xb8/0x310 [ 459.558360] ? _copy_from_user+0xfb/0x1b0 [ 459.558932] __do_sys_memfd_create+0x271/0x450 [ 459.559550] ? memfd_file_seals_ptr+0x150/0x150 [ 459.560197] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 459.560887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 459.561600] do_syscall_64+0x33/0x40 [ 459.562097] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 459.562780] RIP: 0033:0x466609 [ 459.563212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 459.565676] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 459.566675] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 459.567613] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 459.568560] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 459.569496] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 459.570438] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 459.648474] ISOFS: Unable to identify CD-ROM format. 11:14:25 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x4000) 11:14:25 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 11:14:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 11:14:25 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0xfeffffff) 11:14:25 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:14:25 executing program 5 (fault-call:2 fault-nth:3): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:25 executing program 7 (fault-call:0 fault-nth:7): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:14:25 executing program 4 (fault-call:2 fault-nth:8): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 472.699589] FAULT_INJECTION: forcing a failure. [ 472.699589] name failslab, interval 1, probability 0, space 0, times 0 [ 472.702058] FAULT_INJECTION: forcing a failure. [ 472.702058] name failslab, interval 1, probability 0, space 0, times 0 [ 472.702668] CPU: 1 PID: 5684 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 472.705180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 472.706674] Call Trace: [ 472.707249] dump_stack+0x107/0x163 [ 472.707804] should_fail.cold+0x5/0xa [ 472.708369] ? __d_alloc+0x2a/0x990 [ 472.708886] should_failslab+0x5/0x10 [ 472.709433] kmem_cache_alloc+0x5b/0x350 [ 472.710037] ? trace_hardirqs_on+0x5b/0x180 [ 472.710654] __d_alloc+0x2a/0x990 [ 472.711150] d_alloc_pseudo+0x19/0x70 [ 472.711698] alloc_file_pseudo+0xce/0x250 [ 472.712310] ? alloc_file+0x590/0x590 [ 472.712860] ? shmem_get_inode+0x55c/0xbc0 [ 472.713462] __shmem_file_setup+0x144/0x310 [ 472.714068] ? _copy_from_user+0xfb/0x1b0 [ 472.714658] __do_sys_memfd_create+0x271/0x450 [ 472.715285] ? memfd_file_seals_ptr+0x150/0x150 [ 472.715931] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 472.716754] ? syscall_enter_from_user_mode+0x1d/0x50 [ 472.717515] do_syscall_64+0x33/0x40 [ 472.718049] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.718788] RIP: 0033:0x466609 [ 472.719238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.721816] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 472.722934] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 472.723922] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 472.724951] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 472.725982] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 472.727215] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 472.728332] CPU: 0 PID: 5688 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 472.729384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 472.731049] Call Trace: [ 472.731456] dump_stack+0x107/0x163 [ 472.731969] should_fail.cold+0x5/0xa [ 472.732490] ? create_object.isra.0+0x3a/0xa20 [ 472.733093] should_failslab+0x5/0x10 [ 472.733593] kmem_cache_alloc+0x5b/0x350 [ 472.734132] create_object.isra.0+0x3a/0xa20 [ 472.734704] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 472.735349] kmem_cache_alloc_node+0x169/0x370 [ 472.735943] __alloc_skb+0x6d/0x620 [ 472.736433] netlink_sendmsg+0x94f/0xd90 [ 472.736973] ? netlink_unicast+0x7e0/0x7e0 [ 472.737554] ? netlink_unicast+0x7e0/0x7e0 [ 472.738127] sock_sendmsg+0x150/0x190 [ 472.738633] ____sys_sendmsg+0x709/0x870 [ 472.739172] ? kernel_sendmsg+0x50/0x50 [ 472.739694] ? __ia32_sys_recvmmsg+0x260/0x260 [ 472.740318] ? lock_downgrade+0x6d0/0x6d0 [ 472.740856] ? __lockdep_reset_lock+0x180/0x180 [ 472.741449] ___sys_sendmsg+0xf3/0x170 [ 472.741957] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.742556] ? __fget_files+0x228/0x410 [ 472.743071] ? lock_downgrade+0x6d0/0x6d0 [ 472.743600] ? find_held_lock+0x2c/0x110 [ 472.744121] ? __fget_files+0x251/0x410 [ 472.744660] ? __fget_light+0xea/0x280 [ 472.745166] __sys_sendmsg+0xe5/0x1b0 [ 472.745666] ? __sys_sendmsg_sock+0xb0/0xb0 [ 472.746272] ? rcu_read_lock_any_held+0x69/0x90 [ 472.746957] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 472.747769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 472.748572] ? trace_hardirqs_on+0x5b/0x180 [ 472.749134] do_syscall_64+0x33/0x40 [ 472.749623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.750304] RIP: 0033:0x466609 [ 472.750833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.753349] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.754413] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 472.755921] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 472.758172] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 472.760557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.762798] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:14:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000160020050000000000e00000000000000000000000000000000000000000000000ea0c52ca44"], 0x30}}, 0x0) [ 472.774321] FAULT_INJECTION: forcing a failure. [ 472.774321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.776183] CPU: 1 PID: 5690 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 472.777153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 472.778777] Call Trace: [ 472.779172] dump_stack+0x107/0x163 [ 472.779709] should_fail.cold+0x5/0xa [ 472.780294] _copy_from_iter_full+0x1ff/0x940 [ 472.780946] ? __check_object_size+0x319/0x440 [ 472.781610] netlink_sendmsg+0x7c2/0xd90 [ 472.782210] ? netlink_unicast+0x7e0/0x7e0 [ 472.782841] ? netlink_unicast+0x7e0/0x7e0 [ 472.783455] sock_sendmsg+0x150/0x190 [ 472.784021] ____sys_sendmsg+0x709/0x870 [ 472.784629] ? kernel_sendmsg+0x50/0x50 [ 472.785200] ? __ia32_sys_recvmmsg+0x260/0x260 [ 472.785870] ? lock_downgrade+0x6d0/0x6d0 [ 472.786469] ? __lockdep_reset_lock+0x180/0x180 [ 472.787154] ___sys_sendmsg+0xf3/0x170 [ 472.787726] ? sendmsg_copy_msghdr+0x160/0x160 [ 472.788421] ? __fget_files+0x228/0x410 [ 472.789003] ? lock_downgrade+0x6d0/0x6d0 [ 472.789630] ? find_held_lock+0x2c/0x110 [ 472.790252] ? __fget_files+0x251/0x410 [ 472.790848] ? __fget_light+0xea/0x280 [ 472.791436] __sys_sendmsg+0xe5/0x1b0 [ 472.792003] ? __sys_sendmsg_sock+0xb0/0xb0 [ 472.792620] ? rcu_read_lock_any_held+0x69/0x90 [ 472.793337] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 472.794092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 472.794833] ? trace_hardirqs_on+0x5b/0x180 [ 472.795446] do_syscall_64+0x33/0x40 [ 472.795968] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.796741] RIP: 0033:0x466609 [ 472.797207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 472.799871] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.800984] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 472.802027] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 472.803032] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 472.803943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.805000] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:14:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x2) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 11:14:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 11:14:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) dup3(r0, r1, 0x0) unshare(0x60040000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8923, &(0x7f0000000140)={'lo\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 11:14:25 executing program 5 (fault-call:2 fault-nth:4): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:25 executing program 7 (fault-call:0 fault-nth:8): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 472.905124] audit: type=1400 audit(1629285265.365:11): avc: denied { relabelto } for pid=5699 comm="syz-executor.2" name="file0" dev="sda" ino=15494 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:zero_device_t:s0 tclass=file permissive=1 11:14:25 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:14:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000340)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x2) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) [ 472.952523] audit: type=1400 audit(1629285265.408:12): avc: denied { getattr } for pid=403 comm="syz-executor.2" path="/syzkaller-testdir228485869/syzkaller.2AdTX3/45/file0" dev="sda" ino=15494 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:zero_device_t:s0 tclass=file permissive=1 [ 472.991734] FAULT_INJECTION: forcing a failure. [ 472.991734] name failslab, interval 1, probability 0, space 0, times 0 [ 472.993466] CPU: 0 PID: 5708 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 472.994457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 472.996078] Call Trace: [ 472.996496] dump_stack+0x107/0x163 [ 472.997034] should_fail.cold+0x5/0xa [ 472.997596] should_failslab+0x5/0x10 [ 472.998107] __kmalloc_node_track_caller+0x74/0x3f0 [ 472.998802] ? netlink_sendmsg+0x94f/0xd90 [ 472.999425] __alloc_skb+0xb1/0x620 [ 472.999950] netlink_sendmsg+0x94f/0xd90 [ 473.000566] ? netlink_unicast+0x7e0/0x7e0 [ 473.001190] ? netlink_unicast+0x7e0/0x7e0 [ 473.001817] sock_sendmsg+0x150/0x190 [ 473.002385] ____sys_sendmsg+0x709/0x870 [ 473.003001] ? kernel_sendmsg+0x50/0x50 [ 473.003601] ? __ia32_sys_recvmmsg+0x260/0x260 [ 473.004254] ? lock_downgrade+0x6d0/0x6d0 [ 473.004835] ? __lockdep_reset_lock+0x180/0x180 [ 473.005504] ___sys_sendmsg+0xf3/0x170 [ 473.006067] ? sendmsg_copy_msghdr+0x160/0x160 [ 473.006738] ? __fget_files+0x228/0x410 [ 473.007317] ? lock_downgrade+0x6d0/0x6d0 [ 473.007932] ? find_held_lock+0x2c/0x110 [ 473.008546] ? __fget_files+0x251/0x410 [ 473.009117] ? __fget_light+0xea/0x280 [ 473.009690] __sys_sendmsg+0xe5/0x1b0 [ 473.010252] ? __sys_sendmsg_sock+0xb0/0xb0 [ 473.010891] ? rcu_read_lock_any_held+0x69/0x90 [ 473.011602] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 473.012370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 473.013063] ? trace_hardirqs_on+0x5b/0x180 [ 473.013650] do_syscall_64+0x33/0x40 [ 473.014139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.014952] RIP: 0033:0x466609 [ 473.015391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.017877] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.018870] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 473.019780] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 473.020709] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 473.021614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.022525] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 473.032537] FAULT_INJECTION: forcing a failure. [ 473.032537] name failslab, interval 1, probability 0, space 0, times 0 [ 473.034143] CPU: 0 PID: 5712 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 473.035013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 473.035173] audit: type=1400 audit(1629285265.409:13): avc: denied { unlink } for pid=403 comm="syz-executor.2" name="file0" dev="sda" ino=15494 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:zero_device_t:s0 tclass=file permissive=1 [ 473.036513] Call Trace: [ 473.036532] dump_stack+0x107/0x163 [ 473.036548] should_fail.cold+0x5/0xa [ 473.036563] ? create_object.isra.0+0x3a/0xa20 [ 473.036581] should_failslab+0x5/0x10 [ 473.042288] kmem_cache_alloc+0x5b/0x350 [ 473.042822] ? mpol_shared_policy_init+0x1c0/0x3b0 [ 473.043457] create_object.isra.0+0x3a/0xa20 [ 473.044046] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 473.044752] kmem_cache_alloc+0x159/0x350 [ 473.045282] ? trace_hardirqs_on+0x5b/0x180 [ 473.045849] __d_alloc+0x2a/0x990 [ 473.046348] d_alloc_pseudo+0x19/0x70 [ 473.046873] alloc_file_pseudo+0xce/0x250 [ 473.047460] ? alloc_file+0x590/0x590 [ 473.048009] ? shmem_get_inode+0x55c/0xbc0 [ 473.048637] __shmem_file_setup+0x144/0x310 [ 473.049243] ? _copy_from_user+0xfb/0x1b0 [ 473.049845] __do_sys_memfd_create+0x271/0x450 [ 473.050506] ? memfd_file_seals_ptr+0x150/0x150 [ 473.051177] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 473.051945] ? syscall_enter_from_user_mode+0x1d/0x50 [ 473.052701] do_syscall_64+0x33/0x40 [ 473.053229] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.053963] RIP: 0033:0x466609 [ 473.054429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 473.057079] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 473.058197] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 473.059253] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 473.060309] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 473.061363] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 473.062389] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 473.197822] ISOFS: Unable to identify CD-ROM format. 11:14:37 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 11:14:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x71, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) dup3(r0, r1, 0x0) unshare(0x60040000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8923, &(0x7f0000000140)={'lo\x00'}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 11:14:37 executing program 7 (fault-call:0 fault-nth:9): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:14:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x4400, &(0x7f0000000680)={[{@gid={'gid', 0x3d, 0xee01}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@size={'size', 0x3d, [0x6d, 0x74]}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', 0xee01}}, {@measure}]}) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x143) r0 = syz_open_dev$rtc(0x0, 0x8, 0x0) fallocate(r0, 0x32, 0x1, 0x81) 11:14:37 executing program 4 (fault-call:2 fault-nth:9): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:37 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0xfffffffe) 11:14:37 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x8001}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/102400, 0xfffffc7b) syz_emit_ethernet(0x3a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaa01000000000006000000000000002c000000fa"], 0x0) r2 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r2, 0x0, 0x40, &(0x7f0000000300)={@multicast1}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = dup2(r0, r0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x6) 11:14:37 executing program 5 (fault-call:2 fault-nth:5): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 485.453253] FAULT_INJECTION: forcing a failure. [ 485.453253] name failslab, interval 1, probability 0, space 0, times 0 [ 485.455766] FAULT_INJECTION: forcing a failure. [ 485.455766] name failslab, interval 1, probability 0, space 0, times 0 [ 485.456932] CPU: 0 PID: 5731 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 485.460204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 485.463875] Call Trace: [ 485.464651] dump_stack+0x107/0x163 [ 485.465626] should_fail.cold+0x5/0xa [ 485.466652] ? xfrm_state_alloc+0x21/0x4e0 [ 485.467810] should_failslab+0x5/0x10 [ 485.468977] kmem_cache_alloc+0x5b/0x350 [ 485.470160] xfrm_state_alloc+0x21/0x4e0 [ 485.471290] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 485.472876] __find_acq_core+0x8b7/0x1fa0 [ 485.474058] xfrm_find_acq+0x6b/0x90 [ 485.475154] xfrm_alloc_userspi+0x523/0x9a0 [ 485.476278] ? xfrm_add_sa+0x34a0/0x34a0 [ 485.476953] ? __nla_parse+0x3e/0x50 [ 485.477454] ? xfrm_add_sa+0x34a0/0x34a0 [ 485.477999] xfrm_user_rcv_msg+0x3ff/0x6b0 [ 485.478569] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 485.479285] ? __mutex_lock+0x425/0x1230 [ 485.479836] ? __lockdep_reset_lock+0x180/0x180 [ 485.480494] netlink_rcv_skb+0x14b/0x430 [ 485.481068] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 485.481735] ? netlink_ack+0xab0/0xab0 [ 485.482284] xfrm_netlink_rcv+0x6b/0x90 [ 485.482831] netlink_unicast+0x53a/0x7e0 [ 485.483391] ? netlink_attachskb+0x810/0x810 [ 485.484001] netlink_sendmsg+0x856/0xd90 [ 485.484634] ? netlink_unicast+0x7e0/0x7e0 [ 485.485216] ? netlink_unicast+0x7e0/0x7e0 [ 485.485784] sock_sendmsg+0x150/0x190 [ 485.486293] ____sys_sendmsg+0x709/0x870 [ 485.487659] ? kernel_sendmsg+0x50/0x50 [ 485.488886] ? __ia32_sys_recvmmsg+0x260/0x260 [ 485.490310] ? lock_downgrade+0x6d0/0x6d0 [ 485.491715] ? __lockdep_reset_lock+0x180/0x180 [ 485.493294] ___sys_sendmsg+0xf3/0x170 [ 485.494576] ? sendmsg_copy_msghdr+0x160/0x160 [ 485.495322] ? __fget_files+0x228/0x410 [ 485.495907] ? lock_downgrade+0x6d0/0x6d0 [ 485.496536] ? find_held_lock+0x2c/0x110 [ 485.497147] ? __fget_files+0x251/0x410 [ 485.497750] ? __fget_light+0xea/0x280 [ 485.498335] __sys_sendmsg+0xe5/0x1b0 [ 485.498908] ? __sys_sendmsg_sock+0xb0/0xb0 [ 485.499531] ? rcu_read_lock_any_held+0x69/0x90 [ 485.500218] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 485.501002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 485.501765] ? trace_hardirqs_on+0x5b/0x180 [ 485.502400] do_syscall_64+0x33/0x40 [ 485.502909] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.503687] RIP: 0033:0x466609 [ 485.504185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.506923] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.508006] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 485.509005] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 485.509930] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 485.510857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.511924] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 485.512981] CPU: 1 PID: 5734 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 485.513898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 485.515291] Call Trace: [ 485.515650] dump_stack+0x107/0x163 [ 485.516128] should_fail.cold+0x5/0xa [ 485.516635] ? create_object.isra.0+0x3a/0xa20 [ 485.517205] should_failslab+0x5/0x10 [ 485.517688] kmem_cache_alloc+0x5b/0x350 [ 485.518202] create_object.isra.0+0x3a/0xa20 [ 485.518758] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 485.519399] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 485.520038] ? netlink_sendmsg+0x94f/0xd90 [ 485.520648] __alloc_skb+0xb1/0x620 [ 485.521173] netlink_sendmsg+0x94f/0xd90 [ 485.521723] ? netlink_unicast+0x7e0/0x7e0 [ 485.522303] ? netlink_unicast+0x7e0/0x7e0 [ 485.522908] sock_sendmsg+0x150/0x190 [ 485.523453] ____sys_sendmsg+0x709/0x870 [ 485.524056] ? kernel_sendmsg+0x50/0x50 [ 485.524673] ? __ia32_sys_recvmmsg+0x260/0x260 [ 485.525366] ? lock_downgrade+0x6d0/0x6d0 [ 485.525996] ? __lockdep_reset_lock+0x180/0x180 [ 485.526697] ___sys_sendmsg+0xf3/0x170 [ 485.527284] ? sendmsg_copy_msghdr+0x160/0x160 [ 485.527967] ? __fget_files+0x228/0x410 [ 485.528572] ? lock_downgrade+0x6d0/0x6d0 [ 485.529121] ? find_held_lock+0x2c/0x110 [ 485.529700] ? __fget_files+0x251/0x410 [ 485.530271] ? __fget_light+0xea/0x280 [ 485.530806] __sys_sendmsg+0xe5/0x1b0 [ 485.531302] ? __sys_sendmsg_sock+0xb0/0xb0 [ 485.531893] ? rcu_read_lock_any_held+0x69/0x90 [ 485.532579] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 485.533233] ? syscall_enter_from_user_mode+0x1d/0x50 [ 485.533864] ? trace_hardirqs_on+0x5b/0x180 [ 485.534409] do_syscall_64+0x33/0x40 [ 485.534899] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.535582] RIP: 0033:0x466609 [ 485.536007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.538481] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.539468] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 485.540452] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 485.541407] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 485.542314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.543263] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 485.549205] FAULT_INJECTION: forcing a failure. [ 485.549205] name failslab, interval 1, probability 0, space 0, times 0 [ 485.551037] CPU: 1 PID: 5737 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 485.552044] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 485.553798] Call Trace: [ 485.554199] dump_stack+0x107/0x163 [ 485.554751] should_fail.cold+0x5/0xa [ 485.555375] ? __alloc_file+0x21/0x310 [ 485.555974] should_failslab+0x5/0x10 [ 485.556582] kmem_cache_alloc+0x5b/0x350 [ 485.557187] __alloc_file+0x21/0x310 [ 485.557776] alloc_empty_file+0x6d/0x170 [ 485.558393] alloc_file+0x59/0x590 [ 485.558931] alloc_file_pseudo+0x16a/0x250 [ 485.559574] ? alloc_file+0x590/0x590 [ 485.560146] ? shmem_get_inode+0x55c/0xbc0 [ 485.560798] __shmem_file_setup+0x144/0x310 [ 485.561451] ? _copy_from_user+0xfb/0x1b0 [ 485.562071] __do_sys_memfd_create+0x271/0x450 [ 485.562757] ? memfd_file_seals_ptr+0x150/0x150 [ 485.563439] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 485.564215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 485.565034] do_syscall_64+0x33/0x40 [ 485.565592] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.566350] RIP: 0033:0x466609 [ 485.566825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.570465] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 485.571590] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 485.572755] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 485.573813] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 485.574859] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 485.575919] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 11:14:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:14:38 executing program 7 (fault-call:0 fault-nth:10): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 485.678858] audit: type=1326 audit(1629285278.139:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5730 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:14:38 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 485.708446] FAULT_INJECTION: forcing a failure. [ 485.708446] name failslab, interval 1, probability 0, space 0, times 0 [ 485.711080] CPU: 0 PID: 5752 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 485.711991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 485.714607] Call Trace: [ 485.715007] dump_stack+0x107/0x163 [ 485.715541] should_fail.cold+0x5/0xa [ 485.716106] ? create_object.isra.0+0x3a/0xa20 [ 485.716792] should_failslab+0x5/0x10 [ 485.717355] kmem_cache_alloc+0x5b/0x350 [ 485.717959] ? __d_instantiate+0x77/0x450 [ 485.718499] create_object.isra.0+0x3a/0xa20 [ 485.719134] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 485.719875] kmem_cache_alloc+0x159/0x350 [ 485.720495] __alloc_file+0x21/0x310 [ 485.721045] alloc_empty_file+0x6d/0x170 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 485.721634] alloc_file+0x59/0x590 [ 485.723640] alloc_file_pseudo+0x16a/0x250 [ 485.724258] ? alloc_file+0x590/0x590 [ 485.724856] ? shmem_get_inode+0x55c/0xbc0 [ 485.725489] __shmem_file_setup+0x144/0x310 [ 485.726134] ? _copy_from_user+0xfb/0x1b0 [ 485.726753] __do_sys_memfd_create+0x271/0x450 [ 485.727365] ? memfd_file_seals_ptr+0x150/0x150 [ 485.727981] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 485.728813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 485.730293] do_syscall_64+0x33/0x40 [ 485.731318] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.732801] RIP: 0033:0x466609 [ 485.733222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 485.735899] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 485.737009] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 485.738066] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 485.739103] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 485.740136] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 485.741204] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 11:14:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x61, 0x22, 0x3, 0x5}, {0x1000, 0xf0, 0x8f, 0xffff}, {0x7, 0xa0, 0x1, 0x401}, {0xfff8, 0xbc, 0x6, 0x9}, {0x3f, 0x8, 0x1f, 0xe911}, {0x5, 0x40, 0x40, 0x9}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x0) 11:14:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 11:14:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000001c0)={0x0, r6, 0x1, 0x8, 0x4, 0x1}) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x42) openat(r7, &(0x7f0000000100)='./file0/file0\x00', 0x644081, 0x20) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3, r1}) syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) 11:14:38 executing program 4 (fault-call:2 fault-nth:10): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x1) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = fork() move_pages(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil], &(0x7f0000000180)=[0x3], &(0x7f0000000140), 0x0) r4 = fork() r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) process_vm_readv(r4, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=[{&(0x7f0000001200)=""/113, 0x71}, {&(0x7f0000001280)=""/26, 0x1a}, {&(0x7f00000012c0)=""/57, 0x39}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001380)=""/60, 0x3c}, {&(0x7f00000013c0)=""/180, 0xb4}, {&(0x7f0000001480)=""/220, 0xdc}], 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x6609, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x1d, 0xe4, 0x3f, 0x0, 0x8a2b, 0x40080, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x3f, 0x47ebf2a9}, 0x1, 0x7, 0xffffff44, 0x4, 0x5, 0xf4, 0x1, 0x0, 0x7f, 0x0, 0x2}, r3, 0xa, r5, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r2, 0x0) r6 = fcntl$getown(r0, 0x9) ptrace(0x11, r6) 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffa) 11:14:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 485.971403] FAULT_INJECTION: forcing a failure. [ 485.971403] name failslab, interval 1, probability 0, space 0, times 0 [ 485.973023] CPU: 0 PID: 5778 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 485.973892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 485.975402] Call Trace: [ 485.975750] dump_stack+0x107/0x163 [ 485.976257] should_fail.cold+0x5/0xa [ 485.976826] ? create_object.isra.0+0x3a/0xa20 [ 485.977475] should_failslab+0x5/0x10 [ 485.977983] kmem_cache_alloc+0x5b/0x350 [ 485.978578] create_object.isra.0+0x3a/0xa20 [ 485.979028] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 485.979569] kmem_cache_alloc+0x159/0x350 [ 485.980030] xfrm_state_alloc+0x21/0x4e0 [ 485.980561] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 485.981310] __find_acq_core+0x8b7/0x1fa0 [ 485.981906] xfrm_find_acq+0x6b/0x90 [ 485.982460] xfrm_alloc_userspi+0x523/0x9a0 [ 485.983095] ? xfrm_add_sa+0x34a0/0x34a0 [ 485.983633] ? __nla_parse+0x3e/0x50 [ 485.984143] ? xfrm_add_sa+0x34a0/0x34a0 [ 485.984690] xfrm_user_rcv_msg+0x3ff/0x6b0 [ 485.985248] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 485.985930] ? __mutex_lock+0x425/0x1230 [ 485.986511] ? __lockdep_reset_lock+0x180/0x180 [ 485.987156] netlink_rcv_skb+0x14b/0x430 [ 485.988267] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 485.989764] ? netlink_ack+0xab0/0xab0 [ 485.990829] xfrm_netlink_rcv+0x6b/0x90 [ 485.991945] netlink_unicast+0x53a/0x7e0 [ 485.993103] ? netlink_attachskb+0x810/0x810 [ 485.994065] netlink_sendmsg+0x856/0xd90 [ 485.995074] ? netlink_unicast+0x7e0/0x7e0 [ 485.996271] ? netlink_unicast+0x7e0/0x7e0 [ 485.997370] sock_sendmsg+0x150/0x190 [ 485.998408] ____sys_sendmsg+0x709/0x870 [ 485.999510] ? kernel_sendmsg+0x50/0x50 [ 486.000587] ? __ia32_sys_recvmmsg+0x260/0x260 [ 486.001933] ? lock_downgrade+0x6d0/0x6d0 [ 486.002438] ? __lockdep_reset_lock+0x180/0x180 [ 486.003074] ___sys_sendmsg+0xf3/0x170 [ 486.003504] ? sendmsg_copy_msghdr+0x160/0x160 [ 486.004112] ? __fget_files+0x228/0x410 [ 486.004572] ? lock_downgrade+0x6d0/0x6d0 [ 486.005120] ? find_held_lock+0x2c/0x110 [ 486.005577] ? __fget_files+0x251/0x410 [ 486.006107] ? __fget_light+0xea/0x280 [ 486.006563] __sys_sendmsg+0xe5/0x1b0 [ 486.007097] ? __sys_sendmsg_sock+0xb0/0xb0 [ 486.007646] ? rcu_read_lock_any_held+0x69/0x90 [ 486.008239] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 486.008954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 486.009610] ? trace_hardirqs_on+0x5b/0x180 [ 486.010135] do_syscall_64+0x33/0x40 [ 486.010637] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.011471] RIP: 0033:0x466609 [ 486.011942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.014153] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.015152] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 486.015939] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 486.016861] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.017744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.018526] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:14:38 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) setresuid(r0, 0x0, 0xee01) r1 = getuid() setresuid(0x0, 0x0, r1) r2 = fork() tkill(r2, 0x0) 11:14:38 executing program 5 (fault-call:2 fault-nth:6): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 486.115921] ISOFS: Unable to identify CD-ROM format. 11:14:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 486.186162] FAULT_INJECTION: forcing a failure. [ 486.186162] name failslab, interval 1, probability 0, space 0, times 0 [ 486.187754] CPU: 1 PID: 5799 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 486.188684] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 486.190235] Call Trace: [ 486.190637] dump_stack+0x107/0x163 [ 486.191189] should_fail.cold+0x5/0xa [ 486.191774] ? __skb_ext_alloc+0x19/0x80 [ 486.192411] should_failslab+0x5/0x10 [ 486.192986] kmem_cache_alloc+0x5b/0x350 [ 486.193618] __skb_ext_alloc+0x19/0x80 [ 486.194219] skb_ext_add+0x504/0x670 [ 486.194782] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 486.195572] __alloc_skb+0x3c1/0x620 [ 486.196145] netlink_sendmsg+0x94f/0xd90 [ 486.196794] ? netlink_unicast+0x7e0/0x7e0 [ 486.197436] ? netlink_unicast+0x7e0/0x7e0 [ 486.198070] sock_sendmsg+0x150/0x190 [ 486.198647] ____sys_sendmsg+0x709/0x870 [ 486.199257] ? kernel_sendmsg+0x50/0x50 [ 486.199851] ? __ia32_sys_recvmmsg+0x260/0x260 [ 486.200559] ? lock_downgrade+0x6d0/0x6d0 [ 486.201186] ? __lockdep_reset_lock+0x180/0x180 [ 486.201895] ___sys_sendmsg+0xf3/0x170 [ 486.202493] ? sendmsg_copy_msghdr+0x160/0x160 [ 486.203183] ? __fget_files+0x228/0x410 [ 486.203713] ? lock_downgrade+0x6d0/0x6d0 [ 486.204255] ? find_held_lock+0x2c/0x110 [ 486.204904] ? __fget_files+0x251/0x410 [ 486.205514] ? __fget_light+0xea/0x280 [ 486.206113] __sys_sendmsg+0xe5/0x1b0 [ 486.206692] ? __sys_sendmsg_sock+0xb0/0xb0 [ 486.207346] ? rcu_read_lock_any_held+0x69/0x90 [ 486.208069] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 486.208894] ? syscall_enter_from_user_mode+0x1d/0x50 [ 486.209686] ? trace_hardirqs_on+0x5b/0x180 [ 486.210341] do_syscall_64+0x33/0x40 [ 486.210918] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.211687] RIP: 0033:0x466609 [ 486.212178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 486.214971] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.216124] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 486.217200] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 486.218270] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 486.219328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.220421] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:14:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:14:51 executing program 7 (fault-call:0 fault-nth:11): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:14:51 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 11:14:51 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:14:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000001c0)={0x0, r6, 0x1, 0x8, 0x4, 0x1}) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x42) openat(r7, &(0x7f0000000100)='./file0/file0\x00', 0x644081, 0x20) copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3, r1}) syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) 11:14:51 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000007d00)={0xffffffffffffffff, 0x1, 0x5, 0x6a54c7e8}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000007d40)={[0x4]}, 0x8) r5 = fsopen(&(0x7f0000007d80)='xfs\x00', 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007f00)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000000c0)="865ca5f0644456d314d5a7ef66c0742a9d315089fbe8795e558fdcc75bedadd963c6c003e7af9c6f52ea82fc732ac696ea7b6f4cee8e7d4a419f97ab524036ea719dcb856f208fb548e7901ab673a978c41fe1f4f824b1d9435227a9ca64d3835baf362fd8c9b2e0b8aba91483b43c5cb6046a20f2a723e4703c9489328702d92db70976c8078d0ba9406dff4c1974d18d461cecfbd064ddd0eccc754ed0eaf0bee78c5f85962843e49a2d7f3331dd72ac58c3a16ca68fd7e1a4a9a5ad4b3fa859a88b79fef0b2656a4701992c54a044b2c6ed35a244a8ed6804f2ec3670ba0c7c940ceae31ea2c22b", 0xe9}, {&(0x7f00000001c0)="8222dca9726c6b580a0dfbcd1f1659e54ba855f21014f169840be414ed8fd6aae90ee57b4d213aff349e1db7104b201fe71cf916dc25147d65d0e3c3499310d9b2274f75c9a6b050dc902004ee317fec3c42820dbd7ded897e2deb6339c84e4d7874c0c2a0b55ca39b22033306762a8b4ecffc69dd5d8b72095707ccae00b175b2a7e648cc251a7b68fe366260be22d540de257d90a74342a424e8ac0683f85c42b9ab67d697069580fb6f3065c9dd087d94342b9ffbed42d38c18b679428e0a7e77f57790287b4708dbe731ffedeb8e55ba590fe790a4692eda055921e975d69af8b7583d1ce2f4f2271f0878e2de97b0b03e514e801d", 0xf7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000001d00)="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", 0x1000}], 0x4, &(0x7f0000001340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88, 0x4008000}, {&(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001480)="1ae39cf134df64d94dec5bba48792521d78adacb9cb79d9bee31cbee1b5f20d62e1c94bc2e15f96318047869c20d2f6180eb9694d17ba800f9e37d5f484d7be670e58225f0c99013bb1772502f031e2a03690d38b6f86c9d04e8de4fc324211d1fe6c47b7f551174d84408cf9d9f26e43e733ee9204e3118fb284badb5d0a3b28a475da738c84fc5", 0x88}, {&(0x7f0000001540)="f4a1da2450aecd1e4b6589be74df19b56cdc6c197f32760ee6d948208fde4366c8ef87d3d0fb9191d90ef468ff2a3a087f8f3a489da742e3837d5944732b557ceae6921d793fe21f8c68cbdfb334e5750bcbf6409de187835f15998396cf7ea73a55cac092186d45359012e42b366616e391df0a4290c13cc6628546687da19ed249fdce7a5718cf82dc4757a9e53e4237612dc74a5e3a0395d5f90443045bdec8ff0b29c741bfa52a488b148111cdc7dd9e354b2502df237448785aaf7fef486cc449a338ba499fc6c6f3660c756103ce07c0b0ef6f87c49b", 0xd9}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="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", 0x1000}, {&(0x7f0000001640)="b60398d63a0240a0d727616500c0646093673f0692d906ddc221d4ae071f5bec1fba2ae80af997858ad183e427b856c605419c3e780811486ccd940bb0d426e2e4a8d4068f18bfd9530ce62891df307352575cc2c3189925e896c8a1d656e4a59923cbd12234407be4c8cda0818572396eb2a36bc052351577", 0x79}, {&(0x7f00000016c0)="d7e3f1da02dda2367e909d31c21d8a783a76f73c01da89d8bf985b46684bbdeecb894b361f38ac50143acbe9d68e730cf077dfe40e18b508d83f9920f6a0028be5cee0c25dbed068043834bfc1ea8f3250f933cc000b51ac0c6e2f36b69db74d0417eb7fa36dd81e5f5f59de9844ed61860423b5539cb8d28836436c3b0ea463d3a0ea1a240c08250a08e3ea9469a6a0c2ab7253515b853e4703c4abe671cf65bdf063d5b9bad3664818e90d6d9bcf853ac860d9ffdd135f4c599b", 0xbb}, {&(0x7f0000001780)="b6d9d0ba9ba493d04fc60f332bcad8e4c557b4a563db", 0x16}, {&(0x7f00000017c0)="15c57b506012756befd489004ed8bb857b4a2173cd85da308f36ef041dbd97d9f5cac93d38c7b6d97cfe200b0bd7e774402f593c192bc46e9e40a12c291a9b27fa70012a954d27608373dc337d0d7de6f506d05cb17fe3d1e54812ab7504ea2a0f73fd8dde246244cc566f7e95f68ffa430ccdf06a98a7c887c6f670edbe593454f919bda2de4e50f6d20d9f03b048e761daf9c3a5c5138fe796b27196685c4f092c3b1e525288e4254abf8a75bf5fdd1d1265bc848ef5b5cf370235f81a6bc4646ad00da876ef438aab23fa75c6", 0xce}, {&(0x7f00000018c0)="1fc7391a3caf82379cd6476996018edd5daa5b3bcaf844e11b4b704fa2f15e5d6408cd12e94c1a509128e164e4240fd50a278ac25426c81906921f1ade87440818061b288773da6cb038e994b518c1175551fe36ef598938af92db24d8e87fe4ef614fc70a4b9a003455e7114c7426ec4941a1a9e7bfcf1f72678311d2efa1b71230da7da13350f163a45085d56a40aa0ea0f544484884a83c2cb84499d0bc4c43b47872a7f202c651c9a9ec4899fbbb9542e367f601629f6ab7d072ca6090b2e5974b7fbf68c68a6cca4aa0dd3921a7f935402c", 0xd4}, {&(0x7f00000019c0)='[p', 0x2}], 0xa, 0x0, 0x0, 0x1000}, {&(0x7f0000001ac0)=@abs={0x1, 0x0, 0x7f}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000001b40)="9b9e17c493b6ead4c99c9e8fce9206219483def0fb80183dfa434ffef0b8f4fc874e8755ebd76f20ee3db689f47fb759cbe53e01c3eb5ac4e693a77508218db0edf17b420670ed4a1adeed121f2cfac68bc578e5707564c68b0cdcb2029957d9985c130da34e887e0a303f5e6bd2bfdfc4000f6bda01eb48cb3d8a2db8dec024", 0x80}, {&(0x7f0000004d00)="fa7ae29c3a351f750b7a8dac1683c4d543727ea00467326391edf30d23247b64f228405be68acb816e7b1f78d8bb97404a76dc72c5861681ec4028816f01e75dd581d4bcda2a14d25b0e2b659fa34097e1eb0ef25a01b40f2c98a71feb3a669f47571ec42f287755e7c00fc2694a6d1c57ed7bf9242061d2d649562692ec451bbf992888b875834d161e5aed1747920e0583eceb3fcde25a406d1de2fcf3a222e1a044687917f407f4c30348dc9339bf1ebe4726784d295b09db7c64dda48a70b4c023c978d74c502c03fdd75ce7ef", 0xcf}, {&(0x7f0000004e00)="713552b4eaec95890e6f8471afc0eeac016438e55345f7eeb21c8f756ea47da4a5dc66dcb48c7a286316a0fa0f715f0ecc5f48acd40a9c1604f911b6939d34de9ef172455daa375fa056c61c16e4ef22fac2a91c6d4e8b1961cd79d3", 0x5c}, {&(0x7f0000004e80)="a74102733cdbc9b75ed5a8b0874d7364225e5b56b4e76549f68bc381a456ce6e21f5faa8236cb67b43cdfb84120bc4a9b3daafa96d318e8dceccf7114fdeb6251dc25e6e3dc86d9a2f08936ba5762560f0bd384668d4da447d3c59ede3b5ee08073323434eb767b40d20bc8d82ff6281d0e37d9e24642eda00d6e46c68beecc3bfda650f734d3533e64605a34d752250edd3f48abd444e4feba112397acd2d0842358c7fd583d20252937e73fbffb4ba2a4745ffef5379ba288f2f0308509fbb6fc53e5e7c345135afe3afa3defdc48f5413c6caa3923d80fae0bde1863910354a699046dc544913bea3b4e60232d6a4a4cce80b50326fc9", 0xf8}, {&(0x7f0000004f80)="e18b95fb546586c14eb5f9205025703a66d6e76a084630bf0da37b3a35891db46cb097b94e650da627943e151d27b7b02f3d73514850be3030c898773009efe47e49e84e372854de17dcd1c27c80dbef1b8db3d1df6678a9e939bf36e8b9a7e04f02e6c09b3d63", 0x67}, {&(0x7f0000005000)="e9c11a6dfeab5bd4408a6fdcc40d4e57201375e072bf60ce19e04d8fc23e7e523391c78120c21ed3080644e283098d87c934f542a9af4f1069cd0fcce7f814ec8f1a98a61233fe7e958dc731cbee0103229af15d40aac605090437a716", 0x5d}, {&(0x7f0000005080)="4994e7d80b8b23a62a323fffd83e565383291439f7bf42dc9e1b82d77a8c13f4fe9c19fd5ebd616cf6edd15913e167922c804c1195009cd629a63315da1e9df53cc8f8d7d4dfd8914c84a855c9bfa6a1fbf00f024100b0d57a640fae23969bc12ff56299a0beaf7c21f6c71ac55553fc9fdb2b2220c866c3dba830e64130758d72d0d7d060b601952dd87032ebfdfb852a5cdbdd4e55c279f2ab792069ebe5c5037795be6157689c754ae2fa98ba37a7c233b8a631804fb2a2aeac65d66d31ba0e9c5643dbf7d26c93c394283f6cacafe1c15f93793111fd8a2d230640f24756f56463fdd61455c636cabecc052e60e9c6d498d400ff16b46d9d95fb550e3cb96ad7a7111acd2cc5678ad51b24b5ab78102394bdbc77f3e192eef21a65e8b2a388b70f5b3f9a0cb8feee0955cb054957424e87ba0f98372f9aff3006e593b7eb652fd3e09008fc9c8ae4d17a5bd90ef16ff7f08706d8e7293007f36d93283bdbf2309ff2b1e4deae9909b82374ee392effb0ef42568244e88c574130aa0b32a745b299cfd607cb99997f4cfccf4d80a8fd3b35323741419791813ef7f339b2f5a57b814c18b52ba9e3fbf1a9e0768e60ff3901b273ce08ff56c4b0f0a1c04e76bce05a705661bec303ebff6b950635ca323ea646285a41bbbbcaebe80756487d715d423a8295bec4cf69949cb0292c068dde1d0bde25173b86d107214fc48b4aabe141977f5cd4573fdd795908a3665dcce0b71ad17a9c46a6b51a9759a207df09d7a5b480db4bfce7d6d07523f26f7cd87efab80b8fab76850ebbf04ee0f1d971daf599ee0e16cdbc6130fbf4e797d985568c138a560d05a1c28be7016fbb578557cffb132a7e125b7007ccace97cbf05076a97b2f4c17cc91be133b087e238ca18ad4e00b8ee3bd65eb05512129e5e2892c42ed073ddf53fcc95271b6d43bd70f612091110d38d1b39d708b69adaade5b47ec24cc98aa50df3aa15407c38be5661d2a170224a2af61dde7546f4bcee51e7027b39bd24996b33d1409b0b94a89b0a0e06fd29ef6e932bfdd6e502db73d94d3a908f450eb16f488afd8795ef2f7d229c7f6346c28d8669cca0dc866b4e7d63877317cf0e7705ec4250c6395e74fa23239212a3e72f093add59030651e9a0686b1fe691d9d52a0bdd11686a4964e03c7cd0cd6055e14043dac01faecab7ad0aaff69905c3846a515c860931a002b12d68a6e1b71b759076deaf9cade7cb7b1a158b73060b10004d8a6cb45e8d05771462a931bfacbf6bd371ad38f9de258752d3bde637e8883b066595e9c9fd048dfb725437cc0f68d91047f000295fb2b4617d19e1f93a03950fa76b30f276cdde85a62fa72a7724afc6171e037aab376f46a42924b50bd781384e8981789b02a1ebb6d9820457be19b82fa18e1cb491e4d03c46483fc080f0d122f01098f781ef5b995346baeff2ad61f16a7416f6ee697fd40f4e6b461851365a6d602bfc272ed8d3ded4d69211620457d856fc0491b2a06a4bec535ea2faf522e4b04c83c346e2a3eeb4a555a83ebea78d3a9471d642fe475af6e49cdcb247652a84aaf87598efa12e526e5c0261e4ab6529708e6de2684839217dfec12aaa0d3852a48cf0a321cf9566bf03f3e6d0c3ae5f24db658371cd6d38dc3532ce26c3bf8d29d350007cecc2ccfd04a5ea6b025a7d80a3835a1a0efcaa44d1b02b64f8495fbc81e50a845d90435f0b95749ddc5354adb17bd4491c592468a7403f90f9c7a6e6b275501d94a4e213f1e135318e609b20d7c394651a874c60fa968baedf4b0fd1d92587f7d94e571bcddcbac8d9d98beb46dd356d1ee51cd060fde6577632e7acd54c503c20453298953d362faca0611d194e0f30530c9cf970fd443445f2e4eaa49f9bc1a76775dcc1f2cdf7cc08e78bc05d1081733333c256c5f0c8bc2f232ac4eff8df7daaa1b97122467fe741b0f0f876d92062b9fe60e662eea334719f88e4899106fa5add08ac08fc0803113ea38d2d580e40b6263f942dffc3e12b18a889bba100429bce8dbe7575a8e7e36e58e1805baf7285c88f816ff647f10b8b1d8254b1c3c0f0b4c6b96226091495f64788fcff1f0fd1974f6f0be3ff0a90b2e2b2299037f24e18d0281214b13d31c1850b39c823da7adcca9c2ce89bc7772a992464bf06b951535cc9d3a7d29fe0746e848e860510ba47911f62ec61330acb01b82463dc9dc51093f40fc3fd767aac92e34493f46545fa3d70167684b82e19fd1fba39c60ad611f3b789b674d6d40f987c886fd808efa6365cb2c4f0e8dca0df0db0b8aad4b9ee22b50426e13330451a182d6ecdeecc15e8d2c259a0ec486cad18274eadfe378f90724867467c8b6da31a9729fb52e7ad3caaa7fd1fedb35ec167d410fcfcf45b7ce7d3eba6511cc08a7fccb9e95a387f6a6a70bddbd36c8e67cd7a6ffcdec4f42491e253a2ad1b7c1a8b65bcf9fde16db287e40c3441663983372b1ecfb476909a4356dca7ad69b48d48369a5ea42a2b4d02f639d771cb5b94d60bb6b4e6a778e06f8797eaf544f7cd1d7f7ece036495240df5389f1bff9cf6538e12e496541952279300c8b488b87d7d8d6d7f35c12db8d434a0bcc41c605f08336127994858ec1ea64804e5544ef0c0b320534d56370b89423896bfe5a5e8bd037f48275f0a7313167a9eca73c7e6bc421ed790f18a4e1f9b5b9d131adc1b6768698f122165ab2508f205414d6586fb2757a1ba9a30008eb67dad3960761242b558d063c8c46f2e789ec927d43f1f1f7856832f30b7b242d79ca8d57546847977ab3793fcf2f18cb0efa51c835c86dda79ad2b5dc25da87808688134ca460a31c6bb753daea1aba83ec10467f0ac7b0903a5e85dbb624c8421abdd3c6123e48e936dcf972b8e9c3789f20bbe0243d1431bb2839ae36f95066ce89f680627a22ce423fbeb72a4f8634fe4c34124625f253ae22b52ea3895e0b920a59666a6aa60dc460ce4e9255cae8e6deee85a16b99d0573ca27512f51807410f7b0fee725580badaa4a0b300df3115d77634532a77440890036ef12ad6ff77ada895757f0b1f1fbb9ca1847f5de398d117c0acc05ffa5dcfd40d5ed5c29c8daa335b4a854035ee6178cb8ee889442b548148f8f39ab28e61c00afe2122f26886a5c8b34ccfd8222b3d1d536cb668b9cfd81b8f5fb1e8459a03a9e4c4b3e550dced893175ae2b549809456d9723efc6031481f0bef7cd18be9f011694c1b8a2d9c3a441729cc18c3753e1589ef8b3e86bda9350920a01d2911578dd225a8053728c4947f2b7842d9aed2dd3c8dca4087ca5729beddfdfc83f212b6ab23493683fb36e957d501122629945c8e6df3ab23f740ef3b2a1416b688bf99b954c04c057aa4a1977774f843ee31a56827cb0f1365473dd0bf1d44ebd3e3ac5c0f517d031d7132aa7b98a289ee41dc118bdd6c82c366113f30d799f547dca5959b3fea05ced771fb4f4c121f7172df97d7b0aa072ff824b0b3861883bb8afd7182ac2daea392731b6f61afab5c0cb7e12389c9033fa6daf708fedafb31cc86b73071106cdeab536f6c71b7758bb68550acca6eb9229530f2c9c06cd0e333a45fb4ea09c00638b933374509e7b866470450c5f81caae03c361eaf245bc670a939a75945cbee02117ca0ab539668d076969d34a2570f6e9d024995156e37612075b48632d1bc84ad23e094b971c190b45253621a3aebfbd36460e8b6fa83e4f6a9129f9f88505874c3c9cd71d64db43e35f0eeb247b37ce872ea83378bdec1a14a6e84a39e7b7b6edffda33130c75698a4cf4f46405431d381dfa67acddcc88a61f2450e02292a0ccb900d1d96ea3102024419adc8fe28fe3b8844cfdc46d2a231184bd1a1c81edf4a08bf23b2ddc6cb0b6493f9a511f8d51a9faffaafe24b2f55412af4a39c870edbb90aea94b54a147c956a0e31e8d967595f025eb4c65193d17a759501fed74d84f628b6845dac122cf4079f41d485c7e2ee503b15e868585923875e62792625093390d1d82d9ba7749032f6434d96f80c9b24f503c1072cc1d4f232613f9275e7e50eeea6029e4aa2a4a0f66419db909ca0c220a371d309f07ddd9fb6753012fd2079bc2c28a96ed62451165d3185619563e6f6933ddb8663ddf615db1c47fc03fb2d6cd65ebbfe2f04bf0c6df5a53a3cddfa3733437e01cbedf5d341773d99b892e1dca4623956f855ad68f553086536dfa6c3a65673fa66c2802f186d9fc065b07088ae1dec3ac9fc176f46e905ef8e675d9af7a68a12ca6ce1970716549350a33229e8f1be5cbb32bdadc809bdb63fa342f032616adfafbc7f6fcd196ac4b6a56121c027a5f97b92247cc50a1397f11b0eac620f4b1da4c911b642e457a127549e0b972290497bd2fc9a8e19442d2df80e8c03a4a452d7f5b09fc4eea0f6548e529a70ba5657d99c33ab64f670854fb841dfc1e9a6fe0f8cbe710cacd30ec7e1aaa9d919b8e76ac665fa3a96a16621ac44c5729cd1d3063f7a1cf45f43020230c77d5f73b4722398705d1539b94a4599109ba4478f31b2b54780c8f2a2c92ad1976bf8d407d0552e0830cf4d4aa20aa149ec608958e26987f535c95dc7cc3ef4518d116a84b9eb4574d7d2954612aaf8e80c676fbf36a94eafb5eac247e5ed31988e525e3f2ee219a321eb48f9d672f71e0006b18c105ef030cfc6f21679564cb0e9da63736d13c95a485df607965d0b654d6892c9d711c773d644d3d95da0b03ec18a28da568238c2b6d83bc96230c74f4dedd241f58a96d7a03715182fd628e293414db920e831f3e278ae460a5566ed0760d25e37c24f3145aa4c43f58b686ec63d7e0bd3e2072c00559264c5fd281cc0824162021af224d86360bbba99c27e2cf30e4446633925bd6a9b575f9d2725cb3e5690765725dae19cb7bf913f4477b6ae428231e653bbabaaa4933f79ecf23adddbee084e22bdbea5ff5047c2845d660509e83f16baae42674ecf5d3015eae4cafcf0f887e15b5ff42a914a0dd865ce6b236dde3b585b1dbb8ffc84b3d768dbd1d05ffb1ce7fce4a928e2b26954d3b262300884760c593612df574d490d1067305e5dda2fa3e872a5fdb67d56dd94035b54dd83c33926babf4ac367c4fe4b3668044ba4b373dfd9dd2cdf1a0572f1283f9c3efd2848449fa9e4db57c329291504ac1d58dd67a1c0fbd3730cafc688ad2f06cbc9c9f6cbf64fbdd435109a14d0d5889ba09d03cd6ef4ad338c1a8b23a3e3228aedd5178ca2e1b78dd9b2a84e81c1a7511c4c13d8fa9c0b91bbddefc1a67584ae7a129ad14fe80d3cff59712449a0553081cea4c4b8487db36b112486db4496c348ceb41ce845576581e41749c002e6ecfe6e80c7a291aa40c18df7834a588f6f1491083e7099ad74d6e31e741a05ea65108382d924005e5917565b4361afd9a0b5291518bc21f3caed53b331344bcb12720c6b321293daab86319a8a31c1c508491fa47bcb17fc0051763eda0b730a8b86d262ff017d0720a0996d8cad94a7333dbe5695bb22c6f342112372f7d9cbbc9ded59081b81c05e21a4840303888809312227a00fb70379c0081503e14ff8eded813dcd00ca291b74f54f5b9f09afdf1dd96fca95aabe0f745359c9118635281584acb7c3c809d75402954b9fcf7ac8495e300641a8e205e712bae73278d3bc70c943d07b8c2c02c857b84761c7ac291298eaa51a4abd33a0833de5191cb698ee4ae39c804901120f4452344cde473d5037943e323df8f9edf8b3c2c1a0f905b64a7be9cb38494ea42b6ad51", 0x1000}, {&(0x7f0000006080)="c4b743f2e73c8a39dc2f44886213d8de1fed7d6d3cebb823b9d71a129464e33fa393cbaad99615327dbac2c8f552eb2cd902a7af47fe5a9361e39ebfd352ee0e8c6df2d70aa81698be48802395e7de4a25025bb4b4ee405896ca6e4e5e537e240229a468f1aeae90da73ec4eb4351e65238d50aaa45fd7d70c09d9c186f362d8ca11", 0x82}, {&(0x7f0000006140)="c5b9d90d0733085c3a345448281a94997b289d814e7448208adb522405dc94c61a893619a7d2bba503becd3a5a10000f2251beeb5bdab68163944ad8667853a2029606113527c892cea535cc6165659a9b78e495e3bb6d1d84b97a47df5c7967e37d6eac4b792d405f43f637964009eda3dcfa4d7ddca5a48564f7318411bbbc1d8653898255fb48", 0x88}], 0x9, &(0x7f0000006440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x800}, {&(0x7f0000006540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006c40)=[{&(0x7f00000065c0)="9d9a6260f591c99ab1410d3e5fe4bae8e1f2c715c98880241c4d6df6ff29177a7c3e6b8ab85c2564a7a0b172242d6a919d2958660547e9a1f46ce3499ebb52f55b753236896bb11ef9c897fe436afe4b65e0a00130c9c9c43b4ca63b402e6d0e30cbeebc0433bcdab03bcc92a738cb0904663621cc5cbcc30a6423964bd91026fed8aa856724cc1e7a84e66f486ca6a05d3e9bbd3b56da32df45c82b4196a57b5d9d9d831603087a70edb37f9cf63ba2e58576115727861ced1e05d186906a639d92abbb5b70bb83acb927bc8f49e6e5dcad225b33", 0xd5}, {&(0x7f00000066c0)="9f6d11dbaf8ede0dcc47fabb35a97e77ee71c9a51052cb3b9a54fbd24a36ea4986e31efe4421be265c0ddd2407ba194ce245163888ce621b4e020157485a8d20e2fe8f2359f695f9eff19e2ce28896450952d62f8742b6bc224737a2f11b0314e8aa9da669fe0cb83e6f231eee936bda142f19c665ecab566ac26a40e0dd0675a6b884300fb28f3c43bec5126cd80f54f1a4564feebd3cec5f512af2", 0x9c}, {&(0x7f0000006780)="99e26211b74c290106f5d5460cb7dad48da809affd5c362348719ed1c08f5a535a9845ad6ecb8f853ee19e23bf29ea468b3e9a202aa602da337d5515ac18fc51d2557e40687b07508e88e9cd855b1521a5ae990f732d53b8120fc2686e5499cb9c0c6e9ea7008b0d9f5fd739203a99f1034ff4c905f0d89a18df7cc1fdc065425293ca", 0x83}, {&(0x7f0000006840)="fb86f26b7d19882aa3d9a70959c56e6f5f8238c6d22664e10555163f0de78090d6920b6ca1364490fc1ec02dde40c5ca6eb153bfe8eb82876cccbab01cb032e857f559f2a87bd8c7260aee7a95bf99aea1f3576b18f46f33cc26685aa2b24300d5c148f0cc235fd1aa78b7b7b4f7e314c99b712f0ad48e9becfd2ba15f9a56780638b92acadce34fc73d2a3a94d535e5", 0x90}, {&(0x7f0000006900)="2f4e3b4c53a17cc8f98c534db8af2c7fbda3d45a2c40784d232f43f1d8cadaeb1e82a05488f2ae82d7e5d5605813100aff6c1219e0d4d6010e2210e8a1461155f4be0a9ae218d82b0ad22f5a4d3d7ab6eab948d09321b74520f3dde714a62b6addfb94757615cbd149171f0a9b9653f7b57d00d701c8dfb240474969e9cb9e6b77e28f70b0b1bfc6c50e2b4cffd9c21fcb728d82d49d8802d067c976c977bc", 0x9f}, {&(0x7f00000069c0)="fc69092299be2e3ebaf054a97c7e9abaa3202c06e4bb2b7ac2c185b3938fadee7bc50eb16f91d2999403ba6dc84f65483dfb294d1909ae71db3a1262f00f4af2236cba5fcb5ab546d751d9aac38a62ce37b6173132067d788f21982fc25a00626ccdff52dc25d4d73a3e33f16ff90f526d2adfbf7b90f71352b8396405964128e4b53732b51f06a75f52a468071eaa", 0x8f}, {&(0x7f0000006a80)="2d9746a0262e34c41e95ff6f", 0xc}, {&(0x7f0000006ac0)="b4f3636eb9641fd95d12a24c062a3bcbc274b6a68135b9cf8c917085ec54bc7ad72ae67b508ace61a9769ae40d0901bbbd60bda00a6c6941c50c75c9d14cca2919d4529b353181afc5703a5a26544568eb86d1566e60d581589fb7ebd2e2", 0x5e}, {&(0x7f0000006b40)="1b9f3995706e0fca01d6171c46f2af3703fb26e8b2f744abc8efc15bfa5cb863856f587785f86d52bc0ba5ff0dc776a569e85978eb970703623ca58f228bac1e007f64581695f16c10a46e5db18036b468d920f839f60ca2c08afd83724d51be22e4ece2232dab77788e88b5037c3a33f3094056bb9370e8e02749da1103c1a0f60627d633a957528efaacf6626588b65fb0e96cd3fe8a741c3fd936287e732ff92ac3e800c084adca564e2a3a380dae7b318ea94d3954be13cd417c5566871e63f07f9f0d8906883cbdef438f2916a617a2349f7fcec03a745186038faa5544b00f", 0xe2}], 0x9, &(0x7f0000006dc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0xa0, 0x8000}, {&(0x7f0000006e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006f00), 0x0, &(0x7f0000007080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4010}, {&(0x7f0000007100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007440)=[{&(0x7f0000007180)="db54d4ed7466d35d00c47da09b30568507bfedeee1d476f2039b59b7bf1d4d8342caa8917cbb453339088e30fb073ef8584e652c3939ca5720f762ed0f8a7a2ca51a38efb938fc9dd95301a4d434570492c7620034ed44c12305adb40f6c03608eebfc5389a1034ad9bb2c5ee4a681c4b1a35f25974310e2c93954340f735a14f3e9a60952598dbf457f58d47d8e96d081e6e7508f7ec304b38584c90be6682797399aaf98fb584ae3e3792b24c9b161386b470f8e1abe1e5a95d92f89c720bfd63463de5f753807a012953c5b738d45ccc029143265f9d944e73f5850", 0xdd}, {&(0x7f0000007280)="190000e5a11f2381ab740e89f48b531aa18beb719810aa9af2dd1cc6f208d5049a8660ca7927d63c22ac6d21b057f6d3f58f3b64047685c223c13ddb3f47548ff5ad29158be013a6e98732200992b339e12b5f4ca21fa861490bc51eaafda1e7afe0dcfcfd513fd01a604a70ed0b6723370471f4d5bd92e0f0ee8ba62bf2cf60b245ad17f31a8d66e0b49b00a7da8a7ea0c14ce75bdb2e5e5a4cd028f95f78aaea19795bbf419c189b9032cc1780b0cc723fc46c8867509e7d829d56dfc0d900da081ccf37c126cea36b59fb83d6", 0xce}, {&(0x7f0000007380)="ee27613573fa1d", 0x7}, {&(0x7f00000073c0)="3e37b7e27c41b3a51c4a842b803b9470df0086f8dd0d2eb6310d4175e1f61c4078c15eea17078715d4908fe1567dd9221530c2a48d527493afb2efb020dfa256a369222a", 0x44}], 0x4, &(0x7f00000074c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x4000000}, {&(0x7f0000007500)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007580), 0x0, &(0x7f0000007680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000090}, {&(0x7f00000076c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007ac0)=[{&(0x7f0000007740)="0c6cf1a89f760cc9427cd0ed4632e5ab9e79ff0012e1799a99fa2de63d694ac1eafa41d5332e2b9944fa4e4c93d6f154e715783dc87f4a85b617ceaec99bd3323f4a3f8950316d4ac5eefda8869def57bd4c02b5105d7b71e027ff84f5c438f4091faf74725535de4251b9b32384a8f56555d7664f272a35a4fcd1e2a3ceedcd93cf17504babcca62a5ba7e687428a9b840142d10e2ac0d0fdcb14cd8c28f88aa0994ef6fb230979ef", 0xa9}, {&(0x7f0000007800)="96595c1746d60fb7563eb25c87362bb37482fa", 0x13}, {&(0x7f0000007840)="049abd34f0cd279425387aad6cce20a9887fc4dd900941e8367038683cf26d5124a12d957a87cdbd7f7d698c8658419b4ca12f", 0x33}, {&(0x7f0000007880)="5d57b65c7a0086fdcabc7420c3a25c0adb31d245a0007270c784200a8f014654ce9a22174b852ff729fae16875a21ad8c243463de69a4c835a43a993eef42d05cb91d5a604de1d1bc57aa85ecb", 0x4d}, {&(0x7f0000007900)="7574759489df085b10d458c8a5fec237859ab27a814e20823496f53ac9a384913930a63ed857c70ff42a2def58d3195db755e2a223bdb7f14f2ef7878543b3af13ddd43bc46c215ff84c14d6a34bc53a6c5d6cb6e8c41d8833edf2f2b804e6ecd7bfe2ff95d31acb2c1fb5d734d9d9de2b1641fe72cffbce8e9439449fe062df67d5d4a00c5db10795a6123ca9e51c7708cf461a3be3321550dc9cacc686f1714e03a79b2ee2ecbe10a6d971d5a1e43f", 0xb0}, {&(0x7f00000079c0)="7c330d4a93d62ea6277329fbede92d0a73ab7ded154d24d05e82cf14ea36eb52792bb3daba555bcb8eba6c8e8f131cf74a67ddca52fb348b82d369dfe4b2f5f9eb73d7000791ec1741ee9a8d4e9c7bb09594ee14283db0e59991c9f0adc017bb314aa58914c7027df83eb1c804b45587f9ad66f9bffb3497081b423d1d8c6617e4a82318", 0x84}, {&(0x7f0000007a80)="00601d846c5d5806a2757914119f06c86cc006cfc96ac6e18b9ed6979e60aa38d5650810968a286a05f353d81cdad435a3024f3475c6", 0x36}], 0x7, &(0x7f0000007dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r6]}}], 0x110, 0x40}], 0x8, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) setresuid(r7, 0x0, 0x0) r8 = getuid() setresuid(0x0, 0x0, r8) r9 = fork() tkill(r9, 0x0) 11:14:51 executing program 5 (fault-call:2 fault-nth:7): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:51 executing program 4 (fault-call:2 fault-nth:11): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:14:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 498.989976] FAULT_INJECTION: forcing a failure. [ 498.989976] name failslab, interval 1, probability 0, space 0, times 0 [ 498.991642] CPU: 1 PID: 5821 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 498.992650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 498.994235] Call Trace: [ 498.994644] dump_stack+0x107/0x163 [ 498.995189] should_fail.cold+0x5/0xa [ 498.995758] ? security_file_alloc+0x34/0x170 [ 498.996434] should_failslab+0x5/0x10 [ 498.997184] kmem_cache_alloc+0x5b/0x350 [ 498.997813] security_file_alloc+0x34/0x170 [ 498.998430] __alloc_file+0xb6/0x310 [ 498.998949] alloc_empty_file+0x6d/0x170 [ 498.999515] alloc_file+0x59/0x590 [ 499.000007] alloc_file_pseudo+0x16a/0x250 [ 499.000615] ? alloc_file+0x590/0x590 [ 499.001163] ? shmem_get_inode+0x55c/0xbc0 [ 499.001775] __shmem_file_setup+0x144/0x310 [ 499.002401] ? _copy_from_user+0xfb/0x1b0 [ 499.003100] __do_sys_memfd_create+0x271/0x450 [ 499.003724] ? memfd_file_seals_ptr+0x150/0x150 [ 499.004357] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 499.005123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.005920] do_syscall_64+0x33/0x40 [ 499.006471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.007211] RIP: 0033:0x466609 [ 499.007676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.010170] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 499.011168] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 499.012116] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 499.013101] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 499.014040] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 499.014977] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 499.020332] FAULT_INJECTION: forcing a failure. [ 499.020332] name failslab, interval 1, probability 0, space 0, times 0 [ 499.022066] CPU: 1 PID: 5823 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 499.023057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 499.024625] Call Trace: [ 499.024973] dump_stack+0x107/0x163 [ 499.025492] should_fail.cold+0x5/0xa [ 499.026193] ? create_object.isra.0+0x3a/0xa20 [ 499.026875] should_failslab+0x5/0x10 [ 499.027425] kmem_cache_alloc+0x5b/0x350 [ 499.028040] create_object.isra.0+0x3a/0xa20 [ 499.028717] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 499.029461] kmem_cache_alloc+0x159/0x350 [ 499.030081] __skb_ext_alloc+0x19/0x80 [ 499.030648] skb_ext_add+0x504/0x670 [ 499.031187] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 499.031950] __alloc_skb+0x3c1/0x620 [ 499.032502] netlink_sendmsg+0x94f/0xd90 [ 499.033109] ? netlink_unicast+0x7e0/0x7e0 [ 499.033703] ? netlink_unicast+0x7e0/0x7e0 [ 499.034286] sock_sendmsg+0x150/0x190 [ 499.034736] ____sys_sendmsg+0x709/0x870 [ 499.035295] ? kernel_sendmsg+0x50/0x50 [ 499.035850] ? __ia32_sys_recvmmsg+0x260/0x260 [ 499.036486] ? lock_downgrade+0x6d0/0x6d0 [ 499.037065] ? __lockdep_reset_lock+0x180/0x180 [ 499.037655] ___sys_sendmsg+0xf3/0x170 [ 499.038132] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.038671] ? __fget_files+0x228/0x410 [ 499.039159] ? lock_downgrade+0x6d0/0x6d0 [ 499.039706] ? find_held_lock+0x2c/0x110 [ 499.040245] ? __fget_files+0x251/0x410 [ 499.040820] ? __fget_light+0xea/0x280 [ 499.041321] __sys_sendmsg+0xe5/0x1b0 [ 499.041848] ? __sys_sendmsg_sock+0xb0/0xb0 [ 499.042443] ? rcu_read_lock_any_held+0x69/0x90 [ 499.043097] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 499.043837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.044556] ? trace_hardirqs_on+0x5b/0x180 [ 499.045196] do_syscall_64+0x33/0x40 [ 499.045729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.046474] RIP: 0033:0x466609 [ 499.046955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.049568] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.050538] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 499.051468] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 499.052429] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.053458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.054509] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 499.059965] FAULT_INJECTION: forcing a failure. [ 499.059965] name failslab, interval 1, probability 0, space 0, times 0 [ 499.061603] CPU: 1 PID: 5828 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 499.062487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 499.064025] Call Trace: [ 499.064401] dump_stack+0x107/0x163 [ 499.064894] should_fail.cold+0x5/0xa [ 499.065406] ? __alloc_skb+0x6d/0x620 [ 499.065929] should_failslab+0x5/0x10 [ 499.066482] kmem_cache_alloc_node+0x55/0x370 [ 499.067119] __alloc_skb+0x6d/0x620 [ 499.067623] netlink_ack+0x1ed/0xab0 [ 499.068187] ? netlink_sendmsg+0xd90/0xd90 [ 499.068829] ? __mutex_lock+0x425/0x1230 [ 499.069417] ? __lockdep_reset_lock+0x180/0x180 [ 499.070114] netlink_rcv_skb+0x348/0x430 [ 499.070729] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 499.071458] ? netlink_ack+0xab0/0xab0 [ 499.072037] xfrm_netlink_rcv+0x6b/0x90 [ 499.072633] netlink_unicast+0x53a/0x7e0 [ 499.073241] ? netlink_attachskb+0x810/0x810 [ 499.073900] netlink_sendmsg+0x856/0xd90 [ 499.074504] ? netlink_unicast+0x7e0/0x7e0 [ 499.075135] ? netlink_unicast+0x7e0/0x7e0 [ 499.075764] sock_sendmsg+0x150/0x190 [ 499.076318] ____sys_sendmsg+0x709/0x870 [ 499.076929] ? kernel_sendmsg+0x50/0x50 [ 499.077508] ? __ia32_sys_recvmmsg+0x260/0x260 [ 499.078194] ? lock_downgrade+0x6d0/0x6d0 [ 499.078811] ? __lockdep_reset_lock+0x180/0x180 [ 499.079506] ___sys_sendmsg+0xf3/0x170 [ 499.080081] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.080777] ? __fget_files+0x228/0x410 [ 499.081336] ? lock_downgrade+0x6d0/0x6d0 [ 499.081983] ? find_held_lock+0x2c/0x110 [ 499.082569] ? __fget_files+0x251/0x410 [ 499.083144] ? __fget_light+0xea/0x280 [ 499.083752] __sys_sendmsg+0xe5/0x1b0 [ 499.084337] ? __sys_sendmsg_sock+0xb0/0xb0 [ 499.084958] ? rcu_read_lock_any_held+0x69/0x90 [ 499.085570] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 499.086292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 499.087020] ? trace_hardirqs_on+0x5b/0x180 [ 499.087638] do_syscall_64+0x33/0x40 [ 499.088196] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.088966] RIP: 0033:0x466609 [ 499.089432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 499.092055] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.093162] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 499.094195] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 499.095220] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 499.096232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.097224] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:14:51 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:14:51 executing program 1: mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5e8e, &(0x7f0000000000), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) fcntl$setlease(r0, 0x400, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001800)=[{0x0}], 0x1) 11:15:04 executing program 7 (fault-call:0 fault-nth:12): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:04 executing program 4 (fault-call:2 fault-nth:12): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:04 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:04 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, 0x0, r0) r2 = fork() tkill(r2, 0x25) 11:15:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:04 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:04 executing program 5 (fault-call:2 fault-nth:8): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 512.178012] FAULT_INJECTION: forcing a failure. [ 512.178012] name failslab, interval 1, probability 0, space 0, times 0 [ 512.179654] CPU: 0 PID: 5875 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 512.180562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 512.182106] Call Trace: [ 512.182217] FAULT_INJECTION: forcing a failure. [ 512.182217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.182461] dump_stack+0x107/0x163 [ 512.182476] should_fail.cold+0x5/0xa [ 512.182498] ? create_object.isra.0+0x3a/0xa20 [ 512.185720] should_failslab+0x5/0x10 [ 512.186195] kmem_cache_alloc+0x5b/0x350 [ 512.186692] ? lock_downgrade+0x6d0/0x6d0 [ 512.187159] create_object.isra.0+0x3a/0xa20 [ 512.187772] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 512.188348] kmem_cache_alloc+0x159/0x350 [ 512.188871] security_file_alloc+0x34/0x170 [ 512.189356] __alloc_file+0xb6/0x310 [ 512.189771] alloc_empty_file+0x6d/0x170 [ 512.190239] alloc_file+0x59/0x590 [ 512.190764] alloc_file_pseudo+0x16a/0x250 [ 512.191305] ? alloc_file+0x590/0x590 [ 512.191740] ? shmem_get_inode+0x55c/0xbc0 [ 512.192312] __shmem_file_setup+0x144/0x310 [ 512.192806] ? _copy_from_user+0xfb/0x1b0 [ 512.193271] __do_sys_memfd_create+0x271/0x450 [ 512.193785] ? memfd_file_seals_ptr+0x150/0x150 [ 512.194348] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 512.194936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 512.195521] do_syscall_64+0x33/0x40 [ 512.195937] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.196510] RIP: 0033:0x466609 [ 512.196901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.199030] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 512.200247] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000466609 [ 512.201259] RDX: 00007fcca9f0f000 RSI: 0000000000000000 RDI: 00000000004bee66 [ 512.202256] RBP: 0000000000000000 R08: 00007fcca9f0eff8 R09: ffffffffffffffff [ 512.203244] R10: 00007fcca9f0effc R11: 0000000000000246 R12: 0000000020000040 [ 512.204090] R13: 0000000020000080 R14: 0000000000000000 R15: 00000000200005c0 [ 512.205069] CPU: 1 PID: 5874 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 512.206172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 512.207576] FAULT_INJECTION: forcing a failure. [ 512.207576] name failslab, interval 1, probability 0, space 0, times 0 [ 512.207840] Call Trace: [ 512.209750] dump_stack+0x107/0x163 [ 512.210299] should_fail.cold+0x5/0xa [ 512.210877] _copy_from_iter_full+0x1ff/0x940 [ 512.211541] ? __check_object_size+0x319/0x440 [ 512.212182] netlink_sendmsg+0x7c2/0xd90 [ 512.212767] ? netlink_unicast+0x7e0/0x7e0 [ 512.213428] ? netlink_unicast+0x7e0/0x7e0 [ 512.214060] sock_sendmsg+0x150/0x190 [ 512.214634] ____sys_sendmsg+0x709/0x870 [ 512.215240] ? kernel_sendmsg+0x50/0x50 [ 512.215832] ? __ia32_sys_recvmmsg+0x260/0x260 [ 512.216522] ? lock_downgrade+0x6d0/0x6d0 [ 512.217157] ? __lockdep_reset_lock+0x180/0x180 [ 512.217849] ___sys_sendmsg+0xf3/0x170 [ 512.218433] ? sendmsg_copy_msghdr+0x160/0x160 [ 512.219117] ? __fget_files+0x228/0x410 [ 512.219727] ? lock_downgrade+0x6d0/0x6d0 [ 512.220350] ? find_held_lock+0x2c/0x110 [ 512.220974] ? __fget_files+0x251/0x410 [ 512.221566] ? __fget_light+0xea/0x280 [ 512.222147] __sys_sendmsg+0xe5/0x1b0 [ 512.222718] ? __sys_sendmsg_sock+0xb0/0xb0 [ 512.223359] ? rcu_read_lock_any_held+0x69/0x90 [ 512.224060] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 512.224867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 512.225633] ? trace_hardirqs_on+0x5b/0x180 [ 512.226265] do_syscall_64+0x33/0x40 [ 512.226823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.227572] RIP: 0033:0x466609 [ 512.228045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.230787] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.231932] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 512.232990] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 512.234053] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.235129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.236196] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 512.237279] CPU: 0 PID: 5877 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 512.238226] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 512.239918] Call Trace: [ 512.240303] dump_stack+0x107/0x163 [ 512.240866] should_fail.cold+0x5/0xa [ 512.241423] ? create_object.isra.0+0x3a/0xa20 [ 512.242090] should_failslab+0x5/0x10 [ 512.242657] kmem_cache_alloc+0x5b/0x350 [ 512.243266] create_object.isra.0+0x3a/0xa20 [ 512.243910] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 512.244666] kmem_cache_alloc_node+0x169/0x370 [ 512.245407] __alloc_skb+0x6d/0x620 [ 512.245971] netlink_ack+0x1ed/0xab0 [ 512.246537] ? netlink_sendmsg+0xd90/0xd90 [ 512.247153] ? __mutex_lock+0x425/0x1230 [ 512.247760] ? __lockdep_reset_lock+0x180/0x180 [ 512.248442] netlink_rcv_skb+0x348/0x430 [ 512.249055] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 512.249768] ? netlink_ack+0xab0/0xab0 [ 512.250355] xfrm_netlink_rcv+0x6b/0x90 [ 512.250958] netlink_unicast+0x53a/0x7e0 [ 512.251563] ? netlink_attachskb+0x810/0x810 [ 512.252212] netlink_sendmsg+0x856/0xd90 [ 512.252839] ? netlink_unicast+0x7e0/0x7e0 [ 512.253478] ? netlink_unicast+0x7e0/0x7e0 [ 512.254094] sock_sendmsg+0x150/0x190 [ 512.254656] ____sys_sendmsg+0x709/0x870 [ 512.255247] ? kernel_sendmsg+0x50/0x50 [ 512.255877] ? __ia32_sys_recvmmsg+0x260/0x260 [ 512.256546] ? lock_downgrade+0x6d0/0x6d0 [ 512.257198] ? __lockdep_reset_lock+0x180/0x180 [ 512.257874] ___sys_sendmsg+0xf3/0x170 [ 512.258452] ? sendmsg_copy_msghdr+0x160/0x160 [ 512.259110] ? __fget_files+0x228/0x410 [ 512.259684] ? lock_downgrade+0x6d0/0x6d0 [ 512.260269] ? find_held_lock+0x2c/0x110 [ 512.260875] ? __fget_files+0x251/0x410 [ 512.261336] ? __fget_light+0xea/0x280 [ 512.261781] __sys_sendmsg+0xe5/0x1b0 [ 512.262200] ? __sys_sendmsg_sock+0xb0/0xb0 [ 512.262686] ? rcu_read_lock_any_held+0x69/0x90 [ 512.263205] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 512.263792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 512.264355] ? trace_hardirqs_on+0x5b/0x180 [ 512.264860] do_syscall_64+0x33/0x40 [ 512.265372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 512.266137] RIP: 0033:0x466609 [ 512.266621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 512.269301] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.270429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 512.271497] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 512.272564] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 512.273642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.274687] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 512.326535] ISOFS: Unable to identify CD-ROM format. 11:15:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:17 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace(0x4207, r2) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) tkill(r1, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x5}, {0x7fffffff, 0x101}], r3}, 0x18, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000100)) 11:15:17 executing program 7 (fault-call:0 fault-nth:13): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:17 executing program 5 (fault-call:2 fault-nth:9): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:17 executing program 4 (fault-call:2 fault-nth:13): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:17 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001980), 0x0) [ 525.091304] FAULT_INJECTION: forcing a failure. [ 525.091304] name failslab, interval 1, probability 0, space 0, times 0 [ 525.092858] CPU: 1 PID: 5904 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 525.093814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 525.095276] Call Trace: [ 525.095626] dump_stack+0x107/0x163 [ 525.096196] should_fail.cold+0x5/0xa [ 525.096771] should_failslab+0x5/0x10 [ 525.097467] __kmalloc_node_track_caller+0x74/0x3f0 [ 525.098358] ? netlink_ack+0x1ed/0xab0 [ 525.099071] __alloc_skb+0xb1/0x620 [ 525.099712] netlink_ack+0x1ed/0xab0 [ 525.100379] ? netlink_sendmsg+0xd90/0xd90 [ 525.101170] ? __mutex_lock+0x425/0x1230 [ 525.101882] ? __lockdep_reset_lock+0x180/0x180 [ 525.102745] netlink_rcv_skb+0x348/0x430 [ 525.103457] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 525.104111] ? netlink_ack+0xab0/0xab0 [ 525.104700] xfrm_netlink_rcv+0x6b/0x90 [ 525.105335] netlink_unicast+0x53a/0x7e0 [ 525.106094] ? netlink_attachskb+0x810/0x810 [ 525.106965] netlink_sendmsg+0x856/0xd90 [ 525.107765] ? netlink_unicast+0x7e0/0x7e0 [ 525.108544] ? netlink_unicast+0x7e0/0x7e0 [ 525.109329] sock_sendmsg+0x150/0x190 [ 525.110000] ____sys_sendmsg+0x709/0x870 [ 525.110748] ? kernel_sendmsg+0x50/0x50 [ 525.111489] ? __ia32_sys_recvmmsg+0x260/0x260 [ 525.112332] ? lock_downgrade+0x6d0/0x6d0 [ 525.113176] ? __lockdep_reset_lock+0x180/0x180 [ 525.114051] ___sys_sendmsg+0xf3/0x170 [ 525.114723] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.115490] ? __fget_files+0x228/0x410 [ 525.116145] ? lock_downgrade+0x6d0/0x6d0 [ 525.116894] ? find_held_lock+0x2c/0x110 [ 525.117588] ? __fget_files+0x251/0x410 [ 525.118281] ? __fget_light+0xea/0x280 [ 525.118969] __sys_sendmsg+0xe5/0x1b0 [ 525.119651] ? __sys_sendmsg_sock+0xb0/0xb0 [ 525.120426] ? rcu_read_lock_any_held+0x69/0x90 [ 525.121282] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 525.122140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 525.123074] ? trace_hardirqs_on+0x5b/0x180 [ 525.123725] do_syscall_64+0x33/0x40 [ 525.124530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.125268] RIP: 0033:0x466609 [ 525.125694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.128241] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.129304] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 525.130253] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 525.131239] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.132199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.133175] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:15:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc080000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="3f000e0080000000ffffffffffff080211000000080211000000000000000000000000000000000000076ede35b9303f862503006c002a01003c040000000000080026006c0900006c002a00dd2a6a8a530607afc19837552234818d5aa5866699fd961d60c94e59ef3fbbd071c4071c3bb26756772042880602090082364101040700000008021100000004000000ffffffffffff8f0e00005800000002040802110000010300000000ffffffffffff0200000040000e801b"], 0x8fc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) [ 525.157026] FAULT_INJECTION: forcing a failure. [ 525.157026] name failslab, interval 1, probability 0, space 0, times 0 [ 525.158689] CPU: 0 PID: 5910 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 525.159627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 525.161237] Call Trace: [ 525.161606] dump_stack+0x107/0x163 [ 525.162113] should_fail.cold+0x5/0xa [ 525.162644] ? xfrm_state_alloc+0x21/0x4e0 [ 525.163232] should_failslab+0x5/0x10 [ 525.163759] kmem_cache_alloc+0x5b/0x350 [ 525.164342] xfrm_state_alloc+0x21/0x4e0 [ 525.164912] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 525.165723] __find_acq_core+0x8b7/0x1fa0 [ 525.166324] xfrm_find_acq+0x6b/0x90 [ 525.166854] xfrm_alloc_userspi+0x523/0x9a0 [ 525.167464] ? xfrm_add_sa+0x34a0/0x34a0 [ 525.168041] ? __nla_parse+0x3e/0x50 [ 525.168575] ? xfrm_add_sa+0x34a0/0x34a0 [ 525.169135] xfrm_user_rcv_msg+0x3ff/0x6b0 [ 525.169726] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 525.170470] ? __mutex_lock+0x425/0x1230 [ 525.170999] ? __lockdep_reset_lock+0x180/0x180 [ 525.171607] netlink_rcv_skb+0x14b/0x430 [ 525.172138] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 525.172853] ? netlink_ack+0xab0/0xab0 [ 525.173455] xfrm_netlink_rcv+0x6b/0x90 [ 525.174026] netlink_unicast+0x53a/0x7e0 [ 525.174610] ? netlink_attachskb+0x810/0x810 [ 525.175244] netlink_sendmsg+0x856/0xd90 [ 525.175813] ? netlink_unicast+0x7e0/0x7e0 [ 525.176432] ? netlink_unicast+0x7e0/0x7e0 [ 525.177029] sock_sendmsg+0x150/0x190 [ 525.177579] ____sys_sendmsg+0x709/0x870 [ 525.178168] ? kernel_sendmsg+0x50/0x50 [ 525.178733] ? __ia32_sys_recvmmsg+0x260/0x260 [ 525.179398] ? lock_downgrade+0x6d0/0x6d0 [ 525.179999] ? __lockdep_reset_lock+0x180/0x180 [ 525.180665] ___sys_sendmsg+0xf3/0x170 [ 525.181232] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.181888] ? __fget_files+0x228/0x410 [ 525.182429] ? lock_downgrade+0x6d0/0x6d0 [ 525.183002] ? find_held_lock+0x2c/0x110 [ 525.183592] ? __fget_files+0x251/0x410 [ 525.184176] ? __fget_light+0xea/0x280 [ 525.184745] __sys_sendmsg+0xe5/0x1b0 [ 525.185304] ? __sys_sendmsg_sock+0xb0/0xb0 [ 525.185921] ? rcu_read_lock_any_held+0x69/0x90 [ 525.186623] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 525.187332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 525.188080] ? trace_hardirqs_on+0x5b/0x180 [ 525.188706] do_syscall_64+0x33/0x40 [ 525.189235] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.189984] RIP: 0033:0x466609 [ 525.190451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.193104] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.194157] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 525.195161] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 525.196170] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.197228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.198231] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:15:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:17 executing program 4 (fault-call:2 fault-nth:14): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 525.219295] FAULT_INJECTION: forcing a failure. 11:15:17 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() fork() tkill(r1, 0x0) [ 525.219295] name failslab, interval 1, probability 0, space 0, times 0 [ 525.220867] CPU: 1 PID: 5921 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 525.222255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 525.223846] Call Trace: [ 525.224230] dump_stack+0x107/0x163 [ 525.224754] should_fail.cold+0x5/0xa [ 525.225318] ? create_object.isra.0+0x3a/0xa20 [ 525.226002] should_failslab+0x5/0x10 [ 525.226554] kmem_cache_alloc+0x5b/0x350 [ 525.227134] create_object.isra.0+0x3a/0xa20 [ 525.227765] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 525.228489] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 525.229231] ? netlink_ack+0x1ed/0xab0 [ 525.229756] __alloc_skb+0xb1/0x620 [ 525.230208] netlink_ack+0x1ed/0xab0 [ 525.230659] ? netlink_sendmsg+0xd90/0xd90 [ 525.231248] ? __mutex_lock+0x425/0x1230 [ 525.231858] ? __lockdep_reset_lock+0x180/0x180 [ 525.232552] netlink_rcv_skb+0x348/0x430 [ 525.233171] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 525.233912] ? netlink_ack+0xab0/0xab0 [ 525.234500] xfrm_netlink_rcv+0x6b/0x90 [ 525.235106] netlink_unicast+0x53a/0x7e0 [ 525.235703] ? netlink_attachskb+0x810/0x810 [ 525.236368] netlink_sendmsg+0x856/0xd90 [ 525.237012] ? netlink_unicast+0x7e0/0x7e0 [ 525.237647] ? netlink_unicast+0x7e0/0x7e0 [ 525.237942] FAULT_INJECTION: forcing a failure. [ 525.237942] name failslab, interval 1, probability 0, space 0, times 0 [ 525.238281] sock_sendmsg+0x150/0x190 [ 525.240433] ____sys_sendmsg+0x709/0x870 [ 525.241059] ? kernel_sendmsg+0x50/0x50 [ 525.241643] ? __ia32_sys_recvmmsg+0x260/0x260 [ 525.242327] ? lock_downgrade+0x6d0/0x6d0 [ 525.242937] ? __lockdep_reset_lock+0x180/0x180 [ 525.243620] ___sys_sendmsg+0xf3/0x170 [ 525.244207] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.244874] ? __fget_files+0x228/0x410 [ 525.245479] ? lock_downgrade+0x6d0/0x6d0 [ 525.246053] ? find_held_lock+0x2c/0x110 [ 525.246501] ? __fget_files+0x251/0x410 [ 525.247082] ? __fget_light+0xea/0x280 [ 525.247659] __sys_sendmsg+0xe5/0x1b0 [ 525.248222] ? __sys_sendmsg_sock+0xb0/0xb0 [ 525.248849] ? rcu_read_lock_any_held+0x69/0x90 [ 525.249565] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 525.250333] ? syscall_enter_from_user_mode+0x1d/0x50 [ 525.251039] ? trace_hardirqs_on+0x5b/0x180 [ 525.251660] do_syscall_64+0x33/0x40 [ 525.252208] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.252947] RIP: 0033:0x466609 [ 525.253406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.256151] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.257332] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 525.258292] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 525.259321] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.260220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.261057] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 525.261925] CPU: 0 PID: 5913 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 525.262867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 525.264541] Call Trace: [ 525.264954] dump_stack+0x107/0x163 [ 525.265556] should_fail.cold+0x5/0xa [ 525.266147] ? getname_flags.part.0+0x50/0x4f0 [ 525.266855] should_failslab+0x5/0x10 [ 525.267344] kmem_cache_alloc+0x5b/0x350 [ 525.267860] getname_flags.part.0+0x50/0x4f0 [ 525.268533] getname+0x8e/0xd0 [ 525.269032] do_sys_openat2+0xf5/0x420 [ 525.269627] ? build_open_flags+0x680/0x680 [ 525.270266] ? find_held_lock+0x2c/0x110 [ 525.270828] ? do_syscall_64+0x33/0x40 [ 525.271353] __x64_sys_openat+0x13f/0x1f0 [ 525.271967] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 525.272691] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 525.273480] ? syscall_enter_from_user_mode+0x1d/0x50 [ 525.274242] do_syscall_64+0x33/0x40 [ 525.274796] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.275557] RIP: 0033:0x4196c4 [ 525.276035] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 525.278724] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 525.279835] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 525.280866] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 525.281905] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 525.282938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 525.283965] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:15:17 executing program 4 (fault-call:2 fault-nth:15): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 525.305348] netlink: 2028 bytes leftover after parsing attributes in process `syz-executor.6'. [ 525.321106] FAULT_INJECTION: forcing a failure. [ 525.321106] name failslab, interval 1, probability 0, space 0, times 0 [ 525.321961] netlink: 2028 bytes leftover after parsing attributes in process `syz-executor.6'. [ 525.322890] CPU: 1 PID: 5929 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 525.325071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 525.326725] Call Trace: [ 525.327125] dump_stack+0x107/0x163 [ 525.327675] should_fail.cold+0x5/0xa [ 525.328259] ? __skb_ext_alloc+0x19/0x80 [ 525.328872] should_failslab+0x5/0x10 [ 525.329468] kmem_cache_alloc+0x5b/0x350 [ 525.330086] __skb_ext_alloc+0x19/0x80 [ 525.330668] skb_ext_add+0x504/0x670 [ 525.331230] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 525.332020] __alloc_skb+0x3c1/0x620 [ 525.332601] netlink_ack+0x1ed/0xab0 [ 525.333209] ? netlink_sendmsg+0xd90/0xd90 [ 525.333848] ? __mutex_lock+0x425/0x1230 [ 525.334485] ? __lockdep_reset_lock+0x180/0x180 [ 525.335186] netlink_rcv_skb+0x348/0x430 [ 525.335785] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 525.336574] ? netlink_ack+0xab0/0xab0 [ 525.337211] xfrm_netlink_rcv+0x6b/0x90 [ 525.337824] netlink_unicast+0x53a/0x7e0 [ 525.338429] ? netlink_attachskb+0x810/0x810 [ 525.339087] netlink_sendmsg+0x856/0xd90 [ 525.339737] ? netlink_unicast+0x7e0/0x7e0 [ 525.340382] ? netlink_unicast+0x7e0/0x7e0 [ 525.341026] sock_sendmsg+0x150/0x190 [ 525.341610] ____sys_sendmsg+0x709/0x870 [ 525.342233] ? kernel_sendmsg+0x50/0x50 [ 525.342822] ? __ia32_sys_recvmmsg+0x260/0x260 [ 525.343501] ? lock_downgrade+0x6d0/0x6d0 [ 525.344125] ? __lockdep_reset_lock+0x180/0x180 [ 525.344837] ___sys_sendmsg+0xf3/0x170 [ 525.345455] ? sendmsg_copy_msghdr+0x160/0x160 [ 525.346131] ? __fget_files+0x228/0x410 [ 525.346724] ? lock_downgrade+0x6d0/0x6d0 [ 525.347351] ? find_held_lock+0x2c/0x110 [ 525.347977] ? __fget_files+0x251/0x410 [ 525.348579] ? __fget_light+0xea/0x280 [ 525.349179] __sys_sendmsg+0xe5/0x1b0 [ 525.349738] ? __sys_sendmsg_sock+0xb0/0xb0 [ 525.350373] ? rcu_read_lock_any_held+0x69/0x90 [ 525.351084] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 525.351881] ? syscall_enter_from_user_mode+0x1d/0x50 [ 525.352644] ? trace_hardirqs_on+0x5b/0x180 [ 525.353312] do_syscall_64+0x33/0x40 [ 525.353868] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 525.354647] RIP: 0033:0x466609 [ 525.355134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 525.357913] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.359053] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 525.360118] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 525.361193] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 525.362266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 11:15:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 525.363332] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:15:17 executing program 6: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace(0x4207, r2) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) tkill(r1, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v3={0x3000000, [{0x5}, {0x7fffffff, 0x101}], r3}, 0x18, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f0000000100)) 11:15:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:30 executing program 7 (fault-call:0 fault-nth:14): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:30 executing program 5 (fault-call:2 fault-nth:10): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:30 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0, 0x6d}], 0xe) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)=[0x81]) r3 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000040)={{0x1, r0, 0xee01, r0, r3, 0x13, 0xa99}, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x5}) tkill(r1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r5 = fork() move_pages(r5, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000100)='net/ip6_mr_cache\x00') r7 = fork() move_pages(r7, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) r8 = fork() move_pages(r8, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x1, r8}) 11:15:30 executing program 4 (fault-call:2 fault-nth:16): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 538.105409] FAULT_INJECTION: forcing a failure. [ 538.105409] name failslab, interval 1, probability 0, space 0, times 0 [ 538.107086] CPU: 0 PID: 5955 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 538.108035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 538.109702] Call Trace: [ 538.110075] dump_stack+0x107/0x163 [ 538.110608] should_fail.cold+0x5/0xa [ 538.111116] ? create_object.isra.0+0x3a/0xa20 [ 538.111805] should_failslab+0x5/0x10 [ 538.112364] kmem_cache_alloc+0x5b/0x350 [ 538.113029] create_object.isra.0+0x3a/0xa20 [ 538.113662] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 538.114498] kmem_cache_alloc+0x159/0x350 [ 538.115120] __skb_ext_alloc+0x19/0x80 [ 538.115726] skb_ext_add+0x504/0x670 [ 538.116287] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 538.117037] __alloc_skb+0x3c1/0x620 [ 538.117613] netlink_ack+0x1ed/0xab0 [ 538.118165] ? netlink_sendmsg+0xd90/0xd90 [ 538.118825] ? __mutex_lock+0x425/0x1230 [ 538.119453] ? __lockdep_reset_lock+0x180/0x180 [ 538.120141] netlink_rcv_skb+0x348/0x430 [ 538.120502] FAULT_INJECTION: forcing a failure. [ 538.120502] name failslab, interval 1, probability 0, space 0, times 0 [ 538.120765] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 538.123031] ? netlink_ack+0xab0/0xab0 [ 538.123667] xfrm_netlink_rcv+0x6b/0x90 [ 538.124269] netlink_unicast+0x53a/0x7e0 [ 538.124904] ? netlink_attachskb+0x810/0x810 [ 538.125616] netlink_sendmsg+0x856/0xd90 [ 538.126269] ? netlink_unicast+0x7e0/0x7e0 [ 538.126873] ? netlink_unicast+0x7e0/0x7e0 [ 538.127533] sock_sendmsg+0x150/0x190 [ 538.128134] ____sys_sendmsg+0x709/0x870 [ 538.128756] ? kernel_sendmsg+0x50/0x50 [ 538.129374] ? __ia32_sys_recvmmsg+0x260/0x260 [ 538.130109] ? lock_downgrade+0x6d0/0x6d0 [ 538.130759] ? __lockdep_reset_lock+0x180/0x180 [ 538.131449] ___sys_sendmsg+0xf3/0x170 [ 538.132061] ? sendmsg_copy_msghdr+0x160/0x160 [ 538.132751] ? __fget_files+0x228/0x410 [ 538.133365] ? lock_downgrade+0x6d0/0x6d0 [ 538.133984] ? find_held_lock+0x2c/0x110 [ 538.134588] ? __fget_files+0x251/0x410 [ 538.135183] ? __fget_light+0xea/0x280 [ 538.135812] __sys_sendmsg+0xe5/0x1b0 [ 538.136405] ? __sys_sendmsg_sock+0xb0/0xb0 [ 538.137036] ? rcu_read_lock_any_held+0x69/0x90 [ 538.137753] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 538.138577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.139352] ? trace_hardirqs_on+0x5b/0x180 [ 538.140007] do_syscall_64+0x33/0x40 [ 538.140561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.141321] RIP: 0033:0x466609 [ 538.141800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.144497] RSP: 002b:00007f140f4b1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.145656] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 538.146729] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 538.147753] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.148793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.149802] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 11:15:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pwrite64(0xffffffffffffffff, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x410040) r1 = syz_io_uring_complete(0x0) fsmount(r1, 0x1, 0x72) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0xfdef) lseek(r2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bedd98d5e165e9d1381d7bba6b9a016dd8ef9c291f0437ca"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7451542e2bc52cecf65127a64600319217519f5321443ec8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf254500000008000300", @ANYRES32=r3, @ANYBLOB="021d63bab54bc0011ec4f774319e8e69869cfbf5aedb53fa7fba9630c70871194adf3f8a119c3851cbee7434"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c880}, 0x4044880) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbf2df257b40000008000300", @ANYRES32=r3, @ANYBLOB="0c00990004000000000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100001400fe008116318664cdae6aec6b71baba6f6dfb1400020179671d343424bf4d15a10d504ec5aa880a00060008021100000100000a00060008021100000100001400fe00750000000015000000000000000000001400fe00cf0600000000000000f05fd28e7ce85e"], 0xb4}}, 0x8000) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x94, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x94}}, 0x4010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000280)={0x3ff, 0x8000, 0x4, 0x81, 0x800}) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 538.150875] CPU: 1 PID: 5958 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 538.151826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 538.154047] Call Trace: [ 538.154451] dump_stack+0x107/0x163 [ 538.155010] should_fail.cold+0x5/0xa [ 538.155580] ? create_object.isra.0+0x3a/0xa20 [ 538.156185] should_failslab+0x5/0x10 [ 538.156598] kmem_cache_alloc+0x5b/0x350 [ 538.157064] create_object.isra.0+0x3a/0xa20 [ 538.157616] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 538.158345] kmem_cache_alloc+0x159/0x350 [ 538.158948] xfrm_state_alloc+0x21/0x4e0 [ 538.159542] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 538.160284] __find_acq_core+0x8b7/0x1fa0 [ 538.160796] xfrm_find_acq+0x6b/0x90 [ 538.161234] xfrm_alloc_userspi+0x523/0x9a0 [ 538.161836] ? xfrm_add_sa+0x34a0/0x34a0 [ 538.162452] ? __nla_parse+0x3e/0x50 [ 538.162979] ? xfrm_add_sa+0x34a0/0x34a0 [ 538.163560] xfrm_user_rcv_msg+0x3ff/0x6b0 [ 538.164140] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 538.164824] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 538.165563] ? _raw_spin_unlock_irq+0x1f/0x30 [ 538.166201] ? trace_hardirqs_on+0x5b/0x180 [ 538.166904] ? _raw_spin_unlock_irq+0x1f/0x30 [ 538.167435] ? finish_task_switch+0x126/0x5d0 [ 538.167955] ? __mutex_lock+0x425/0x1230 [ 538.168428] ? __lockdep_reset_lock+0x180/0x180 [ 538.168947] netlink_rcv_skb+0x14b/0x430 [ 538.169423] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 538.169962] FAULT_INJECTION: forcing a failure. [ 538.169962] name failslab, interval 1, probability 0, space 0, times 0 [ 538.171164] ? netlink_ack+0xab0/0xab0 [ 538.171605] xfrm_netlink_rcv+0x6b/0x90 [ 538.172034] netlink_unicast+0x53a/0x7e0 [ 538.172482] ? netlink_attachskb+0x810/0x810 [ 538.172965] netlink_sendmsg+0x856/0xd90 [ 538.173430] ? netlink_unicast+0x7e0/0x7e0 [ 538.173927] ? netlink_unicast+0x7e0/0x7e0 [ 538.174463] sock_sendmsg+0x150/0x190 [ 538.174959] ____sys_sendmsg+0x709/0x870 [ 538.175497] ? kernel_sendmsg+0x50/0x50 [ 538.176027] ? __ia32_sys_recvmmsg+0x260/0x260 [ 538.176650] ? lock_downgrade+0x6d0/0x6d0 [ 538.177230] ? __lockdep_reset_lock+0x180/0x180 [ 538.177758] ___sys_sendmsg+0xf3/0x170 [ 538.178202] ? sendmsg_copy_msghdr+0x160/0x160 [ 538.178719] ? __fget_files+0x228/0x410 [ 538.179173] ? lock_downgrade+0x6d0/0x6d0 [ 538.179641] ? find_held_lock+0x2c/0x110 [ 538.180125] ? __fget_files+0x251/0x410 [ 538.180585] ? __fget_light+0xea/0x280 [ 538.181060] __sys_sendmsg+0xe5/0x1b0 [ 538.181592] ? __sys_sendmsg_sock+0xb0/0xb0 [ 538.182121] ? rcu_read_lock_any_held+0x69/0x90 [ 538.182668] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 538.183377] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.183945] ? trace_hardirqs_on+0x5b/0x180 [ 538.184552] do_syscall_64+0x33/0x40 [ 538.185083] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.185842] RIP: 0033:0x466609 [ 538.186300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 538.188956] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.190096] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 538.191058] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 538.191907] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.192887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.193890] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 538.194937] CPU: 0 PID: 5962 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 538.195997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 538.197662] Call Trace: [ 538.198052] dump_stack+0x107/0x163 [ 538.198605] should_fail.cold+0x5/0xa [ 538.199157] ? create_object.isra.0+0x3a/0xa20 [ 538.199815] should_failslab+0x5/0x10 [ 538.200335] kmem_cache_alloc+0x5b/0x350 [ 538.200932] create_object.isra.0+0x3a/0xa20 [ 538.201635] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 538.202368] kmem_cache_alloc+0x159/0x350 [ 538.202993] getname_flags.part.0+0x50/0x4f0 [ 538.203638] getname+0x8e/0xd0 [ 538.204102] do_sys_openat2+0xf5/0x420 [ 538.204671] ? build_open_flags+0x680/0x680 [ 538.205300] ? find_held_lock+0x2c/0x110 [ 538.205884] ? do_syscall_64+0x33/0x40 [ 538.206460] __x64_sys_openat+0x13f/0x1f0 [ 538.207046] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 538.207745] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 538.208495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.209240] do_syscall_64+0x33/0x40 [ 538.209774] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.210513] RIP: 0033:0x4196c4 [ 538.210977] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 538.213536] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 538.214655] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 538.215699] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 538.216694] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 538.217701] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 538.218735] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:15:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000008000000000000003003e"], 0xa78) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x90000, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x102c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4600, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={0x0}, 0x8080, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffffffffffffffc, r2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:15:30 executing program 4 (fault-call:2 fault-nth:17): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:30 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 538.370926] FAULT_INJECTION: forcing a failure. [ 538.370926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.372747] CPU: 0 PID: 5990 Comm: syz-executor.4 Not tainted 5.10.56 #1 [ 538.373705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 538.375266] Call Trace: [ 538.375637] dump_stack+0x107/0x163 [ 538.376159] should_fail.cold+0x5/0xa [ 538.376697] _copy_to_user+0x2e/0x180 [ 538.377294] simple_read_from_buffer+0xcc/0x160 [ 538.377931] proc_fail_nth_read+0x194/0x220 [ 538.378536] ? proc_sessionid_read+0x220/0x220 [ 538.379256] ? security_file_permission+0x24e/0x570 [ 538.380027] ? proc_sessionid_read+0x220/0x220 [ 538.380713] vfs_read+0x228/0x580 [ 538.381258] ksys_read+0x12d/0x250 [ 538.381796] ? __ia32_sys_pwrite64+0x230/0x230 [ 538.382488] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 538.383285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 538.384064] do_syscall_64+0x33/0x40 [ 538.384601] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 538.385418] RIP: 0033:0x41935c [ 538.385910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 538.388571] RSP: 002b:00007f140f4b1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.389686] RAX: ffffffffffffffda RBX: 00000000000000f8 RCX: 000000000041935c [ 538.390768] RDX: 000000000000000f RSI: 00007f140f4b11e0 RDI: 0000000000000004 [ 538.391821] RBP: 00007f140f4b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 538.392870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.393848] R13: 00007ffc0fc205ef R14: 00007f140f4b1300 R15: 0000000000022000 [ 538.447259] ISOFS: Unable to identify CD-ROM format. 11:15:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:44 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x2f) 11:15:44 executing program 7 (fault-call:0 fault-nth:15): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x102c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4600, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp={0x0}, 0x8080, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffffffffffffffc, r2, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:15:44 executing program 5 (fault-call:2 fault-nth:11): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x4, 0x0, 0x4, 0x6, 0x4, "5991b50dea6d6b7764125e01f7b661295ba987", 0x100000, 0x8}) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000240)=0x1) socket$unix(0x1, 0x7, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/222, 0xde, 0x40000022, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 11:15:44 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 551.610608] FAULT_INJECTION: forcing a failure. [ 551.610608] name failslab, interval 1, probability 0, space 0, times 0 [ 551.613785] CPU: 0 PID: 6021 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 551.615624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 551.618790] Call Trace: [ 551.619459] dump_stack+0x107/0x163 [ 551.620369] should_fail.cold+0x5/0xa [ 551.621332] ? __alloc_skb+0x6d/0x620 [ 551.622260] should_failslab+0x5/0x10 [ 551.623179] kmem_cache_alloc_node+0x55/0x370 [ 551.624253] __alloc_skb+0x6d/0x620 [ 551.625130] netlink_ack+0x1ed/0xab0 [ 551.626046] ? netlink_sendmsg+0xd90/0xd90 [ 551.627069] ? __mutex_lock+0x425/0x1230 [ 551.628044] ? __lockdep_reset_lock+0x180/0x180 [ 551.629230] netlink_rcv_skb+0x348/0x430 [ 551.630262] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 551.631616] ? netlink_ack+0xab0/0xab0 [ 551.632594] xfrm_netlink_rcv+0x6b/0x90 [ 551.633591] netlink_unicast+0x53a/0x7e0 [ 551.634609] ? netlink_attachskb+0x810/0x810 [ 551.635718] netlink_sendmsg+0x856/0xd90 [ 551.636729] ? netlink_unicast+0x7e0/0x7e0 [ 551.637801] ? netlink_unicast+0x7e0/0x7e0 [ 551.638886] sock_sendmsg+0x150/0x190 [ 551.639847] ____sys_sendmsg+0x709/0x870 [ 551.640857] ? kernel_sendmsg+0x50/0x50 [ 551.641865] ? __ia32_sys_recvmmsg+0x260/0x260 [ 551.643073] ? lock_downgrade+0x6d0/0x6d0 [ 551.644127] ? __lockdep_reset_lock+0x180/0x180 [ 551.645295] ___sys_sendmsg+0xf3/0x170 [ 551.646289] ? sendmsg_copy_msghdr+0x160/0x160 [ 551.647445] ? __fget_files+0x228/0x410 [ 551.648476] ? lock_downgrade+0x6d0/0x6d0 [ 551.649525] ? find_held_lock+0x2c/0x110 [ 551.650558] ? __fget_files+0x251/0x410 [ 551.651565] ? __fget_light+0xea/0x280 [ 551.652575] __sys_sendmsg+0xe5/0x1b0 [ 551.653540] ? __sys_sendmsg_sock+0xb0/0xb0 [ 551.654596] ? rcu_read_lock_any_held+0x69/0x90 [ 551.655830] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 551.657156] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.658428] ? trace_hardirqs_on+0x5b/0x180 [ 551.659488] do_syscall_64+0x33/0x40 [ 551.660458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 551.661779] RIP: 0033:0x466609 [ 551.662592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 551.667346] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.669294] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 551.671111] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 551.672935] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 551.674794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.676660] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 551.680969] FAULT_INJECTION: forcing a failure. [ 551.680969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.682685] CPU: 1 PID: 6024 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 551.683663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 551.685292] Call Trace: [ 551.685695] dump_stack+0x107/0x163 [ 551.686214] should_fail.cold+0x5/0xa [ 551.686769] strncpy_from_user+0x34/0x460 [ 551.687377] getname_flags.part.0+0x95/0x4f0 [ 551.688061] getname+0x8e/0xd0 [ 551.688979] do_sys_openat2+0xf5/0x420 [ 551.689579] ? build_open_flags+0x680/0x680 [ 551.690907] ? find_held_lock+0x2c/0x110 [ 551.691509] ? do_syscall_64+0x33/0x40 [ 551.692704] __x64_sys_openat+0x13f/0x1f0 [ 551.693319] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 551.694800] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 551.695563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 551.697062] do_syscall_64+0x33/0x40 [ 551.697617] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 551.699109] RIP: 0033:0x4196c4 [ 551.699589] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.704800] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.705932] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 551.707887] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 551.709875] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 551.711912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 551.713927] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:15:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6609, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x4, 0x0, 0x4, 0x6, 0x4, "5991b50dea6d6b7764125e01f7b661295ba987", 0x100000, 0x8}) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000240)=0x1) socket$unix(0x1, 0x7, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/222, 0xde, 0x40000022, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 11:15:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:44 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:44 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(r1, r0, r2) setresuid(0x0, 0x0, r0) r3 = fork() tkill(r3, 0x0) 11:15:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:44 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:44 executing program 7 (fault-call:0 fault-nth:16): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 552.025930] FAULT_INJECTION: forcing a failure. [ 552.025930] name failslab, interval 1, probability 0, space 0, times 0 [ 552.027503] CPU: 0 PID: 6067 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 552.028476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 552.030106] Call Trace: [ 552.030507] dump_stack+0x107/0x163 [ 552.031048] should_fail.cold+0x5/0xa [ 552.031597] ? __alloc_file+0x21/0x310 [ 552.032151] should_failslab+0x5/0x10 [ 552.032706] kmem_cache_alloc+0x5b/0x350 [ 552.033307] __alloc_file+0x21/0x310 [ 552.033881] alloc_empty_file+0x6d/0x170 [ 552.034481] path_openat+0xde/0x26c0 [ 552.035045] ? path_lookupat+0x850/0x850 [ 552.035639] ? perf_trace_lock+0xac/0x490 [ 552.036247] ? __lockdep_reset_lock+0x180/0x180 [ 552.036940] ? lock_acquire+0x197/0x490 [ 552.037538] ? __lockdep_reset_lock+0x180/0x180 [ 552.038230] do_filp_open+0x17e/0x3c0 [ 552.038790] ? may_open_dev+0xf0/0xf0 [ 552.039321] ? __alloc_fd+0x2a5/0x620 [ 552.039831] ? lock_downgrade+0x6d0/0x6d0 [ 552.040390] ? rwlock_bug.part.0+0x90/0x90 [ 552.040960] ? _raw_spin_unlock+0x1a/0x30 [ 552.041533] ? __alloc_fd+0x2a5/0x620 [ 552.042044] do_sys_openat2+0x16d/0x420 [ 552.042569] ? build_open_flags+0x680/0x680 [ 552.043135] ? find_held_lock+0x2c/0x110 [ 552.043685] ? do_syscall_64+0x33/0x40 [ 552.044202] __x64_sys_openat+0x13f/0x1f0 [ 552.044779] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 552.045418] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 552.046115] ? syscall_enter_from_user_mode+0x1d/0x50 [ 552.046799] do_syscall_64+0x33/0x40 [ 552.047286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 552.047960] RIP: 0033:0x4196c4 [ 552.048385] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 552.050825] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 552.051825] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 552.052764] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 552.053725] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 552.054694] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 552.055625] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:15:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008000000000000000500000006", 0x29, 0x4100}, {&(0x7f0000012c00)="ed8100000a000000dbf4655fdbf4655fdbf4655f000000000000010000000000000000100100000073797a6b616c6c657273000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e9f2560000000000000000000000000000000000000000000000002000000038ac934338ac934338ac9343dbf4655f38ac93430000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231", 0xce, 0x4e00}, {&(0x7f0000012f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x6000}], 0x0, &(0x7f0000013800)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x4002, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x8000, 0x0, 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r3, &(0x7f0000000040)=""/39, 0x27, 0x1) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000300)="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") r4 = fork() syz_open_procfs(r2, &(0x7f0000000080)='smaps\x00') pidfd_open(r4, 0x0) ptrace$setsig(0x4203, r4, 0x81, &(0x7f0000000140)={0x39, 0x7, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x40, 0x7}, 0x0, 0x5, 0x45, {0x8, 0x3f}, 0xcd, 0x62e}) 11:15:57 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:57 executing program 5 (fault-call:2 fault-nth:12): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:57 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) sendmsg$inet6(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="985d3df4fe32edf6a380754a1c9695909a89f9892efa63b9f651af2c8a5e7361560610", 0x23}], 0x1, &(0x7f0000000180)=[@hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim, @ra={0x5, 0x2, 0x100}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @hopopts={{0x48, 0x29, 0x36, {0x84, 0x5, '\x00', [@ra, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x0, [0x7, 0xfffffffffffffffa, 0xffffffffffffffb4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0xc0, 0x29, 0x37, {0x2f, 0x14, '\x00', [@generic={0x3, 0x9d, "5aee31c7e2bfbcc1a0e8b2aaa69e6d31bb0e8450f2e896179338b11e9efe6b4d111aba2539772b755a907eafa2ae62da3350add2dbca1ea2cae350a8af4da003711ee25244ee06c7f40eaefd86bb29d0fa6281d5b1e93b54b4a8772545d45f4b865e9341382c05cee5b06a1c7687ece429d3d5939952435a93e5393af5a1863a10af07079121a0cd0c0e12a799b0cebb02620e624442d474c006f566e3"}, @jumbo={0xc2, 0x4, 0x101}]}}}], 0x178}, 0x20000800) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0xbb, 0x1, 0x81, 0x0, 0x10001, 0x22, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x2001, 0x5, 0x10000, 0x2, 0xe19, 0x6, 0x0, 0x0, 0x4, 0x0, 0x9}, r2, 0x7, r3, 0x8) 11:15:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:57 executing program 7 (fault-call:0 fault-nth:17): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:15:57 executing program 6: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(r1, r0, r2) setresuid(0x0, 0x0, r0) r3 = fork() tkill(r3, 0x0) [ 565.002552] FAULT_INJECTION: forcing a failure. [ 565.002552] name failslab, interval 1, probability 0, space 0, times 0 [ 565.004176] CPU: 0 PID: 6086 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 565.005081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 565.006818] Call Trace: [ 565.007195] dump_stack+0x107/0x163 [ 565.007767] should_fail.cold+0x5/0xa [ 565.008255] ? create_object.isra.0+0x3a/0xa20 [ 565.008944] should_failslab+0x5/0x10 [ 565.009363] kmem_cache_alloc+0x5b/0x350 [ 565.009844] create_object.isra.0+0x3a/0xa20 [ 565.010294] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 565.010818] kmem_cache_alloc+0x159/0x350 [ 565.011256] __alloc_file+0x21/0x310 [ 565.011632] alloc_empty_file+0x6d/0x170 [ 565.012057] path_openat+0xde/0x26c0 [ 565.012439] ? path_lookupat+0x850/0x850 [ 565.012845] ? perf_trace_lock+0xac/0x490 [ 565.013286] ? __lockdep_reset_lock+0x180/0x180 [ 565.013811] ? lock_acquire+0x197/0x490 [ 565.014232] ? __lockdep_reset_lock+0x180/0x180 [ 565.014698] do_filp_open+0x17e/0x3c0 [ 565.015086] ? may_open_dev+0xf0/0xf0 [ 565.015480] ? __alloc_fd+0x2a5/0x620 [ 565.015860] ? lock_downgrade+0x6d0/0x6d0 [ 565.016388] ? rwlock_bug.part.0+0x90/0x90 [ 565.016929] ? _raw_spin_unlock+0x1a/0x30 [ 565.017721] ? __alloc_fd+0x2a5/0x620 [ 565.018755] do_sys_openat2+0x16d/0x420 [ 565.019933] ? build_open_flags+0x680/0x680 [ 565.021181] ? find_held_lock+0x2c/0x110 [ 565.021782] ? do_syscall_64+0x33/0x40 [ 565.022974] __x64_sys_openat+0x13f/0x1f0 [ 565.024223] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 565.025743] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 565.027332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 565.028796] do_syscall_64+0x33/0x40 [ 565.029371] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 565.030084] RIP: 0033:0x4196c4 [ 565.030566] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 565.033257] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 565.034309] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 565.035257] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 565.036211] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 565.037168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 565.038174] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:15:57 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 565.043590] FAULT_INJECTION: forcing a failure. [ 565.043590] name failslab, interval 1, probability 0, space 0, times 0 [ 565.045438] CPU: 0 PID: 6090 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 565.046425] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 565.048097] Call Trace: [ 565.048487] dump_stack+0x107/0x163 [ 565.049043] should_fail.cold+0x5/0xa [ 565.049620] ? create_object.isra.0+0x3a/0xa20 [ 565.050323] should_failslab+0x5/0x10 [ 565.050883] kmem_cache_alloc+0x5b/0x350 [ 565.051499] create_object.isra.0+0x3a/0xa20 [ 565.052138] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 565.052877] kmem_cache_alloc_node+0x169/0x370 [ 565.053554] __alloc_skb+0x6d/0x620 [ 565.054098] netlink_ack+0x1ed/0xab0 [ 565.054652] ? netlink_sendmsg+0xd90/0xd90 [ 565.055265] ? __mutex_lock+0x425/0x1230 [ 565.055863] ? __lockdep_reset_lock+0x180/0x180 [ 565.056561] netlink_rcv_skb+0x348/0x430 [ 565.057174] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 565.057922] ? netlink_ack+0xab0/0xab0 [ 565.058513] xfrm_netlink_rcv+0x6b/0x90 [ 565.059093] netlink_unicast+0x53a/0x7e0 [ 565.059672] ? netlink_attachskb+0x810/0x810 [ 565.060325] netlink_sendmsg+0x856/0xd90 [ 565.060924] ? netlink_unicast+0x7e0/0x7e0 [ 565.061542] ? netlink_unicast+0x7e0/0x7e0 [ 565.062147] sock_sendmsg+0x150/0x190 [ 565.062685] ____sys_sendmsg+0x709/0x870 [ 565.063163] ? kernel_sendmsg+0x50/0x50 [ 565.063593] ? __ia32_sys_recvmmsg+0x260/0x260 [ 565.064146] ? lock_downgrade+0x6d0/0x6d0 [ 565.064595] ? __lockdep_reset_lock+0x180/0x180 [ 565.065111] ___sys_sendmsg+0xf3/0x170 [ 565.065527] ? sendmsg_copy_msghdr+0x160/0x160 [ 565.066066] ? __fget_files+0x228/0x410 [ 565.066541] ? lock_downgrade+0x6d0/0x6d0 [ 565.066996] ? find_held_lock+0x2c/0x110 [ 565.067556] ? __fget_files+0x251/0x410 [ 565.068138] ? __fget_light+0xea/0x280 [ 565.068691] __sys_sendmsg+0xe5/0x1b0 [ 565.069117] ? __sys_sendmsg_sock+0xb0/0xb0 [ 565.069585] ? rcu_read_lock_any_held+0x69/0x90 [ 565.070134] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 565.070794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 565.071364] ? trace_hardirqs_on+0x5b/0x180 [ 565.071916] do_syscall_64+0x33/0x40 [ 565.072375] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 565.072958] RIP: 0033:0x466609 [ 565.073307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 565.075633] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.076707] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 565.077758] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 565.078769] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.079758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.080625] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:15:57 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:15:57 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:15:57 executing program 3: setresuid(0xee00, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) getuid() r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r0, r1, r0) setresuid(0x0, 0x0, r0) r2 = fork() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xffffff93) setresuid(r0, r0, r3) tkill(r2, 0x0) 11:15:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:15:57 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {}, {0x6}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, 0xee00, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mlock2(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7}) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff) fork() mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x80040, &(0x7f0000000300)='-{-@\x00') syz_io_uring_setup(0x1b19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000dec000/0x4000)=nil, &(0x7f0000c0f000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) futimesat(r4, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={{0x0, 0x2710}}) 11:15:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, 0x0) r0 = eventfd(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1a18c1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x6609, 0x0) write$eventfd(r3, &(0x7f00000001c0)=0x100000001, 0x8) fallocate(r1, 0x10, 0x2, 0x1000002) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/224, 0xe0}], 0x1, 0x3, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) 11:15:57 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 565.241891] audit: type=1326 audit(1629285357.702:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6122 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:15:57 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 565.345927] ISOFS: Unable to identify CD-ROM format. [ 566.062259] audit: type=1326 audit(1629285358.522:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6122 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:16:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:11 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {}, {0x6}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, 0xee00, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mlock2(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r0, 0x7}) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0xffffffffffffffff) fork() mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x80040, &(0x7f0000000300)='-{-@\x00') syz_io_uring_setup(0x1b19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000dec000/0x4000)=nil, &(0x7f0000c0f000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) futimesat(r4, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={{0x0, 0x2710}}) 11:16:11 executing program 7 (fault-call:0 fault-nth:18): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:11 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000100)=0xe8) setresuid(0xee01, r1, r2) setresuid(0x0, 0x0, r0) r3 = fork() tkill(r3, 0x0) 11:16:11 executing program 5 (fault-call:2 fault-nth:13): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:11 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 578.988245] FAULT_INJECTION: forcing a failure. [ 578.988245] name failslab, interval 1, probability 0, space 0, times 0 [ 578.989995] CPU: 0 PID: 6162 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 578.990993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 578.992684] Call Trace: [ 578.993082] dump_stack+0x107/0x163 [ 578.993642] should_fail.cold+0x5/0xa [ 578.994220] ? security_file_alloc+0x34/0x170 [ 578.994911] should_failslab+0x5/0x10 [ 578.995485] kmem_cache_alloc+0x5b/0x350 [ 578.996100] security_file_alloc+0x34/0x170 [ 578.996753] __alloc_file+0xb6/0x310 [ 578.997303] alloc_empty_file+0x6d/0x170 [ 578.997954] path_openat+0xde/0x26c0 [ 578.998503] ? path_lookupat+0x850/0x850 [ 578.999087] ? perf_trace_lock+0xac/0x490 [ 579.000453] ? __lockdep_reset_lock+0x180/0x180 [ 579.002013] ? lock_acquire+0x197/0x490 [ 579.003302] ? __lockdep_reset_lock+0x180/0x180 [ 579.004781] do_filp_open+0x17e/0x3c0 [ 579.006002] ? may_open_dev+0xf0/0xf0 [ 579.007294] ? __alloc_fd+0x2a5/0x620 [ 579.008554] ? lock_downgrade+0x6d0/0x6d0 [ 579.009918] ? rwlock_bug.part.0+0x90/0x90 [ 579.010821] ? _raw_spin_unlock+0x1a/0x30 [ 579.012059] ? __alloc_fd+0x2a5/0x620 [ 579.013193] do_sys_openat2+0x16d/0x420 [ 579.014387] ? build_open_flags+0x680/0x680 [ 579.015673] ? find_held_lock+0x2c/0x110 [ 579.016855] ? do_syscall_64+0x33/0x40 [ 579.018005] __x64_sys_openat+0x13f/0x1f0 [ 579.019205] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 579.020738] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 579.022320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 579.023797] do_syscall_64+0x33/0x40 [ 579.024823] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.026350] RIP: 0033:0x4196c4 [ 579.027294] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 579.032916] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 579.035254] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 579.037345] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 579.039501] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 579.041625] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 579.043807] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 579.053978] FAULT_INJECTION: forcing a failure. [ 579.053978] name failslab, interval 1, probability 0, space 0, times 0 [ 579.056594] CPU: 1 PID: 6161 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 579.058766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 579.062541] Call Trace: [ 579.063395] dump_stack+0x107/0x163 [ 579.064470] should_fail.cold+0x5/0xa [ 579.065609] should_failslab+0x5/0x10 [ 579.066770] __kmalloc_node_track_caller+0x74/0x3f0 [ 579.068365] ? netlink_ack+0x1ed/0xab0 [ 579.069675] __alloc_skb+0xb1/0x620 [ 579.070915] netlink_ack+0x1ed/0xab0 [ 579.072179] ? netlink_sendmsg+0xd90/0xd90 [ 579.072832] ? __mutex_lock+0x425/0x1230 [ 579.073427] ? __lockdep_reset_lock+0x180/0x180 [ 579.074143] netlink_rcv_skb+0x348/0x430 [ 579.074749] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 579.075487] ? netlink_ack+0xab0/0xab0 [ 579.076088] xfrm_netlink_rcv+0x6b/0x90 [ 579.076734] netlink_unicast+0x53a/0x7e0 [ 579.077347] ? netlink_attachskb+0x810/0x810 [ 579.078055] netlink_sendmsg+0x856/0xd90 [ 579.078612] ? netlink_unicast+0x7e0/0x7e0 [ 579.080030] ? netlink_unicast+0x7e0/0x7e0 [ 579.080669] sock_sendmsg+0x150/0x190 [ 579.081247] ____sys_sendmsg+0x709/0x870 [ 579.081950] ? kernel_sendmsg+0x50/0x50 [ 579.083243] ? __ia32_sys_recvmmsg+0x260/0x260 [ 579.083866] ? lock_downgrade+0x6d0/0x6d0 [ 579.084435] ? __lockdep_reset_lock+0x180/0x180 [ 579.085068] ___sys_sendmsg+0xf3/0x170 [ 579.086241] ? sendmsg_copy_msghdr+0x160/0x160 [ 579.086932] ? __fget_files+0x228/0x410 [ 579.087523] ? lock_downgrade+0x6d0/0x6d0 [ 579.088148] ? find_held_lock+0x2c/0x110 [ 579.088769] ? __fget_files+0x251/0x410 [ 579.089370] ? __fget_light+0xea/0x280 [ 579.089994] __sys_sendmsg+0xe5/0x1b0 [ 579.090561] ? __sys_sendmsg_sock+0xb0/0xb0 [ 579.091195] ? rcu_read_lock_any_held+0x69/0x90 [ 579.091897] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 579.092695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 579.093474] ? trace_hardirqs_on+0x5b/0x180 [ 579.094152] do_syscall_64+0x33/0x40 [ 579.094720] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.095493] RIP: 0033:0x466609 [ 579.095990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 579.098751] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 11:16:11 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x98, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 579.099880] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 579.101174] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 579.102230] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 579.103266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.104310] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:16:11 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:11 executing program 3: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) r1 = getuid() setresuid(0x0, 0x0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) statx(r2, &(0x7f0000000040)='./file0\x00', 0x2000, 0x4, &(0x7f0000000180)) r3 = fork() tkill(r3, 0x0) [ 579.125311] audit: type=1326 audit(1629285371.585:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6167 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:16:11 executing program 7 (fault-call:0 fault-nth:19): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 579.214184] FAULT_INJECTION: forcing a failure. [ 579.214184] name failslab, interval 1, probability 0, space 0, times 0 [ 579.215882] CPU: 1 PID: 6199 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 579.216914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 579.218600] Call Trace: [ 579.218991] dump_stack+0x107/0x163 [ 579.219535] should_fail.cold+0x5/0xa [ 579.220093] ? create_object.isra.0+0x3a/0xa20 [ 579.220762] should_failslab+0x5/0x10 [ 579.221356] kmem_cache_alloc+0x5b/0x350 [ 579.221993] ? lock_downgrade+0x6d0/0x6d0 [ 579.222595] create_object.isra.0+0x3a/0xa20 [ 579.223236] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 579.223981] kmem_cache_alloc+0x159/0x350 [ 579.224587] security_file_alloc+0x34/0x170 [ 579.225225] __alloc_file+0xb6/0x310 [ 579.225763] alloc_empty_file+0x6d/0x170 [ 579.226383] path_openat+0xde/0x26c0 [ 579.226939] ? path_lookupat+0x850/0x850 [ 579.227539] ? perf_trace_lock+0xac/0x490 [ 579.228145] ? __lockdep_reset_lock+0x180/0x180 [ 579.228842] ? lock_acquire+0x197/0x490 [ 579.229443] ? __lockdep_reset_lock+0x180/0x180 [ 579.230165] do_filp_open+0x17e/0x3c0 [ 579.230711] ? may_open_dev+0xf0/0xf0 [ 579.231260] ? __alloc_fd+0x2a5/0x620 [ 579.231819] ? lock_downgrade+0x6d0/0x6d0 [ 579.232415] ? rwlock_bug.part.0+0x90/0x90 [ 579.233005] ? _raw_spin_unlock+0x1a/0x30 [ 579.233565] ? __alloc_fd+0x2a5/0x620 [ 579.234135] do_sys_openat2+0x16d/0x420 [ 579.234706] ? build_open_flags+0x680/0x680 [ 579.235306] ? find_held_lock+0x2c/0x110 [ 579.235873] ? do_syscall_64+0x33/0x40 [ 579.236420] __x64_sys_openat+0x13f/0x1f0 [ 579.237000] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 579.237633] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 579.238395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 579.239128] do_syscall_64+0x33/0x40 [ 579.239644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 579.240368] RIP: 0033:0x4196c4 [ 579.240815] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 579.243553] RSP: 002b:00007fcca9f0eed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 579.244686] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004196c4 [ 579.245724] RDX: 0000000000000002 RSI: 00007fcca9f0f000 RDI: 00000000ffffff9c [ 579.246780] RBP: 00007fcca9f0f000 R08: 0000000000000000 R09: ffffffffffffffff [ 579.247818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 579.248838] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 579.409977] ISOFS: Unable to identify CD-ROM format. 11:16:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e2f4655fe2f4655fe2f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="20000000b4253260b425326000000000e2f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bcc129100000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005f43fa2400000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3032353733363935382f66696c65302f66696c6530000000000000000000000000000000000000000000006561281700000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000eaaaeb6900000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x8000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xb8) 11:16:25 executing program 3: stat(&(0x7f0000000080)='.\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) setresuid(0xee01, r0, 0x0) r1 = getuid() setresuid(0x0, 0x0, r1) r2 = fork() tkill(r2, 0x0) 11:16:25 executing program 7 (fault-call:0 fault-nth:20): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:25 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:25 executing program 5 (fault-call:2 fault-nth:14): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 592.939953] FAULT_INJECTION: forcing a failure. [ 592.939953] name failslab, interval 1, probability 0, space 0, times 0 [ 592.941750] CPU: 0 PID: 6231 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 592.942657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 592.944258] Call Trace: [ 592.944641] dump_stack+0x107/0x163 [ 592.945183] should_fail.cold+0x5/0xa [ 592.945759] ? __kthread_create_on_node+0xd1/0x400 [ 592.946498] should_failslab+0x5/0x10 [ 592.947035] kmem_cache_alloc_trace+0x55/0x360 [ 592.947668] ? loop_info64_to_compat+0x5f0/0x5f0 [ 592.948307] __kthread_create_on_node+0xd1/0x400 [ 592.948951] ? __kthread_parkme+0x1d0/0x1d0 [ 592.949529] ? __mutex_lock+0x425/0x1230 [ 592.950159] ? loop_configure+0xcb8/0x1480 [ 592.950753] ? loop_info64_to_compat+0x5f0/0x5f0 [ 592.951385] kthread_create_on_node+0xbb/0xf0 [ 592.951995] ? __kthread_create_on_node+0x400/0x400 [ 592.952679] ? lockdep_init_map_waits+0x26a/0x700 [ 592.953321] ? lockdep_init_map_waits+0x26a/0x700 [ 592.954051] ? __raw_spin_lock_init+0x34/0x100 [ 592.954682] loop_configure+0x3e6/0x1480 [ 592.955235] lo_ioctl+0xa6e/0x1760 [ 592.955726] ? loop_set_status_old+0x250/0x250 [ 592.956361] ? avc_ss_reset+0x180/0x180 [ 592.956897] ? __lock_acquire+0xbc2/0x5b20 [ 592.957055] FAULT_INJECTION: forcing a failure. [ 592.957055] name failslab, interval 1, probability 0, space 0, times 0 [ 592.957503] ? generic_block_fiemap+0x60/0x60 [ 592.960756] ? selinux_inode_getsecctx+0x90/0x90 [ 592.961434] ? loop_set_status_old+0x250/0x250 [ 592.962481] blkdev_ioctl+0x28d/0x700 [ 592.963364] ? blkdev_common_ioctl+0x1870/0x1870 [ 592.964728] ? __fget_files+0x251/0x410 [ 592.965942] block_ioctl+0xf9/0x140 [ 592.967174] ? blkdev_read_iter+0x1c0/0x1c0 [ 592.968534] __x64_sys_ioctl+0x196/0x210 [ 592.969858] do_syscall_64+0x33/0x40 [ 592.970435] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 592.971994] RIP: 0033:0x4663c7 [ 592.972488] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 592.976803] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.977869] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 592.978841] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 592.979798] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 592.980746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 592.981681] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 592.983168] CPU: 1 PID: 6229 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 592.984180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 11:16:25 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 592.985837] Call Trace: [ 592.988322] dump_stack+0x107/0x163 [ 592.988892] should_fail.cold+0x5/0xa [ 592.989470] ? create_object.isra.0+0x3a/0xa20 [ 592.990193] should_failslab+0x5/0x10 [ 592.990757] kmem_cache_alloc+0x5b/0x350 [ 592.991310] create_object.isra.0+0x3a/0xa20 [ 592.991944] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 592.992709] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 592.993417] ? netlink_ack+0x1ed/0xab0 [ 592.994019] __alloc_skb+0xb1/0x620 [ 592.994526] netlink_ack+0x1ed/0xab0 [ 592.995044] ? netlink_sendmsg+0xd90/0xd90 [ 592.995620] ? __mutex_lock+0x425/0x1230 [ 592.996165] ? __lockdep_reset_lock+0x180/0x180 [ 592.996798] netlink_rcv_skb+0x348/0x430 [ 592.997347] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 592.998025] ? netlink_ack+0xab0/0xab0 [ 592.998607] xfrm_netlink_rcv+0x6b/0x90 [ 592.999137] netlink_unicast+0x53a/0x7e0 [ 592.999688] ? netlink_attachskb+0x810/0x810 [ 593.000294] netlink_sendmsg+0x856/0xd90 [ 593.000857] ? netlink_unicast+0x7e0/0x7e0 [ 593.001438] ? netlink_unicast+0x7e0/0x7e0 [ 593.002019] sock_sendmsg+0x150/0x190 [ 593.002621] ____sys_sendmsg+0x709/0x870 [ 593.003219] ? kernel_sendmsg+0x50/0x50 [ 593.003806] ? __ia32_sys_recvmmsg+0x260/0x260 [ 593.004494] ? lock_downgrade+0x6d0/0x6d0 [ 593.005116] ? __lockdep_reset_lock+0x180/0x180 [ 593.005795] ___sys_sendmsg+0xf3/0x170 [ 593.006384] ? sendmsg_copy_msghdr+0x160/0x160 [ 593.007069] ? __fget_files+0x228/0x410 [ 593.007663] ? lock_downgrade+0x6d0/0x6d0 [ 593.008271] ? find_held_lock+0x2c/0x110 [ 593.008877] ? __fget_files+0x251/0x410 [ 593.009468] ? __fget_light+0xea/0x280 [ 593.010027] __sys_sendmsg+0xe5/0x1b0 [ 593.010602] ? __sys_sendmsg_sock+0xb0/0xb0 [ 593.011230] ? rcu_read_lock_any_held+0x69/0x90 [ 593.011931] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 593.012709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 593.013520] ? trace_hardirqs_on+0x5b/0x180 [ 593.014195] do_syscall_64+0x33/0x40 [ 593.014736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 593.015492] RIP: 0033:0x466609 [ 593.015975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.018660] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.019697] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 593.020829] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 593.022000] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.023092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.024130] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:16:25 executing program 7 (fault-call:0 fault-nth:21): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:25 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e2f4655fe2f4655fe2f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="20000000b4253260b425326000000000e2f4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000e2f4655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000e2f4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000e2f4655fe2f4655fe2f4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bcc129100000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005f43fa2400000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000e2f4655fe2f4655fe2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3032353733363935382f66696c65302f66696c6530000000000000000000000000000000000000000000006561281700000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000e2f4655fe2f4655fe2f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000eaaaeb6900000000000000000000000000000000000000000000000020000000b4253260b4253260b4253260e2f4655fb42532600000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x8000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0xb8) 11:16:25 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 593.113513] FAULT_INJECTION: forcing a failure. [ 593.113513] name failslab, interval 1, probability 0, space 0, times 0 [ 593.115318] CPU: 1 PID: 6251 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 593.116232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 593.119360] Call Trace: [ 593.120212] dump_stack+0x107/0x163 [ 593.120761] should_fail.cold+0x5/0xa [ 593.121745] ? create_object.isra.0+0x3a/0xa20 [ 593.122494] should_failslab+0x5/0x10 [ 593.123013] kmem_cache_alloc+0x5b/0x350 [ 593.123554] create_object.isra.0+0x3a/0xa20 [ 593.124123] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 593.124777] kmem_cache_alloc_trace+0x151/0x360 [ 593.125381] ? loop_info64_to_compat+0x5f0/0x5f0 [ 593.125991] __kthread_create_on_node+0xd1/0x400 [ 593.127251] ? __kthread_parkme+0x1d0/0x1d0 [ 593.128584] ? __mutex_lock+0x425/0x1230 [ 593.129873] ? loop_configure+0xcb8/0x1480 [ 593.131225] ? loop_info64_to_compat+0x5f0/0x5f0 [ 593.132693] kthread_create_on_node+0xbb/0xf0 [ 593.134125] ? __kthread_create_on_node+0x400/0x400 [ 593.135707] ? lockdep_init_map_waits+0x26a/0x700 [ 593.137208] ? lockdep_init_map_waits+0x26a/0x700 [ 593.138724] ? __raw_spin_lock_init+0x34/0x100 [ 593.140151] loop_configure+0x3e6/0x1480 [ 593.141424] lo_ioctl+0xa6e/0x1760 [ 593.142486] ? loop_set_status_old+0x250/0x250 [ 593.143875] ? avc_ss_reset+0x180/0x180 [ 593.145070] ? __lock_acquire+0xbc2/0x5b20 [ 593.146407] ? generic_block_fiemap+0x60/0x60 [ 593.147748] ? selinux_inode_getsecctx+0x90/0x90 [ 593.149356] ? find_held_lock+0x2c/0x110 [ 593.150691] ? loop_set_status_old+0x250/0x250 [ 593.152140] blkdev_ioctl+0x28d/0x700 [ 593.153373] ? blkdev_common_ioctl+0x1870/0x1870 [ 593.154873] ? __fget_files+0x251/0x410 [ 593.156138] block_ioctl+0xf9/0x140 [ 593.157311] ? blkdev_read_iter+0x1c0/0x1c0 [ 593.158688] __x64_sys_ioctl+0x196/0x210 [ 593.159974] do_syscall_64+0x33/0x40 [ 593.161186] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 593.162843] RIP: 0033:0x4663c7 [ 593.163825] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 593.169861] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.172409] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 593.174848] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 593.177118] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 593.179481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 593.180881] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:16:25 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() r2 = fork() tkill(r2, 0x33) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioprio_set$uid(0x0, r3, 0x2000) tkill(r1, 0x0) 11:16:25 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:25 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 593.337624] ISOFS: Unable to identify CD-ROM format. 11:16:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:38 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:38 executing program 7 (fault-call:0 fault-nth:22): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:38 executing program 5 (fault-call:2 fault-nth:15): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:38 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r1, 0x2000) setresuid(0x0, 0x0, r0) r2 = fork() stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)) tkill(r2, 0x0) 11:16:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x1f, 0x2, 0x3f, 0x0, 0x0, 0xdf002, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x0, 0x2}, 0x48526, 0x8, 0x6, 0x2, 0x6, 0x8, 0x1bd, 0x0, 0x8, 0x0, 0x77c}, 0xffffffffffffffff, 0x2, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x2d, 0xc21, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}]}, 0x28}}, 0x0) 11:16:38 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 606.211632] FAULT_INJECTION: forcing a failure. [ 606.211632] name failslab, interval 1, probability 0, space 0, times 0 [ 606.214251] CPU: 0 PID: 6289 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 606.215928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 606.217376] Call Trace: [ 606.217932] dump_stack+0x107/0x163 [ 606.218449] should_fail.cold+0x5/0xa [ 606.218979] ? create_object.isra.0+0x3a/0xa20 [ 606.219565] should_failslab+0x5/0x10 [ 606.220651] kmem_cache_alloc+0x5b/0x350 [ 606.221209] create_object.isra.0+0x3a/0xa20 [ 606.221952] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 606.222618] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 606.223270] ? netlink_ack+0x1ed/0xab0 [ 606.223779] __alloc_skb+0xb1/0x620 [ 606.224257] netlink_ack+0x1ed/0xab0 [ 606.224922] ? netlink_sendmsg+0xd90/0xd90 [ 606.226203] ? __mutex_lock+0x425/0x1230 [ 606.227424] ? __lockdep_reset_lock+0x180/0x180 [ 606.228101] netlink_rcv_skb+0x348/0x430 [ 606.228695] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 606.229441] ? netlink_ack+0xab0/0xab0 [ 606.230205] xfrm_netlink_rcv+0x6b/0x90 [ 606.230848] netlink_unicast+0x53a/0x7e0 [ 606.231455] ? netlink_attachskb+0x810/0x810 [ 606.232102] netlink_sendmsg+0x856/0xd90 [ 606.232706] ? netlink_unicast+0x7e0/0x7e0 [ 606.233340] ? netlink_unicast+0x7e0/0x7e0 [ 606.234091] sock_sendmsg+0x150/0x190 [ 606.234665] ____sys_sendmsg+0x709/0x870 [ 606.235265] ? kernel_sendmsg+0x50/0x50 [ 606.235837] ? __ia32_sys_recvmmsg+0x260/0x260 [ 606.236510] ? lock_downgrade+0x6d0/0x6d0 [ 606.237122] ? __lockdep_reset_lock+0x180/0x180 [ 606.237947] ___sys_sendmsg+0xf3/0x170 [ 606.238529] ? sendmsg_copy_msghdr+0x160/0x160 [ 606.239294] ? __fget_files+0x228/0x410 [ 606.239868] ? lock_downgrade+0x6d0/0x6d0 [ 606.240476] ? find_held_lock+0x2c/0x110 [ 606.241087] ? __fget_files+0x251/0x410 [ 606.241684] ? __fget_light+0xea/0x280 [ 606.242255] __sys_sendmsg+0xe5/0x1b0 [ 606.242830] ? __sys_sendmsg_sock+0xb0/0xb0 [ 606.243468] ? rcu_read_lock_any_held+0x69/0x90 [ 606.244164] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 606.244943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.245699] ? trace_hardirqs_on+0x5b/0x180 [ 606.246354] do_syscall_64+0x33/0x40 [ 606.246917] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 606.247657] RIP: 0033:0x466609 [ 606.248133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.250805] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.251903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 606.252939] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 606.253973] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.255038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.256076] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 [ 606.260901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.273891] FAULT_INJECTION: forcing a failure. [ 606.273891] name failslab, interval 1, probability 0, space 0, times 0 [ 606.275556] CPU: 0 PID: 6290 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 606.276539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 606.278319] Call Trace: [ 606.278783] dump_stack+0x107/0x163 [ 606.279356] should_fail.cold+0x5/0xa [ 606.279993] ? __kernfs_new_node+0xd4/0x840 [ 606.280641] should_failslab+0x5/0x10 [ 606.281276] kmem_cache_alloc+0x5b/0x350 [ 606.281982] __kernfs_new_node+0xd4/0x840 [ 606.282642] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 606.283401] ? __lockdep_reset_lock+0x180/0x180 [ 606.284158] ? find_held_lock+0x2c/0x110 [ 606.284844] ? set_user_nice.part.0+0x3d1/0xdd0 [ 606.285548] kernfs_create_dir_ns+0x9c/0x220 [ 606.286260] internal_create_group+0x78f/0xb30 [ 606.287077] ? set_user_nice.part.0+0x3d1/0xdd0 [ 606.287839] ? sysfs_remove_group+0x170/0x170 [ 606.288526] ? blk_queue_flag_set+0x22/0x30 [ 606.289222] ? __loop_update_dio+0x2d2/0x690 [ 606.289942] loop_configure+0x957/0x1480 [ 606.290577] lo_ioctl+0xa6e/0x1760 [ 606.291178] ? loop_set_status_old+0x250/0x250 [ 606.291967] ? avc_ss_reset+0x180/0x180 [ 606.292580] ? __lock_acquire+0xbc2/0x5b20 [ 606.293377] ? generic_block_fiemap+0x60/0x60 [ 606.294092] ? selinux_inode_getsecctx+0x90/0x90 [ 606.294863] ? find_held_lock+0x2c/0x110 [ 606.295476] ? loop_set_status_old+0x250/0x250 [ 606.296243] blkdev_ioctl+0x28d/0x700 [ 606.296865] ? blkdev_common_ioctl+0x1870/0x1870 [ 606.297581] ? __fget_files+0x251/0x410 [ 606.298248] block_ioctl+0xf9/0x140 [ 606.298886] ? blkdev_read_iter+0x1c0/0x1c0 [ 606.300386] __x64_sys_ioctl+0x196/0x210 [ 606.301119] do_syscall_64+0x33/0x40 [ 606.301685] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 606.302472] RIP: 0033:0x4663c7 [ 606.303001] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.305881] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.307093] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 606.308243] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 606.309359] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 606.310511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 606.311607] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 606.313454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:16:38 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:38 executing program 3: setresuid(0xee00, 0x0, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) r0 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r0, r1, r2) r3 = fork() tkill(r3, 0x0) 11:16:38 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:38 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:38 executing program 5 (fault-call:2 fault-nth:16): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:38 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:16:38 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='nl80211\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000830}, 0x14000800) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x20}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = perf_event_open(&(0x7f0000000e40)={0x4, 0x80, 0x2, 0x6, 0x2, 0x1, 0x0, 0x4, 0x8, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffc04d, 0x6}, 0x2, 0x9, 0x7, 0x5, 0x7, 0xfff, 0x101, 0x0, 0x9, 0x0, 0x6fb}, 0xffffffffffffffff, 0x6, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x9) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) sendmsg(r5, &(0x7f0000000e00)={&(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0, 0x3b}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000500)="b88febfe91b78eb1ce3fa5b49fde2c091f862abe9c43310a97fce64aeaa80c33495859447447324f621d68bc9f67bc127510d89357e0b19accb879ed166f98fe0569c8524ba824", 0x47}, {&(0x7f0000000580)="1bed68ab9781e35463280639be0f3c8072f5c540ab4e5cc935eeda93ca29ae60ae3040d6bb5be30602c252b5b9974f80c459d12f6bebea68782a0ef2a146093372b7afbd85d3fb97a410fd2a12c6553eb4372a43cd5e6bf3cf800efa94bac54f2a67af7673bc83fe4c2aa74a05409d46bfbe68cd63167d951b0139b52a65ced4374921c06b14eceebcf77fa8cf231e229c40fd023c1da87ff359f952f8920f28aa03260873730c80504798108b899b62ed290dbd9d7f18aad1d9418344b95c72420a0282f8e193d760f897f89ba92ea1b539001d3d683a71954e", 0xda}, {&(0x7f0000000680)="b56da4fc0c3012734e94524e74cd2f1f07732e8601ae011d79802742bd08b43bb06ba790a6ff7843a65e7518c319b73c592c17b8520acd03aa993991fec7a5abe81ee08f630bbda09fd542885c5158ba5cc0fe6d27f1e807d73771f3d4dae3715dffa3d99b77f1d5e86e54470ec15aac2a08e0a8c70fff2c2e5e6cb09e29291a1df46e9dd29ab66d057bd732946e6d5456d4d34de067e4d3ce666042554f8e05eb84a52637f9c0c500ceb19a67c8e1f3b3ee2202adf63d375454b21fac4c1d544acf2987e045b1bff53edc92c0d06a1e68f085f8ecd407", 0xd7}, {&(0x7f0000000780)="38216703fb19b8e63ef009f56424221737fe83a0a7dd44aa4e68115ccb3be391c9d34ae1296ba85b646de9a20510b2da69ec4eacd143c0a8f5c0cbcb372e1b6b78d4dabef234177477b9c0e695173a45d900f65fd193469aeb36d79b8bbffc354973aa7ba7680b99d1cc583137d62331c3f72d42f8af42e4052a790c17f1eaf82e86fca484a81d7928ba0d8eadfb7ce80f044bb58b7e3d167991f00a0ff0da5136a692b7e6", 0xa5}, {&(0x7f0000000840)="23ce1172", 0x4}, {&(0x7f0000000880)="82c294b6d7e838579e666363134504", 0xf}, {&(0x7f00000008c0)="c60d27399602b783048eb7223fb7d56823940a0926546c49fff76665acb06946dca8596a28fde660dab26b7c1133ebf9c31dd65ee3a9898460b22413102ae90e5da0bb6525e4b81aeda86347c4cec4f263c9b2083bb7ffa6fd58d6597ba2b833383739cb0cac18e2978ad1c8df27d14dc152f2b14d89cbf8a56bebde23b931cec3e6a0a56453e852f8e6d33faa3a9bbbc06deb497bd07a62a0c67d84142fe416b24279a38befb8ddf63959946c52d496", 0xb0}], 0x7, &(0x7f0000000a00)=[{0xb0, 0x102, 0x5, "1094c612377919ae1ce6e1115a8c8065853c47a3542bc38c1b4b002a680eac267ba42acd0dfff03ce9e5a61f90694eb64f4f6afac04af3408490bc76d8de76511a4814c15b5c82d057372dca6e20b3e5da0c560d1866e296560124aaf577befa7629c83dfd787c6625f746e476e93c4e1a05b0549d03069430de8f27e9b197aa6fa09b97ed46f17cd7182656fb6891188b021ba3cc0d0fbbfab705fb558c37"}, {0xf0, 0x100, 0x58b, "f7199c594953529a01192d7efacf1b8f8ec7091c33daf1fa0d7047fb1cb352d9eb1dabd46196c38e9351bf0d54d9e13fccee1e054f73bd23c3680502620f6a6c962ba2a62c66e29a53ea57e7363e21ee52049477fe1ca7e024340ebfacfc1a38add28621797a8115bf09bcd95611a6addd91bb9bd0fd1121614660db019304c111fd25e66b55a5212cdf9237d7d51c7ebb1b284aeb99c2147667b3ffd9555d14a810b59983de3f4103540cc4b55c62a7d686119ede099352b19c0eff107fbb3139a2723be3852e13f289f7b97c9e8836ef86da169f51ab420c845b7f98"}, {0x48, 0x104, 0x4, "526ed67f491a3e7b8969416d5ce73cc829ca05a412737dbb94b278cbeeeb93529b52bc7e0b61095c1d445cc54cc28f2ffbf46b42"}, {0xb0, 0x105, 0xfff, "0ed16c54f084a01305fdfe2dd6bd70f36449f876a3c66ec68aa213b3ecc941d787d5cca3bc01090cc243efa7445e5f9f1ad31ef6040018d6abc01be3bc484cdefad3d581988aa5a285248cf63f53473d68b6646d10c2a90a8d811c3cf5378cbd7e0cabc130556333cb3f951255ca8208e79acf6b82f0b4cb55d84f887b1e82dccdb88db84aac2861298a18b0c62e4af176ba1c0228ab976ebc3456eb97"}, {0x20, 0x10a, 0x5, "aa2340e5c9eedf0e533b13e3c6e09e23"}, {0x80, 0x114, 0x7, "8cffc4df1055cb858010e24dee41f390aff0a6d6814808eaaa1d2747683d49e08fad9bfb139728b00b71734118b3d05014ce22a303a7eed30780aadf5172e4cdfefbff7209f483937f91b548dda4c48b54c3e92b08abf70f6e8f17b8d8d913bf7259b4715acb6a1c16d92a"}, {0xc8, 0x2, 0x933, "f9a034009df1d31ba86473ca3817963a46ec6a1ad19e4bdd7f8ea2cf6057d517d6d1b97572c1e9a4e8d67ca0228c69f5af81e711ad243fc0d0c9f7e13b3ebbad1c5bd1f2b7a1c011a31e5a6dc78798c6620002c64d6547c6600efc103a2940b05fb07f77f6593a51444c4eeff2bc95ec470d2ddf5029bc4fd2bb2166cc3544842f7f1ba61a9db5bba17934c88828c3281fc2d33fff9d356d69749535a9662c2e82f7e5bbb45c33e3efdf71bcbb0550fc90"}], 0x400}, 0x80) [ 606.482484] ISOFS: Unable to identify CD-ROM format. [ 606.496692] FAULT_INJECTION: forcing a failure. [ 606.496692] name failslab, interval 1, probability 0, space 0, times 0 [ 606.498286] CPU: 0 PID: 6323 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 606.499272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 606.500902] Call Trace: [ 606.501302] dump_stack+0x107/0x163 [ 606.501845] should_fail.cold+0x5/0xa [ 606.502435] ? create_object.isra.0+0x3a/0xa20 [ 606.503112] should_failslab+0x5/0x10 [ 606.503675] kmem_cache_alloc+0x5b/0x350 [ 606.504294] create_object.isra.0+0x3a/0xa20 [ 606.504943] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 606.505694] kmem_cache_alloc+0x159/0x350 [ 606.506328] __skb_ext_alloc+0x19/0x80 [ 606.506894] skb_ext_add+0x504/0x670 [ 606.507435] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 606.508206] __alloc_skb+0x3c1/0x620 [ 606.508755] netlink_ack+0x1ed/0xab0 [ 606.509305] ? netlink_sendmsg+0xd90/0xd90 [ 606.509933] ? __mutex_lock+0x425/0x1230 [ 606.510564] ? __lockdep_reset_lock+0x180/0x180 [ 606.511227] netlink_rcv_skb+0x348/0x430 [ 606.511815] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 606.512527] ? netlink_ack+0xab0/0xab0 [ 606.513113] xfrm_netlink_rcv+0x6b/0x90 [ 606.513706] netlink_unicast+0x53a/0x7e0 [ 606.514330] ? netlink_attachskb+0x810/0x810 [ 606.514968] netlink_sendmsg+0x856/0xd90 [ 606.515572] ? netlink_unicast+0x7e0/0x7e0 [ 606.516193] ? netlink_unicast+0x7e0/0x7e0 [ 606.516813] sock_sendmsg+0x150/0x190 [ 606.517373] ____sys_sendmsg+0x709/0x870 [ 606.517976] ? kernel_sendmsg+0x50/0x50 [ 606.518588] ? __ia32_sys_recvmmsg+0x260/0x260 [ 606.519259] ? lock_downgrade+0x6d0/0x6d0 [ 606.519865] ? __lockdep_reset_lock+0x180/0x180 [ 606.520538] ___sys_sendmsg+0xf3/0x170 [ 606.521103] ? sendmsg_copy_msghdr+0x160/0x160 [ 606.521769] ? __fget_files+0x228/0x410 [ 606.522383] ? lock_downgrade+0x6d0/0x6d0 [ 606.522980] ? find_held_lock+0x2c/0x110 [ 606.523583] ? __fget_files+0x251/0x410 [ 606.524188] ? __fget_light+0xea/0x280 [ 606.524778] __sys_sendmsg+0xe5/0x1b0 [ 606.525339] ? __sys_sendmsg_sock+0xb0/0xb0 [ 606.525980] ? rcu_read_lock_any_held+0x69/0x90 [ 606.526670] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 606.527381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 606.528088] ? trace_hardirqs_on+0x5b/0x180 [ 606.528721] do_syscall_64+0x33/0x40 [ 606.529269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 606.529973] RIP: 0033:0x466609 [ 606.530481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.533069] RSP: 002b:00007fb19f7a5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.534163] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 606.535213] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 606.536174] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 606.537090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.538089] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:16:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:39 executing program 7 (fault-call:0 fault-nth:23): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:39 executing program 3: setresuid(0xee00, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) ioprio_set$uid(0x0, r0, 0x2003) r1 = getuid() r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) setresuid(r1, r2, r3) r4 = fork() tkill(r4, 0x0) 11:16:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 606.703545] FAULT_INJECTION: forcing a failure. [ 606.703545] name failslab, interval 1, probability 0, space 0, times 0 [ 606.705278] CPU: 1 PID: 6349 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 606.706203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 606.707766] Call Trace: [ 606.708128] dump_stack+0x107/0x163 [ 606.708629] should_fail.cold+0x5/0xa [ 606.709149] ? create_object.isra.0+0x3a/0xa20 [ 606.709777] should_failslab+0x5/0x10 [ 606.710246] kmem_cache_alloc+0x5b/0x350 [ 606.710827] create_object.isra.0+0x3a/0xa20 [ 606.711426] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 606.712125] kmem_cache_alloc+0x159/0x350 [ 606.712699] __kernfs_new_node+0xd4/0x840 [ 606.713271] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 606.713869] ? __lockdep_reset_lock+0x180/0x180 [ 606.714403] ? find_held_lock+0x2c/0x110 [ 606.714986] ? set_user_nice.part.0+0x3d1/0xdd0 [ 606.715661] kernfs_create_dir_ns+0x9c/0x220 [ 606.716299] internal_create_group+0x78f/0xb30 [ 606.716945] ? set_user_nice.part.0+0x3d1/0xdd0 [ 606.717620] ? sysfs_remove_group+0x170/0x170 [ 606.718252] ? blk_queue_flag_set+0x22/0x30 [ 606.718836] ? __loop_update_dio+0x2d2/0x690 [ 606.719472] loop_configure+0x957/0x1480 [ 606.720077] lo_ioctl+0xa6e/0x1760 [ 606.720604] ? loop_set_status_old+0x250/0x250 [ 606.721280] ? avc_ss_reset+0x180/0x180 [ 606.721872] ? __lock_acquire+0xbc2/0x5b20 [ 606.722556] ? generic_block_fiemap+0x60/0x60 [ 606.723203] ? selinux_inode_getsecctx+0x90/0x90 [ 606.723905] ? find_held_lock+0x2c/0x110 [ 606.724496] ? loop_set_status_old+0x250/0x250 [ 606.725117] blkdev_ioctl+0x28d/0x700 [ 606.725617] ? blkdev_common_ioctl+0x1870/0x1870 [ 606.726281] ? __fget_files+0x251/0x410 [ 606.726849] block_ioctl+0xf9/0x140 [ 606.727369] ? blkdev_read_iter+0x1c0/0x1c0 [ 606.727991] __x64_sys_ioctl+0x196/0x210 [ 606.728592] do_syscall_64+0x33/0x40 [ 606.729139] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 606.729876] RIP: 0033:0x4663c7 [ 606.730358] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.732967] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.734069] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 606.735138] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 606.736187] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 606.737246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 606.738297] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 606.802227] ISOFS: Unable to identify CD-ROM format. 11:16:51 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:51 executing program 7 (fault-call:0 fault-nth:24): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:16:51 executing program 5 (fault-call:2 fault-nth:17): syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, 0x0) 11:16:51 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setresuid(0xffffffffffffffff, r4, r3) ioprio_set$uid(0x3, 0x0, 0x0) setresuid(r1, r2, r3) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setresuid(r5, r0, r6) r7 = fork() tkill(r7, 0x0) 11:16:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 619.415214] FAULT_INJECTION: forcing a failure. [ 619.415214] name failslab, interval 1, probability 0, space 0, times 0 [ 619.417097] CPU: 1 PID: 6372 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 619.418067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 619.419749] Call Trace: [ 619.420154] dump_stack+0x107/0x163 [ 619.420694] should_fail.cold+0x5/0xa [ 619.421191] ? radix_tree_node_alloc.constprop.0+0x1df/0x300 [ 619.421929] should_failslab+0x5/0x10 [ 619.422422] kmem_cache_alloc+0x5b/0x350 [ 619.422992] radix_tree_node_alloc.constprop.0+0x1df/0x300 [ 619.423747] idr_get_free+0x4b5/0x8f0 [ 619.424277] idr_alloc_u32+0x170/0x2d0 [ 619.424795] ? __fprop_inc_percpu_max+0x120/0x120 [ 619.425422] ? lock_acquire+0x197/0x490 [ 619.425975] ? __kernfs_new_node+0xff/0x840 [ 619.426625] idr_alloc_cyclic+0x102/0x230 [ 619.427221] ? idr_alloc+0x130/0x130 [ 619.427754] ? rwlock_bug.part.0+0x90/0x90 [ 619.428370] __kernfs_new_node+0x117/0x840 [ 619.428982] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 619.429645] ? __lockdep_reset_lock+0x180/0x180 [ 619.430270] ? task_rq_lock+0xab/0x270 [ 619.430848] ? find_held_lock+0x2c/0x110 [ 619.431435] ? set_user_nice.part.0+0x3d1/0xdd0 [ 619.432106] kernfs_create_dir_ns+0x9c/0x220 [ 619.432746] internal_create_group+0x78f/0xb30 [ 619.433410] ? set_user_nice.part.0+0x3d1/0xdd0 [ 619.434269] ? sysfs_remove_group+0x170/0x170 [ 619.434991] ? blk_queue_flag_set+0x22/0x30 [ 619.435646] ? __loop_update_dio+0x2d2/0x690 [ 619.436284] loop_configure+0x957/0x1480 [ 619.436879] lo_ioctl+0xa6e/0x1760 [ 619.437399] ? loop_set_status_old+0x250/0x250 [ 619.438078] ? avc_ss_reset+0x180/0x180 [ 619.438676] ? __lock_acquire+0xbc2/0x5b20 [ 619.439342] ? generic_block_fiemap+0x60/0x60 [ 619.440000] ? selinux_inode_getsecctx+0x90/0x90 [ 619.440691] ? find_held_lock+0x2c/0x110 11:16:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, 0x0) [ 619.441287] ? loop_set_status_old+0x250/0x250 [ 619.442344] blkdev_ioctl+0x28d/0x700 [ 619.442943] ? blkdev_common_ioctl+0x1870/0x1870 [ 619.443631] ? __fget_files+0x251/0x410 [ 619.444217] block_ioctl+0xf9/0x140 [ 619.444742] ? blkdev_read_iter+0x1c0/0x1c0 [ 619.445370] __x64_sys_ioctl+0x196/0x210 [ 619.446045] do_syscall_64+0x33/0x40 [ 619.446587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 619.447322] RIP: 0033:0x4663c7 [ 619.447726] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:16:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 619.450006] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 619.450987] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 619.451881] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 619.452776] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 619.454004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 619.454934] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 619.470600] FAULT_INJECTION: forcing a failure. [ 619.470600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.472212] CPU: 0 PID: 6379 Comm: syz-executor.5 Not tainted 5.10.56 #1 [ 619.473096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 619.474545] Call Trace: [ 619.474897] dump_stack+0x107/0x163 [ 619.475385] should_fail.cold+0x5/0xa [ 619.475880] _copy_to_user+0x2e/0x180 [ 619.476369] simple_read_from_buffer+0xcc/0x160 [ 619.477003] proc_fail_nth_read+0x194/0x220 [ 619.477564] ? proc_sessionid_read+0x220/0x220 [ 619.478151] ? security_file_permission+0x24e/0x570 [ 619.479211] ? proc_sessionid_read+0x220/0x220 [ 619.479914] vfs_read+0x228/0x580 [ 619.480994] ksys_read+0x12d/0x250 [ 619.481535] ? __ia32_sys_pwrite64+0x230/0x230 [ 619.482256] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 619.483057] ? syscall_enter_from_user_mode+0x1d/0x50 [ 619.483828] do_syscall_64+0x33/0x40 [ 619.484396] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 619.485924] RIP: 0033:0x41935c [ 619.486405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 619.489143] RSP: 002b:00007fb19f7a5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 619.490255] RAX: ffffffffffffffda RBX: 00000000000000f8 RCX: 000000000041935c [ 619.491311] RDX: 000000000000000f RSI: 00007fb19f7a51e0 RDI: 0000000000000004 [ 619.492371] RBP: 00007fb19f7a51d0 R08: 0000000000000000 R09: 0000000000000000 [ 619.493423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 619.494483] R13: 00007ffdc23b59ef R14: 00007fb19f7a5300 R15: 0000000000022000 11:16:51 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:51 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:16:51 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9800, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:16:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 619.580564] ISOFS: Unable to identify CD-ROM format. 11:16:52 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 619.644586] audit: type=1326 audit(1629285412.104:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6405 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:17:06 executing program 7 (fault-call:0 fault-nth:25): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:17:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, 0x0) 11:17:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:06 executing program 1: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setresuid(0xffffffffffffffff, r4, r3) ioprio_set$uid(0x3, 0x0, 0x0) setresuid(r1, r2, r3) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setresuid(r5, r0, r6) r7 = fork() tkill(r7, 0x0) 11:17:06 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(r0, r1, r0) setresuid(0x0, 0x0, r0) r2 = fork() tkill(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 11:17:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:06 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 634.141665] FAULT_INJECTION: forcing a failure. [ 634.141665] name failslab, interval 1, probability 0, space 0, times 0 [ 634.143507] CPU: 1 PID: 6428 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 634.144562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 634.146329] Call Trace: [ 634.146740] dump_stack+0x107/0x163 [ 634.147290] should_fail.cold+0x5/0xa [ 634.147875] ? radix_tree_node_alloc.constprop.0+0x1df/0x300 [ 634.148764] should_failslab+0x5/0x10 [ 634.149358] kmem_cache_alloc+0x5b/0x350 [ 634.149994] radix_tree_node_alloc.constprop.0+0x1df/0x300 [ 634.150887] idr_get_free+0x4b5/0x8f0 [ 634.151490] idr_alloc_u32+0x170/0x2d0 [ 634.152043] ? __fprop_inc_percpu_max+0x120/0x120 [ 634.152757] ? lock_acquire+0x197/0x490 [ 634.153325] ? __kernfs_new_node+0xff/0x840 [ 634.153947] idr_alloc_cyclic+0x102/0x230 [ 634.154516] ? idr_alloc+0x130/0x130 [ 634.155041] ? rwlock_bug.part.0+0x90/0x90 [ 634.155640] __kernfs_new_node+0x117/0x840 [ 634.156226] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 634.156863] ? __lockdep_reset_lock+0x180/0x180 [ 634.157511] ? find_held_lock+0x2c/0x110 [ 634.158066] ? set_user_nice.part.0+0x3d1/0xdd0 [ 634.158707] kernfs_create_dir_ns+0x9c/0x220 [ 634.159329] internal_create_group+0x78f/0xb30 [ 634.159986] ? set_user_nice.part.0+0x3d1/0xdd0 [ 634.160623] ? sysfs_remove_group+0x170/0x170 [ 634.161242] ? blk_queue_flag_set+0x22/0x30 [ 634.161837] ? __loop_update_dio+0x2d2/0x690 [ 634.162448] loop_configure+0x957/0x1480 [ 634.163084] lo_ioctl+0xa6e/0x1760 [ 634.163584] ? loop_set_status_old+0x250/0x250 [ 634.164259] ? avc_ss_reset+0x180/0x180 [ 634.165306] ? __lock_acquire+0xbc2/0x5b20 [ 634.166887] ? generic_block_fiemap+0x60/0x60 [ 634.167524] ? selinux_inode_getsecctx+0x90/0x90 [ 634.168161] ? find_held_lock+0x2c/0x110 [ 634.169192] ? loop_set_status_old+0x250/0x250 [ 634.169933] blkdev_ioctl+0x28d/0x700 [ 634.170525] ? blkdev_common_ioctl+0x1870/0x1870 [ 634.171237] ? __fget_files+0x251/0x410 [ 634.171850] block_ioctl+0xf9/0x140 [ 634.172387] ? blkdev_read_iter+0x1c0/0x1c0 [ 634.173037] __x64_sys_ioctl+0x196/0x210 [ 634.173661] do_syscall_64+0x33/0x40 [ 634.174220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.174992] RIP: 0033:0x4663c7 [ 634.175442] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.178137] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.179342] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 634.180420] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 634.181568] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 634.182669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 634.183787] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:17:06 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 634.270297] audit: type=1326 audit(1629285426.730:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6432 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:17:06 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 634.323629] audit: type=1326 audit(1629285426.784:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6453 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 [ 634.362551] ISOFS: Unable to identify CD-ROM format. 11:17:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:20 executing program 7 (fault-call:0 fault-nth:26): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:17:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:20 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) mlock2(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) munlock(&(0x7f0000d8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000de6000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x68e4, &(0x7f0000000000), &(0x7f0000e09000/0x2000)=nil, &(0x7f0000c19000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) setresuid(0xffffffffffffffff, r0, 0x0) setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) 11:17:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:20 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:20 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 648.136039] audit: type=1326 audit(1629285440.596:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6481 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:17:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 648.161006] FAULT_INJECTION: forcing a failure. [ 648.161006] name failslab, interval 1, probability 0, space 0, times 0 [ 648.162874] CPU: 1 PID: 6490 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 648.163803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 648.165257] Call Trace: [ 648.165601] dump_stack+0x107/0x163 [ 648.166067] should_fail.cold+0x5/0xa [ 648.166565] ? __kernfs_new_node+0xd4/0x840 [ 648.167204] should_failslab+0x5/0x10 [ 648.167750] kmem_cache_alloc+0x5b/0x350 [ 648.168344] __kernfs_new_node+0xd4/0x840 [ 648.168948] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 648.169653] ? lock_downgrade+0x6d0/0x6d0 [ 648.170275] ? mutex_lock_io_nested+0x10f0/0x10f0 [ 648.171006] ? __kernfs_new_node+0x549/0x840 [ 648.171650] ? __mutex_unlock_slowpath+0xe1/0x600 [ 648.172346] ? __lockdep_reset_lock+0x180/0x180 [ 648.173056] kernfs_new_node+0x93/0x120 [ 648.173655] __kernfs_create_file+0x51/0x350 [ 648.174310] sysfs_add_file_mode_ns+0x221/0x560 [ 648.175018] internal_create_group+0x324/0xb30 [ 648.175652] ? sysfs_remove_group+0x170/0x170 [ 648.176337] ? blk_queue_flag_set+0x22/0x30 [ 648.176967] ? __loop_update_dio+0x2d2/0x690 [ 648.177634] loop_configure+0x957/0x1480 [ 648.178260] lo_ioctl+0xa6e/0x1760 [ 648.178806] ? loop_set_status_old+0x250/0x250 [ 648.179489] ? avc_ss_reset+0x180/0x180 [ 648.180023] ? __lock_acquire+0xbc2/0x5b20 [ 648.180621] ? generic_block_fiemap+0x60/0x60 [ 648.181325] ? selinux_inode_getsecctx+0x90/0x90 [ 648.181946] ? find_held_lock+0x2c/0x110 [ 648.182486] ? loop_set_status_old+0x250/0x250 [ 648.183103] blkdev_ioctl+0x28d/0x700 [ 648.183652] ? blkdev_common_ioctl+0x1870/0x1870 [ 648.184336] ? __fget_files+0x251/0x410 [ 648.184918] block_ioctl+0xf9/0x140 [ 648.185426] ? blkdev_read_iter+0x1c0/0x1c0 [ 648.186063] __x64_sys_ioctl+0x196/0x210 [ 648.186676] do_syscall_64+0x33/0x40 [ 648.187249] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.188010] RIP: 0033:0x4663c7 [ 648.188496] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.191263] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.192373] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 648.193428] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 648.194464] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 648.195535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 648.196588] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 648.293609] ISOFS: Unable to identify CD-ROM format. 11:17:34 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 0: setresuid(0xee00, 0x0, 0x0) getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) mlock2(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0) munlock(&(0x7f0000d8b000/0x4000)=nil, 0x4000) munmap(&(0x7f0000de6000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x68e4, &(0x7f0000000000), &(0x7f0000e09000/0x2000)=nil, &(0x7f0000c19000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) setresuid(0xffffffffffffffff, r0, 0x0) setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) 11:17:34 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:34 executing program 7 (fault-call:0 fault-nth:27): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:17:34 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) setuid(0xee01) r1 = fork() ptrace$setopts(0xffffffffffffffff, r1, 0x3, 0x100004) tkill(r1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) sendmsg$nl_netfilter(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="a70400dd1302030029bd7000fedbdf250c00000708002900", @ANYRES32=r0, @ANYBLOB="5c023b80c1be604e0ad34de347213577fde5a88bedff886d44dcfe1661754e995b7d77d504a396e989bd8367d5b0635af847c1fea75ca6c54b2c50d2dec0f2b7d4228584f07b9bb603bfec031339469f12000e084aa40495b8522f9c9bcf155263912418bff76637a6707b11056b43d41a2cd348ffa57d9ddeddcefe96bd946673321c816aa17817f073a39137458c5a418f38f664fc45b214009400ff010000000000000000000000000001bf47706c6e3d748be76dc40789fcf1373d687080ac11a6ce691dca912c65e488eee562e876cd362075d60d41f66ccad019d4352db612ebcd4e7919625bc35afbc7c057ce2bb71fe2f1721428385b2b9a2e9b2b8145f3267b2c81716b205d950fc2c7fdcd8541a40a1b3cd7d1695920321f597d03f15300958e3d6ba060e603b7ed2656f14345d322e011d9cbc91d42c102931b00983435636ec412c9478fc5227a0b750f58858c4ffae56ea396dcbddfec31b2c41a456baeedbc208d8ee23ce9ba000000003dd2421917e263f4a60255dd18ceb629935625fcb030e9a40167fd4b8066c340950ac554cce654f5ab9ffff638489fe297e0ad31ab548f7a594734c5f9c2487ba7ad29ee0f6ebb7bf2ba948a1460be4b17689bf7d0492da6cc98c4086d0cabef04fb6b363ff9b5d1a4f88f270a5eca92f904ac531810a519c0aea11e4ea7d6c187948a2d6973202487cf50f211bace4d351168472ba9ae2e7033c45706d8144bd901889b9996bcc56df0fce4f9bf0fa1babfd339d3cf0861f57f67530244a8ff01f04a35042e199ca749c96585174955a10bba36f3972752a4c8aac6f419e7b1ed210400420008005a0073f6532b54fd9058624175d802a1a0e75c7cb2b938111678273b5ad444dc5d3977e028ef03558849c48585600bcfa641f8bfd845954bca0bbd934308008100e0000002de549a6a207327bfc7d4c15e5d5f64c9b44678c5cfdfea3a460bf725ee764d681becdfdad031fb5dff391f6000c3c6d7ab25c99a0789eb28466839825c88813e7f54d29ed6e15d9913b7beb6184387be5c3f88431ce0eb96e0b37069aca77e69a392b4007e1faaabcfd972b12fe08578c801caa59d9f21362bac1e65ed12f7781a53a5f85e2ae15cfe18f51ca5fa3ac7b634f2911f3055eecf49efb91a9513335f8c94d0b29896fe5d59024044f76287871b589c12ac4338926721ec6d3bc2a9a2fc61e38e5d30d88d4541d62b852287b1cd6abd291d7f45d439aa4aad8ba91ee70d995a336513ad0ed514806acfae6683ffd8ab0af85a6610776c80ff07ba27e29d31ab01a38b3803bc539b58c44249416c7550408e7efe54b4835b14fa9deb792dcc2b6aa0f64b8c2fb4cb1a4e70e18b79cf283327fcef67ffe25aa784ddd11e2a81e3335d0b61fccbd7302e686e63405a51d4182d9dcb1e74635aef5a5310d170c3ac835be9217d149cab79d5dad2aeb64fc4a33af7e3d17bc2d989241c19da4bb760d0d749fbc53baf9a8c0348bd181983b1b1adf129afebf22f4c2ffd5f9b404ea189b3274fc7ce666e15bbfa262b8d770587fb4153c24fe6b2215bc0ee28a474a2c39fe56965956d3db2f3d80090fd2b047aa2f3cb592081272e41e8c100"], 0x4a0}, 0x1, 0x0, 0x0, 0x80}, 0x24044004) [ 661.915190] FAULT_INJECTION: forcing a failure. [ 661.915190] name failslab, interval 1, probability 0, space 0, times 0 [ 661.918110] CPU: 0 PID: 6524 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 661.919769] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 661.923506] Call Trace: [ 661.924331] dump_stack+0x107/0x163 [ 661.925479] should_fail.cold+0x5/0xa [ 661.926734] ? create_object.isra.0+0x3a/0xa20 [ 661.928260] should_failslab+0x5/0x10 [ 661.929514] kmem_cache_alloc+0x5b/0x350 [ 661.930879] create_object.isra.0+0x3a/0xa20 [ 661.932385] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 661.934082] kmem_cache_alloc+0x159/0x350 [ 661.935516] __kernfs_new_node+0xd4/0x840 [ 661.937009] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 661.938504] ? lock_downgrade+0x6d0/0x6d0 [ 661.939791] ? mutex_lock_io_nested+0x10f0/0x10f0 [ 661.941320] ? __kernfs_new_node+0x549/0x840 [ 661.942650] ? __mutex_unlock_slowpath+0xe1/0x600 [ 661.944144] ? __lockdep_reset_lock+0x180/0x180 [ 661.945740] kernfs_new_node+0x93/0x120 [ 661.946978] __kernfs_create_file+0x51/0x350 [ 661.948427] sysfs_add_file_mode_ns+0x221/0x560 [ 661.950014] internal_create_group+0x324/0xb30 [ 661.951535] ? sysfs_remove_group+0x170/0x170 [ 661.953012] ? blk_queue_flag_set+0x22/0x30 [ 661.954446] ? __loop_update_dio+0x2d2/0x690 [ 661.955841] loop_configure+0x957/0x1480 [ 661.957207] lo_ioctl+0xa6e/0x1760 [ 661.958386] ? loop_set_status_old+0x250/0x250 [ 661.960019] ? avc_ss_reset+0x180/0x180 [ 661.961508] ? __lock_acquire+0xbc2/0x5b20 [ 661.963130] ? generic_block_fiemap+0x60/0x60 [ 661.964720] ? selinux_inode_getsecctx+0x90/0x90 [ 661.966323] ? find_held_lock+0x2c/0x110 [ 661.967845] ? loop_set_status_old+0x250/0x250 [ 661.969511] blkdev_ioctl+0x28d/0x700 [ 661.970877] ? blkdev_common_ioctl+0x1870/0x1870 [ 661.972496] ? __fget_files+0x251/0x410 [ 661.973929] block_ioctl+0xf9/0x140 [ 661.975286] ? blkdev_read_iter+0x1c0/0x1c0 [ 661.976930] __x64_sys_ioctl+0x196/0x210 [ 661.978448] do_syscall_64+0x33/0x40 [ 661.979531] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 661.980311] RIP: 0033:0x4663c7 [ 661.980805] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 661.983602] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.984749] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 661.985725] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 661.986680] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 661.987689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 661.988702] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:17:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 662.062998] ISOFS: Unable to identify CD-ROM format. [ 662.065193] audit: type=1326 audit(1629285454.525:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6525 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:17:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:34 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:34 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:34 executing program 7 (fault-call:0 fault-nth:28): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:17:34 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(r0, 0x0, r0) r1 = fork() tkill(r1, 0x0) [ 662.266035] FAULT_INJECTION: forcing a failure. [ 662.266035] name failslab, interval 1, probability 0, space 0, times 0 [ 662.267607] CPU: 1 PID: 6580 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 662.268468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 662.269882] Call Trace: [ 662.270228] dump_stack+0x107/0x163 [ 662.270706] should_fail.cold+0x5/0xa [ 662.271199] ? __kernfs_new_node+0xd4/0x840 [ 662.271787] should_failslab+0x5/0x10 [ 662.272281] kmem_cache_alloc+0x5b/0x350 [ 662.272811] __kernfs_new_node+0xd4/0x840 [ 662.273352] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 662.273965] ? __mutex_unlock_slowpath+0xe1/0x600 [ 662.274585] ? wait_for_completion+0x270/0x270 [ 662.275175] ? kernfs_next_descendant_post+0x1a3/0x290 [ 662.275882] kernfs_new_node+0x93/0x120 [ 662.276406] __kernfs_create_file+0x51/0x350 [ 662.276986] sysfs_add_file_mode_ns+0x221/0x560 [ 662.277598] internal_create_group+0x324/0xb30 [ 662.278203] ? sysfs_remove_group+0x170/0x170 [ 662.279005] ? blk_queue_flag_set+0x22/0x30 [ 662.280204] ? __loop_update_dio+0x2d2/0x690 [ 662.281620] loop_configure+0x957/0x1480 [ 662.282898] lo_ioctl+0xa6e/0x1760 [ 662.283903] ? loop_set_status_old+0x250/0x250 [ 662.285307] ? avc_ss_reset+0x180/0x180 [ 662.286551] ? __lock_acquire+0xbc2/0x5b20 [ 662.287962] ? generic_block_fiemap+0x60/0x60 [ 662.289258] ? selinux_inode_getsecctx+0x90/0x90 [ 662.290765] ? find_held_lock+0x2c/0x110 [ 662.292028] ? loop_set_status_old+0x250/0x250 [ 662.293453] blkdev_ioctl+0x28d/0x700 [ 662.294642] ? blkdev_common_ioctl+0x1870/0x1870 [ 662.296309] ? __fget_files+0x251/0x410 [ 662.297720] block_ioctl+0xf9/0x140 [ 662.298984] ? blkdev_read_iter+0x1c0/0x1c0 [ 662.300562] __x64_sys_ioctl+0x196/0x210 [ 662.302037] do_syscall_64+0x33/0x40 [ 662.303455] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 662.305350] RIP: 0033:0x4663c7 [ 662.306516] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 662.313390] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.316194] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 662.318813] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 662.321418] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 662.323935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 662.326288] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 662.373881] ISOFS: Unable to identify CD-ROM format. 11:17:47 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:47 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:47 executing program 7 (fault-call:0 fault-nth:29): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:17:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:47 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:47 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xac, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:47 executing program 3: r0 = inotify_init() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x20100, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) r5 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',debug=0x00000000000003ff,cache=loose,fowner>', @ANYRESDEC=r6, @ANYBLOB="99563cb6bc0f05e330c3a6c77ae128b6792979bd69c8ad2028fb374f970f7dea7cd934c2c278398cfdbe076ec8a65da4f448e9229e41f47aec8733c39c0ee54a11687bc5743918323697d09d8fbdc3790d7bfd6f0f37678ce4ede11844dfdd7d7d169591fb24ec709b9c904ae258769f251ced9a6c4bec346f730d1498d7115528011e6e95d597ad605f64357dc110fe5aef315c5d54d8d6d3631e47a2c9b2"]) dup2(r0, r1) io_submit(r3, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_destroy(r3) setresuid(0xee00, 0x0, 0x0) r7 = getuid() setresuid(0x0, 0x0, r7) r8 = fork() tkill(r8, 0x0) 11:17:47 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 675.531998] FAULT_INJECTION: forcing a failure. [ 675.531998] name failslab, interval 1, probability 0, space 0, times 0 [ 675.533820] CPU: 0 PID: 6593 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 675.534935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 675.536681] Call Trace: [ 675.537085] dump_stack+0x107/0x163 [ 675.537640] should_fail.cold+0x5/0xa [ 675.538205] ? create_object.isra.0+0x3a/0xa20 [ 675.538872] should_failslab+0x5/0x10 [ 675.539464] kmem_cache_alloc+0x5b/0x350 [ 675.540069] create_object.isra.0+0x3a/0xa20 [ 675.540726] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 675.541511] kmem_cache_alloc+0x159/0x350 [ 675.542135] __kernfs_new_node+0xd4/0x840 [ 675.542750] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 675.543500] ? __mutex_unlock_slowpath+0xe1/0x600 [ 675.544214] ? wait_for_completion+0x270/0x270 [ 675.544914] ? kernfs_next_descendant_post+0x1a3/0x290 [ 675.545703] kernfs_new_node+0x93/0x120 [ 675.546292] __kernfs_create_file+0x51/0x350 [ 675.546961] sysfs_add_file_mode_ns+0x221/0x560 [ 675.547692] internal_create_group+0x324/0xb30 [ 675.548376] ? sysfs_remove_group+0x170/0x170 [ 675.549052] ? blk_queue_flag_set+0x22/0x30 [ 675.549687] ? __loop_update_dio+0x2d2/0x690 [ 675.550337] loop_configure+0x957/0x1480 [ 675.550951] lo_ioctl+0xa6e/0x1760 [ 675.551526] ? loop_set_status_old+0x250/0x250 [ 675.552221] ? avc_ss_reset+0x180/0x180 [ 675.552821] ? __lock_acquire+0xbc2/0x5b20 [ 675.553485] ? generic_block_fiemap+0x60/0x60 [ 675.554148] ? selinux_inode_getsecctx+0x90/0x90 [ 675.554879] ? find_held_lock+0x2c/0x110 [ 675.555514] ? loop_set_status_old+0x250/0x250 [ 675.556175] blkdev_ioctl+0x28d/0x700 [ 675.556741] ? blkdev_common_ioctl+0x1870/0x1870 [ 675.557459] ? __fget_files+0x251/0x410 [ 675.558046] block_ioctl+0xf9/0x140 [ 675.558587] ? blkdev_read_iter+0x1c0/0x1c0 [ 675.559219] __x64_sys_ioctl+0x196/0x210 [ 675.559866] do_syscall_64+0x33/0x40 [ 675.560409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 675.561160] RIP: 0033:0x4663c7 [ 675.561649] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 675.564373] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.565560] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 675.566600] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 675.567665] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 675.568715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 675.569753] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:17:48 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:17:48 executing program 3: setresuid(0xee00, 0x0, 0x0) setfsuid(0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) 11:17:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:17:48 executing program 0: r0 = inotify_init() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x20100, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x6609, 0x0) r5 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',debug=0x00000000000003ff,cache=loose,fowner>', @ANYRESDEC=r6, @ANYBLOB="99563cb6bc0f05e330c3a6c77ae128b6792979bd69c8ad2028fb374f970f7dea7cd934c2c278398cfdbe076ec8a65da4f448e9229e41f47aec8733c39c0ee54a11687bc5743918323697d09d8fbdc3790d7bfd6f0f37678ce4ede11844dfdd7d7d169591fb24ec709b9c904ae258769f251ced9a6c4bec346f730d1498d7115528011e6e95d597ad605f64357dc110fe5aef315c5d54d8d6d3631e47a2c9b2"]) dup2(r0, r1) io_submit(r3, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_destroy(r3) setresuid(0xee00, 0x0, 0x0) r7 = getuid() setresuid(0x0, 0x0, r7) r8 = fork() tkill(r8, 0x0) 11:17:48 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 675.759052] ISOFS: Unable to identify CD-ROM format. 11:18:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xb8, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = geteuid() setresuid(r1, r1, r1) r2 = getuid() setresuid(0x0, 0x0, r2) r3 = fork() tkill(r3, 0x0) 11:18:01 executing program 7 (fault-call:0 fault-nth:30): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 689.043666] FAULT_INJECTION: forcing a failure. [ 689.043666] name failslab, interval 1, probability 0, space 0, times 0 [ 689.045296] CPU: 0 PID: 6641 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 689.046173] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 689.047844] Call Trace: [ 689.048237] dump_stack+0x107/0x163 [ 689.048787] should_fail.cold+0x5/0xa [ 689.049292] ? __kernfs_new_node+0xd4/0x840 [ 689.049866] should_failslab+0x5/0x10 [ 689.050377] kmem_cache_alloc+0x5b/0x350 [ 689.050923] __kernfs_new_node+0xd4/0x840 [ 689.051488] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 689.052152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 689.052869] ? wait_for_completion+0x270/0x270 [ 689.053559] ? kernfs_next_descendant_post+0x1a3/0x290 [ 689.054426] kernfs_new_node+0x93/0x120 [ 689.055021] __kernfs_create_file+0x51/0x350 [ 689.055692] sysfs_add_file_mode_ns+0x221/0x560 [ 689.056383] internal_create_group+0x324/0xb30 [ 689.057056] ? sysfs_remove_group+0x170/0x170 [ 689.057719] ? blk_queue_flag_set+0x22/0x30 [ 689.058327] ? __loop_update_dio+0x2d2/0x690 [ 689.058975] loop_configure+0x957/0x1480 [ 689.059563] lo_ioctl+0xa6e/0x1760 [ 689.060100] ? loop_set_status_old+0x250/0x250 [ 689.060771] ? avc_ss_reset+0x180/0x180 [ 689.061364] ? __lock_acquire+0xbc2/0x5b20 [ 689.062024] ? generic_block_fiemap+0x60/0x60 [ 689.062662] ? selinux_inode_getsecctx+0x90/0x90 [ 689.063366] ? find_held_lock+0x2c/0x110 [ 689.064095] ? loop_set_status_old+0x250/0x250 [ 689.064684] blkdev_ioctl+0x28d/0x700 [ 689.065182] ? blkdev_common_ioctl+0x1870/0x1870 [ 689.065802] ? __fget_files+0x251/0x410 [ 689.066322] block_ioctl+0xf9/0x140 [ 689.066803] ? blkdev_read_iter+0x1c0/0x1c0 [ 689.067379] __x64_sys_ioctl+0x196/0x210 [ 689.067928] do_syscall_64+0x33/0x40 [ 689.068408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 689.069232] RIP: 0033:0x4663c7 [ 689.069663] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.072177] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.073184] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 689.074105] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 689.075034] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 689.076149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 689.077078] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:18:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:01 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:18:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:01 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) setresuid(0x0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getuid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r3, &(0x7f0000000200)=@ax25={{0x3, @netrom}, [@default, @netrom, @rose, @netrom, @rose, @netrom, @default, @bcast]}, &(0x7f00000003c0)=0x80) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000004, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d51e074ded9ccfcf7c59600fa7678f1fa9f123ac205055842dd4630fc109f72455e0e9131fa6994842d422a41628ff60fba7b24e13a3436a3f224a4531a5b05fe5601b5f0abdf9acbd1aad49655d2a054dadc672f9d8c8a2cfd85f0d87e6e04309c5904c4248dd6a18d28e86c703df9d274f5786e59a7641c3d0895da5d30429ef852c5383b0e5465d1d4390984f0200dc67ef326fd09dc3a1b319343c6c69f6a1748eaaaf0e9abb5d55b7917718b31ae8f10b309b7", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache,msize=0x00000000000000fd,dfltuid=', @ANYRESHEX=r2, @ANYBLOB=',pcr=00000000000000000052,fsmagic=0x0000000000000000,\x00']) r4 = getuid() utimes(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) keyctl$chown(0x4, 0x0, 0xee01, r6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xa200, &(0x7f0000000080)={[{@huge_advise}, {@size={'size', 0x3d, [0x70, 0x56, 0x4f, 0x64, 0x35, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x2d, 0x34, 0x30, 0x32, 0x39]}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x2f, 0x30, 0x36, 0x3b, 0x30, 0x3a]}}}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r4}}, {@dont_hash}, {@uid_lt={'uid<', r5}}]}) r7 = fork() tkill(r7, 0x0) [ 689.201774] ISOFS: Unable to identify CD-ROM format. [ 689.210181] audit: type=1326 audit(1629285481.670:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6669 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:18:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 689.248462] FAULT_INJECTION: forcing a failure. [ 689.248462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.250331] CPU: 0 PID: 6682 Comm: syz-executor.0 Not tainted 5.10.56 #1 [ 689.251353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 689.253097] Call Trace: [ 689.253513] dump_stack+0x107/0x163 [ 689.254030] should_fail.cold+0x5/0xa [ 689.254591] _copy_from_user+0x2e/0x1b0 [ 689.255122] snd_seq_ioctl+0x1b4/0x3f0 [ 689.255663] ? snd_seq_ioctl_set_queue_client+0x280/0x280 [ 689.256422] ? __fget_files+0x251/0x410 [ 689.256953] ? snd_seq_ioctl_set_queue_client+0x280/0x280 [ 689.257658] __x64_sys_ioctl+0x196/0x210 [ 689.258201] do_syscall_64+0x33/0x40 [ 689.258696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 689.259364] RIP: 0033:0x466609 [ 689.259905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.262321] RSP: 002b:00007f6022dfb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.263450] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 689.264510] RDX: 0000000020000180 RSI: 00000000c08c5334 RDI: 0000000000000003 [ 689.265577] RBP: 00007f6022dfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.266691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.267768] R13: 00007ffd895149df R14: 00007f6022dfb300 R15: 0000000000022000 11:18:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 7 (fault-call:0 fault-nth:31): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:18:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:01 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 689.409042] FAULT_INJECTION: forcing a failure. [ 689.409042] name failslab, interval 1, probability 0, space 0, times 0 [ 689.411792] CPU: 0 PID: 6704 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 689.412728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 689.414265] Call Trace: [ 689.414625] dump_stack+0x107/0x163 [ 689.415186] should_fail.cold+0x5/0xa [ 689.415777] ? create_object.isra.0+0x3a/0xa20 [ 689.416431] should_failslab+0x5/0x10 [ 689.416956] kmem_cache_alloc+0x5b/0x350 [ 689.417564] create_object.isra.0+0x3a/0xa20 [ 689.418207] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 689.418968] kmem_cache_alloc+0x159/0x350 [ 689.419595] __kernfs_new_node+0xd4/0x840 [ 689.420234] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 689.420939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 689.421655] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 689.422432] ? wait_for_completion+0x270/0x270 [ 689.423101] ? kernfs_next_descendant_post+0x1a3/0x290 [ 689.423920] kernfs_new_node+0x93/0x120 [ 689.424508] __kernfs_create_file+0x51/0x350 [ 689.425146] sysfs_add_file_mode_ns+0x221/0x560 [ 689.425851] internal_create_group+0x324/0xb30 [ 689.426532] ? sysfs_remove_group+0x170/0x170 [ 689.427204] ? blk_queue_flag_set+0x22/0x30 [ 689.427846] ? __loop_update_dio+0x2d2/0x690 [ 689.428511] loop_configure+0x957/0x1480 [ 689.429129] lo_ioctl+0xa6e/0x1760 [ 689.429674] ? loop_set_status_old+0x250/0x250 [ 689.430349] ? avc_ss_reset+0x180/0x180 [ 689.430933] ? __lock_acquire+0xbc2/0x5b20 [ 689.431595] ? generic_block_fiemap+0x60/0x60 [ 689.432273] ? selinux_inode_getsecctx+0x90/0x90 [ 689.432952] ? find_held_lock+0x2c/0x110 [ 689.433529] ? loop_set_status_old+0x250/0x250 [ 689.434129] blkdev_ioctl+0x28d/0x700 [ 689.434644] ? blkdev_common_ioctl+0x1870/0x1870 [ 689.435275] ? __fget_files+0x251/0x410 [ 689.435829] block_ioctl+0xf9/0x140 [ 689.436312] ? blkdev_read_iter+0x1c0/0x1c0 [ 689.436879] __x64_sys_ioctl+0x196/0x210 [ 689.437398] do_syscall_64+0x33/0x40 [ 689.437869] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 689.438521] RIP: 0033:0x4663c7 [ 689.438944] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.441574] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.442693] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 689.443745] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 689.444787] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 689.445833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 689.446877] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 689.494242] ISOFS: Unable to identify CD-ROM format. 11:18:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:15 executing program 7 (fault-call:0 fault-nth:32): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:15 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:15 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:18:15 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x98000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:15 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 703.261155] FAULT_INJECTION: forcing a failure. [ 703.261155] name failslab, interval 1, probability 0, space 0, times 0 [ 703.263705] CPU: 0 PID: 6723 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 703.264773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 703.266461] Call Trace: [ 703.266861] dump_stack+0x107/0x163 [ 703.267414] should_fail.cold+0x5/0xa [ 703.268018] ? __kernfs_new_node+0xd4/0x840 [ 703.268700] should_failslab+0x5/0x10 [ 703.269273] kmem_cache_alloc+0x5b/0x350 [ 703.270219] __kernfs_new_node+0xd4/0x840 [ 703.270853] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 703.271564] ? __mutex_unlock_slowpath+0xe1/0x600 [ 703.272291] ? wait_for_completion+0x270/0x270 [ 703.272956] ? kernfs_next_descendant_post+0x1a3/0x290 [ 703.273762] kernfs_new_node+0x93/0x120 [ 703.274378] __kernfs_create_file+0x51/0x350 [ 703.275055] sysfs_add_file_mode_ns+0x221/0x560 [ 703.275775] internal_create_group+0x324/0xb30 [ 703.276470] ? sysfs_remove_group+0x170/0x170 [ 703.277159] ? blk_queue_flag_set+0x22/0x30 [ 703.277756] ? __loop_update_dio+0x2d2/0x690 [ 703.278407] loop_configure+0x957/0x1480 [ 703.279055] lo_ioctl+0xa6e/0x1760 [ 703.279594] ? loop_set_status_old+0x250/0x250 [ 703.280309] ? avc_ss_reset+0x180/0x180 [ 703.280916] ? __lock_acquire+0xbc2/0x5b20 [ 703.281603] ? generic_block_fiemap+0x60/0x60 [ 703.282314] ? selinux_inode_getsecctx+0x90/0x90 [ 703.283042] ? find_held_lock+0x2c/0x110 [ 703.283661] ? loop_set_status_old+0x250/0x250 [ 703.284377] blkdev_ioctl+0x28d/0x700 [ 703.284984] ? blkdev_common_ioctl+0x1870/0x1870 [ 703.285722] ? __fget_files+0x251/0x410 [ 703.286328] block_ioctl+0xf9/0x140 [ 703.286871] ? blkdev_read_iter+0x1c0/0x1c0 [ 703.287514] __x64_sys_ioctl+0x196/0x210 [ 703.288149] do_syscall_64+0x33/0x40 [ 703.288714] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 703.289478] RIP: 0033:0x4663c7 [ 703.289967] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 703.292593] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 703.293705] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 703.294775] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 703.295841] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 703.296922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 703.297972] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 703.303066] FAULT_INJECTION: forcing a failure. [ 703.303066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.304728] CPU: 1 PID: 6734 Comm: syz-executor.0 Not tainted 5.10.56 #1 [ 703.305724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 703.307476] Call Trace: [ 703.307934] dump_stack+0x107/0x163 [ 703.308490] should_fail.cold+0x5/0xa [ 703.309082] _copy_to_user+0x2e/0x180 [ 703.309641] simple_read_from_buffer+0xcc/0x160 [ 703.310324] proc_fail_nth_read+0x194/0x220 [ 703.310987] ? proc_sessionid_read+0x220/0x220 11:18:15 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 703.311657] ? security_file_permission+0x24e/0x570 [ 703.312729] ? proc_sessionid_read+0x220/0x220 [ 703.313393] vfs_read+0x228/0x580 [ 703.313904] ksys_read+0x12d/0x250 [ 703.314422] ? __ia32_sys_pwrite64+0x230/0x230 [ 703.315095] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 703.315898] ? syscall_enter_from_user_mode+0x1d/0x50 [ 703.316674] do_syscall_64+0x33/0x40 [ 703.317232] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 703.317981] RIP: 0033:0x41935c [ 703.318423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 703.321029] RSP: 002b:00007f6022dfb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 703.322118] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 703.323169] RDX: 000000000000000f RSI: 00007f6022dfb1e0 RDI: 0000000000000005 [ 703.324225] RBP: 00007f6022dfb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 703.325184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.326300] R13: 00007ffd895149df R14: 00007f6022dfb300 R15: 0000000000022000 11:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:15 executing program 3: setresuid(0xee00, 0x0, 0x0) stat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, r2) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(0xffffffffffffffff, r0, r2) r5 = getuid() setresuid(0x0, 0x0, r5) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() setgid(r9) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r9}, {0x8, 0x3, r10}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x4, r2}, {0x2, 0x2, r2}], {}, [{0x8, 0x4, r6}, {0x8, 0x4, r1}, {0x8, 0x0, r7}, {0x8, 0x6, r3}, {0x8, 0x0, r3}, {0x8, 0x3, r3}, {0x8, 0x6, r8}, {0x8, 0x7, r1}, {0x8, 0x2, r9}], {}, {0x20, 0x4}}, 0x7c, 0x2) r11 = fork() tkill(r11, 0x0) 11:18:15 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:15 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 703.481119] ISOFS: Unable to identify CD-ROM format. 11:18:29 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$poke(0x4, r2, &(0x7f0000000040), 0x86ef) 11:18:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xc13a3df0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:18:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 7 (fault-call:0 fault-nth:33): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:18:29 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:29 executing program 1: r0 = creat(0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0xff) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/101, 0x65}], 0x6, 0x1ff, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r2, r1, 0x0) 11:18:29 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x2, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 716.768637] FAULT_INJECTION: forcing a failure. [ 716.768637] name failslab, interval 1, probability 0, space 0, times 0 [ 716.770777] CPU: 1 PID: 6777 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 716.771788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 716.773344] Call Trace: [ 716.773708] dump_stack+0x107/0x163 [ 716.774242] should_fail.cold+0x5/0xa [ 716.774824] ? create_object.isra.0+0x3a/0xa20 [ 716.775518] should_failslab+0x5/0x10 [ 716.776107] kmem_cache_alloc+0x5b/0x350 [ 716.776719] create_object.isra.0+0x3a/0xa20 [ 716.777373] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 716.778118] kmem_cache_alloc+0x159/0x350 [ 716.778702] __kernfs_new_node+0xd4/0x840 [ 716.779273] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 716.779928] ? __mutex_unlock_slowpath+0xe1/0x600 [ 716.780674] ? wait_for_completion+0x270/0x270 [ 716.781340] ? kernfs_next_descendant_post+0x1a3/0x290 [ 716.782129] kernfs_new_node+0x93/0x120 [ 716.782724] __kernfs_create_file+0x51/0x350 [ 716.783394] sysfs_add_file_mode_ns+0x221/0x560 [ 716.784101] internal_create_group+0x324/0xb30 [ 716.784782] ? sysfs_remove_group+0x170/0x170 [ 716.785459] ? blk_queue_flag_set+0x22/0x30 [ 716.786097] ? __loop_update_dio+0x2d2/0x690 [ 716.786736] loop_configure+0x957/0x1480 [ 716.787387] lo_ioctl+0xa6e/0x1760 [ 716.787922] ? loop_set_status_old+0x250/0x250 [ 716.788651] ? avc_ss_reset+0x180/0x180 [ 716.789257] ? __lock_acquire+0xbc2/0x5b20 [ 716.789928] ? generic_block_fiemap+0x60/0x60 [ 716.790591] ? selinux_inode_getsecctx+0x90/0x90 [ 716.791288] ? find_held_lock+0x2c/0x110 [ 716.791895] ? loop_set_status_old+0x250/0x250 [ 716.792585] blkdev_ioctl+0x28d/0x700 [ 716.793176] ? blkdev_common_ioctl+0x1870/0x1870 [ 716.793878] ? __fget_files+0x251/0x410 [ 716.794466] block_ioctl+0xf9/0x140 [ 716.795005] ? blkdev_read_iter+0x1c0/0x1c0 [ 716.795654] __x64_sys_ioctl+0x196/0x210 [ 716.796269] do_syscall_64+0x33/0x40 [ 716.796816] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 716.797570] RIP: 0033:0x4663c7 [ 716.798049] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 716.800900] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.802095] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 716.803188] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 716.804262] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 716.805329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.806388] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:18:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf03d3ac1, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:29 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4020000, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@sq={'sq', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0xffffffffffff8000}}], [{@fowner_gt={'fowner>', r0}}, {@euid_gt={'euid>', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_role={'subj_role', 0x3d, '@\'@,/'}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '\')\'('}}]}}) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x4) r4 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x5}, 0x1) setresuid(0x0, 0x0, r0) fork() 11:18:29 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:29 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 716.973334] ISOFS: Unable to identify CD-ROM format. [ 717.106545] device veth0_vlan entered promiscuous mode [ 717.418143] device veth0_vlan entered promiscuous mode 11:18:49 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000240)=0xe8) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x8, 0x3) setresuid(r1, r3, r2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) setresuid(0xffffffffffffffff, r4, 0x0) setresuid(r0, r1, r2) r5 = fork() tkill(r5, 0x0) 11:18:49 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:49 executing program 1: r0 = creat(0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0xff) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/101, 0x65}], 0x6, 0x1ff, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r2, r1, 0x0) 11:18:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:49 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4b47, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:18:49 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:49 executing program 7 (fault-call:0 fault-nth:34): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:18:49 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 737.193816] FAULT_INJECTION: forcing a failure. [ 737.193816] name failslab, interval 1, probability 0, space 0, times 0 [ 737.195381] CPU: 0 PID: 6850 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 737.196274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 737.197843] Call Trace: [ 737.198196] dump_stack+0x107/0x163 [ 737.198696] should_fail.cold+0x5/0xa [ 737.199207] ? __kernfs_new_node+0xd4/0x840 [ 737.199806] should_failslab+0x5/0x10 [ 737.200313] kmem_cache_alloc+0x5b/0x350 [ 737.201477] __kernfs_new_node+0xd4/0x840 [ 737.202053] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 737.202679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 737.203325] ? wait_for_completion+0x270/0x270 [ 737.203943] ? kernfs_next_descendant_post+0x1a3/0x290 [ 737.204667] kernfs_new_node+0x93/0x120 [ 737.205215] __kernfs_create_file+0x51/0x350 [ 737.205815] sysfs_add_file_mode_ns+0x221/0x560 [ 737.206456] internal_create_group+0x324/0xb30 [ 737.207074] ? sysfs_remove_group+0x170/0x170 [ 737.207675] ? blk_queue_flag_set+0x22/0x30 [ 737.208254] ? __loop_update_dio+0x2d2/0x690 [ 737.209730] loop_configure+0x957/0x1480 [ 737.210364] lo_ioctl+0xa6e/0x1760 [ 737.210904] ? loop_set_status_old+0x250/0x250 [ 737.211615] ? avc_ss_reset+0x180/0x180 [ 737.212229] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 737.212950] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 737.213627] ? generic_block_fiemap+0x60/0x60 [ 737.214950] ? selinux_inode_getsecctx+0x90/0x90 [ 737.215650] ? find_held_lock+0x2c/0x110 [ 737.216281] ? loop_set_status_old+0x250/0x250 [ 737.216975] blkdev_ioctl+0x28d/0x700 [ 737.217549] ? blkdev_common_ioctl+0x1870/0x1870 [ 737.218265] ? __fget_files+0x251/0x410 [ 737.218870] block_ioctl+0xf9/0x140 [ 737.219411] ? blkdev_read_iter+0x1c0/0x1c0 [ 737.220060] __x64_sys_ioctl+0x196/0x210 [ 737.220699] do_syscall_64+0x33/0x40 [ 737.221256] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 737.221992] RIP: 0033:0x4663c7 [ 737.222476] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.225181] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.226290] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 737.227327] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 737.228362] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 737.229398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 737.230448] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 737.247062] ISOFS: Unable to identify CD-ROM format. 11:18:49 executing program 7 (fault-call:0 fault-nth:35): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:18:49 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xac00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:18:49 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:49 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fork() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r4 = fork() move_pages(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x6609, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r5, &(0x7f0000000200)={0x55, 0x7d, 0x1, {{0x0, 0x40, 0x5, 0xffffffff, {0x1}, 0x4000000, 0x3, 0x800, 0x7, 0x1, ')', 0x7, '-)*\\^}\x00', 0x1, '%', 0x4, '$\xc7#\x00'}, 0x0, '', r6, r7, r1}}, 0x55) tkill(r4, 0x26) write$P9_RUNLINKAT(r5, &(0x7f0000000280)={0x7, 0x4d, 0x2}, 0x7) sched_rr_get_interval(r3, &(0x7f0000000100)) tkill(r2, 0x0) 11:18:49 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4b49, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 737.362634] FAULT_INJECTION: forcing a failure. [ 737.362634] name failslab, interval 1, probability 0, space 0, times 0 [ 737.364186] CPU: 1 PID: 6870 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 737.364981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 737.366374] Call Trace: [ 737.366660] dump_stack+0x107/0x163 [ 737.367060] should_fail.cold+0x5/0xa [ 737.367479] ? create_object.isra.0+0x3a/0xa20 [ 737.368100] should_failslab+0x5/0x10 [ 737.368662] kmem_cache_alloc+0x5b/0x350 [ 737.369303] create_object.isra.0+0x3a/0xa20 [ 737.369940] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 737.370645] kmem_cache_alloc+0x159/0x350 [ 737.371213] __kernfs_new_node+0xd4/0x840 [ 737.371788] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 737.372374] ? __mutex_unlock_slowpath+0xe1/0x600 [ 737.372992] ? wait_for_completion+0x270/0x270 [ 737.373543] ? kernfs_next_descendant_post+0x1a3/0x290 [ 737.374234] kernfs_new_node+0x93/0x120 [ 737.374783] __kernfs_create_file+0x51/0x350 [ 737.375382] sysfs_add_file_mode_ns+0x221/0x560 [ 737.375974] internal_create_group+0x324/0xb30 [ 737.376570] ? sysfs_remove_group+0x170/0x170 [ 737.377202] ? blk_queue_flag_set+0x22/0x30 [ 737.377733] ? __loop_update_dio+0x2d2/0x690 [ 737.378278] loop_configure+0x957/0x1480 [ 737.378787] lo_ioctl+0xa6e/0x1760 [ 737.379225] ? loop_set_status_old+0x250/0x250 [ 737.379813] ? avc_ss_reset+0x180/0x180 [ 737.380349] ? __lock_acquire+0xbc2/0x5b20 [ 737.380918] ? generic_block_fiemap+0x60/0x60 [ 737.381476] ? selinux_inode_getsecctx+0x90/0x90 [ 737.382141] ? find_held_lock+0x2c/0x110 [ 737.382693] ? loop_set_status_old+0x250/0x250 [ 737.383303] blkdev_ioctl+0x28d/0x700 [ 737.383791] ? blkdev_common_ioctl+0x1870/0x1870 [ 737.384457] ? __fget_files+0x251/0x410 [ 737.385058] block_ioctl+0xf9/0x140 [ 737.385553] ? blkdev_read_iter+0x1c0/0x1c0 [ 737.386163] __x64_sys_ioctl+0x196/0x210 [ 737.386716] do_syscall_64+0x33/0x40 [ 737.387279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 737.388034] RIP: 0033:0x4663c7 [ 737.388518] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 737.391195] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.392312] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 737.393145] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 737.393904] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 737.394636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 737.395447] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:18:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:18:49 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 737.412803] audit: type=1326 audit(1629285529.873:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6873 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:18:49 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xb800, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 737.521690] device veth0_vlan entered promiscuous mode [ 737.575997] ISOFS: Unable to identify CD-ROM format. 11:19:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:03 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) getpgrp(r1) 11:19:03 executing program 1: r0 = creat(0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0xff) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/105, 0x69}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/101, 0x65}], 0x6, 0x1ff, 0x100) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r2, r1, 0x0) 11:19:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:03 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x541b, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:03 executing program 7 (fault-call:0 fault-nth:36): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 751.124319] audit: type=1326 audit(1629285543.584:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6914 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 [ 751.135701] FAULT_INJECTION: forcing a failure. [ 751.135701] name failslab, interval 1, probability 0, space 0, times 0 [ 751.137580] CPU: 1 PID: 6921 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 751.138581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 751.140242] Call Trace: [ 751.140639] dump_stack+0x107/0x163 [ 751.141220] should_fail.cold+0x5/0xa [ 751.141802] ? kobject_uevent_env+0x22b/0xf90 [ 751.142478] ? dev_uevent_filter+0xd0/0xd0 [ 751.143118] should_failslab+0x5/0x10 [ 751.143695] kmem_cache_alloc_trace+0x55/0x360 [ 751.144385] ? loop_configure+0xad5/0x1480 [ 751.145165] ? dev_uevent_filter+0xd0/0xd0 [ 751.145843] kobject_uevent_env+0x22b/0xf90 [ 751.146525] loop_configure+0x116b/0x1480 [ 751.147135] lo_ioctl+0xa6e/0x1760 [ 751.147694] ? loop_set_status_old+0x250/0x250 [ 751.148434] ? avc_ss_reset+0x180/0x180 [ 751.149071] ? __lock_acquire+0xbc2/0x5b20 [ 751.149758] ? generic_block_fiemap+0x60/0x60 [ 751.150470] ? selinux_inode_getsecctx+0x90/0x90 [ 751.151176] ? find_held_lock+0x2c/0x110 [ 751.151815] ? loop_set_status_old+0x250/0x250 [ 751.152521] blkdev_ioctl+0x28d/0x700 [ 751.153125] ? blkdev_common_ioctl+0x1870/0x1870 [ 751.153855] ? __fget_files+0x251/0x410 [ 751.154467] block_ioctl+0xf9/0x140 [ 751.155024] ? blkdev_read_iter+0x1c0/0x1c0 [ 751.155673] __x64_sys_ioctl+0x196/0x210 [ 751.156296] do_syscall_64+0x33/0x40 [ 751.156850] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 751.157621] RIP: 0033:0x4663c7 [ 751.158121] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 751.160931] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.162137] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 751.163214] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 751.164259] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 751.165300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 751.166367] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:19:03 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5421, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:03 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc00, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:19:03 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:03 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x6000, 0x1040, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) r4 = fork() tkill(r4, 0x14) [ 751.284556] device veth0_vlan entered promiscuous mode 11:19:03 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 751.329206] ISOFS: Unable to identify CD-ROM format. 11:19:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:19:17 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5450, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:17 executing program 7 (fault-call:0 fault-nth:37): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:17 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$cont(0x2f, r2, 0x4, 0x9) tkill(r1, 0x2a) 11:19:17 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 765.035719] FAULT_INJECTION: forcing a failure. [ 765.035719] name failslab, interval 1, probability 0, space 0, times 0 [ 765.037384] CPU: 1 PID: 6980 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 765.038253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 765.039806] Call Trace: [ 765.040207] dump_stack+0x107/0x163 [ 765.040690] should_fail.cold+0x5/0xa [ 765.041216] ? create_object.isra.0+0x3a/0xa20 [ 765.041820] should_failslab+0x5/0x10 [ 765.042311] kmem_cache_alloc+0x5b/0x350 [ 765.042847] create_object.isra.0+0x3a/0xa20 [ 765.043428] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 765.044107] kmem_cache_alloc+0x159/0x350 [ 765.044676] __kernfs_new_node+0xd4/0x840 [ 765.045231] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 765.045862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 765.046517] ? wait_for_completion+0x270/0x270 [ 765.047136] ? kernfs_next_descendant_post+0x1a3/0x290 [ 765.047824] kernfs_new_node+0x93/0x120 [ 765.048371] __kernfs_create_file+0x51/0x350 [ 765.048977] sysfs_add_file_mode_ns+0x221/0x560 [ 765.049603] internal_create_group+0x324/0xb30 [ 765.050191] ? sysfs_remove_group+0x170/0x170 [ 765.050770] ? blk_queue_flag_set+0x22/0x30 [ 765.051338] ? __loop_update_dio+0x2d2/0x690 [ 765.051923] loop_configure+0x957/0x1480 [ 765.052480] lo_ioctl+0xa6e/0x1760 [ 765.052989] ? loop_set_status_old+0x250/0x250 [ 765.053618] ? avc_ss_reset+0x180/0x180 [ 765.054165] ? __lock_acquire+0xbc2/0x5b20 [ 765.054750] ? generic_block_fiemap+0x60/0x60 [ 765.055345] ? selinux_inode_getsecctx+0x90/0x90 [ 765.055955] ? find_held_lock+0x2c/0x110 [ 765.056490] ? loop_set_status_old+0x250/0x250 [ 765.057117] blkdev_ioctl+0x28d/0x700 [ 765.057623] ? blkdev_common_ioctl+0x1870/0x1870 [ 765.058246] ? __fget_files+0x251/0x410 [ 765.058784] block_ioctl+0xf9/0x140 [ 765.059276] ? blkdev_read_iter+0x1c0/0x1c0 [ 765.059864] __x64_sys_ioctl+0x196/0x210 [ 765.060413] do_syscall_64+0x33/0x40 [ 765.060934] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.061629] RIP: 0033:0x4663c7 [ 765.062058] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.064492] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.065498] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 765.066429] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 765.067343] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 765.068265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.069239] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 765.082809] ISOFS: Unable to identify CD-ROM format. 11:19:17 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:17 executing program 7 (fault-call:0 fault-nth:38): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 765.127501] audit: type=1326 audit(1629285557.587:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6976 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0 11:19:17 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:19:17 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:17 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:17 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5451, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 765.210301] FAULT_INJECTION: forcing a failure. [ 765.210301] name failslab, interval 1, probability 0, space 0, times 0 [ 765.211947] CPU: 1 PID: 7001 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 765.212948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 765.214629] Call Trace: [ 765.215024] dump_stack+0x107/0x163 [ 765.215597] should_fail.cold+0x5/0xa [ 765.216153] ? kobject_uevent_env+0x22b/0xf90 [ 765.216810] ? dev_uevent_filter+0xd0/0xd0 [ 765.217386] should_failslab+0x5/0x10 [ 765.217890] kmem_cache_alloc_trace+0x55/0x360 [ 765.218480] ? loop_configure+0xad5/0x1480 [ 765.219045] ? dev_uevent_filter+0xd0/0xd0 [ 765.219611] kobject_uevent_env+0x22b/0xf90 [ 765.220187] loop_configure+0x116b/0x1480 [ 765.220738] lo_ioctl+0xa6e/0x1760 [ 765.221234] ? loop_set_status_old+0x250/0x250 [ 765.221831] ? avc_ss_reset+0x180/0x180 [ 765.222363] ? __lock_acquire+0xbc2/0x5b20 [ 765.222953] ? generic_block_fiemap+0x60/0x60 [ 765.223552] ? selinux_inode_getsecctx+0x90/0x90 [ 765.224177] ? find_held_lock+0x2c/0x110 [ 765.224763] ? loop_set_status_old+0x250/0x250 [ 765.225391] blkdev_ioctl+0x28d/0x700 [ 765.225938] ? blkdev_common_ioctl+0x1870/0x1870 [ 765.226561] ? __fget_files+0x251/0x410 [ 765.227106] block_ioctl+0xf9/0x140 [ 765.227590] ? blkdev_read_iter+0x1c0/0x1c0 [ 765.228220] __x64_sys_ioctl+0x196/0x210 [ 765.228820] do_syscall_64+0x33/0x40 [ 765.229378] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 765.230132] RIP: 0033:0x4663c7 [ 765.230614] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.233364] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.234484] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 765.235542] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 765.236595] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 765.237695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 765.238767] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 765.340903] ISOFS: Unable to identify CD-ROM format. 11:19:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:31 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:31 executing program 2: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$cont(0x2f, r2, 0x4, 0x9) tkill(r1, 0x2a) 11:19:31 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5452, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:31 executing program 7 (fault-call:0 fault-nth:39): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:31 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) [ 778.963096] FAULT_INJECTION: forcing a failure. [ 778.963096] name failslab, interval 1, probability 0, space 0, times 0 11:19:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4b49, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 778.964698] CPU: 0 PID: 7035 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 778.965727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 778.967259] Call Trace: [ 778.967626] dump_stack+0x107/0x163 [ 778.968129] should_fail.cold+0x5/0xa [ 778.968656] ? create_object.isra.0+0x3a/0xa20 [ 778.969297] should_failslab+0x5/0x10 [ 778.969809] kmem_cache_alloc+0x5b/0x350 [ 778.970369] create_object.isra.0+0x3a/0xa20 [ 778.970955] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 778.971645] kmem_cache_alloc+0x159/0x350 [ 778.972220] __kernfs_new_node+0xd4/0x840 [ 778.972793] ? kernfs_dop_revalidate+0x3a0/0x3a0 [ 778.973493] ? __mutex_unlock_slowpath+0xe1/0x600 [ 778.974151] ? wait_for_completion+0x270/0x270 [ 778.974776] ? kernfs_next_descendant_post+0x1a3/0x290 [ 778.975493] kernfs_new_node+0x93/0x120 [ 778.976042] __kernfs_create_file+0x51/0x350 [ 778.976663] sysfs_add_file_mode_ns+0x221/0x560 [ 778.977353] internal_create_group+0x324/0xb30 [ 778.977981] ? sysfs_remove_group+0x170/0x170 [ 778.978597] ? blk_queue_flag_set+0x22/0x30 [ 778.979177] ? __loop_update_dio+0x2d2/0x690 [ 778.979779] loop_configure+0x957/0x1480 [ 778.980361] lo_ioctl+0xa6e/0x1760 [ 778.980847] ? loop_set_status_old+0x250/0x250 [ 778.981526] ? avc_ss_reset+0x180/0x180 [ 778.982082] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 778.982763] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 778.983498] ? generic_block_fiemap+0x60/0x60 [ 778.984094] ? selinux_inode_getsecctx+0x90/0x90 [ 778.984730] ? find_held_lock+0x2c/0x110 [ 778.985332] ? loop_set_status_old+0x250/0x250 [ 778.985938] blkdev_ioctl+0x28d/0x700 [ 778.986462] ? blkdev_common_ioctl+0x1870/0x1870 [ 778.987101] ? __fget_files+0x251/0x410 [ 778.987657] block_ioctl+0xf9/0x140 [ 778.988149] ? blkdev_read_iter+0x1c0/0x1c0 [ 778.988735] __x64_sys_ioctl+0x196/0x210 [ 778.989322] do_syscall_64+0x33/0x40 [ 778.989826] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 778.990522] RIP: 0033:0x4663c7 [ 778.990963] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.993444] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.995844] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 778.998061] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 779.000306] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 779.002580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 779.004783] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:19:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 779.035890] ISOFS: Unable to identify CD-ROM format. 11:19:31 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x2c0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:31 executing program 7 (fault-call:0 fault-nth:40): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:31 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:31 executing program 1 (fault-call:4 fault-nth:0): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:31 executing program 3: setresuid(0xee00, 0x0, 0x0) getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) setresuid(r1, r1, r0) r2 = fork() syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x9efa, 0x5, &(0x7f0000000500)=[{&(0x7f0000000280)="23906da41b67729083f262e53316ad023a29abb0fc0aaa32878d6c3f1188150ac1176f6f451754c12cdecc5c94497c42206b0334193befbd0183282199cf208ed1090f1488d9262015194364bad6378854309b598e1efb12fdf9e8d24c8ffcd5d8944293bcc980629d198afb628140ebe4", 0x71, 0x9}, {&(0x7f0000000300)="051e45ec7f7eeaf8fc4da9a538eaf44e3a6bbebad33afd023e21f3d88b218137e1897493925875b0895f11dd164a930ae4b2d5c61e4c43a89d2d03e3272c82085b8b1f623ceb4476642c0018522f095682a2054b957bc19944cd0676f3546ed0d0a5d89bd8b5efd4758c1cc40f9a467ea14a3732c49fea0ff104e50cce7dc278bd97db8efd4ac2ef3a69460a3cd78a1996b89fe6ab7531afc01a4af2ef287d95afb2535ff9f75f4ba87a72b05c006759387947c43489397835ea648d6acf918177b6b85e72470fee8348f48e71c2d27cf4281ecdba41", 0xd6, 0x7}, {&(0x7f0000000400)="14ca8206e017cc3e422958aea73669c8867b09ade68bfcf403c1ac87", 0x1c, 0x800}, {&(0x7f0000000440)="528db3df089c41c3f8a2d46edb1819c51840ad12fb8a45dce2136099739906bffacd520182fa0316aa46a88feb607aabcbbcaefe8530fdabe9f08f76803b5b3becb1a34f848c59414e903cda0393448050154c0ce59be1a3960142b6", 0x5c, 0x2}, {&(0x7f00000004c0)="8f15ddd8e9ea6cba2ac69c77c6b7", 0xe, 0x1}], 0x40, &(0x7f0000000580)={[{@fat=@usefree}, {@dots}, {@fat=@check_normal}, {@nodots}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}) tkill(r2, 0x0) [ 779.149865] FAULT_INJECTION: forcing a failure. [ 779.149865] name failslab, interval 1, probability 0, space 0, times 0 [ 779.152527] CPU: 0 PID: 7059 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 779.153577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 779.155262] Call Trace: [ 779.156033] dump_stack+0x107/0x163 [ 779.156589] should_fail.cold+0x5/0xa [ 779.157179] ? kobject_get_path+0xc0/0x1c0 [ 779.157795] should_failslab+0x5/0x10 [ 779.158342] __kmalloc+0x72/0x3e0 [ 779.158832] kobject_get_path+0xc0/0x1c0 [ 779.159431] kobject_uevent_env+0x251/0xf90 [ 779.160098] loop_configure+0x116b/0x1480 [ 779.160726] lo_ioctl+0xa6e/0x1760 [ 779.161303] ? loop_set_status_old+0x250/0x250 [ 779.162003] ? avc_ss_reset+0x180/0x180 [ 779.162603] ? __lock_acquire+0xbc2/0x5b20 [ 779.163274] ? generic_block_fiemap+0x60/0x60 [ 779.163946] ? selinux_inode_getsecctx+0x90/0x90 [ 779.164641] ? find_held_lock+0x2c/0x110 [ 779.165273] ? loop_set_status_old+0x250/0x250 [ 779.165946] blkdev_ioctl+0x28d/0x700 [ 779.166515] ? blkdev_common_ioctl+0x1870/0x1870 [ 779.167212] ? __fget_files+0x251/0x410 [ 779.167805] block_ioctl+0xf9/0x140 [ 779.168351] ? blkdev_read_iter+0x1c0/0x1c0 [ 779.168993] __x64_sys_ioctl+0x196/0x210 [ 779.169622] do_syscall_64+0x33/0x40 [ 779.170178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 779.170933] RIP: 0033:0x4663c7 [ 779.171403] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.174127] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.175254] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 779.176289] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 779.177446] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 779.178446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 779.179464] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:19:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5460, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:31 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x5452, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:31 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xec0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:31 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 779.229997] FAULT_INJECTION: forcing a failure. [ 779.229997] name failslab, interval 1, probability 0, space 0, times 0 [ 779.231645] CPU: 0 PID: 7066 Comm: syz-executor.1 Not tainted 5.10.56 #1 [ 779.232658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 779.234329] Call Trace: [ 779.234718] dump_stack+0x107/0x163 [ 779.235318] should_fail.cold+0x5/0xa [ 779.235916] ? getname_flags.part.0+0x50/0x4f0 [ 779.236515] should_failslab+0x5/0x10 [ 779.237004] kmem_cache_alloc+0x5b/0x350 [ 779.237608] getname_flags.part.0+0x50/0x4f0 [ 779.238283] getname_flags+0x9a/0xe0 [ 779.238860] __x64_sys_execveat+0xd6/0x130 [ 779.239469] do_syscall_64+0x33/0x40 [ 779.240002] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 779.240739] RIP: 0033:0x466609 [ 779.241263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.243897] RSP: 002b:00007fde1ee72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 779.244977] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 779.245997] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 779.247030] RBP: 00007fde1ee721d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.248056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.249094] R13: 00007fff5d8c08cf R14: 00007fde1ee72300 R15: 0000000000022000 [ 779.421803] ISOFS: Unable to identify CD-ROM format. 11:19:44 executing program 7 (fault-call:0 fault-nth:41): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:44 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:44 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x1) 11:19:44 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40049409, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:44 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x6609, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @enc_lim={0x4, 0x1, 0x20}]}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000ec0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x40000d0) 11:19:44 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x33fe0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:44 executing program 1 (fault-call:4 fault-nth:1): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:44 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 792.472067] FAULT_INJECTION: forcing a failure. [ 792.472067] name failslab, interval 1, probability 0, space 0, times 0 [ 792.473652] CPU: 1 PID: 7109 Comm: syz-executor.1 Not tainted 5.10.56 #1 [ 792.474518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 792.476142] Call Trace: [ 792.476534] dump_stack+0x107/0x163 [ 792.477072] should_fail.cold+0x5/0xa [ 792.477661] ? create_object.isra.0+0x3a/0xa20 [ 792.478337] should_failslab+0x5/0x10 [ 792.478894] kmem_cache_alloc+0x5b/0x350 [ 792.479499] create_object.isra.0+0x3a/0xa20 [ 792.480153] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 792.480909] kmem_cache_alloc+0x159/0x350 [ 792.481531] getname_flags.part.0+0x50/0x4f0 [ 792.482115] getname_flags+0x9a/0xe0 [ 792.482674] __x64_sys_execveat+0xd6/0x130 [ 792.483300] do_syscall_64+0x33/0x40 [ 792.483847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.484595] RIP: 0033:0x466609 [ 792.485076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.487817] RSP: 002b:00007fde1ee72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 792.488950] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 792.489998] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 792.491055] RBP: 00007fde1ee721d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.491998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.492927] R13: 00007fff5d8c08cf R14: 00007fde1ee72300 R15: 0000000000022000 [ 792.505727] FAULT_INJECTION: forcing a failure. [ 792.505727] name failslab, interval 1, probability 0, space 0, times 0 [ 792.507291] CPU: 0 PID: 7111 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 792.508188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 792.509827] Call Trace: [ 792.510219] dump_stack+0x107/0x163 [ 792.510755] should_fail.cold+0x5/0xa [ 792.511309] ? create_object.isra.0+0x3a/0xa20 [ 792.511971] should_failslab+0x5/0x10 [ 792.512505] kmem_cache_alloc+0x5b/0x350 [ 792.513091] ? kmem_cache_alloc_trace+0x151/0x360 [ 792.513772] create_object.isra.0+0x3a/0xa20 [ 792.514396] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 792.515130] __kmalloc+0x16e/0x3e0 [ 792.515663] kobject_get_path+0xc0/0x1c0 [ 792.516257] kobject_uevent_env+0x251/0xf90 [ 792.516913] loop_configure+0x116b/0x1480 [ 792.517558] lo_ioctl+0xa6e/0x1760 [ 792.518213] ? loop_set_status_old+0x250/0x250 [ 792.518937] ? avc_ss_reset+0x180/0x180 [ 792.519525] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 792.520228] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 792.520990] ? generic_block_fiemap+0x60/0x60 [ 792.521646] ? selinux_inode_getsecctx+0x90/0x90 [ 792.522317] ? find_held_lock+0x2c/0x110 [ 792.522857] ? loop_set_status_old+0x250/0x250 [ 792.523510] blkdev_ioctl+0x28d/0x700 [ 792.524068] ? blkdev_common_ioctl+0x1870/0x1870 [ 792.524747] ? __fget_files+0x251/0x410 [ 792.525383] block_ioctl+0xf9/0x140 [ 792.525923] ? blkdev_read_iter+0x1c0/0x1c0 [ 792.526562] __x64_sys_ioctl+0x196/0x210 [ 792.527162] do_syscall_64+0x33/0x40 [ 792.527655] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.528292] RIP: 0033:0x4663c7 [ 792.528754] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.531212] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.532317] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 792.533366] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 792.534382] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 792.535283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 792.536246] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:19:45 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:45 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="896f8688fc32aa557fdb1ffee9adf2c893b4ade2eb0c26edf450fe851130809de3a9cbf24594d0d1dfe29b7f0ba0ea7e9f40640e1db233d6459d00e08ea54d7469c64ae2ec4563825a5832", 0x4b, 0x7}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="3a5c7b2f21275b3a7d5b7b6b235b2b7b272a5c2d2c2c282e242b2c26282b2b2c2c5e212a240c3a2b2f2c2c255e5d2a2340282c2d0e2a2c7b5d3a5b23422d5e2d252c2b2f5d2c646f682c00b535ce3917ea1e730a2536a31e86ebd93fcc734e21388d295e235500c8c8bf414138eedef40ab433dbccf17cdede5a27bd83436d298426ea76e5e2f8bc2c2c2ee61ea571fbd26ad5b0412004bb0ea1f2201479c579ce0d7fb60ac069ca1563f7cde2377e610738bee0ac4fcfe55f721b0d585ba9990c4e4fcf33da7ba773ea2f3a807c2cbcfeb7104b51cacecaca1be290c14abecb9ea9685fd00b9ff0f403566a06946aa8000000000000"]) setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) 11:19:45 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x20000438, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:45 executing program 2: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x1a}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) dup2(r0, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE, 0x7) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 11:19:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40086602, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 792.699844] ISOFS: Unable to identify CD-ROM format. 11:19:45 executing program 7 (fault-call:0 fault-nth:42): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2) 11:19:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000021c0)={0x4000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xf}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/4096, &(0x7f0000002180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9}, 0x58) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000002240)='net/rfcomm\x00') fchmod(r1, 0x0) 11:19:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:45 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x7ffff000, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:45 executing program 3: read(0xffffffffffffffff, &(0x7f0000000280)=""/122, 0x7a) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="0900000000000000000000e100000000"], 0x10}}], 0x2, 0x0) setresuid(0xee00, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x2f, 0x81, 0x3, 0x6, 0x60, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x6, 0x24}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = getuid() setresuid(0x0, 0x0, r2) r3 = fork() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fork() setresuid(r2, r4, r5) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) tkill(r3, 0x0) [ 792.862785] FAULT_INJECTION: forcing a failure. [ 792.862785] name failslab, interval 1, probability 0, space 0, times 0 [ 792.864571] CPU: 0 PID: 7166 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 792.865500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 792.867041] Call Trace: [ 792.867417] dump_stack+0x107/0x163 [ 792.868051] should_fail.cold+0x5/0xa [ 792.868587] should_failslab+0x5/0x10 [ 792.869100] __kmalloc_node_track_caller+0x74/0x3f0 [ 792.869846] ? alloc_uevent_skb+0x7b/0x210 [ 792.870414] __alloc_skb+0xb1/0x620 [ 792.870923] alloc_uevent_skb+0x7b/0x210 [ 792.871455] kobject_uevent_env+0x996/0xf90 [ 792.872027] loop_configure+0x116b/0x1480 [ 792.872582] lo_ioctl+0xa6e/0x1760 [ 792.873060] ? loop_set_status_old+0x250/0x250 [ 792.873680] ? avc_ss_reset+0x180/0x180 [ 792.874213] ? __lock_acquire+0xbc2/0x5b20 [ 792.874803] ? generic_block_fiemap+0x60/0x60 [ 792.875398] ? selinux_inode_getsecctx+0x90/0x90 [ 792.876028] ? find_held_lock+0x2c/0x110 [ 792.876578] ? loop_set_status_old+0x250/0x250 [ 792.877208] blkdev_ioctl+0x28d/0x700 [ 792.877784] ? blkdev_common_ioctl+0x1870/0x1870 [ 792.878441] ? __fget_files+0x251/0x410 [ 792.878991] block_ioctl+0xf9/0x140 [ 792.879472] ? blkdev_read_iter+0x1c0/0x1c0 [ 792.880028] __x64_sys_ioctl+0x196/0x210 [ 792.880570] do_syscall_64+0x33/0x40 [ 792.881058] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 792.881734] RIP: 0033:0x4663c7 [ 792.882160] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.884508] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.885442] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 792.886291] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 792.887163] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 792.888079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 792.889016] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 792.992543] ISOFS: Unable to identify CD-ROM format. 11:19:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:59 executing program 7 (fault-call:0 fault-nth:43): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:19:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x3) 11:19:59 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xfffffdef, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:59 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r0, r0, r1) r2 = fork() tkill(r2, 0x0) 11:19:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40087602, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 806.569291] FAULT_INJECTION: forcing a failure. [ 806.569291] name failslab, interval 1, probability 0, space 0, times 0 [ 806.570892] CPU: 1 PID: 7185 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 806.571811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 806.573284] Call Trace: [ 806.573661] dump_stack+0x107/0x163 [ 806.574152] should_fail.cold+0x5/0xa [ 806.574704] ? create_object.isra.0+0x3a/0xa20 [ 806.575313] should_failslab+0x5/0x10 [ 806.575819] kmem_cache_alloc+0x5b/0x350 [ 806.576379] create_object.isra.0+0x3a/0xa20 [ 806.576975] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 806.577673] kmem_cache_alloc_node+0x169/0x370 [ 806.578317] __alloc_skb+0x6d/0x620 [ 806.578816] alloc_uevent_skb+0x7b/0x210 [ 806.579368] kobject_uevent_env+0x996/0xf90 [ 806.579963] loop_configure+0x116b/0x1480 [ 806.580535] lo_ioctl+0xa6e/0x1760 [ 806.581024] ? loop_set_status_old+0x250/0x250 [ 806.581684] ? avc_ss_reset+0x180/0x180 [ 806.582258] ? __lock_acquire+0xbc2/0x5b20 [ 806.582871] ? generic_block_fiemap+0x60/0x60 [ 806.583478] ? selinux_inode_getsecctx+0x90/0x90 [ 806.584112] ? find_held_lock+0x2c/0x110 [ 806.584676] ? loop_set_status_old+0x250/0x250 [ 806.585288] blkdev_ioctl+0x28d/0x700 [ 806.585818] ? blkdev_common_ioctl+0x1870/0x1870 [ 806.586450] ? __fget_files+0x251/0x410 [ 806.586991] block_ioctl+0xf9/0x140 [ 806.587480] ? blkdev_read_iter+0x1c0/0x1c0 [ 806.588061] __x64_sys_ioctl+0x196/0x210 [ 806.588611] do_syscall_64+0x33/0x40 [ 806.589121] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 806.589835] RIP: 0033:0x4663c7 [ 806.590270] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.592734] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.593793] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 806.594750] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 806.595699] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 806.596657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 806.597609] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:19:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4) 11:19:59 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x3) 11:19:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:19:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x4020940d, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:19:59 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0xf, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:19:59 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000600)="593f32fdc77c9ca31f24c26b72c34f00043f92bdfb7bfc0a3bd485347bbe50b412432dc86a1f57ccd3798f7f14c6e0463e1b83b99f35206052abba64301855692e79bb3cc88d2e7726262bd5127934f0b5247aa923ba6b7b665633e34b4a1ff2eed48cd3b6e5817abe52087c0a882a1cf466f6496a81bdcafe902d927e52a5446c477c21d05997efaf3ad254f52c9cc4818a5d9f00339e568b51e59e9566563e2f703ab58cecad09aed2058a548b9835379d19219210b904714a9b", 0xbb}, {&(0x7f00000006c0)="c2f36e8adaefe678aa0b446770d4decbdedc2c479ad67199f42a2dc3a8ee0e71584f2a828beadafbadb170a062eea5d7a82670f25c843fa8de380d69dddc72ff76b0b642fbc23da2c24a7605cc35f2a779793b2a12d1cc3d3af5434d17c233e5d929d554bc18b69c76706290ef0fb11169923865397b40b9632cb780327a1fa12658cb87658b301293a96a6cc3a62b852d4b2c1a6922de7dda9cb3ae9ab98be65a5a7bcbcc2f033fed44c3eb22f27e237b75adf6031f1499484e00ed440f735946e2e71c04d6f084966b16213f2c503bb9a3f5c48dd37391cfa105a87a064c65ad725eecab4cfb61fbd9a19c8cbe5dbcb87c538b71172b15", 0xf8}, {&(0x7f00000007c0)="2049ba8e470aefa7ac20ffe08ae383299fc5fcfa07925f1f3a81f493476d40835a262669754f4687fa080f3dd122f52a78707957d5680cac17508469d7d86b8649468f6a3a48ed64de5eb5de4bee63192d25a8b06e278dd721652a77e3825fac35e51ba655404c49c0ad5062be0691856aacac503c2c426a43dc4c0cf5451461ec60407d759e", 0x86}, {&(0x7f0000000880)="00e3dc313fddb13db1c31f67e32844118fa4fe4ed6a1a0c0838335d940868a5f17309e7b20fac175190d7cdae75e990e89c8aa00492918481f9eb1ced78eb8dbbe6e3f6b651bc78f6c58d554a085fd6ad6a40c10e4e817d1856f44a5a5e71cb0005561a108f5c8317e8d8080566296d896cf0766dd612fd47fd7097dafa751e05f27fcad8f83b98e9d5442b863fe559df68b809d55e2145631434f9f4b", 0x9d}, {&(0x7f0000000940)="5c524d2b371d7b56ae1c52053ad1d0e49a0942dc28ae460f1705dfad13987ce7cddd7017e0873e8bd49a1b0370808a7efff0c5974f60aeb478dda072619517b1114ca222efc6c61c0ac3e785316d93e4971fe957e934542e59ba1ea98c57c4f62eb748baa7b5b5c4da0517269c0fe784213f8cbb694c478f1923c296179a6a3fd4cd46c1984da66df6762aae537cb09d30e36dd9706348d8384df256", 0x9c}, {&(0x7f0000000a00)="562740642170acb90857d1b01b6010f4f256ff27a2981d9cfa0a8cfafbac6b0c62f507b7a0ba4e55da78b0f571f0d10285d2dfd33b3ebca462eb0974dadbd12e63079a0ff5aba04d52c7fdfb85f25d9d55ff73c045fb8f71fe9d10ae899b4b1a5a74e60f17096b035383827f084340c33370cfe31ccc3dc5f55cfa82007898bd7c30956b3db6c94ad3ce75c298296724edfef8f2367f66a7884562e225f2172dab7ddf7ba81b790073b172e432d181d099a6a4", 0xb3}, {&(0x7f0000000ac0)="7221ed42733937cbb9679cf4d5f00c4d13acc5a7b09086b5386e147a988e20262dfffb534540601300ed4639ff8a7b1f827a6c37ca92e923eebbd0694cb1c92044838c899dcb6bfb9d3c5eee93a2746bf6cef48588891f986e0090a33335aa35d299", 0x62}, {&(0x7f0000000b40)="464f1088adf4d53330677f4a5a4dbd29f3dd24f17c9c07f4558d415b0fd85dad8936f87b311ab6715bf436ff31be7067e45b3975e0b72cb29a591ec3e96cf178cbd313ab385cc33fdf2661c31fdd5673644e0e98b5f1fe80f7f4ff203d88c2c82724f060f1c389d171ec12946e4483dd7bd8620e70534b38fb489fe59ec9abd8f2723f7b488315faa582ba39f545dc881b462348b52437fe7dd08a2fd031b600112f32781e2cebf3d0cb2dddc9cf0a957973089c9d01a536b118ba9323c4ca875da31f321f3bf1ebb06ea864b8d3966f49b0e09e7f", 0xd5}], 0x8}, 0x0) setresuid(0x0, 0x0, r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x16, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in=@empty}}, {{@in=@initdev}}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) socketpair(0x25, 0x0, 0x1, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x24, 0x4, 0x4, 0x25dfdbfe, {0x3}, [@nested={0x14, 0x3d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @uid=r4}, @typed={0x6, 0x68, 0x0, 0x0, @str='&\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4404c080}, 0x4080) r5 = fork() tkill(r5, 0x0) 11:19:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505330, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 806.790887] ISOFS: Unable to identify CD-ROM format. 11:19:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 806.820297] selinux_netlink_send: 16 callbacks suppressed [ 806.820308] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7229 comm=syz-executor.4 11:19:59 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 806.841565] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7236 comm=syz-executor.4 11:20:12 executing program 7 (fault-call:0 fault-nth:44): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:20:12 executing program 3: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) setresuid(0xee00, 0x0, 0x0) r0 = getuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x6609, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@cache_loose}, {@noextend}, {@loose}, {@cache_none}, {@version_L}], [{@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffb5}}]}}) 11:20:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40087602, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:20:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40505331, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x5) 11:20:12 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x10, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xac000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 820.218292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 820.224558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 820.232833] FAULT_INJECTION: forcing a failure. [ 820.232833] name failslab, interval 1, probability 0, space 0, times 0 [ 820.234450] CPU: 1 PID: 7267 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 820.235346] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 820.236846] Call Trace: 11:20:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xb8000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 820.237213] dump_stack+0x107/0x163 [ 820.238435] should_fail.cold+0x5/0xa [ 820.239416] ? __alloc_skb+0x6d/0x620 [ 820.240350] should_failslab+0x5/0x10 [ 820.241273] kmem_cache_alloc_node+0x55/0x370 [ 820.242527] __alloc_skb+0x6d/0x620 [ 820.243624] alloc_uevent_skb+0x7b/0x210 [ 820.244839] kobject_uevent_env+0x996/0xf90 [ 820.246146] loop_configure+0x116b/0x1480 [ 820.247373] lo_ioctl+0xa6e/0x1760 [ 820.248440] ? loop_set_status_old+0x250/0x250 [ 820.249819] ? avc_ss_reset+0x180/0x180 [ 820.250938] ? __lock_acquire+0xbc2/0x5b20 [ 820.251959] ? generic_block_fiemap+0x60/0x60 [ 820.253085] ? selinux_inode_getsecctx+0x90/0x90 [ 820.254295] ? find_held_lock+0x2c/0x110 [ 820.255259] ? loop_set_status_old+0x250/0x250 [ 820.256306] blkdev_ioctl+0x28d/0x700 [ 820.257181] ? blkdev_common_ioctl+0x1870/0x1870 [ 820.258508] ? __fget_files+0x251/0x410 [ 820.259423] block_ioctl+0xf9/0x140 [ 820.260269] ? blkdev_read_iter+0x1c0/0x1c0 [ 820.261310] __x64_sys_ioctl+0x196/0x210 [ 820.262495] do_syscall_64+0x33/0x40 [ 820.263424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 820.264668] RIP: 0033:0x4663c7 [ 820.265457] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 820.268091] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.269097] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 820.271239] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 820.273359] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 820.275491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 820.277200] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:20:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:12 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x11, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:12 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x10, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 820.349812] ISOFS: Unable to identify CD-ROM format. 11:20:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 820.375743] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.4'. [ 820.376597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 820.402942] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:26 executing program 7 (fault-call:0 fault-nth:45): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:20:26 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:26 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x12, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40a85321, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6) 11:20:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:20:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:26 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=@allocspi={0x114, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e23, @in=@multicast1}}]}, 0x114}}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002000), 0x280000, 0x0) move_pages(0x0, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) statx(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x2100, 0x8, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x409c4da92029473d) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = open$dir(&(0x7f0000002240)='./file0\x00', 0x80440, 0xb) r9 = fork() move_pages(r9, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002880)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)="a96f8e54b1b70c75ad4597697049ef2dfebab874b7e9cbf8398a06a2bca186d337f9e93d5224d56a6b4fb9177a241f03cef0e165fb90751070a807753a9d57a76465a7ec994174707e68b458ef05b1a4d285da6d5eb9b97aa39fb1fe73a38fa8ee50cd1b27b5d2f8ab9dfed669d9f977e87a3c4b35b511ac1c63e0342f4895b83ce2f2dd86518e22eedaf2adf510cec10641ce2e5afdbcba01fcafd93611a85659bd6d85475fc73d6579", 0xaa}, {&(0x7f0000000140)="0bf4a1eeeb9bdae08908dbd6b6ad70a25ee65b9981b5cd3f08319291d0ce373a4f1eaf144482e3de0d955fee54ab9514ff15055538bae40862dd46f1a676f71a381b40daf0b2c57488406a2c0e8f23c806a5bd576cce5741", 0x58}, {&(0x7f00000001c0)="da1798dce958ad957aa7a2b59680d28a61194382", 0x14}, {&(0x7f0000000200)="79ff52b33f61d8defcafb030e78b8d626dcb9fac683126891a1d282292858e13e2b086d4746aa18cd45781", 0x2b}, {&(0x7f0000000240)="bf22d78a77d52c2f9dc5df5fece99d46271e6d9ad6584710fa76cbac2ef4912259e177c3e39db865a4fb9c5e9152c020b5b648aa409519f2b50cfe007cebf97a2074dfa7ed7ad429ca0828cb1fd643e00c425ccfd6e391a2757825e3c46148d8f0fe12be893f1d58808a91fb17af4b5b611b42991304033ef4a22fd6a4aaccf43e72c847b4a326a34d72bc11da5d8bccf87c806bd33d3cd18078843648ff6484549efe0738b03d6b099662a8f322d161c9f83f144456c181a26aa2dcff03218fa648ed3eb43f361b9367e65cd035f2ae586f5c73f4ca1f0a48e976c8c321ce7b3b25b238c2", 0xe5}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r0}}}], 0x20, 0x8004}, {&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000480)="fd7c98807a3a59c1be97f0e18f31fe24cf5d4c0e808a775c9ce2a219f2c4be55e85ae69382968065a1877a9d8b92e240debcc5c21c9633d314dc7ece2ac93df2a39fa64d5ea5a91e0cee7c11e9421f6f40d4a140e77cf18e25886183cdc1a3f9e91b3063fb86471686acc144279b6f62", 0x70}, {&(0x7f0000000500)="e087833ca3942eef70443fffb5a2d5a5e6607ae9c05c40a01fba48a11ea0ac068987b951bfd83fae1ccaa9872167c466ed6c8cfbcf219580dd19489608f394871afc49e94208ad", 0x47}, {&(0x7f0000000580)="2ce5b19c9a791d53dc47abc4b6315d86949fd1b12ba12b2187", 0x19}, {&(0x7f00000005c0)="a4946be6eb79fe559918e1ebfea2ecf08505a13c68cd8e168a6d1ee4d7338364b21e528bba33c7b0655f5a23c81fd318aed0e2072989c1047ffea8572d737c89bced3bf2520a70305b6ff5013a24a54bd35be1918cb228c96842e023fcfdba2242d5bf9deb4e7b4ecd45c4ba07184ffad93bd8093d227ec4b25648025a86b39a5c2e3b77530637552aa9ed5d5848b1682a0a0a417095254368588acfd2100fc298b265bf40e39d16fbabe457d5b9919f82dd0d874b7dbc9208cacac0a66ff76030a4e1cd7e7782428b4e6d75cf913b6a17", 0xd1}, {&(0x7f00000006c0)="555ffb6178ac7443861d8ec79ff9acde3a2988649b09292bc668b3273ed52f962221c831c00d2777a5e9df4db1afd51f27ee39c8cf670a9e0f8433b7bb5c5f0cf1b269dd5dddf06eed83e0bc4f19f1c256897fbd44a8a8719b11a8f46acb18840c674d1f05c092d058ef39e2c6d3dccbf37b43bfb573c487ade9adae8f1a7efaf9a129f947945b7436be50122907921778183bc3b43b1aa15aca9eba28f7fb1f41a879b9a5233ff33090ae7b95832285fdae1ffa5c32d1835c1c444b8b3ebe6c7677d695a2392978d4b5e5930b44fcce00c57d7f2afbda215037b1963d363ef8a281c159dcbdc77a8aa9ce6d1d5007d7c53e215b38", 0xf5}, {&(0x7f00000007c0)="69c57be6dd418d24edeeb856e4cb35e9675db7c4cc9bb2a4984e481691dba8fa8a9ca43a88e420484e9ceae1ab7b91ac6769fce217ae1a6f96d8c49dd6a76ea160654520edd1691ec1468ee6cf58efc3efcf5d7366d727099412192d434b497d69bda5763d2c3239595e7c14445fa5f1", 0x70}, {&(0x7f0000000840)="559723e4456abd04e89822146f1804b4ef132459716bc52c6f", 0x19}, {&(0x7f0000000880)="4b7df8bb5142fb006a74f7f7c212297f591723afd517ca44fae4072ec630d31ff2d4de2e50d87a83b5530959de180047071203a95c4c778a4b0fbfb29ff9058afff6d9a60138c6301177e7a83104983b639c7a01b8eeecd58981298fe6c20b1fd61e0a5af46cfdd429461dd08f9fa078ce93daa4a7a9f65945fa4302d3b2805983f61d60d81518b8e12b2443e3ffd2288e3218c6e2", 0x95}], 0x8, 0x0, 0x0, 0x800}, {&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a40)="8d8fd36665f8097ebf253666ec526acc68a167151158c676c4cf9fe79543881a343ccebe552b3974584acd7d688f7491d9b78ecf9bf784456fe90b6c63e1c3181d6d8a6b590e06582bc7ba076632eec4f6c09aba58f851669fe944815fa48efcd76b7ea5d0b0af76ada107f21cded4559f03976dddf7dfffee098d9b8464c4736ed844bb047dd2991bf1ff8f1da0285f9fabd0a0f74be56f2f29427ec7527e6713bd8c38e9a387351bb7c12ab3a0e0efc65f0d7122ec8c2ac080044da1bdec4321dcac7aa0bcc482eb681c15d2c0d775b3de94a85f4156392bcb7b57f31a3e5e068304b5a03b", 0xe6}, {&(0x7f0000000b40)="d4852f5801b9e61d294afd4418acd126cba5dde8b83d", 0x16}, {&(0x7f0000000b80)="3dfab1bc309c732ae646e3ed468fa454095d0f346627cec7fcfba40dada2239011d1da8c3fa3b752f38dd54e9a6ce56926351c0def05100bef65cbb0a6066c81b1196c3f320d299032", 0x49}, {&(0x7f0000000c00)="c36e93af19f2d556f01d06463650df2ad0c46b6462fa1f9e183f38080705c7ee8b5d55c62f6e742d24164ed5ab9c05360b18a0e980012a826e1c2c2142e6fa017808d213ca9f991dd269bd00376a", 0x4e}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8, 0x4880}, {&(0x7f0000000dc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e40)='Mot', 0x3}, {&(0x7f0000000e80)="a75bae80e5bc99743cf898257efd66e4b27a7965b0def264173f63e55e8b554777cafd723413de8879d590e55aff20981f0ca05880624cea27720d05700ae1302b3cf494572a12fc721e50e52e58e92a2129a323bf694ea6f51f537e6a639f3798fc8248", 0x64}, {&(0x7f0000000f00)="c0f3485d02f2d8dea62acc136634f7ed3ccdf02b845368b0a2ede87fc5398e0bd9d2b87fa91aaa38f8d0e39f6a556b6fe7c3d7d10c621a7d3c60e044e7e000d85b880e2957cbad58e8f39e906af68623ab7b29fee961c8739d88989bfed3acad9af56cbd6257245e152a51551607b7f8d11b4f7187ce45b6277efdf95ed6cc7fad1923c929befdc291d805fb375e01cbf18e3744bb50c72d006319fd6297541e0a61612a34df9ff303e4781e60472c632d3779226e12d21bdbbab4e0b79f6099449084ef598b0361618f518de865781a1f2347a7fff5e64d19cbd3eb4f3330", 0xdf}, {&(0x7f0000001000)="753dc2a8e6dc3bc9816d5bf8f62655ff49d28099788521db0c8ebff623f5000ddf0ba29607249892361e12404eb23e651504c40419c6c774d96c76d6dec296e8334eb93df8c47c0026b0c0bfd955036f54653edb818d027d76a77081fe22e4a87f952b7a00459927771d7bc783a9d959413fb390bf6536fe57c850dba8a4bf6423b2e2ba096e9c533b19611fefa8363e6f043dcac0ee10654783d6db5702e893cdb6cb6b13cd697bab024478e1b9e8f23a6488b7984f3896b0bfd98cbc1054730f2dacc6b69ff5a67c7682ea8fdbd94fc0b67077ced9a63e84da90f3f012bfbd", 0xe0}, {&(0x7f0000001100)="d42b33c15c66e0707b2295f8a7596ab52d263002b759231c", 0x18}], 0x5, 0x0, 0x0, 0x20008080}, {&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001240)="4a839777025317926b634e986e507dff5d379c55713e9de9880c3f71c46a2deb4e9c638fa952251fd62c14f6fb5fc325b1e6d41431edd822c8ea09f639bec31f29f0b9f4ba07ebd1d5c822bf399497c4acae2c209967da", 0x57}, {&(0x7f00000012c0)="03fcfe008f1937de95a9bf6f79a7449d22b643318c6f668f", 0x18}, {&(0x7f0000001300)="fc47c8e571b090a8054b6bab5b85d20153ef2ac87beebd181ee702b9bef404b2d9414b3ec6bf65da19e5e9502e4abf93e244503d41f71c912f360f8143d7261ab560af678c7e71f98e743954278e427b4a2f9829d1450d220d95d5e404f7949be147ebc22e0e2f5ab45d8b52b1be56c4b73dfbd0ae1c718329b2efb80907b290811d061010d153f3c2fae67a4734b755d8e46cdb618ddb62c450e95b2ffcb5d749807bbfa2dc7107812299db18ec7c0c109f362e19902fca506e8e4ddded", 0xbe}, {&(0x7f00000013c0)="ca3f3efa74bbf5f045113e7db9bf64", 0xf}, {&(0x7f0000001400)="cfa86046b9e1a49f5af2722750b3fe1127d511f43fd20c1de687babbe0908bcfd0b2f70f9e9407b4b2c915b4bc00bd2ce6a9b2277b484a5236da686e8894da095ecda5fe49e5fe0fe7ac813692c02c452e38cf54fcf3a0740537349b7534d76430e746559155192b8277a5683a5a66ee2a978236cf22ef9b45809a9f", 0x7c}, {&(0x7f0000001480)="046fccb03054b498e2d6a763a7a39b39d7ce6840494aecce83e5494b7b6a76394ad355fbc4fac5c82af5cd5dc19b3c98f7e4c3e980f93ac202274eb9c68b1d3d2e5b8420feffba789adb21c3ab3a4068c0462b21444bd9932a8f99b3d6", 0x5d}, {&(0x7f0000001500)="933a7c75c28adcac555a377ecded8833342fd573fbe5f8779f910437110db32f4cd94d33e6eeaf6a282cf870fa4fb2361da880d645f8af39ef23", 0x3a}], 0x7, &(0x7f0000001c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, 0xee00}}}], 0x148, 0x801}, {&(0x7f0000001dc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e40), 0x0, &(0x7f0000002280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r8]}}], 0xf0}, {&(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002400)="cfaef44cdb6e7847f8816bb2674f922accde2659c9e8095051947d59907afcc0586cc8869c5e38564afc01f4a46174fbb1e69b696d3ec991efc26decdb6830ee39d5", 0x42}, {&(0x7f0000002480)="04fb7c1f1e030147e666461418e8b399cbf681304b130755bf73511349ef63a09ddeb59fab46cdd2023f4f77655ba0270dfbfe0e6f4608772e50b33231cf43e0fbd3818c05167497bdf49327664e1bead65b651f56134c68af5769a3034fae3d5b4f4d39313a94dcc2e7def02d50ddf86970d600f42d1f92622a52992609c8036af05db3fcc3050ff27809fc59c94811ebc41879b2f977baf35fd64b9e43db4d35a126fab884ce21b11e63aa3537bd468353b49319a30e7b4db56e275f9772593376ed28d58bd8e204082bc4b0c507c082faff7f0694105aa78feba6f86b", 0xde}, {&(0x7f0000002580)="e399f2e5ff2da296f432a830abbc78838c5fda0bd2ebdb31e9f5250842303e487f47b83f3e8c6d6ef70cd1dcf443535e465596adeb64ee491fc0737ab52ab62c1b2b8661387e8fb1d2c5d28e4207dd2d238277b7f16679", 0x57}, {&(0x7f0000002600)="2c34d31fde48edad6393e8fc17e9d4a0ff9714f747fc53ced53ed5a2010fbd4594f92725ebf2662736f53a921a49aa7a5c599351ea8d7ebe6a2f58d68753866499e0ea8d1bfb298ad94a78877ffa32840e823b0d57eb45a9f227482607827bf9cd660d5631410f8adefd4d2fc9ac79e259fceb701740ef2af03c22ae93eb2ad67fcc401e23f6903f719ceafc5166ffdb8de2f7df7e518f", 0x97}, {&(0x7f00000026c0)="866f84945a732b4733a8873a5518eb86423e3ec27b7aecabb37b01c739042214dccc54f40c177b932d8bd7a4c45956cd1b80d653c26c21638e66729a5230f06ee5dde7c8b1c7bbc529d0b2cca53ed6015f53b38073eb9e99d37e12bf7d6cc003bac8f98b712a319b15de6616836e7f79ab95c7ee92e47dc79d415ea8dadd6fd17fc36548d80e7687d6f3fc427873ecd9401c896856d15d7dadc1f1e27396724afc8f518e9abec44bbc34eec8421e6ab1fd2bd8c6a2fecaf580119a16f938f92052f0b6cfae64b5dec51c082a6cd1af099be0e3", 0xd3}], 0x5, &(0x7f0000002840)=[@cred={{0x1c, 0x1, 0x2, {r9, r0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}], 0x7, 0x4040000) tkill(r1, 0x0) [ 833.811479] FAULT_INJECTION: forcing a failure. [ 833.811479] name failslab, interval 1, probability 0, space 0, times 0 [ 833.813050] CPU: 0 PID: 7317 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 833.813942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 833.815607] Call Trace: [ 833.815993] dump_stack+0x107/0x163 [ 833.816542] should_fail.cold+0x5/0xa [ 833.817111] ? create_object.isra.0+0x3a/0xa20 [ 833.817788] should_failslab+0x5/0x10 [ 833.818420] kmem_cache_alloc+0x5b/0x350 [ 833.819029] create_object.isra.0+0x3a/0xa20 [ 833.819678] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 833.820423] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 833.821179] ? alloc_uevent_skb+0x7b/0x210 [ 833.821819] __alloc_skb+0xb1/0x620 [ 833.822387] alloc_uevent_skb+0x7b/0x210 [ 833.823001] kobject_uevent_env+0x996/0xf90 [ 833.823656] loop_configure+0x116b/0x1480 [ 833.824288] lo_ioctl+0xa6e/0x1760 [ 833.824832] ? loop_set_status_old+0x250/0x250 [ 833.825530] ? avc_ss_reset+0x180/0x180 [ 833.826166] ? __lock_acquire+0xbc2/0x5b20 [ 833.826837] ? generic_block_fiemap+0x60/0x60 [ 833.827511] ? selinux_inode_getsecctx+0x90/0x90 [ 833.828211] ? find_held_lock+0x2c/0x110 [ 833.828824] ? loop_set_status_old+0x250/0x250 [ 833.829510] blkdev_ioctl+0x28d/0x700 [ 833.830228] ? blkdev_common_ioctl+0x1870/0x1870 [ 833.830990] ? __fget_files+0x251/0x410 [ 833.831610] block_ioctl+0xf9/0x140 [ 833.832188] ? blkdev_read_iter+0x1c0/0x1c0 [ 833.832843] __x64_sys_ioctl+0x196/0x210 [ 833.833471] do_syscall_64+0x33/0x40 [ 833.834074] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 833.834841] RIP: 0033:0x4663c7 [ 833.835345] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.838158] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.839318] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 833.840382] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 833.841434] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 833.842859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 833.844183] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 833.860520] ISOFS: Unable to identify CD-ROM format. [ 833.869109] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 833.898624] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. 11:20:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:20:26 executing program 7 (fault-call:0 fault-nth:46): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:20:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:26 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x13, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 833.983925] FAULT_INJECTION: forcing a failure. [ 833.983925] name failslab, interval 1, probability 0, space 0, times 0 [ 833.987181] CPU: 0 PID: 7338 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 833.989245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 833.992557] Call Trace: [ 833.993326] dump_stack+0x107/0x163 [ 833.994423] should_fail.cold+0x5/0xa [ 833.995570] ? create_object.isra.0+0x3a/0xa20 [ 833.996910] should_failslab+0x5/0x10 [ 833.997672] kmem_cache_alloc+0x5b/0x350 [ 833.998272] create_object.isra.0+0x3a/0xa20 [ 833.998850] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 833.999521] __kmalloc_node_track_caller+0x1a6/0x3f0 [ 834.000242] ? alloc_uevent_skb+0x7b/0x210 [ 834.000865] __alloc_skb+0xb1/0x620 [ 834.001397] alloc_uevent_skb+0x7b/0x210 [ 834.001975] kobject_uevent_env+0x996/0xf90 [ 834.002625] loop_configure+0x116b/0x1480 [ 834.003261] lo_ioctl+0xa6e/0x1760 [ 834.003782] ? loop_set_status_old+0x250/0x250 [ 834.004471] ? avc_ss_reset+0x180/0x180 [ 834.005003] ? __lock_acquire+0xbc2/0x5b20 [ 834.005615] ? generic_block_fiemap+0x60/0x60 [ 834.006292] ? selinux_inode_getsecctx+0x90/0x90 [ 834.007006] ? find_held_lock+0x2c/0x110 [ 834.007600] ? loop_set_status_old+0x250/0x250 [ 834.008266] blkdev_ioctl+0x28d/0x700 [ 834.008830] ? blkdev_common_ioctl+0x1870/0x1870 [ 834.009518] ? __fget_files+0x251/0x410 [ 834.010134] block_ioctl+0xf9/0x140 [ 834.010654] ? blkdev_read_iter+0x1c0/0x1c0 [ 834.011280] __x64_sys_ioctl+0x196/0x210 [ 834.011892] do_syscall_64+0x33/0x40 [ 834.012442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 834.013175] RIP: 0033:0x4663c7 [ 834.013652] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 834.016365] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.017462] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 834.018537] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 834.019590] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 834.020639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 834.021709] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:20:26 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 834.054783] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.075013] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.121245] ISOFS: Unable to identify CD-ROM format. 11:20:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40a85323, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:39 executing program 7 (fault-call:0 fault-nth:47): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:20:39 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:39 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x60020, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap}], [{@appraise_type}, {@smackfsdef}, {@uid_gt={'uid>', r1}}, {@euid_eq={'euid', 0x3d, r3}}]}}) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, 0x0, r0) r5 = fork() tkill(r5, 0xffffffff) 11:20:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:20:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7) 11:20:39 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:39 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x14, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 847.273519] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 847.284407] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 847.290992] FAULT_INJECTION: forcing a failure. [ 847.290992] name failslab, interval 1, probability 0, space 0, times 0 [ 847.293189] CPU: 1 PID: 7372 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 847.294407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 847.296038] Call Trace: [ 847.296444] dump_stack+0x107/0x163 [ 847.296996] should_fail.cold+0x5/0xa [ 847.297581] ? create_object.isra.0+0x3a/0xa20 [ 847.298287] should_failslab+0x5/0x10 [ 847.298788] kmem_cache_alloc+0x5b/0x350 [ 847.299328] create_object.isra.0+0x3a/0xa20 [ 847.299908] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 847.300583] kmem_cache_alloc+0x159/0x350 [ 847.301174] __skb_ext_alloc+0x19/0x80 [ 847.301746] skb_ext_add+0x504/0x670 [ 847.302330] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 847.303100] __alloc_skb+0x3c1/0x620 [ 847.303648] alloc_uevent_skb+0x7b/0x210 [ 847.304261] kobject_uevent_env+0x996/0xf90 [ 847.304908] loop_configure+0x116b/0x1480 [ 847.305544] lo_ioctl+0xa6e/0x1760 [ 847.306083] ? loop_set_status_old+0x250/0x250 [ 847.306781] ? avc_ss_reset+0x180/0x180 [ 847.307394] ? __lock_acquire+0xbc2/0x5b20 [ 847.308076] ? generic_block_fiemap+0x60/0x60 [ 847.308748] ? selinux_inode_getsecctx+0x90/0x90 [ 847.309442] ? find_held_lock+0x2c/0x110 [ 847.310051] ? loop_set_status_old+0x250/0x250 [ 847.310757] blkdev_ioctl+0x28d/0x700 [ 847.311316] ? blkdev_common_ioctl+0x1870/0x1870 [ 847.312008] ? __fget_files+0x251/0x410 [ 847.312615] block_ioctl+0xf9/0x140 [ 847.313152] ? blkdev_read_iter+0x1c0/0x1c0 [ 847.313791] __x64_sys_ioctl+0x196/0x210 [ 847.314411] do_syscall_64+0x33/0x40 [ 847.314974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 847.315753] RIP: 0033:0x4663c7 [ 847.316237] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 847.318967] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.320060] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 847.321084] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 847.322121] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 847.323170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 847.324213] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 [ 847.414061] ISOFS: Unable to identify CD-ROM format. 11:20:52 executing program 7 (fault-call:0 fault-nth:48): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:20:52 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:20:52 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x40bc5311, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:52 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x8) 11:20:52 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) getuid() geteuid() r2 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) setuid(r3) setresuid(r1, r2, r0) setresuid(0x0, 0x0, r0) r4 = fork() tkill(r4, 0x0) 11:20:52 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x15, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x10) 11:20:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) [ 860.547974] FAULT_INJECTION: forcing a failure. [ 860.547974] name failslab, interval 1, probability 0, space 0, times 0 [ 860.549576] CPU: 0 PID: 7412 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 860.550511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 860.552172] Call Trace: [ 860.552569] dump_stack+0x107/0x163 [ 860.553103] should_fail.cold+0x5/0xa [ 860.553672] ? __skb_ext_alloc+0x19/0x80 [ 860.554292] should_failslab+0x5/0x10 [ 860.554873] kmem_cache_alloc+0x5b/0x350 [ 860.555475] __skb_ext_alloc+0x19/0x80 [ 860.556038] skb_ext_add+0x504/0x670 [ 860.556586] ? __kmalloc_node_track_caller+0x302/0x3f0 [ 860.557356] __alloc_skb+0x3c1/0x620 [ 860.557915] alloc_uevent_skb+0x7b/0x210 [ 860.558547] kobject_uevent_env+0x996/0xf90 [ 860.559195] loop_configure+0x116b/0x1480 [ 860.559819] lo_ioctl+0xa6e/0x1760 [ 860.560356] ? loop_set_status_old+0x250/0x250 [ 860.561048] ? avc_ss_reset+0x180/0x180 [ 860.561649] ? __lock_acquire+0xbc2/0x5b20 [ 860.562299] ? generic_block_fiemap+0x60/0x60 [ 860.562965] ? selinux_inode_getsecctx+0x90/0x90 [ 860.563662] ? find_held_lock+0x2c/0x110 [ 860.564271] ? loop_set_status_old+0x250/0x250 [ 860.564954] blkdev_ioctl+0x28d/0x700 [ 860.565523] ? blkdev_common_ioctl+0x1870/0x1870 [ 860.566207] ? __fget_files+0x251/0x410 [ 860.566824] block_ioctl+0xf9/0x140 [ 860.567353] ? blkdev_read_iter+0x1c0/0x1c0 [ 860.567976] __x64_sys_ioctl+0x196/0x210 [ 860.568566] do_syscall_64+0x33/0x40 [ 860.569104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 860.569840] RIP: 0033:0x4663c7 [ 860.570302] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.572964] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 860.574052] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 860.575082] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 860.576108] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 860.577165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 860.578211] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:20:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80045300, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:53 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x26, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:20:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:20:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 11:20:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x48) 11:20:53 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) tkill(r1, 0x0) [ 860.711907] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 860.756326] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 860.757678] ISOFS: Unable to identify CD-ROM format. 11:21:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4c) 11:21:06 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf05, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80045301, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:06 executing program 7 (fault-call:0 fault-nth:49): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:06 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfc000000, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@loopback}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) setgid(0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x3, r8}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x3, r2}, {0x2, 0x5, r0}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x2, r1}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x4}, [{0x8, 0x0, r7}, {0x8, 0x3}, {0x8, 0x2}, {0x8, 0x2, r4}, {0x8, 0x6}, {0x8, 0x4}, {0x8, 0x1, r7}, {0x8, 0x6, r8}], {0x10, 0x2}, {0x20, 0x2}}, 0x94, 0x1) setresuid(r5, r0, r6) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2000, &(0x7f00000004c0)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x1}}, {@access_uid={'access', 0x3d, r9}}, {@cache_loose}, {@aname={'aname', 0x3d, '!)-$]'}}, {@msize={'msize', 0x3d, 0x3}}, {@access_user}, {@uname={'uname', 0x3d, '\\'}}, {@version_9p2000}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r10 = fork() tkill(r10, 0x0) [ 874.194784] FAULT_INJECTION: forcing a failure. [ 874.194784] name failslab, interval 1, probability 0, space 0, times 0 [ 874.197358] hrtimer: interrupt took 839514 ns [ 874.198042] CPU: 1 PID: 7477 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 874.199060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 874.200756] Call Trace: [ 874.201165] dump_stack+0x107/0x163 [ 874.201722] should_fail.cold+0x5/0xa [ 874.202305] ? create_object.isra.0+0x3a/0xa20 [ 874.203017] should_failslab+0x5/0x10 [ 874.203579] kmem_cache_alloc+0x5b/0x350 [ 874.204192] ? find_held_lock+0x2c/0x110 [ 874.204808] create_object.isra.0+0x3a/0xa20 [ 874.205462] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 874.206221] kmem_cache_alloc+0x159/0x350 [ 874.206883] skb_clone+0x14f/0x3c0 [ 874.207417] netlink_broadcast_filtered+0xa04/0xdc0 [ 874.208173] netlink_broadcast+0x35/0x40 [ 874.208791] kobject_uevent_env+0x939/0xf90 [ 874.209448] loop_configure+0x116b/0x1480 [ 874.210076] lo_ioctl+0xa6e/0x1760 [ 874.210614] ? loop_set_status_old+0x250/0x250 [ 874.211339] ? avc_ss_reset+0x180/0x180 [ 874.211951] ? __lock_acquire+0xbc2/0x5b20 [ 874.212638] ? generic_block_fiemap+0x60/0x60 [ 874.213320] ? selinux_inode_getsecctx+0x90/0x90 [ 874.214010] ? find_held_lock+0x2c/0x110 [ 874.214566] ? loop_set_status_old+0x250/0x250 [ 874.215190] blkdev_ioctl+0x28d/0x700 [ 874.215702] ? blkdev_common_ioctl+0x1870/0x1870 [ 874.216335] ? __fget_files+0x251/0x410 [ 874.216853] block_ioctl+0xf9/0x140 [ 874.217335] ? blkdev_read_iter+0x1c0/0x1c0 [ 874.217919] __x64_sys_ioctl+0x196/0x210 [ 874.218478] do_syscall_64+0x33/0x40 [ 874.219044] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 874.219811] RIP: 0033:0x4663c7 [ 874.220263] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 84 49 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 874.222622] RSP: 002b:00007fcca9f0ef48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 874.223607] RAX: ffffffffffffffda RBX: 00000000004afcc0 RCX: 00000000004663c7 [ 874.224591] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 874.225550] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 874.226500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 874.227462] R13: 0000000000000004 R14: 0000000020000500 R15: 0000000000000000 11:21:06 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80086601, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:06 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:21:06 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf08, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x68) 11:21:06 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:06 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x7) 11:21:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6c) [ 874.452759] ISOFS: Unable to identify CD-ROM format. 11:21:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:21:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x74) 11:21:20 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, 0x0, r0) r1 = getuid() setresuid(0x0, 0x0, r1) r2 = fork() tkill(r2, 0x0) 11:21:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80087601, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:20 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:20 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf17, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 7 (fault-call:0 fault-nth:50): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 887.822628] FAULT_INJECTION: forcing a failure. [ 887.822628] name failslab, interval 1, probability 0, space 0, times 0 [ 887.824195] CPU: 0 PID: 7539 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 887.825072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 887.826514] Call Trace: [ 887.826878] dump_stack+0x107/0x163 [ 887.827372] should_fail.cold+0x5/0xa [ 887.827880] ? getname_flags.part.0+0x50/0x4f0 [ 887.828473] should_failslab+0x5/0x10 [ 887.828970] kmem_cache_alloc+0x5b/0x350 [ 887.829496] ? __switch_to_asm+0x42/0x70 [ 887.830014] ? __switch_to_asm+0x36/0x70 [ 887.830551] getname_flags.part.0+0x50/0x4f0 [ 887.831166] getname_flags+0x9a/0xe0 [ 887.831655] do_mkdirat+0x8d/0x2a0 [ 887.832119] ? user_path_create+0xf0/0xf0 [ 887.832661] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 887.833330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 887.834002] do_syscall_64+0x33/0x40 [ 887.834490] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 887.835185] RIP: 0033:0x465717 [ 887.835601] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 887.837941] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 887.838971] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 887.839885] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 887.840798] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 887.841704] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 887.842627] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:21:20 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x2c0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7a) 11:21:20 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0045878, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:20 executing program 6 (fault-call:4 fault-nth:0): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:21:20 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, 0x0, r0) r2 = fork() tkill(r2, 0x0) 11:21:20 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xec0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0045878, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:20 executing program 7 (fault-call:0 fault-nth:51): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:20 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x2, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:20 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 888.070136] FAULT_INJECTION: forcing a failure. [ 888.070136] name failslab, interval 1, probability 0, space 0, times 0 [ 888.071977] CPU: 0 PID: 7581 Comm: syz-executor.6 Not tainted 5.10.56 #1 [ 888.072952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 888.074566] Call Trace: [ 888.074996] dump_stack+0x107/0x163 [ 888.075542] should_fail.cold+0x5/0xa [ 888.076122] ? getname_flags.part.0+0x50/0x4f0 [ 888.076808] should_failslab+0x5/0x10 [ 888.077392] kmem_cache_alloc+0x5b/0x350 [ 888.078007] getname_flags.part.0+0x50/0x4f0 [ 888.078670] getname_flags+0x9a/0xe0 [ 888.079233] __x64_sys_execveat+0xd6/0x130 [ 888.079776] do_syscall_64+0x33/0x40 [ 888.080192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 888.080762] RIP: 0033:0x466609 [ 888.081131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.083200] RSP: 002b:00007f793fc83188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 888.084034] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 0000000000466609 [ 888.084816] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 888.085599] RBP: 00007f793fc831d0 R08: 0000000000000000 R09: 0000000000000000 [ 888.086394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.087188] R13: 00007ffe3e28a56f R14: 00007f793fc83300 R15: 0000000000022000 11:21:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2cc) [ 888.097051] FAULT_INJECTION: forcing a failure. [ 888.097051] name failslab, interval 1, probability 0, space 0, times 0 [ 888.098842] CPU: 1 PID: 7582 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 888.099876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 888.101583] Call Trace: [ 888.101982] dump_stack+0x107/0x163 [ 888.102541] should_fail.cold+0x5/0xa [ 888.103118] ? create_object.isra.0+0x3a/0xa20 [ 888.103785] should_failslab+0x5/0x10 [ 888.104375] kmem_cache_alloc+0x5b/0x350 [ 888.104988] create_object.isra.0+0x3a/0xa20 [ 888.105638] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 888.106426] kmem_cache_alloc+0x159/0x350 [ 888.107069] getname_flags.part.0+0x50/0x4f0 [ 888.107716] getname_flags+0x9a/0xe0 [ 888.108258] do_mkdirat+0x8d/0x2a0 [ 888.108770] ? user_path_create+0xf0/0xf0 [ 888.109403] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 888.110149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 888.110922] do_syscall_64+0x33/0x40 [ 888.111506] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 888.112275] RIP: 0033:0x465717 [ 888.112748] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 888.115481] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 888.116594] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 888.117644] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 888.118695] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 888.119758] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 888.120800] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 [ 888.258318] ISOFS: Unable to identify CD-ROM format. 11:21:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 11:21:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x300) 11:21:32 executing program 7 (fault-call:0 fault-nth:52): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:32 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x33fe0, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:32 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0105303, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:32 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:32 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x3, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:32 executing program 3: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={0x0, 0xcd4, 0x1, [0x4, 0x4, 0x8, 0xcf5, 0xf2], [0x6, 0x10000000000000, 0x8, 0x81, 0x100000000, 0x8000, 0x6af, 0x52, 0x2, 0x1000, 0x1, 0x4, 0x8, 0xfffffffffffffffb, 0x6, 0x81, 0x3, 0x4, 0x80, 0xe, 0xa359, 0x7, 0x800, 0xe6e5, 0x80000000, 0x6, 0x7fff, 0x3, 0x4, 0x7, 0x2, 0x1, 0x80ae, 0xdc, 0x1, 0x100000001, 0x3, 0x401, 0x1, 0x81, 0x4, 0x2, 0x6, 0x4, 0x6, 0xd23, 0x7fff, 0xffff, 0x2, 0x0, 0x7, 0x20, 0x7f, 0x7f, 0x100000, 0x2, 0x7, 0x3, 0x100, 0x0, 0x1000, 0x9, 0x5, 0x72, 0x7fffffff, 0x1, 0x200, 0x80000001, 0x0, 0x4, 0x1, 0x5, 0x3, 0x0, 0x401, 0x0, 0x6, 0x0, 0x2, 0x40, 0x7, 0x2, 0xfffffffffffffff7, 0x2585, 0x1, 0xffffffffffffffbf, 0x4, 0x8, 0x7, 0x1f, 0x1ff, 0x10001, 0x401, 0x100000000, 0x4, 0x8, 0x1, 0x7f, 0x400, 0x100, 0x7ff, 0x9, 0x9, 0xfffffffffffffffa, 0x80, 0x4, 0x80000000, 0x4294, 0x9, 0x6, 0x6ff, 0xff, 0xb, 0xfff, 0x7, 0x7f, 0x8, 0x100000001, 0x9, 0x80000000, 0x8000]}) setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x36) 11:21:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x480) [ 899.846514] FAULT_INJECTION: forcing a failure. [ 899.846514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.847882] CPU: 1 PID: 7617 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 899.848566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 899.849832] Call Trace: [ 899.850110] dump_stack+0x107/0x163 [ 899.850518] should_fail.cold+0x5/0xa [ 899.850956] strncpy_from_user+0x34/0x460 [ 899.851434] getname_flags.part.0+0x95/0x4f0 [ 899.851935] getname_flags+0x9a/0xe0 [ 899.852355] do_mkdirat+0x8d/0x2a0 [ 899.852743] ? user_path_create+0xf0/0xf0 [ 899.853210] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 899.853788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 899.854355] do_syscall_64+0x33/0x40 [ 899.854740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 899.855311] RIP: 0033:0x465717 [ 899.855673] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.857716] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 899.858522] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 899.859331] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 899.860048] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 899.860830] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 899.861549] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:21:45 executing program 7 (fault-call:0 fault-nth:53): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:45 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() r2 = syz_io_uring_setup(0x790f, &(0x7f0000000000)={0x0, 0x79a5, 0x10, 0x1, 0x161}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) setresuid(r0, r3, r4) kcmp(0xffffffffffffffff, r1, 0x7, r2, 0xffffffffffffffff) tkill(r1, 0x0) 11:21:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x500) 11:21:45 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x9, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:45 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2) 11:21:45 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x20000438, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 912.965100] FAULT_INJECTION: forcing a failure. [ 912.965100] name failslab, interval 1, probability 0, space 0, times 0 [ 912.968418] CPU: 1 PID: 7655 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 912.970041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 912.972763] Call Trace: [ 912.973381] dump_stack+0x107/0x163 [ 912.974414] should_fail.cold+0x5/0xa [ 912.975504] ? __d_alloc+0x2a/0x990 [ 912.976463] should_failslab+0x5/0x10 [ 912.977468] kmem_cache_alloc+0x5b/0x350 [ 912.978519] ? __d_lookup+0x3e8/0x710 [ 912.979612] __d_alloc+0x2a/0x990 [ 912.980612] d_alloc+0x46/0x1c0 [ 912.981563] __lookup_hash+0xc8/0x190 [ 912.982484] filename_create+0x186/0x490 [ 912.983640] ? filename_parentat+0x560/0x560 [ 912.984741] ? getname_flags.part.0+0x1dd/0x4f0 [ 912.986041] do_mkdirat+0xa0/0x2a0 [ 912.987028] ? user_path_create+0xf0/0xf0 [ 912.988104] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 912.989627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 912.991064] do_syscall_64+0x33/0x40 [ 912.992052] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.993544] RIP: 0033:0x465717 [ 912.994466] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 912.999907] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 913.002067] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 913.003956] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 913.005952] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 913.008059] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 913.010074] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:21:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x3) 11:21:45 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:45 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x7ffff000, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:45 executing program 7 (fault-call:0 fault-nth:54): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x600) 11:21:45 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xa, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:45 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0305302, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:45 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r1, 0x0, r0) r2 = fork() tkill(r2, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f00000000c0)=0xe8) setresuid(r4, 0xee00, r6) setresuid(r0, r0, r3) [ 913.398853] FAULT_INJECTION: forcing a failure. [ 913.398853] name failslab, interval 1, probability 0, space 0, times 0 [ 913.401756] CPU: 1 PID: 7695 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 913.403530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 913.406218] Call Trace: [ 913.406846] dump_stack+0x107/0x163 [ 913.407745] should_fail.cold+0x5/0xa [ 913.408642] ? __d_alloc+0x2a/0x990 [ 913.409528] should_failslab+0x5/0x10 [ 913.410498] kmem_cache_alloc+0x5b/0x350 [ 913.411472] ? __d_lookup+0x3e8/0x710 [ 913.412382] __d_alloc+0x2a/0x990 [ 913.413207] d_alloc+0x46/0x1c0 [ 913.414025] __lookup_hash+0xc8/0x190 [ 913.414971] filename_create+0x186/0x490 [ 913.416040] ? filename_parentat+0x560/0x560 [ 913.417108] ? getname_flags.part.0+0x1dd/0x4f0 [ 913.418265] do_mkdirat+0xa0/0x2a0 [ 913.419217] ? user_path_create+0xf0/0xf0 [ 913.420297] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 913.421632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 913.422937] do_syscall_64+0x33/0x40 [ 913.423924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.425141] RIP: 0033:0x465717 [ 913.425922] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 913.430677] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 913.432629] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 913.434475] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 913.436324] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 913.438099] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 913.439855] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:21:45 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:45 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4) 11:21:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x700) 11:21:46 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:46 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xfffffdef, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x5) 11:21:46 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:59 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x98, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:59 executing program 7 (fault-call:0 fault-nth:55): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:21:59 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2000) 11:21:59 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() ptrace$poke(0x4, r1, &(0x7f0000000080), 0x4) getpgid(r1) tkill(r1, 0x9) move_pages(r1, 0x5, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x3) 11:21:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6) 11:21:59 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:59 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0xf, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 926.859800] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=7754 comm=syz-executor.5 [ 926.872831] FAULT_INJECTION: forcing a failure. [ 926.872831] name failslab, interval 1, probability 0, space 0, times 0 11:21:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7) [ 926.874407] CPU: 1 PID: 7753 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 926.875647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 926.877229] Call Trace: [ 926.877640] dump_stack+0x107/0x163 [ 926.878191] should_fail.cold+0x5/0xa [ 926.878766] ? ext4_alloc_inode+0x1a/0x630 [ 926.879423] should_failslab+0x5/0x10 [ 926.880026] kmem_cache_alloc+0x5b/0x350 [ 926.880638] ? security_compute_validatetrans.part.0+0x900/0x900 [ 926.881545] ? ext4_init_journal_params+0x350/0x350 [ 926.882294] ext4_alloc_inode+0x1a/0x630 [ 926.882912] ? ext4_init_journal_params+0x350/0x350 [ 926.883710] alloc_inode+0x63/0x230 [ 926.884269] new_inode+0x23/0x240 [ 926.884784] __ext4_new_inode+0x328/0x5400 [ 926.885437] ? avc_has_extended_perms+0xec0/0xec0 [ 926.886186] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 926.886852] ? dquot_initialize_needed+0x290/0x290 [ 926.887516] ? selinux_determine_inode_label+0x1ab/0x340 [ 926.888327] ext4_mkdir+0x32c/0xb10 [ 926.888884] ? ext4_rmdir+0xf70/0xf70 [ 926.889468] vfs_mkdir+0x41f/0x660 [ 926.890023] do_mkdirat+0x145/0x2a0 [ 926.890576] ? user_path_create+0xf0/0xf0 [ 926.891203] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 926.892014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 926.892782] do_syscall_64+0x33/0x40 [ 926.893344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 926.894106] RIP: 0033:0x465717 [ 926.894594] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 926.897345] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 926.898478] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 926.899548] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 926.900606] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 926.901677] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 926.902742] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:21:59 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:59 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0a85320, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:21:59 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x8) 11:21:59 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:21:59 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r0, r2, r0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setresuid(r4, r1, r0) r5 = getuid() setresuid(0x0, 0x0, r5) r6 = fork() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) setresuid(r3, r4, r7) tkill(r6, 0x0) 11:22:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x10, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2123) 11:22:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0a85322, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x10) 11:22:12 executing program 7 (fault-call:0 fault-nth:56): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:22:12 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xfc, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:12 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() r1 = getuid() r2 = semget(0x0, 0x0, 0x60) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = getegid() setgid(r4) r5 = getegid() setgid(r5) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000000)={{0x1, r3, r4, r0, r5, 0x50, 0x7}, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9}) setresuid(0x0, 0x0, r1) r6 = fork() tkill(r6, 0x0) 11:22:12 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 940.058653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2321) [ 940.070076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:12 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x48) 11:22:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x11, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:12 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x300, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0bc5310, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 940.130222] FAULT_INJECTION: forcing a failure. [ 940.130222] name failslab, interval 1, probability 0, space 0, times 0 [ 940.132019] CPU: 1 PID: 7826 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 940.132990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 940.134666] Call Trace: [ 940.135083] dump_stack+0x107/0x163 [ 940.135597] should_fail.cold+0x5/0xa [ 940.136155] ? create_object.isra.0+0x3a/0xa20 [ 940.136854] should_failslab+0x5/0x10 [ 940.137372] kmem_cache_alloc+0x5b/0x350 [ 940.137977] create_object.isra.0+0x3a/0xa20 [ 940.138653] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 940.139465] kmem_cache_alloc+0x159/0x350 [ 940.140070] ? ext4_init_journal_params+0x350/0x350 [ 940.140849] ext4_alloc_inode+0x1a/0x630 [ 940.141464] ? ext4_init_journal_params+0x350/0x350 [ 940.142138] alloc_inode+0x63/0x230 [ 940.142693] new_inode+0x23/0x240 [ 940.143230] __ext4_new_inode+0x328/0x5400 [ 940.143821] ? avc_has_extended_perms+0xec0/0xec0 [ 940.144522] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 940.145272] ? dquot_initialize_needed+0x290/0x290 [ 940.146014] ? selinux_determine_inode_label+0x1ab/0x340 [ 940.146843] ext4_mkdir+0x32c/0xb10 [ 940.147415] ? ext4_rmdir+0xf70/0xf70 [ 940.148037] vfs_mkdir+0x41f/0x660 [ 940.148584] do_mkdirat+0x145/0x2a0 [ 940.149145] ? user_path_create+0xf0/0xf0 [ 940.149782] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 940.150599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 940.151369] do_syscall_64+0x33/0x40 [ 940.151937] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 940.152706] RIP: 0033:0x465717 [ 940.153168] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 940.154541] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.5'. [ 940.155898] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 940.155934] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 940.155948] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 940.160542] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 940.161633] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 940.162674] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 [ 940.185804] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:12 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:12 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x900, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:12 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x12, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 940.287808] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.5'. [ 940.302482] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.5'. [ 940.396730] ISOFS: Unable to identify CD-ROM format. 11:22:26 executing program 7 (fault-call:0 fault-nth:57): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:22:26 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xa00, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4000) 11:22:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x1f00, 0x0, 0x0, 'queue1\x00'}) 11:22:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4c) 11:22:26 executing program 3: setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = fork() r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00274eeec3054200000000000200007b0010007507eefa37cdd52bf4f7994f9bc882871b5e65d5e8ba2cedda838621c69ddc3cf756b463567d11306cc736184da154b3ca3a3afcbf85ca8a9210659fa408490597702637d113c7cd6d2842fcbf2c2985235da538b07f020da5636dc08c0fccd5c30b5614d406825c9c0f34da6b07f223fa53b4d99a3a63ae77a19938ca0e46d677c5a46edfec7e551aead7433d8ef9004d831481ea9212cf7bfc99c9fb4957fdbe1ab62bbc012d2e"], 0x18}}, 0x0) tkill(r1, 0x0) r3 = fork() move_pages(r3, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r3) 11:22:26 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x13, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 953.594321] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x68) 11:22:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4800) [ 953.617517] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 953.624482] FAULT_INJECTION: forcing a failure. [ 953.624482] name failslab, interval 1, probability 0, space 0, times 0 [ 953.626100] CPU: 0 PID: 7887 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 953.628126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 953.629763] Call Trace: [ 953.630244] dump_stack+0x107/0x163 [ 953.630802] should_fail.cold+0x5/0xa [ 953.631357] ? ext4_alloc_inode+0x1a/0x630 [ 953.631978] should_failslab+0x5/0x10 [ 953.632473] kmem_cache_alloc+0x5b/0x350 [ 953.633074] ? security_compute_validatetrans.part.0+0x900/0x900 [ 953.633981] ? ext4_init_journal_params+0x350/0x350 [ 953.634740] ext4_alloc_inode+0x1a/0x630 [ 953.635463] ? ext4_init_journal_params+0x350/0x350 [ 953.636229] alloc_inode+0x63/0x230 [ 953.636761] new_inode+0x23/0x240 [ 953.637279] __ext4_new_inode+0x328/0x5400 [ 953.637890] ? avc_has_extended_perms+0xec0/0xec0 [ 953.638630] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 953.639341] ? dquot_initialize_needed+0x290/0x290 [ 953.640051] ? selinux_determine_inode_label+0x1ab/0x340 [ 953.640908] ext4_mkdir+0x32c/0xb10 [ 953.641487] ? ext4_rmdir+0xf70/0xf70 [ 953.642062] vfs_mkdir+0x41f/0x660 [ 953.642600] do_mkdirat+0x145/0x2a0 [ 953.643152] ? user_path_create+0xf0/0xf0 [ 953.643790] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 953.644571] ? syscall_enter_from_user_mode+0x1d/0x50 [ 953.645313] do_syscall_64+0x33/0x40 [ 953.645851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 953.647114] RIP: 0033:0x465717 [ 953.647618] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 953.650288] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 953.652473] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 953.653504] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 953.654545] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 953.655592] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 953.656603] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:22:26 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf00, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:26 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x1f000000, 0x0, 0x0, 'queue1\x00'}) 11:22:26 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:39 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x9800, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6c) 11:22:39 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:39 executing program 3: sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000000202010300000000000000000200000908000b007369700008000440000000020800044000000002080005400000000513000b0063616c6c666f7277617264696e5d0000080006005241530058000380140001800800010064010102080002007f0000010c000280050001002f00000006000340000300000c000280050001002f0000000c000280050001000100000014000180080001007f00000108000200e00000010800084000000002040003800800054000000020"], 0xbc}, 0x1, 0x0, 0x0, 0x4001}, 0x400c010) setresuid(0xee00, 0x0, 0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000600)=0x20000) r1 = getuid() r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x0, &(0x7f0000000440), 0x24000, &(0x7f0000000080)=ANY=[@ANYBLOB="6d6f64653d3078303163303030303030306d6f64653d3078303030303030303030303030653932332c6f76657272696465726f636b7065726d2c6f626a5f757365723d409f2c646f6e745f61707072616973652c7375626a5f747970653d242c657569643c0399730865b7dafc3230d692f62080c5d697176b7ff7b44b19c96d9186d0227f41aecca9f5237bee0e790564ff000000a8a5ac69ccbcc294299d3556722516141d8a7e9e2906d751cda78068fb872042d2d24e2e7d0000dfa029000008db2e905dd5e78e5b7500000000000000", @ANYRESHEX=r0, @ANYBLOB="2c657569643c44d3d980dee720210ea32f025dfd1a4afdc47db48f34ead27a69", @ANYRESDEC=r1, @ANYBLOB=',pcr=00000000000000000033,dont_hash,fsmagic=0x0000000000000005,\x00']) r3 = getuid() setresuid(0xffffffffffffffff, 0x0, 0x0) r4 = getegid() setgid(r4) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000000000040002000000000008000000", @ANYRES32=0xee01, @ANYRESOCT, @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="10000200000000002000000000000000"], 0x64, 0x3) lchown(&(0x7f0000000340)='./file0\x00', 0x0, r5) setresuid(0x0, 0x0, r3) r6 = fork() fcntl$getownex(r2, 0x10, &(0x7f0000000640)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0x400, 0x686da6a7c7db3ad6) tkill(r6, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) 11:22:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4c00) 11:22:39 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x14, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:39 executing program 7 (fault-call:0 fault-nth:58): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:22:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6800) [ 967.196685] FAULT_INJECTION: forcing a failure. [ 967.196685] name failslab, interval 1, probability 0, space 0, times 0 [ 967.198282] CPU: 0 PID: 7942 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 967.199199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 967.201653] Call Trace: [ 967.202024] dump_stack+0x107/0x163 [ 967.203025] should_fail.cold+0x5/0xa [ 967.203575] ? create_object.isra.0+0x3a/0xa20 [ 967.204201] should_failslab+0x5/0x10 [ 967.205369] kmem_cache_alloc+0x5b/0x350 [ 967.206641] create_object.isra.0+0x3a/0xa20 [ 967.207350] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 967.208684] kmem_cache_alloc+0x159/0x350 [ 967.209412] security_inode_alloc+0x34/0x160 [ 967.210609] inode_init_always+0x503/0xc90 [ 967.211874] alloc_inode+0x84/0x230 [ 967.212998] new_inode+0x23/0x240 [ 967.214061] __ext4_new_inode+0x328/0x5400 [ 967.215351] ? avc_has_extended_perms+0xec0/0xec0 [ 967.216830] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 967.218340] ? dquot_initialize_needed+0x290/0x290 [ 967.219617] ? selinux_determine_inode_label+0x1ab/0x340 [ 967.221275] ext4_mkdir+0x32c/0xb10 [ 967.222233] ? ext4_rmdir+0xf70/0xf70 [ 967.223247] vfs_mkdir+0x41f/0x660 [ 967.224318] do_mkdirat+0x145/0x2a0 [ 967.225291] ? user_path_create+0xf0/0xf0 [ 967.226537] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 967.228170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.229626] do_syscall_64+0x33/0x40 [ 967.230697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 967.232205] RIP: 0033:0x465717 [ 967.233175] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.238727] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 967.240977] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 967.243163] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 967.245090] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 967.246966] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 967.248520] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:22:39 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x1f00, 0x0, 'queue1\x00'}) [ 967.255512] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.5'. [ 967.267795] ISOFS: Unable to identify CD-ROM format. 11:22:39 executing program 7 (fault-call:0 fault-nth:59): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) [ 967.282776] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:39 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x15, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x6c00) 11:22:39 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:39 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:39 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x74) [ 967.399603] FAULT_INJECTION: forcing a failure. [ 967.399603] name failslab, interval 1, probability 0, space 0, times 0 [ 967.401185] CPU: 1 PID: 7969 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 967.402050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 967.403504] Call Trace: [ 967.403859] dump_stack+0x107/0x163 [ 967.404365] should_fail.cold+0x5/0xa [ 967.404871] ? create_object.isra.0+0x3a/0xa20 [ 967.405497] should_failslab+0x5/0x10 [ 967.406010] kmem_cache_alloc+0x5b/0x350 [ 967.406611] create_object.isra.0+0x3a/0xa20 [ 967.407215] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 967.407921] kmem_cache_alloc+0x159/0x350 [ 967.408501] security_inode_alloc+0x34/0x160 [ 967.409076] inode_init_always+0x503/0xc90 [ 967.409677] alloc_inode+0x84/0x230 [ 967.410169] new_inode+0x23/0x240 [ 967.410640] __ext4_new_inode+0x328/0x5400 [ 967.411204] ? avc_has_extended_perms+0xec0/0xec0 [ 967.411838] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 967.412484] ? dquot_initialize_needed+0x290/0x290 [ 967.413095] ? selinux_determine_inode_label+0x1ab/0x340 [ 967.413830] ext4_mkdir+0x32c/0xb10 [ 967.414362] ? ext4_rmdir+0xf70/0xf70 [ 967.414887] vfs_mkdir+0x41f/0x660 [ 967.415382] do_mkdirat+0x145/0x2a0 [ 967.415883] ? user_path_create+0xf0/0xf0 [ 967.416486] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 967.417235] ? syscall_enter_from_user_mode+0x1d/0x50 [ 967.417962] do_syscall_64+0x33/0x40 [ 967.418475] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 967.419123] RIP: 0033:0x465717 [ 967.419455] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 967.421812] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 967.422845] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 967.423807] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 967.424880] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 967.425972] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 967.427026] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 [ 967.570761] ISOFS: Unable to identify CD-ROM format. 11:22:53 executing program 7 (fault-call:0 fault-nth:60): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:22:53 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xfc00, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:53 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x26, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:22:53 executing program 3: setresuid(0xee00, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)={{0x0, r0, 0xee01, 0xee01, 0xee00, 0x20, 0x8}, 0xdb8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = getuid() setresuid(0x0, 0x0, r1) r2 = fork() get_robust_list(r2, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0, 0x6d}], 0xe) semtimedop(r3, &(0x7f0000000040)=[{0x2, 0x7}, {0x4, 0x0, 0x1800}], 0x2, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000180)=[0x81]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = getegid() setgid(r6) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r6}, {0x8, 0x3, r7}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000400)={{0x3, 0xee00, r4, r5, r7, 0x40, 0x6}, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}) tkill(r2, 0xfffffffe) 11:22:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x1f000000, 0x0, 'queue1\x00'}) 11:22:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7a) 11:22:53 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:22:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7400) 11:22:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x7a00) [ 981.028543] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.5'. [ 981.042219] FAULT_INJECTION: forcing a failure. [ 981.042219] name failslab, interval 1, probability 0, space 0, times 0 [ 981.043808] CPU: 1 PID: 8009 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 981.044742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 981.046241] Call Trace: [ 981.046605] dump_stack+0x107/0x163 [ 981.047101] should_fail.cold+0x5/0xa [ 981.047622] ? create_object.isra.0+0x3a/0xa20 [ 981.048239] should_failslab+0x5/0x10 [ 981.048771] kmem_cache_alloc+0x5b/0x350 [ 981.049321] create_object.isra.0+0x3a/0xa20 [ 981.049903] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 981.050577] kmem_cache_alloc+0x159/0x350 [ 981.051143] jbd2__journal_start+0x18c/0x880 [ 981.051734] __ext4_journal_start_sb+0x210/0x420 [ 981.052422] __ext4_new_inode+0x2dac/0x5400 [ 981.053022] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 981.053795] ? dquot_initialize_needed+0x290/0x290 [ 981.054468] ? selinux_determine_inode_label+0x1ab/0x340 [ 981.055292] ext4_mkdir+0x32c/0xb10 [ 981.055788] ? ext4_rmdir+0xf70/0xf70 [ 981.056321] vfs_mkdir+0x41f/0x660 [ 981.056852] do_mkdirat+0x145/0x2a0 [ 981.057381] ? user_path_create+0xf0/0xf0 [ 981.057982] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 981.058707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 981.059439] do_syscall_64+0x33/0x40 [ 981.059979] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 981.060725] RIP: 0033:0x465717 [ 981.061195] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.063656] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 981.064663] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 981.065618] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 981.066588] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 981.067585] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 981.068552] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:22:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2cc) 11:22:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 981.111064] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.5'. 11:22:53 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, 0x0) 11:22:53 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x300) [ 981.257104] ISOFS: Unable to identify CD-ROM format. 11:23:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, 0x0) 11:23:07 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf05, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:07 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) setresuid(r0, 0x0, r1) r2 = getuid() setresuid(0x0, 0x0, r2) r3 = fork() r4 = getpid() r5 = fork() move_pages(r5, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) getpgid(r4) tkill(r3, 0x0) 11:23:07 executing program 7 (fault-call:0 fault-nth:61): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:23:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x8004) 11:23:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x480) 11:23:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x1f00}) 11:23:07 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x34000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 995.144170] FAULT_INJECTION: forcing a failure. [ 995.144170] name failslab, interval 1, probability 0, space 0, times 0 [ 995.146721] CPU: 1 PID: 8062 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 995.147666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 995.149184] Call Trace: [ 995.149986] dump_stack+0x107/0x163 [ 995.151142] should_fail.cold+0x5/0xa [ 995.152297] should_failslab+0x5/0x10 [ 995.153475] __kmalloc_track_caller+0x79/0x3c0 11:23:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, 0x0) [ 995.154875] ? sidtab_sid2str_get+0x17e/0x670 [ 995.156494] kmemdup+0x23/0x50 [ 995.157338] sidtab_sid2str_get+0x17e/0x670 [ 995.157906] sidtab_entry_to_string+0x33/0x110 [ 995.159134] security_sid_to_context_core+0x339/0x570 [ 995.159816] selinux_inode_init_security+0x4a6/0x690 [ 995.160465] ? selinux_dentry_init_security+0x270/0x270 [ 995.161145] ? get_cached_acl_rcu+0x100/0x100 [ 995.161726] ? find_held_lock+0x2c/0x110 [ 995.162248] security_inode_init_security+0x151/0x350 [ 995.162895] ? ext4_init_acl+0x310/0x310 [ 995.163400] ? inode_free_by_rcu+0x20/0x20 [ 995.163943] ? chksum_update+0x4c/0xb0 [ 995.164439] __ext4_new_inode+0x383b/0x5400 [ 995.165046] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 995.165774] ? dquot_initialize_needed+0x290/0x290 [ 995.166566] ? selinux_determine_inode_label+0x1ab/0x340 [ 995.167432] ext4_mkdir+0x32c/0xb10 [ 995.168158] ? ext4_rmdir+0xf70/0xf70 [ 995.168812] vfs_mkdir+0x41f/0x660 [ 995.169387] do_mkdirat+0x145/0x2a0 [ 995.169984] ? user_path_create+0xf0/0xf0 [ 995.170624] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 995.171474] ? syscall_enter_from_user_mode+0x1d/0x50 [ 995.172279] do_syscall_64+0x33/0x40 [ 995.172893] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 995.173690] RIP: 0033:0x465717 [ 995.174623] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.177042] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 995.178034] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 995.178733] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 995.179430] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 995.180124] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 995.180834] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:23:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x500) 11:23:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xcc02) 11:23:07 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x400300, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x1f000000}) 11:23:07 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf08, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:07 executing program 7 (fault-call:0 fault-nth:62): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:23:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x1f000000, 0x0, 'queue1\x00'}) 11:23:07 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x600) 11:23:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xff0f) 11:23:07 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setresuid(r0, r0, r1) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000440)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index}, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x5) r7 = fork() fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x1) ptrace$peeksig(0x4209, r8, &(0x7f0000000080)={0x8, 0x1, 0x5}, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]) tkill(r7, 0x0) 11:23:07 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf17, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 995.423732] FAULT_INJECTION: forcing a failure. [ 995.423732] name failslab, interval 1, probability 0, space 0, times 0 [ 995.425377] CPU: 0 PID: 8110 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 995.426271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 995.427958] Call Trace: [ 995.428318] dump_stack+0x107/0x163 [ 995.428866] should_fail.cold+0x5/0xa [ 995.429458] ? jbd2__journal_start+0x18c/0x880 [ 995.430153] should_failslab+0x5/0x10 [ 995.430758] kmem_cache_alloc+0x5b/0x350 [ 995.431385] jbd2__journal_start+0x18c/0x880 [ 995.432054] __ext4_journal_start_sb+0x210/0x420 [ 995.432800] __ext4_new_inode+0x2dac/0x5400 [ 995.433509] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 995.434243] ? dquot_initialize_needed+0x290/0x290 [ 995.434974] ? selinux_determine_inode_label+0x1ab/0x340 [ 995.435777] ext4_mkdir+0x32c/0xb10 [ 995.436328] ? ext4_rmdir+0xf70/0xf70 [ 995.436931] vfs_mkdir+0x41f/0x660 [ 995.437480] do_mkdirat+0x145/0x2a0 [ 995.438017] ? user_path_create+0xf0/0xf0 [ 995.438661] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 995.439441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 995.440218] do_syscall_64+0x33/0x40 [ 995.440790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 995.441571] RIP: 0033:0x465717 [ 995.442071] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.444883] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 995.446035] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 995.447109] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 995.448209] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 995.449318] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 995.450407] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 [ 995.451720] EXT4-fs error (device sda) in __ext4_new_inode:1082: Out of memory 11:23:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x20000) 11:23:07 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf0ffff, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:07 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:07 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0xff0f) 11:23:08 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x500) 11:23:08 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x40000) 11:23:08 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x1000000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:08 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x2, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r2, &(0x7f0000000580)=""/253, 0xfd) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000002c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf250a0000003f000300f43dd4b3700d7ac99af1fbc29c18d1f90b34da78e65a120a29a47ee844c79674aa5dea1f70b42040f99c536aab7a7bbd3decae160f0846124cfce80040000300c097dc970e9663ba10c75a17f32404ce618b8692483a43fcc735eb14ac81d8c437efb0f0860ae11c07c2afa04f39031e789679026aaba826d9bf18e4c40b4dd9d17f7eb4", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x20}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xcfec}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:21 executing program 7 (fault-call:0 fault-nth:63): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:23:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x24048843}, 0x4004850) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x2000000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x80000) 11:23:21 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x700) 11:23:21 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) r1 = fork() tkill(r1, 0x0) r2 = getpid() tkill(r2, 0x38) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = getegid() setgid(r4) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x0, 0xee01}, {0x8, 0x2}, {0x8, 0x4, r4}, {0x8, 0x3, r5}, {0x8, 0x2}, {0x8, 0x3, 0xee01}, {0x8, 0x5}, {0x8, 0x2}], {0x10, 0x2}}, 0x64, 0x3) getuid() fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, r5, 0x1000) 11:23:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x3, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 1009.033279] FAULT_INJECTION: forcing a failure. [ 1009.033279] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.034916] CPU: 0 PID: 8182 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 1009.035808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1009.037371] Call Trace: [ 1009.037746] dump_stack+0x107/0x163 [ 1009.038268] should_fail.cold+0x5/0xa [ 1009.038825] ? create_object.isra.0+0x3a/0xa20 [ 1009.039490] should_failslab+0x5/0x10 [ 1009.039995] kmem_cache_alloc+0x5b/0x350 [ 1009.040498] ? sidtab_sid2str_get+0x65/0x670 [ 1009.041138] create_object.isra.0+0x3a/0xa20 [ 1009.041680] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1009.042359] __kmalloc_track_caller+0x177/0x3c0 [ 1009.043034] ? sidtab_sid2str_get+0x17e/0x670 [ 1009.043648] kmemdup+0x23/0x50 [ 1009.044078] sidtab_sid2str_get+0x17e/0x670 [ 1009.044700] sidtab_entry_to_string+0x33/0x110 [ 1009.045359] security_sid_to_context_core+0x339/0x570 [ 1009.046063] selinux_inode_init_security+0x4a6/0x690 [ 1009.046763] ? selinux_dentry_init_security+0x270/0x270 [ 1009.047519] ? get_cached_acl_rcu+0x100/0x100 [ 1009.048148] ? find_held_lock+0x2c/0x110 [ 1009.048725] security_inode_init_security+0x151/0x350 [ 1009.049358] ? ext4_init_acl+0x310/0x310 [ 1009.049834] ? inode_free_by_rcu+0x20/0x20 [ 1009.050349] ? chksum_update+0x4c/0xb0 [ 1009.050819] __ext4_new_inode+0x383b/0x5400 [ 1009.051352] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 1009.051931] ? dquot_initialize_needed+0x290/0x290 [ 1009.052505] ? selinux_determine_inode_label+0x1ab/0x340 [ 1009.053864] ext4_mkdir+0x32c/0xb10 [ 1009.054620] ? ext4_rmdir+0xf70/0xf70 [ 1009.055477] vfs_mkdir+0x41f/0x660 [ 1009.056155] do_mkdirat+0x145/0x2a0 [ 1009.056597] ? user_path_create+0xf0/0xf0 [ 1009.057158] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1009.057910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1009.058630] do_syscall_64+0x33/0x40 [ 1009.059154] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1009.059901] RIP: 0033:0x465717 [ 1009.060323] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.062908] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1009.064022] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 1009.065025] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1009.066027] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 1009.067000] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1009.067978] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:23:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x100000) 11:23:21 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2000) 11:23:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x200000) 11:23:21 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x9, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:21 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x700) 11:23:21 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) fork() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r1 = fork() move_pages(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000880), &(0x7f00000008c0), 0x0) tkill(r1, 0x0) getuid() 11:23:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000000) 11:23:21 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x3000000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) [ 1009.415917] ISOFS: Unable to identify CD-ROM format. 11:23:35 executing program 7 (fault-call:0 fault-nth:64): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@mode}]}) 11:23:35 executing program 3: setresuid(0xee00, 0x0, 0x0) r0 = getuid() setresuid(0x0, 0x0, r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r1 = fork() tkill(r1, 0x0) waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000000)) 11:23:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2000000) 11:23:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2123) 11:23:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r2, &(0x7f0000000580)=""/253, 0xfd) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000002c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf250a0000003f000300f43dd4b3700d7ac99af1fbc29c18d1f90b34da78e65a120a29a47ee844c79674aa5dea1f70b42040f99c536aab7a7bbd3decae160f0846124cfce80040000300c097dc970e9663ba10c75a17f32404ce618b8692483a43fcc735eb14ac81d8c437efb0f0860ae11c07c2afa04f39031e789679026aaba826d9bf18e4c40b4dd9d17f7eb4", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x20}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xcfec}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:35 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xa, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@allocspi={0x234, 0x16, 0xeff, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@algo_crypt={0x13a, 0x2, {{'ecb-serpent-avx\x00'}, 0x790, "6713b80aa17b480025df7d1182db0a434695c79cf4e5014496679d8e2b448590e6136d49f6b5a5f7e64443e66e67e3bfcb9eabb1fbd842083e229802f3e59c323a0d32fc6189459c4afa1540bede04e2892ba7cdfe87312007c303f62b129d0ca91129fbc5afd93a5f72b233176128b1b3e5e90b92a33576f7b1c61cd25e1d4544489cf205148163e87b34b41112bd013397ba75454872037d171091165e5ccb5aead987912ada62b9b0aac4ba2667297e8ee3a153ba33ee22a651290577dba7dc7395d782cedc398e499afdf75ccdf2dff63ec59b3cf820694b75ff8e778968f658c71e0f4227983387c27e58ad10a10fb1"}}]}, 0x234}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x10198b7550794a5d, 0x1, 0x0, 0xe193, 0x47, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x987, 0x7800, 0x0, 0x7fa9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup(r5) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r6, &(0x7f0000000580)=""/253, 0xfd) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r10}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r7, @ANYBLOB="00042dbd7000fddbdf250a0000003f000300f43dd4b3700d7ac99af1fbc29c18d1f90b34da78e65a120a29a47ee844c79674aa5dea1f70b42040f99c536aab7a7bbd3decae160f0846124cfce80040000300c097dc970e9663ba10c75a17f32404ce618b8692483a43fcc735eb14ac81d8c437efb0f0860ae11c07c2afa04f39031e789679026aaba826d9bf18e4c40b4dd9d17f7eb4", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r11, @ANYBLOB="08001100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x158, 0x0, 0xc00, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:35 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x9000000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x3000000) 11:23:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x2321) [ 1022.759505] FAULT_INJECTION: forcing a failure. [ 1022.759505] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.760927] CPU: 1 PID: 8263 Comm: syz-executor.7 Not tainted 5.10.56 #1 [ 1022.761743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 1022.762956] Call Trace: [ 1022.763243] dump_stack+0x107/0x163 [ 1022.763610] should_fail.cold+0x5/0xa [ 1022.763992] ? create_object.isra.0+0x3a/0xa20 [ 1022.764444] should_failslab+0x5/0x10 [ 1022.764822] kmem_cache_alloc+0x5b/0x350 [ 1022.765250] create_object.isra.0+0x3a/0xa20 [ 1022.765704] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 1022.766246] __kmalloc+0x16e/0x3e0 [ 1022.766616] ext4_find_extent+0xa39/0xd00 [ 1022.767041] ext4_ext_map_blocks+0x1c8/0x5c10 [ 1022.767521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1022.768153] ? perf_trace_lock+0xac/0x490 [ 1022.768603] ? ext4_ext_release+0x10/0x10 [ 1022.769106] ? lock_release+0x6b0/0x6b0 [ 1022.769529] ? ext4_es_lookup_extent+0x489/0xbe0 [ 1022.770147] ? lock_downgrade+0x6d0/0x6d0 [ 1022.770827] ? down_read+0x10f/0x420 [ 1022.771427] ? down_write_killable+0x180/0x180 [ 1022.772217] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1022.773104] ? ext4_es_lookup_extent+0xc4/0xbe0 [ 1022.774116] ext4_map_blocks+0x9a6/0x18d0 [ 1022.775021] ? inode_free_by_rcu+0x20/0x20 [ 1022.775847] ? ext4_issue_zeroout+0x1c0/0x1c0 [ 1022.776607] ext4_getblk+0x144/0x680 [ 1022.777249] ? ext4_iomap_overwrite_begin+0xa0/0xa0 [ 1022.777993] ext4_bread+0x29/0x210 [ 1022.778391] ext4_append+0x15d/0x370 [ 1022.778805] ext4_init_new_dir+0x25e/0x4d0 [ 1022.779275] ? ext4_init_dot_dotdot+0x610/0x610 [ 1022.779796] ext4_mkdir+0x3c1/0xb10 [ 1022.780194] ? ext4_rmdir+0xf70/0xf70 [ 1022.780614] vfs_mkdir+0x41f/0x660 [ 1022.781000] do_mkdirat+0x145/0x2a0 [ 1022.781470] ? user_path_create+0xf0/0xf0 [ 1022.781929] ? lockdep_hardirqs_on_prepare+0x273/0x3e0 [ 1022.782507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1022.783109] do_syscall_64+0x33/0x40 [ 1022.783483] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1022.784060] RIP: 0033:0x465717 [ 1022.784410] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1022.786378] RSP: 002b:00007fcca9f0efa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 1022.787204] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000465717 [ 1022.787967] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 1022.788733] RBP: 00007fcca9f0f040 R08: 0000000000000000 R09: ffffffffffffffff [ 1022.789530] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000040 [ 1022.790296] R13: 0000000020000080 R14: 00007fcca9f0f000 R15: 00000000200005c0 11:23:35 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xa000000, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r2, &(0x7f0000000580)=""/253, 0xfd) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000002c0)=0x9, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="00042dbd7000fddbdf250a0000003f000300f43dd4b3700d7ac99af1fbc29c18d1f90b34da78e65a120a29a47ee844c79674aa5dea1f70b42040f99c536aab7a7bbd3decae160f0846124cfce80040000300c097dc970e9663ba10c75a17f32404ce618b8692483a43fcc735eb14ac81d8c437efb0f0860ae11c07c2afa04f39031e789679026aaba826d9bf18e4c40b4dd9d17f7eb4", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x20}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xcfec}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:35 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4000000) 11:23:35 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0xf, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}}, 0xf8}}, 0x0) 11:23:35 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0xf01, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = dup(r3) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getdents64(r4, &(0x7f0000000580)=""/253, 0xfd) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private}, 0x0, r8}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@private0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYRESOCT=r6, @ANYRESHEX=r1, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="08000300010000000800030001000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="30000300e8b2c93478351554e85f55b5874725121933b41d5ba1b9c2e8547b2e6e82e8f092206c7286aa6a82dc0ee36a"], 0x108}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5334, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:23:35 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x1ff) close(r0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x4000) [ 1023.016251] ISOFS: Unable to identify CD-ROM format. [ 1036.096777] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800d498400 (size 512): comm "syz-executor.6", pid 8280, jiffies 4295689875 (age 20.762s) hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 d0 ac 0f 80 88 ff ff 00 50 71 00 00 c9 ff ff .........Pq..... backtrace: [<00000000ffcfbac1>] do_seccomp+0x2d5/0x25f0 [<000000004a52d24d>] do_syscall_64+0x33/0x40 [<0000000048da7dac>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffffc90000715000 (size 4096): comm "syz-executor.6", pid 8280, jiffies 4295689875 (age 20.762s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 05 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<0000000020b752fb>] __vmalloc_node_range+0x574/0x9e0 [<00000000f3ea4f03>] __vmalloc_node+0xb5/0x100 [<0000000065155e3d>] bpf_prog_alloc_no_stats+0x32/0x2b0 [<0000000060c86e79>] bpf_prog_alloc+0x2c/0x230 [<00000000b037b346>] bpf_prog_create_from_user+0xad/0x2e0 [<00000000ba9011e0>] do_seccomp+0x31a/0x25f0 [<000000004a52d24d>] do_syscall_64+0x33/0x40 [<0000000048da7dac>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: memory leak unreferenced object 0xffff88800e389800 (size 1024): comm "syz-executor.6", pid 8280, jiffies 4295689876 (age 20.761s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000e95088d8>] bpf_prog_alloc_no_stats+0xb9/0x2b0 [<0000000060c86e79>] bpf_prog_alloc+0x2c/0x230 [<00000000b037b346>] bpf_prog_create_from_user+0xad/0x2e0 [<00000000ba9011e0>] do_seccomp+0x31a/0x25f0 [<000000004a52d24d>] do_syscall_64+0x33/0x40 [<0000000048da7dac>] entry_SYSCALL_64_after_hwframe+0x44/0xa9 BUG: leak checking failed VM DIAGNOSIS: 11:23:56 Registers: info registers vcpu 0 RAX=ffffffff83c5d7f0 RBX=ffffffff84c32280 RCX=ffffffff83c45788 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83c5db9f RBP=fffffbfff0986450 RSP=ffffffff84c07e40 R8 =0000000000000001 R9 =ffff88806ce33feb R10=ffffed100d9c67fd R11=0000000000000001 R12=0000000000000000 R13=ffffffff8544fb48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83c5d7fe RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b02767c140 CR3=00000000164ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=cc80000000000000 4007 FPR6=cc80000000000000 4007 FPR7=cdc0000000000000 4008 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004182af3e40000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83c5d7f0 RBX=ffff88800852b280 RCX=ffffffff83c45788 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83c5db9f RBP=ffffed10010a5650 RSP=ffff88800856fe78 R8 =0000000000000001 R9 =ffff88806cf33feb R10=ffffed100d9e67fd R11=0000000000000001 R12=0000000000000001 R13=ffffffff8544fb48 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83c5d7fe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffefd0cbfc8 CR3=0000000004c26000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ff0000000000 XMM02=00000000000000000000ff0000000000 XMM03=642078656820200a29733136372e3032 XMM04=6a626f206465636e6572656665726e75 XMM05=32303120657a69732820303038393833 XMM06=646970202c22362e726f747563657865 XMM07=32206567612820363738393836353932 XMM08=726f6d656d203a475542007463656a62 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000