aae156c392b670d886716a27a01dc37de940de47548c2d241f4cf74f696aa68567623d712e6a893798e8417db7049e40d426a3920cd308653948e04886808c7f3771f0ac", 0xf7, 0x6}, {&(0x7f0000000640)="3bfbce9dc3ad7148d510604e88513bf596c5b4a20d15693442bbabd88cc89a3a74eec6b05b09eaef333fdd9bad8f98e95f4f1539d9d7700a4c16f9ddee88f4", 0x3f, 0xd9}, {&(0x7f0000000680)="caa2418fc4c7fca812525735bf17492018527528932de1e7f6a149004e8ac10601b6ec894b34f178c17b1a3d2e0893186c5f0da89f8ac97f4549677427106aee399ff56b5746f7f0f9e0cd5d82f368f4a7", 0x51, 0x20}, {&(0x7f0000000700)="330505968d8db078d7f15198056698c0061817d79c8e1e411ecbf2352bcd97b992800919102802002e51d1a23a4a1eb09458c757a97b25498937bf5f9c1b30c51069efe24d9952d57780b199edea1ad9262cc73589a9d7de0b94febc7b06aff8c6cb40f0e38a62aca526712eccf1e14ecbae6cf4af2d7c5971082c0600d0f8c5cb45188bace88ace9b0dd019975ff91c2d1dde7b84344adfa4610fe04eeab8e6c7c44de3f78bef60a9c4ef4ce23b538566b8efd1fbc4713c47a584aaf88fa0b0ebba951297e34ddbaa07cba90387ffdac7ec1d2e10e1fbd085ffe49fdcf80e5fa3073c5b4f", 0xe5, 0x9}, {&(0x7f0000000cc0)="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", 0x1000, 0x7f}], 0x1000000, &(0x7f0000000a40)={[{@grpquota='grpquota'}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [{@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor'}}, {@euid_lt={'euid<', r0}}]}) clock_gettime(0x4, &(0x7f0000000080)) io_setup(0x1, &(0x7f00000000c0)=0x0) io_destroy(r1) mount(&(0x7f0000000ac0)=@sg0='/dev/sg0\x00', &(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)='tracefs\x00', 0x1022000, &(0x7f0000000b80)='/dev/sg0\x00') mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff) mount(&(0x7f0000000100)=@sg0='/dev/sg0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nilfs2\x00', 0x10000, &(0x7f00000001c0)='/\x00') 21:29:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x20000110, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:12 executing program 3: 21:29:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf00, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0xf, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:12 executing program 3: [ 375.100168] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 21:29:12 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/37) [ 375.182670] tmpfs: No value for mount option 'td0@ R' 21:29:12 executing program 3: 21:29:12 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000100)={@mcast1, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @rand_addr, @remote}, &(0x7f0000000380)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@dev, @in6}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f00000005c0)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000600)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0xaf6a4102fc780290, &(0x7f0000000680)={@dev, @rand_addr, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0}, &(0x7f00000010c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000001200)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001240)={@broadcast, @multicast2, 0x0}, &(0x7f0000001280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001380)={0x0, @loopback, @broadcast}, &(0x7f00000013c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002580)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000002680)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000027c0)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002840)={0x11, 0x0, 0x0}, &(0x7f0000002880)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000028c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f00000029c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000002b00)=0xe8) openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x100, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000032c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='`\a\x00\x00', @ANYRES16=r1, @ANYBLOB="080228bd7000fbdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="6802020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400fdffffff08000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400860b04098000000007000001018000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r7, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000300000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="5c02020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400fcffffff400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400f9ffffff08000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r14, @ANYBLOB="400002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="300102003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004002000000008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040002000000"], 0x760}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4) [ 375.274993] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 375.326815] tmpfs: No value for mount option 'td0@ R' [ 375.368329] Unknown ioctl 35123 [ 375.379676] Unknown ioctl 35123 21:29:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x80, 0x0, 0x3, 0x0, 0x0, [{r0, 0x0, 0x800}, {r2}, {r0, 0x0, 0xfffffffffffffffe}]}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x7, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x8100, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:13 executing program 3: 21:29:13 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x40100) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5579f6ab1ac97d641a55a83b2c3341ad", 0x10) 21:29:13 executing program 5: getrlimit(0x0, &(0x7f0000000040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) fallocate(r0, 0x30, 0x0, 0x8000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r1 = dup3(r0, r0, 0x80000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) 21:29:13 executing program 3: 21:29:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x40030000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:13 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x40) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x3ff) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/37) 21:29:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:13 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x2, &(0x7f00000000c0)=']\x00') chmod(&(0x7f0000000080)='./file0//ile0\x00', 0xffffffffffffff7f) 21:29:13 executing program 3: [ 376.236218] tmpfs: No value for mount option ']' [ 376.254522] tmpfs: No value for mount option ']' 21:29:14 executing program 3: 21:29:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf0ffffff00000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:14 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x4) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) lchown(&(0x7f0000000400)='./file0\x00', r0, r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0//ile0\x00', 0x4, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="1451ea27b9988f1094906cc1e38cc43665b622a304110411050c5110bf", 0x1d, 0x10000}, {&(0x7f0000000100)="79b9977a0439f1882b64539d4e47806174d7385a172afb7691189bfdce7ea3ef6806bee0718b61bea659e0aef257da62e57d247de0436e68bdc2d41ff6222da7f2cbc52c23ee77273c741e7cea40bef59ede0856e7f6258649ff6dc490bdd8308ddd1bfac7d7c5b13db9bb98c8bd30491acdf334b81dce76a7a1600ce1a4a9a82a5a4cdba98b4cdbcbb2955cb57b965ec59dc5b1e0bda7b1a6e7d49a12dc84be059b3fa3c04abb4f1ff8377f4feafec1c424ccb3cca45c4b8177407af17e07f708905769c5e96dd850285fbae98df06920a08d8f0174cb98ca881c40a890bb6944be0806b529d80f8288ed", 0xeb, 0xffff}, {&(0x7f0000000200)="139b140d4fd51e5b815883bb9fd23d4de9277d8ef52a89ab43faa112264be7c293817879881e57ba7ee67d77a7c5805195ac241cf1febed611bbed8f72052064c993c5041900339dba6db3e478ae5a107681ee63dbeab7787445dfbee966cef337b0bff9ba393d3133220bd2cac9b6f509acad3b28386db3dbc84905f76871d4ff78c39ebc98174abdbe9a262eaedca45a28aef4405c1f5173f0973684c6ddf9756963009d4a0ac77a9bc910c813c036efcf2279edbe23f9c1b77b3e8ac70222a51bb0953309b95ff6cbbf533bbacfe67d490976a029b36dae332b0549b031cdd8", 0xe1, 0x6}], 0x2080000, &(0x7f0000000380)={[{@shortname_lower='shortname=lower'}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x36, 0x32, 0x34, 0x37, 0x34, 0x32, 0x34], 0x2d, [0x31, 0x0, 0x0, 0x37], 0x2d, [0x30, 0x67, 0x3d, 0x33], 0x2d, [0x66, 0x34, 0x64, 0x76], 0x2d, [0x30, 0x38, 0x66, 0x77, 0x65, 0x77, 0x35, 0x35]}}}, {@fsname={'fsname'}}]}) 21:29:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:14 executing program 5: r0 = shmget(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/37) 21:29:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:29:14 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/37) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x77f, 0x210000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @rand_addr}, &(0x7f0000000200)=0xc) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @remote, @loopback}, &(0x7f00000004c0)=0xc) r8 = accept$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @remote}, &(0x7f00000005c0)=0xc) r11 = accept4(r0, &(0x7f0000001980)=@can={0x1d, 0x0}, &(0x7f0000001a00)=0x80, 0x800) getsockopt$sock_buf(r8, 0x1, 0x0, &(0x7f0000000600)=""/179, &(0x7f0000000440)=0xb3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001a80)={0x0, @local, @broadcast}, &(0x7f0000001ac0)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) getsockname$packet(r0, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001dc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000002200)={&(0x7f0000001e00)={0x3f8, r1, 0x202, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xe8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xad}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x21c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x8, 0xfde, 0x6, 0xffffffffffff8000}, {0x1, 0x3f, 0xffff, 0xcbf}, {0x80000001, 0xbd5, 0x8001, 0x3}, {0x6, 0x3, 0x5, 0x9}, {0x20, 0x7ff, 0x7, 0x9}, {0xfffffffffffffffa, 0x7, 0x7, 0x9}, {0x9, 0x8, 0x2, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1ffe000000000000}}}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r16, 0x80045301, &(0x7f0000000080)) 21:29:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x1000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 377.075871] tmpfs: No value for mount option '3 _˿S;}I v)m3+I1' 21:29:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x8000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/122) 21:29:14 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe8, "c9916bb7157c1674a0978a0249f301e7ed909f74bcc7f508399167efd16aa72c15566b795b82b4b69ae8081ba6c1c9f96bcced4eefa2811c2615d9202fef88044bc0b0180136941258dc5560968cdb59246afff83e92248aa10c6778694494b9fb9e4a62e3a16957c5a18bd003f541411aa2a391ce92369622d29fb6fe3ca2be0cf3a4c2b212f3428ddd08c1f5e6d1ab2d13bcbf965f568647480e33b22317d4f27c9e1a1a5a3bd676f6f1ce49f9a75af4db8a0e27c9682a3d8961cd48e7a92939ba6f5f59db38aec57b1e8933cba4d39dc32e825f3aae0a650957a35f437354a5a2c10ab5c85672"}, &(0x7f0000000040)=0xf0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0xff}, 0x8) 21:29:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x100000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xffffff7f, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) lookup_dcookie(0x10000, &(0x7f00000001c0)=""/155, 0x9b) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000100)='./file0//ile0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f0000000140)="fe63a23fd72c6c566e8df15c545f80f0d03c2ab2a7e64ad8b2edfa18140b5b31a5c77454d9507ea3e60e5e7c009fdf718d7ac141bd0a888565395f40b64d4387fdd449b1b240000d3853a984a98f601c3e8f01448b26074a03060dc0") chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) 21:29:15 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x222001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x46, @mcast2, 0x5}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x12}}, r1, 0xf5}}, 0x48) 21:29:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfffff000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:15 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) 21:29:15 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) r0 = dup(0xffffffffffffff9c) mknodat(r0, &(0x7f0000000000)='./file0//ile0\x00', 0x8000, 0x9) listen(r0, 0x3ff) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) 21:29:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x403, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x2000) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="4c9cad314eb93ebf95b0a1d021817cc0f70c", 0x12, 0x2}, {&(0x7f0000000180)="3002fac17f51e88cacd701d1a36853eb924459af3d66ae9c94b55e5572e8787719a441d82240de34b3ab94ba70db2277270225cb6fdbf86135f096b3babc12421ef815894ec7491c3391a9104076eed55b99c411f80e4651bba1a7e6e0cc48ba46eee78b3a93fe09db1fd1149b1f0629dffec54fcc4ab0", 0x77, 0x2}], 0x810, &(0x7f0000000240)='\':vboxnet0-S\x00') ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x10001, 0x1, 0x8b1, 0x200000000000, 0x7f, 0x400, 0x80000001}) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) 21:29:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x2000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:15 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) set_thread_area(&(0x7f0000000040)={0x100000001, 0x20001000, 0xffffffffffffffff, 0x8, 0x100, 0x3, 0x6, 0x1, 0x7, 0x5}) 21:29:15 executing program 3: r0 = socket(0x0, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf00000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf00000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:16 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/37) 21:29:16 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x8, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x131c00) getsockopt$inet6_dccp_int(r5, 0x21, 0x5, &(0x7f0000000080), &(0x7f0000000140)=0x4) r6 = accept4(r5, 0x0, &(0x7f0000000180)=0xfffffffffffffde4, 0xfffffffffffffffc) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:16 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0//ile0\x00', 0x5, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="86b9264621a344f147de195460f0fbb6b70f8166a0b8f2fcf4913246dfd8d6072be20ed1945ed5c851ba36d8d2fbda12d2b516deb565610dda83e5f6e6d69cad6af619f7e3787a0510faac5930413b1696a6e28c7e219ba6b36135708ab7f2e450374445f80df6ac9cf92105b05cd9c7dadfb30eec2d9a8d56b7db201a5fec5e6ad7adcce60189c8922e5fcce73074fa63eef955f9943fae7467a37aaa1ba99c2461e63b", 0xa4, 0x80000001}, {&(0x7f00000001c0)="2352adec466e5a34a69938ead4f5eab6", 0x10, 0x80000000}, {&(0x7f0000000200)="11b26463feaf0c00fd5ab6931193bf9b46ad85d4e7ae90dba863e0314c4613d908d0296f01921383bee60dd5f619df44e92ecb564babfabe63ea3b4fe4d5ec74227230686fba2dbd8659ff0c9edf33e827d7bfbefdda7cce83226faad33fc6802cafef23369d4b08fbc4a9139186d50ccc606ec24fd1f62fa7965621f56ed994f1d4abcf56d36feba657970e59b0482ffda60c71180e77de3855b12b9b6d6cbe569679a3bac6fe83af21ce0af7b09d214496873af5a6e9d06045e5123a23946ff8f6a8e474743266fc9990b991ec8c7cb12a98b3b0db8ddf3de8114b", 0xdc, 0xffffffff}], 0x2000000, &(0x7f0000000380)={[{@thread_pool={'thread_pool', 0x3d, 0x80000001}}], [{@smackfsroot={'smackfsroot', 0x3d, '@bdev'}}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, 'eth1'}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@subj_user={'subj_user'}}, {@obj_role={'obj_role', 0x3d, 'vmnet1nodevcpusetcpuset'}}, {@smackfshat={'smackfshat', 0x3d, 'devtmpfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'devtmpfs\x00'}}]}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000440)=0x81a) 21:29:16 executing program 3: socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf0ffffffffffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 5: r0 = semget(0x2, 0x5, 0x40) semctl$IPC_RMID(r0, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) [ 378.908195] tmpfs: Bad mount option tt2f|*ۍ 21:29:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x9effffff00000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 378.986517] tmpfs: Bad mount option tt2f|*ۍ 21:29:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 0: mkdir(&(0x7f0000000040)='./file0//ile0\x00', 0xffffffffffffffff) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='devtmpfs\x00', 0x0, &(0x7f00000002c0)) chmod(&(0x7f0000000080)='./file0//ile0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e) r1 = getpgid(0x0) ptrace$pokeuser(0x6, r1, 0x0, 0xfffffffffffffff8) 21:29:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="23dbb6e2f5d78377d6c762a0991569253baeddb12d04ee27371bae69b2c13ea31b69b2b1abf28df79d2f7a2f13066ab98f1fb72afba993ee3bee7c86a38f0537f680e46723d098515f4716da1571491cb9fbed31bb31dd1631262050a2f53ea3f0e37d0e46be3cd3df6c725330ece8d165cf857d6ff61f5280150378c72d774ac069531604fe1225530d8641bcc5d173219cedad1ae444c95559c9ac75a68130cd393648a7ab1c17f47a3d9d7efa23e64549aa", 0xb3, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @remote, 0x6ecb}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0xa}, 0xbadd}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfcffffff00000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x400300, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 5: r0 = shmget(0x2, 0x600000, 0x400, &(0x7f00009fe000/0x600000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000200)=""/37) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="8000000024467f26c06ec477244c997b262c7ecc688f517c5eda3732f47b6d4fabbcfcf8236df5b29533851e4e51e40146f8c7f30e169a5ae97d1c3309c6f09e3ed6d8967bccd466d10afb7dbd8e2c1f7dc738ae0b1135157c179af3a725aa578051d33c4f5a6d2e2f0b5afb28ecb6af66a5b1b059368fbfebcfb00397d4f98efee3bce4a03b0558f25a66dcd97841b84188a224e0ac81abb918249d2dac0f16b3389f0bccf4df4250b6fd00000000000000000000000000"]) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000140)=0x4) [ 379.203377] mmap: syz-executor1 (15336): VmData 35139584 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 21:29:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0), 0x0, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}, {@check_relaxed='check=relaxed'}]}) 21:29:16 executing program 5: shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/37) 21:29:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="f4c69270bb13e5b3070810c66c55b551042b98ef949d38522f666ef7baac674c5bf9eb3e2955af2897f7cf414444973cce519c3a22cfc4d209cb52a549bb7afd302ceaf9358a592b58a703699b611f5445c5926ae4b77764c32324c2ae26c75957a357b59cccd88763f04ff76431a7aeb4ea060c1633ad3bde2f95b2143a1e4200d7ba2b6e27f04405bd3fe7a086e6d48426f1e25858a5fa9c740d5dbc0ae97ba3c18c38ca318b841af551b5ebc28c8a0ee09c23871079a881bea2a45b6e073652cc344528b39fcb444710a1b195b52c7d02739096131e381040b4", 0xdb, r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) r7 = dup2(r3, r1) perf_event_open$cgroup(&(0x7f0000000300)={0x7, 0x70, 0x80, 0x800000000000, 0x6, 0x8, 0x0, 0x9, 0x1, 0x9, 0x45f4, 0xd33, 0x4, 0x0, 0x4, 0xfa18, 0xed75, 0x8, 0x7, 0x64f6, 0xfffffffffffffff9, 0x0, 0x0, 0x3, 0x7, 0x8, 0x7fffffff, 0xffffffffffffffe0, 0x1, 0x7, 0x2, 0x5, 0x790, 0x6, 0x7fffffff, 0x84, 0x4, 0x100000000, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x5880, 0x5, 0x1f, 0x7, 0x3f, 0x98, 0x6}, r7, 0x1, 0xffffffffffffffff, 0xc) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x100000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x8100000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:17 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200801, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b90f0b0000b800880000ba000000000f309066b8d2000f00d80f23b5640f005aee660f3880b4d69c000000c4c215ba049dfaffffff64db7b6d9a80fb06955a00b970020000b82e020000ba000000000f30", 0x51}], 0x1, 0x8, &(0x7f0000000140)=[@dstype3={0x7, 0x3}], 0x1) [ 379.494269] isofs_fill_super: bread failed, dev=loop0, iso_blknum=36, block=72 21:29:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x24, 0x26, 0x501}, 0x24}}, 0x0) 21:29:17 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x8100000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xf0ffffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:17 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80da, 0x101000) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x1fa67018, 0x2) [ 379.701994] FAULT_INJECTION: forcing a failure. [ 379.701994] name failslab, interval 1, probability 0, space 0, times 0 [ 379.726031] CPU: 1 PID: 15395 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 379.734556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.743916] Call Trace: [ 379.746519] dump_stack+0x244/0x39d [ 379.750171] ? dump_stack_print_info.cold.1+0x20/0x20 [ 379.755396] ? lock_downgrade+0x900/0x900 [ 379.759571] should_fail.cold.4+0xa/0x17 [ 379.763673] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.769218] ? lock_downgrade+0x900/0x900 [ 379.769240] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.778945] ? proc_fail_nth_write+0x9e/0x210 [ 379.778961] ? proc_cwd_link+0x1d0/0x1d0 [ 379.778985] ? find_held_lock+0x36/0x1c0 [ 379.779022] ? perf_trace_sched_process_exec+0x860/0x860 21:29:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xd502, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:17 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) socketpair(0x5, 0x6, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) [ 379.779043] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 379.779067] __should_failslab+0x124/0x180 [ 379.779089] should_failslab+0x9/0x14 [ 379.779105] __kmalloc+0x2e0/0x760 [ 379.779127] ? strncpy_from_user+0x5a0/0x5a0 [ 379.779146] ? fput+0x130/0x1a0 [ 379.779165] ? do_syscall_64+0x9a/0x820 [ 379.779179] ? __x64_sys_memfd_create+0x142/0x4f0 [ 379.779194] ? do_syscall_64+0x9a/0x820 [ 379.779214] __x64_sys_memfd_create+0x142/0x4f0 [ 379.779231] ? memfd_fcntl+0x1910/0x1910 [ 379.779259] do_syscall_64+0x1b9/0x820 [ 379.779275] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 379.779294] ? syscall_return_slowpath+0x5e0/0x5e0 [ 379.779310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.779330] ? trace_hardirqs_on_caller+0x310/0x310 [ 379.779348] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 379.779367] ? prepare_exit_to_usermode+0x291/0x3b0 [ 379.779392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 379.830970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.839586] RIP: 0033:0x457569 [ 379.839604] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.839624] RSP: 002b:00007f75a46a7a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 379.839640] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 379.839654] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 379.867732] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 379.867743] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f75a46a86d4 [ 379.867752] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000140)="41928d60d66404e514302d0bd193a01c8af78d8d05b9461a4839dc1b0fd2c5b7b97ff1fd3b4e600a70e0bed78d8b17912340ac6e6e6ee31c8eff3d2e6bdba0428fb62019e3da6734c54b36e5992844144561d2155ffaca3b14c4eac2c2fcbcd03c4c50030e69ba81570071e87cb17a161886a272720ee7453a938df0e81f8705e4efa7331ea3307a28bbfe3968e789cb282985d03def3d0829c464fdc63721826f2e65e5d9591065e04740a205807fa9b3", 0xb1, 0x8000, 0x0, 0x0) 21:29:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0xfffffff0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x24, 0x26, 0x501}, 0x24}}, 0x0) 21:29:17 executing program 0 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:17 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = semget(0x0, 0x4, 0x2) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000040)=""/4096) 21:29:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x24, 0x26, 0x501}, 0x24}}, 0x0) [ 380.324035] FAULT_INJECTION: forcing a failure. [ 380.324035] name failslab, interval 1, probability 0, space 0, times 0 [ 380.369628] CPU: 1 PID: 15430 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 380.378168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.387556] Call Trace: [ 380.390169] dump_stack+0x244/0x39d [ 380.393830] ? dump_stack_print_info.cold.1+0x20/0x20 [ 380.399055] should_fail.cold.4+0xa/0x17 [ 380.403145] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.408279] ? zap_class+0x640/0x640 [ 380.412006] ? __lock_acquire+0x62f/0x4c20 21:29:18 executing program 3 (fault-call:1 fault-nth:0): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 380.416291] ? lock_downgrade+0x900/0x900 [ 380.420454] ? check_preemption_disabled+0x48/0x280 [ 380.425514] ? find_held_lock+0x36/0x1c0 [ 380.429622] ? expand_files.part.8+0x571/0x9a0 [ 380.434220] ? perf_trace_sched_process_exec+0x860/0x860 [ 380.439685] ? find_held_lock+0x36/0x1c0 [ 380.443540] FAULT_INJECTION: forcing a failure. [ 380.443540] name failslab, interval 1, probability 0, space 0, times 0 [ 380.443769] __should_failslab+0x124/0x180 [ 380.459221] should_failslab+0x9/0x14 [ 380.463033] kmem_cache_alloc+0x2be/0x730 [ 380.467199] ? shmem_destroy_callback+0xc0/0xc0 [ 380.471881] shmem_alloc_inode+0x1b/0x40 [ 380.475953] alloc_inode+0x63/0x190 [ 380.479596] new_inode_pseudo+0x71/0x1a0 [ 380.483680] ? prune_icache_sb+0x1c0/0x1c0 [ 380.487955] ? _raw_spin_unlock+0x2c/0x50 [ 380.492125] new_inode+0x1c/0x40 [ 380.495507] shmem_get_inode+0xf1/0x920 [ 380.499497] ? shmem_encode_fh+0x340/0x340 [ 380.503742] ? lock_downgrade+0x900/0x900 [ 380.507900] ? lock_release+0xa10/0xa10 [ 380.511906] ? perf_trace_sched_process_exec+0x860/0x860 [ 380.517362] ? usercopy_warn+0x110/0x110 [ 380.521444] __shmem_file_setup.part.50+0x83/0x2a0 [ 380.526391] shmem_file_setup+0x65/0x90 [ 380.530375] __x64_sys_memfd_create+0x2af/0x4f0 [ 380.535053] ? memfd_fcntl+0x1910/0x1910 [ 380.539137] do_syscall_64+0x1b9/0x820 [ 380.543049] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.548434] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.553368] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.558222] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.563251] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 380.568284] ? prepare_exit_to_usermode+0x291/0x3b0 [ 380.573318] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.578181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.583377] RIP: 0033:0x457569 [ 380.586576] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.605488] RSP: 002b:00007f75a46a7a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 380.613204] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 380.620499] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 380.627773] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 380.635046] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f75a46a86d4 [ 380.642318] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 [ 380.649663] CPU: 0 PID: 15439 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 380.658172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.667535] Call Trace: [ 380.670136] dump_stack+0x244/0x39d [ 380.673785] ? dump_stack_print_info.cold.1+0x20/0x20 [ 380.678993] should_fail.cold.4+0xa/0x17 [ 380.683071] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.688190] ? lock_downgrade+0x900/0x900 [ 380.692348] ? check_preemption_disabled+0x48/0x280 [ 380.697386] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 380.702326] ? kasan_check_read+0x11/0x20 [ 380.706484] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 380.711785] ? __netlink_insert+0xd2c/0x13b0 [ 380.716209] ? __netlink_insert+0xd2c/0x13b0 [ 380.720652] ? find_held_lock+0x36/0x1c0 [ 380.724752] ? perf_trace_sched_process_exec+0x860/0x860 [ 380.730224] __should_failslab+0x124/0x180 [ 380.734472] should_failslab+0x9/0x14 [ 380.738286] kmem_cache_alloc_node+0x26e/0x730 [ 380.742882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.748430] ? check_preemption_disabled+0x48/0x280 [ 380.753478] __alloc_skb+0x114/0x770 [ 380.757208] ? netdev_alloc_frag+0x1f0/0x1f0 [ 380.761646] ? __release_sock+0x3a0/0x3a0 [ 380.765809] ? __local_bh_enable_ip+0x160/0x260 [ 380.770497] ? netlink_insert+0xfe/0x240 [ 380.774572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.780199] ? netlink_autobind.isra.34+0x232/0x310 [ 380.785237] netlink_sendmsg+0xb29/0xfc0 [ 380.788850] FAULT_INJECTION: forcing a failure. [ 380.788850] name failslab, interval 1, probability 0, space 0, times 0 [ 380.789327] ? netlink_unicast+0x760/0x760 [ 380.789344] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 380.789392] ? apparmor_socket_sendmsg+0x29/0x30 [ 380.814464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.820012] ? security_socket_sendmsg+0x94/0xc0 [ 380.824776] ? netlink_unicast+0x760/0x760 [ 380.829026] sock_sendmsg+0xd5/0x120 [ 380.832753] ___sys_sendmsg+0x7fd/0x930 [ 380.836747] ? copy_msghdr_from_user+0x580/0x580 [ 380.841518] ? lock_downgrade+0x900/0x900 [ 380.845676] ? proc_fail_nth_write+0x9e/0x210 [ 380.850231] ? __fget_light+0x2e9/0x430 [ 380.854210] ? fget_raw+0x20/0x20 [ 380.857668] ? find_held_lock+0x36/0x1c0 [ 380.861746] ? kasan_check_write+0x14/0x20 [ 380.865991] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 380.870931] ? wait_for_completion+0x8a0/0x8a0 [ 380.875532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.881075] ? sockfd_lookup_light+0xc5/0x160 [ 380.885582] __sys_sendmsg+0x11d/0x280 [ 380.889502] ? __ia32_sys_shutdown+0x80/0x80 [ 380.893918] ? __sb_end_write+0xd9/0x110 [ 380.897996] ? fput+0x130/0x1a0 [ 380.901287] ? do_syscall_64+0x9a/0x820 [ 380.905271] ? do_syscall_64+0x9a/0x820 [ 380.909265] ? trace_hardirqs_off_caller+0x300/0x300 [ 380.914392] __x64_sys_sendmsg+0x78/0xb0 [ 380.918468] do_syscall_64+0x1b9/0x820 [ 380.922360] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.927733] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.932672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.937525] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.942558] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 380.947585] ? prepare_exit_to_usermode+0x291/0x3b0 [ 380.952640] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.957503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.962696] RIP: 0033:0x457569 [ 380.965903] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.984807] RSP: 002b:00007f430a50cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.992528] RAX: ffffffffffffffda RBX: 00007f430a50cc90 RCX: 0000000000457569 [ 380.999799] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 381.007071] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 381.014345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f430a50d6d4 21:29:18 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4142, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/37) 21:29:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xfffffff0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf0ffffffffffff, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:18 executing program 0 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 381.021633] R13: 00000000004c38b6 R14: 00000000004d5718 R15: 0000000000000004 [ 381.028933] CPU: 1 PID: 15450 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 381.037438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.037444] Call Trace: [ 381.037467] dump_stack+0x244/0x39d [ 381.037488] ? dump_stack_print_info.cold.1+0x20/0x20 [ 381.037519] should_fail.cold.4+0xa/0x17 [ 381.058247] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.058265] ? __kernel_text_address+0xd/0x40 [ 381.058284] ? unwind_get_return_address+0x61/0xa0 [ 381.067474] ? find_held_lock+0x36/0x1c0 [ 381.067513] ? perf_trace_sched_process_exec+0x860/0x860 [ 381.076911] __should_failslab+0x124/0x180 [ 381.076933] should_failslab+0x9/0x14 [ 381.076950] kmem_cache_alloc+0x2be/0x730 [ 381.076968] ? mpol_shared_policy_init+0x235/0x650 [ 381.086464] ? current_time+0x72/0x1b0 [ 381.086487] __d_alloc+0xc8/0xb90 [ 381.086509] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 381.086525] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 381.086545] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 381.094563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.094577] ? timespec64_trunc+0xea/0x180 [ 381.094592] ? inode_init_owner+0x340/0x340 [ 381.094619] ? _raw_spin_unlock+0x2c/0x50 [ 381.094644] ? current_time+0x10b/0x1b0 [ 381.103707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.103725] ? __lockdep_init_map+0x105/0x590 [ 381.103746] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 381.103762] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 381.103783] d_alloc_pseudo+0x1d/0x30 [ 381.103804] alloc_file_pseudo+0x158/0x3f0 [ 381.111142] ? alloc_file+0x4d0/0x4d0 [ 381.111164] ? usercopy_warn+0x110/0x110 [ 381.121188] __shmem_file_setup.part.50+0x110/0x2a0 [ 381.121211] shmem_file_setup+0x65/0x90 [ 381.131919] __x64_sys_memfd_create+0x2af/0x4f0 [ 381.131936] ? memfd_fcntl+0x1910/0x1910 [ 381.131964] do_syscall_64+0x1b9/0x820 [ 381.140488] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 381.140507] ? syscall_return_slowpath+0x5e0/0x5e0 [ 381.140527] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.148636] ? trace_hardirqs_on_caller+0x310/0x310 [ 381.148654] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 381.148674] ? prepare_exit_to_usermode+0x291/0x3b0 [ 381.232434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.232460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.247481] RIP: 0033:0x457569 [ 381.247498] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.247514] RSP: 002b:00007f75a46a7a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 381.277310] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 381.284594] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 381.291887] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 381.299169] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f75a46a86d4 [ 381.306447] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000140)="999a41ae307f612ab33bc307cd421c4f5004e4af6377b028aba153099f7fb8a51055c0ad", 0x24, 0x20000004, &(0x7f000031e000)={0xa, 0x4e23, 0x7}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000180)='security.SMACK64IPIN\x00', &(0x7f00000001c0)='lo\x00', 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @loopback, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x10001, @ipv4={[], [], @local}, 0x7}, 0x1c) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x81000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:19 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) getegid() 21:29:19 executing program 3 (fault-call:1 fault-nth:1): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x300000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:19 executing program 0 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 381.462105] FAULT_INJECTION: forcing a failure. [ 381.462105] name failslab, interval 1, probability 0, space 0, times 0 [ 381.474932] FAULT_INJECTION: forcing a failure. [ 381.474932] name failslab, interval 1, probability 0, space 0, times 0 [ 381.479105] CPU: 0 PID: 15475 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 381.494652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.504009] Call Trace: [ 381.506644] dump_stack+0x244/0x39d [ 381.510294] ? dump_stack_print_info.cold.1+0x20/0x20 [ 381.515509] should_fail.cold.4+0xa/0x17 [ 381.519587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.524733] ? __save_stack_trace+0x8d/0xf0 [ 381.529092] ? save_stack+0xa9/0xd0 [ 381.532732] ? save_stack+0x43/0xd0 [ 381.536375] ? find_held_lock+0x36/0x1c0 [ 381.540472] ? perf_trace_sched_process_exec+0x860/0x860 [ 381.545938] ? check_preemption_disabled+0x48/0x280 [ 381.550976] __should_failslab+0x124/0x180 [ 381.555235] should_failslab+0x9/0x14 [ 381.559043] kmem_cache_alloc_node_trace+0x270/0x740 [ 381.564168] __kmalloc_node_track_caller+0x3c/0x70 [ 381.569114] __kmalloc_reserve.isra.40+0x41/0xe0 [ 381.573885] __alloc_skb+0x150/0x770 [ 381.577632] ? netdev_alloc_frag+0x1f0/0x1f0 [ 381.582065] ? __release_sock+0x3a0/0x3a0 [ 381.586229] ? __local_bh_enable_ip+0x160/0x260 [ 381.590917] ? netlink_insert+0xfe/0x240 [ 381.594996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.600547] ? netlink_autobind.isra.34+0x232/0x310 [ 381.605583] netlink_sendmsg+0xb29/0xfc0 [ 381.609686] ? netlink_unicast+0x760/0x760 [ 381.613936] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 381.618883] ? apparmor_socket_sendmsg+0x29/0x30 [ 381.623656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.629219] ? security_socket_sendmsg+0x94/0xc0 [ 381.633996] ? netlink_unicast+0x760/0x760 [ 381.638244] sock_sendmsg+0xd5/0x120 [ 381.641971] ___sys_sendmsg+0x7fd/0x930 [ 381.645969] ? copy_msghdr_from_user+0x580/0x580 [ 381.650746] ? lock_downgrade+0x900/0x900 [ 381.654910] ? proc_fail_nth_write+0x9e/0x210 [ 381.659426] ? __fget_light+0x2e9/0x430 [ 381.663410] ? fget_raw+0x20/0x20 [ 381.666869] ? find_held_lock+0x36/0x1c0 [ 381.670946] ? kasan_check_write+0x14/0x20 [ 381.675197] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 381.680140] ? wait_for_completion+0x8a0/0x8a0 [ 381.684745] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.690323] ? sockfd_lookup_light+0xc5/0x160 [ 381.694832] __sys_sendmsg+0x11d/0x280 [ 381.698733] ? __ia32_sys_shutdown+0x80/0x80 [ 381.703154] ? __sb_end_write+0xd9/0x110 [ 381.707236] ? fput+0x130/0x1a0 [ 381.710530] ? do_syscall_64+0x9a/0x820 [ 381.714524] ? do_syscall_64+0x9a/0x820 [ 381.718517] ? trace_hardirqs_off_caller+0x300/0x300 [ 381.723654] __x64_sys_sendmsg+0x78/0xb0 [ 381.727735] do_syscall_64+0x1b9/0x820 [ 381.731645] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 381.737026] ? syscall_return_slowpath+0x5e0/0x5e0 [ 381.741973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.746827] ? trace_hardirqs_on_caller+0x310/0x310 [ 381.751854] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 381.756881] ? prepare_exit_to_usermode+0x291/0x3b0 [ 381.761918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.766785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.771984] RIP: 0033:0x457569 [ 381.775186] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.794090] RSP: 002b:00007f430a50cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.801807] RAX: ffffffffffffffda RBX: 00007f430a50cc90 RCX: 0000000000457569 21:29:19 executing program 5: shmget(0x3, 0x4000, 0x102, &(0x7f0000ffb000/0x4000)=nil) shmget(0x3, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmget(0x3, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget(0x3, 0x4000, 0x78000806, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/37) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) 21:29:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xffffff9e, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf00, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf0ffffff00000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 381.809079] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 381.816352] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 381.823643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f430a50d6d4 [ 381.830921] R13: 00000000004c38b6 R14: 00000000004d5718 R15: 0000000000000004 [ 381.838290] CPU: 1 PID: 15472 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 381.846795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.846801] Call Trace: [ 381.846824] dump_stack+0x244/0x39d [ 381.846847] ? dump_stack_print_info.cold.1+0x20/0x20 [ 381.846868] ? __save_stack_trace+0x8d/0xf0 [ 381.871935] should_fail.cold.4+0xa/0x17 [ 381.876025] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.881144] ? save_stack+0x43/0xd0 [ 381.881156] ? kasan_kmalloc+0xc7/0xe0 [ 381.881182] ? percpu_ref_put_many+0x11c/0x260 [ 381.888685] ? zap_class+0x640/0x640 [ 381.888706] ? find_held_lock+0x36/0x1c0 [ 381.888743] ? perf_trace_sched_process_exec+0x860/0x860 [ 381.897004] ? lock_downgrade+0x900/0x900 [ 381.897030] __should_failslab+0x124/0x180 [ 381.897051] should_failslab+0x9/0x14 [ 381.906547] kmem_cache_alloc+0x2be/0x730 [ 381.906563] ? d_set_d_op+0x31d/0x410 [ 381.906590] __alloc_file+0xa8/0x470 [ 381.906618] ? file_free_rcu+0xd0/0xd0 [ 381.906637] ? d_instantiate+0x79/0xa0 [ 381.906656] ? lock_downgrade+0x900/0x900 [ 381.915034] ? kasan_check_read+0x11/0x20 [ 381.915051] ? do_raw_spin_unlock+0xa7/0x330 [ 381.915066] ? do_raw_spin_trylock+0x270/0x270 [ 381.915088] alloc_empty_file+0x72/0x170 [ 381.915107] alloc_file+0x5e/0x4d0 [ 381.963781] ? _raw_spin_unlock+0x2c/0x50 [ 381.967952] alloc_file_pseudo+0x261/0x3f0 [ 381.972201] ? alloc_file+0x4d0/0x4d0 [ 381.976015] ? usercopy_warn+0x110/0x110 [ 381.980101] __shmem_file_setup.part.50+0x110/0x2a0 [ 381.985171] shmem_file_setup+0x65/0x90 [ 381.989170] __x64_sys_memfd_create+0x2af/0x4f0 [ 381.993855] ? memfd_fcntl+0x1910/0x1910 [ 381.997942] do_syscall_64+0x1b9/0x820 [ 382.001844] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 382.007224] ? syscall_return_slowpath+0x5e0/0x5e0 [ 382.012162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.017019] ? trace_hardirqs_on_caller+0x310/0x310 [ 382.017039] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 382.017057] ? prepare_exit_to_usermode+0x291/0x3b0 [ 382.017078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.027104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.027124] RIP: 0033:0x457569 [ 382.027141] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.027150] RSP: 002b:00007f75a46a7a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 382.027166] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 382.027175] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 382.027190] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 382.093771] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f75a46a86d4 [ 382.101047] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f0000000080)="507876be9d2d4651260e477ff4a06f430f04000000000000002c64810700000000051b02df2e24f728be3655", 0x0, 0x0, 0x0, 0x27) getsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000740)={@ipv4={[], [], @remote}, r5}, 0x14) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) 21:29:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x3000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:19 executing program 3 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf00000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:19 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000080)=0x2000, 0x4) 21:29:19 executing program 0 (fault-call:2 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf0ffffff00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:20 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40000, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/37) [ 382.385962] FAULT_INJECTION: forcing a failure. [ 382.385962] name failslab, interval 1, probability 0, space 0, times 0 [ 382.412491] FAULT_INJECTION: forcing a failure. [ 382.412491] name failslab, interval 1, probability 0, space 0, times 0 [ 382.431553] CPU: 0 PID: 15520 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 382.440080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.449435] Call Trace: [ 382.449465] dump_stack+0x244/0x39d [ 382.449492] ? dump_stack_print_info.cold.1+0x20/0x20 [ 382.449527] should_fail.cold.4+0xa/0x17 [ 382.464972] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 382.470093] ? lock_release+0xa10/0xa10 [ 382.474085] ? print_usage_bug+0xc0/0xc0 [ 382.478157] ? zap_class+0x640/0x640 [ 382.481895] ? find_held_lock+0x36/0x1c0 [ 382.481917] ? __lock_is_held+0xb5/0x140 [ 382.481947] ? perf_trace_sched_process_exec+0x860/0x860 [ 382.495519] ? zap_class+0x640/0x640 [ 382.499246] ? __mutex_lock+0x85e/0x16f0 [ 382.499270] __should_failslab+0x124/0x180 [ 382.499293] should_failslab+0x9/0x14 [ 382.511369] kmem_cache_alloc_node+0x26e/0x730 [ 382.515962] ? find_held_lock+0x36/0x1c0 [ 382.520045] __alloc_skb+0x114/0x770 [ 382.523771] ? __netlink_dump_start+0x592/0x7c0 [ 382.523794] ? netdev_alloc_frag+0x1f0/0x1f0 [ 382.523811] ? __netlink_lookup+0x5dd/0xa90 [ 382.523846] ? kasan_check_write+0x14/0x20 [ 382.523872] netlink_dump+0x7d5/0x1080 [ 382.532935] ? check_preemption_disabled+0x48/0x280 [ 382.532959] ? netlink_broadcast+0x50/0x50 [ 382.532978] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 382.532996] ? rcu_softirq_qs+0x20/0x20 [ 382.533032] __netlink_dump_start+0x59a/0x7c0 [ 382.568392] ? qdisc_class_hash_grow+0x720/0x720 [ 382.573166] rtnetlink_rcv_msg+0x809/0xc20 [ 382.577419] ? rtnl_fdb_dump+0xd00/0xd00 [ 382.581497] ? qdisc_class_hash_grow+0x720/0x720 21:29:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 382.586278] netlink_rcv_skb+0x172/0x440 [ 382.590349] ? rtnl_fdb_dump+0xd00/0xd00 [ 382.594426] ? netlink_ack+0xb80/0xb80 [ 382.598336] rtnetlink_rcv+0x1c/0x20 [ 382.602067] netlink_unicast+0x5a5/0x760 [ 382.606152] ? netlink_attachskb+0x9a0/0x9a0 [ 382.610576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.616146] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 382.621180] netlink_sendmsg+0xa18/0xfc0 [ 382.625266] ? netlink_unicast+0x760/0x760 [ 382.629513] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 382.634458] ? apparmor_socket_sendmsg+0x29/0x30 [ 382.639222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.644786] ? security_socket_sendmsg+0x94/0xc0 [ 382.649548] ? netlink_unicast+0x760/0x760 [ 382.653800] sock_sendmsg+0xd5/0x120 [ 382.657531] ___sys_sendmsg+0x7fd/0x930 [ 382.661531] ? copy_msghdr_from_user+0x580/0x580 [ 382.666299] ? lock_downgrade+0x900/0x900 [ 382.670460] ? proc_fail_nth_write+0x9e/0x210 [ 382.674969] ? __fget_light+0x2e9/0x430 [ 382.678959] ? fget_raw+0x20/0x20 [ 382.682424] ? find_held_lock+0x36/0x1c0 [ 382.686508] ? kasan_check_write+0x14/0x20 [ 382.690759] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 382.695702] ? wait_for_completion+0x8a0/0x8a0 [ 382.700307] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.705853] ? sockfd_lookup_light+0xc5/0x160 [ 382.710364] __sys_sendmsg+0x11d/0x280 [ 382.714269] ? __ia32_sys_shutdown+0x80/0x80 [ 382.718690] ? __sb_end_write+0xd9/0x110 [ 382.722772] ? fput+0x130/0x1a0 [ 382.726063] ? do_syscall_64+0x9a/0x820 [ 382.730044] ? do_syscall_64+0x9a/0x820 [ 382.734038] ? trace_hardirqs_off_caller+0x300/0x300 [ 382.739154] __x64_sys_sendmsg+0x78/0xb0 [ 382.743225] do_syscall_64+0x1b9/0x820 [ 382.747122] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 382.752502] ? syscall_return_slowpath+0x5e0/0x5e0 [ 382.757436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.762287] ? trace_hardirqs_on_caller+0x310/0x310 [ 382.767311] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 382.772340] ? prepare_exit_to_usermode+0x291/0x3b0 [ 382.777369] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.782229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.787424] RIP: 0033:0x457569 [ 382.790642] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.809552] RSP: 002b:00007f430a50cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.817266] RAX: ffffffffffffffda RBX: 00007f430a50cc90 RCX: 0000000000457569 [ 382.824540] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 382.831844] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.839116] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f430a50d6d4 [ 382.846394] R13: 00000000004c38b6 R14: 00000000004d5718 R15: 0000000000000004 [ 382.853695] CPU: 1 PID: 15513 Comm: syz-executor0 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 382.862209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.871565] Call Trace: [ 382.874168] dump_stack+0x244/0x39d [ 382.877816] ? dump_stack_print_info.cold.1+0x20/0x20 [ 382.883019] ? lock_downgrade+0x900/0x900 [ 382.883036] ? check_preemption_disabled+0x48/0x280 [ 382.883059] should_fail.cold.4+0xa/0x17 [ 382.883080] ? rcu_softirq_qs+0x20/0x20 [ 382.892276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 382.892308] ? is_bpf_text_address+0xd3/0x170 [ 382.909897] ? kernel_text_address+0x79/0xf0 [ 382.914331] ? __kernel_text_address+0xd/0x40 [ 382.918743] FAULT_INJECTION: forcing a failure. [ 382.918743] name failslab, interval 1, probability 0, space 0, times 0 [ 382.918847] ? unwind_get_return_address+0x61/0xa0 [ 382.934946] ? __save_stack_trace+0x8d/0xf0 [ 382.939283] ? find_held_lock+0x36/0x1c0 [ 382.943370] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 382.948219] ? perf_trace_sched_process_exec+0x860/0x860 [ 382.953692] __should_failslab+0x124/0x180 [ 382.957945] should_failslab+0x9/0x14 [ 382.961777] kmem_cache_alloc_trace+0x2d7/0x750 [ 382.966466] ? __might_sleep+0x95/0x190 [ 382.970454] apparmor_file_alloc_security+0x17b/0xac0 [ 382.975669] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 382.981233] ? apparmor_path_rename+0xcd0/0xcd0 [ 382.985918] ? rcu_read_lock_sched_held+0x14f/0x180 [ 382.990941] ? kmem_cache_alloc+0x33a/0x730 [ 382.995271] ? d_set_d_op+0x31d/0x410 [ 382.999083] security_file_alloc+0x4c/0xa0 [ 383.003426] __alloc_file+0x12a/0x470 [ 383.007267] ? file_free_rcu+0xd0/0xd0 [ 383.011190] ? d_instantiate+0x79/0xa0 [ 383.015087] ? lock_downgrade+0x900/0x900 [ 383.019256] ? kasan_check_read+0x11/0x20 [ 383.023413] ? do_raw_spin_unlock+0xa7/0x330 [ 383.027827] ? do_raw_spin_trylock+0x270/0x270 [ 383.032422] alloc_empty_file+0x72/0x170 [ 383.036497] alloc_file+0x5e/0x4d0 [ 383.040061] ? _raw_spin_unlock+0x2c/0x50 [ 383.044274] alloc_file_pseudo+0x261/0x3f0 [ 383.048521] ? alloc_file+0x4d0/0x4d0 [ 383.052334] ? usercopy_warn+0x110/0x110 [ 383.056422] __shmem_file_setup.part.50+0x110/0x2a0 [ 383.061457] shmem_file_setup+0x65/0x90 [ 383.065448] __x64_sys_memfd_create+0x2af/0x4f0 [ 383.070137] ? memfd_fcntl+0x1910/0x1910 [ 383.074222] do_syscall_64+0x1b9/0x820 [ 383.078116] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 383.083496] ? syscall_return_slowpath+0x5e0/0x5e0 [ 383.088432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.093290] ? trace_hardirqs_on_caller+0x310/0x310 [ 383.098312] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 383.103352] ? prepare_exit_to_usermode+0x291/0x3b0 [ 383.108395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.113254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.118474] RIP: 0033:0x457569 [ 383.121676] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.140580] RSP: 002b:00007f75a46a7a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 383.148307] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 383.155580] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 383.162860] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 383.170168] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f75a46a86d4 [ 383.177445] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:20 executing program 3 (fault-call:1 fault-nth:3): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 383.184906] CPU: 0 PID: 15538 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 383.193406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.202758] Call Trace: [ 383.205355] dump_stack+0x244/0x39d [ 383.208999] ? dump_stack_print_info.cold.1+0x20/0x20 [ 383.214206] should_fail.cold.4+0xa/0x17 [ 383.218313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 383.223422] ? __save_stack_trace+0x8d/0xf0 [ 383.227766] ? zap_class+0x640/0x640 [ 383.231491] ? save_stack+0xa9/0xd0 [ 383.235133] ? save_stack+0x43/0xd0 [ 383.238773] ? find_held_lock+0x36/0x1c0 [ 383.242845] ? __lock_is_held+0xb5/0x140 [ 383.246915] ? leaf_move_items+0x9a8/0x3650 [ 383.251256] ? zap_class+0x640/0x640 [ 383.254977] ? perf_trace_sched_process_exec+0x860/0x860 [ 383.260437] ? check_preemption_disabled+0x48/0x280 [ 383.265466] __should_failslab+0x124/0x180 [ 383.269710] should_failslab+0x9/0x14 [ 383.273519] kmem_cache_alloc_node_trace+0x270/0x740 [ 383.278670] __kmalloc_node_track_caller+0x3c/0x70 [ 383.283628] __kmalloc_reserve.isra.40+0x41/0xe0 [ 383.288401] __alloc_skb+0x150/0x770 [ 383.292124] ? lock_downgrade+0x900/0x900 [ 383.296286] ? netdev_alloc_frag+0x1f0/0x1f0 [ 383.300713] ? kasan_check_read+0x11/0x20 [ 383.304867] ? do_raw_spin_unlock+0xa7/0x330 [ 383.309282] ? do_raw_spin_trylock+0x270/0x270 [ 383.314075] ? kasan_check_write+0x14/0x20 [ 383.318315] ? wake_up_q+0xb3/0x100 [ 383.321963] netlink_dump+0x7d5/0x1080 [ 383.325858] ? check_preemption_disabled+0x48/0x280 [ 383.330887] ? netlink_broadcast+0x50/0x50 [ 383.335133] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 383.340443] ? rcu_softirq_qs+0x20/0x20 [ 383.344445] __netlink_dump_start+0x59a/0x7c0 [ 383.348956] ? qdisc_class_hash_grow+0x720/0x720 [ 383.353718] rtnetlink_rcv_msg+0x809/0xc20 [ 383.357964] ? rtnl_fdb_dump+0xd00/0xd00 [ 383.362034] ? qdisc_class_hash_grow+0x720/0x720 [ 383.366805] netlink_rcv_skb+0x172/0x440 [ 383.370882] ? rtnl_fdb_dump+0xd00/0xd00 [ 383.374954] ? netlink_ack+0xb80/0xb80 [ 383.378861] rtnetlink_rcv+0x1c/0x20 [ 383.382584] netlink_unicast+0x5a5/0x760 [ 383.386681] ? netlink_attachskb+0x9a0/0x9a0 [ 383.391101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.396654] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 383.401683] netlink_sendmsg+0xa18/0xfc0 [ 383.405766] ? netlink_unicast+0x760/0x760 [ 383.410033] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 383.414973] ? apparmor_socket_sendmsg+0x29/0x30 [ 383.419741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.425289] ? security_socket_sendmsg+0x94/0xc0 [ 383.430050] ? netlink_unicast+0x760/0x760 [ 383.434293] sock_sendmsg+0xd5/0x120 [ 383.438015] ___sys_sendmsg+0x7fd/0x930 [ 383.442003] ? copy_msghdr_from_user+0x580/0x580 [ 383.446767] ? lock_downgrade+0x900/0x900 [ 383.450934] ? proc_fail_nth_write+0x9e/0x210 [ 383.455443] ? __fget_light+0x2e9/0x430 [ 383.459438] ? fget_raw+0x20/0x20 [ 383.462905] ? find_held_lock+0x36/0x1c0 [ 383.466987] ? kasan_check_write+0x14/0x20 [ 383.471237] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 383.476186] ? wait_for_completion+0x8a0/0x8a0 [ 383.480792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 383.486340] ? sockfd_lookup_light+0xc5/0x160 [ 383.490847] __sys_sendmsg+0x11d/0x280 [ 383.494749] ? __ia32_sys_shutdown+0x80/0x80 [ 383.499166] ? __sb_end_write+0xd9/0x110 [ 383.503262] ? fput+0x130/0x1a0 [ 383.506554] ? do_syscall_64+0x9a/0x820 [ 383.510536] ? do_syscall_64+0x9a/0x820 [ 383.514527] ? trace_hardirqs_off_caller+0x300/0x300 [ 383.519658] __x64_sys_sendmsg+0x78/0xb0 [ 383.523730] do_syscall_64+0x1b9/0x820 [ 383.527639] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 383.533015] ? syscall_return_slowpath+0x5e0/0x5e0 [ 383.537953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.542805] ? trace_hardirqs_on_caller+0x310/0x310 [ 383.547831] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 383.552854] ? prepare_exit_to_usermode+0x291/0x3b0 [ 383.557885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 383.562740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 383.567934] RIP: 0033:0x457569 [ 383.571134] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:29:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 383.590037] RSP: 002b:00007f430a50cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.597752] RAX: ffffffffffffffda RBX: 00007f430a50cc90 RCX: 0000000000457569 [ 383.605022] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 383.612295] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 383.619571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f430a50d6d4 [ 383.626853] R13: 00000000004c38b6 R14: 00000000004d5718 R15: 0000000000000004 21:29:21 executing program 3 (fault-call:1 fault-nth:4): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf0ffffffffffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:21 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r2 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xd13d, 0x2) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x43c5c8a5}}, 0x18) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000040)=""/218) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, r3}, 0x14) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000380)=0x0) ptrace$poke(0x5, r4, &(0x7f00000003c0), 0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000280)={0x2004}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 383.786852] FAULT_INJECTION: forcing a failure. [ 383.786852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 383.798711] CPU: 0 PID: 15556 Comm: syz-executor3 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 383.807212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.816575] Call Trace: [ 383.819198] dump_stack+0x244/0x39d [ 383.822852] ? dump_stack_print_info.cold.1+0x20/0x20 [ 383.828075] should_fail.cold.4+0xa/0x17 [ 383.832164] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 383.837286] ? find_held_lock+0x36/0x1c0 [ 383.841374] ? mark_held_locks+0x130/0x130 [ 383.845641] ? lock_downgrade+0x900/0x900 [ 383.849807] ? check_preemption_disabled+0x48/0x280 [ 383.854840] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 383.854859] ? kasan_check_read+0x11/0x20 [ 383.854877] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 383.854896] ? rcu_softirq_qs+0x20/0x20 [ 383.854912] ? rcu_softirq_qs+0x20/0x20 [ 383.854926] ? unwind_dump+0x190/0x190 [ 383.854954] ? is_bpf_text_address+0xd3/0x170 [ 383.864583] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 383.869299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 383.869314] ? should_fail+0x22d/0xd01 [ 383.869331] ? __kernel_text_address+0xd/0x40 [ 383.869354] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 383.910942] ? __save_stack_trace+0x8d/0xf0 [ 383.915287] __alloc_pages_nodemask+0x34b/0xdd0 [ 383.919973] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 383.925001] ? save_stack+0xa9/0xd0 [ 383.928654] ? save_stack+0x43/0xd0 [ 383.932297] ? find_held_lock+0x36/0x1c0 [ 383.936392] ? trace_hardirqs_off+0xb8/0x310 [ 383.940856] cache_grow_begin+0xa5/0x8c0 [ 383.944913] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 383.950450] ? check_preemption_disabled+0x48/0x280 [ 383.955486] kmem_cache_alloc_node_trace+0x670/0x740 [ 383.960632] __kmalloc_node_track_caller+0x3c/0x70 [ 383.965568] __kmalloc_reserve.isra.40+0x41/0xe0 [ 383.970321] __alloc_skb+0x150/0x770 [ 383.974032] ? __netlink_dump_start+0x592/0x7c0 [ 383.978705] ? netdev_alloc_frag+0x1f0/0x1f0 [ 383.983130] ? __netlink_lookup+0x5dd/0xa90 [ 383.987481] ? kasan_check_write+0x14/0x20 [ 383.991725] netlink_dump+0x7d5/0x1080 [ 383.995627] ? check_preemption_disabled+0x48/0x280 [ 384.000644] ? netlink_broadcast+0x50/0x50 [ 384.004868] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 384.010136] ? rcu_softirq_qs+0x20/0x20 [ 384.014129] __netlink_dump_start+0x59a/0x7c0 [ 384.018653] ? qdisc_class_hash_grow+0x720/0x720 [ 384.023407] rtnetlink_rcv_msg+0x809/0xc20 [ 384.027645] ? rtnl_fdb_dump+0xd00/0xd00 [ 384.031712] ? qdisc_class_hash_grow+0x720/0x720 [ 384.036476] netlink_rcv_skb+0x172/0x440 [ 384.040528] ? rtnl_fdb_dump+0xd00/0xd00 [ 384.044591] ? netlink_ack+0xb80/0xb80 [ 384.048528] rtnetlink_rcv+0x1c/0x20 [ 384.052243] netlink_unicast+0x5a5/0x760 [ 384.056312] ? netlink_attachskb+0x9a0/0x9a0 [ 384.060777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 384.066323] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 384.071368] netlink_sendmsg+0xa18/0xfc0 [ 384.075436] ? netlink_unicast+0x760/0x760 [ 384.079670] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 384.084630] ? apparmor_socket_sendmsg+0x29/0x30 [ 384.089402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 384.094953] ? security_socket_sendmsg+0x94/0xc0 [ 384.099714] ? netlink_unicast+0x760/0x760 [ 384.103966] sock_sendmsg+0xd5/0x120 [ 384.107683] ___sys_sendmsg+0x7fd/0x930 [ 384.111667] ? copy_msghdr_from_user+0x580/0x580 [ 384.116439] ? lock_downgrade+0x900/0x900 [ 384.120594] ? proc_fail_nth_write+0x9e/0x210 [ 384.125094] ? __fget_light+0x2e9/0x430 [ 384.129061] ? fget_raw+0x20/0x20 [ 384.132498] ? find_held_lock+0x36/0x1c0 [ 384.136555] ? kasan_check_write+0x14/0x20 [ 384.140785] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 384.145719] ? wait_for_completion+0x8a0/0x8a0 [ 384.150320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 384.155870] ? sockfd_lookup_light+0xc5/0x160 [ 384.160385] __sys_sendmsg+0x11d/0x280 [ 384.164284] ? __ia32_sys_shutdown+0x80/0x80 [ 384.168696] ? __sb_end_write+0xd9/0x110 [ 384.172768] ? fput+0x130/0x1a0 [ 384.176054] ? do_syscall_64+0x9a/0x820 [ 384.180015] ? do_syscall_64+0x9a/0x820 [ 384.183984] ? trace_hardirqs_off_caller+0x300/0x300 [ 384.189076] __x64_sys_sendmsg+0x78/0xb0 [ 384.193131] do_syscall_64+0x1b9/0x820 [ 384.197018] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 384.202370] ? syscall_return_slowpath+0x5e0/0x5e0 [ 384.207295] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.212141] ? trace_hardirqs_on_caller+0x310/0x310 [ 384.217144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 384.222148] ? prepare_exit_to_usermode+0x291/0x3b0 [ 384.227171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.232017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 384.237212] RIP: 0033:0x457569 [ 384.240404] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.259298] RSP: 002b:00007f430a50cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.267013] RAX: ffffffffffffffda RBX: 00007f430a50cc90 RCX: 0000000000457569 [ 384.274300] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 384.281555] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 21:29:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xfffff000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 384.288821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f430a50d6d4 [ 384.296090] R13: 00000000004c38b6 R14: 00000000004d5718 R15: 0000000000000004 21:29:22 executing program 3 (fault-call:1 fault-nth:5): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf0ffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='%so9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:22 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x24000, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000080)={[{0x1f, 0x5, 0x2, 0x8, 0x1, 0x0, 0x3f, 0xbccf, 0x8, 0x5, 0x2, 0x5, 0x6400000000000000}, {0xffffffffffffffe1, 0xffff, 0x4, 0xb3, 0x5, 0x8, 0x58, 0x2, 0x2, 0x2, 0x7, 0x6, 0x3}, {0x3, 0xc, 0x4, 0x0, 0x0, 0xffffffff, 0xfff, 0x39, 0x180000000000000, 0x9, 0x2, 0x3ff, 0x80000000}]}) 21:29:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf00, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:22 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = shmget(0x2, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/74) 21:29:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x7}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x304, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i%o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:22 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc00, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x10000004, 0x8000001ff, 0x1689}) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@loopback, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) 21:29:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x20000710}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x40030000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfffffffffffff000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x9effffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='is%9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xffffff7f00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x9fa, 0x1) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/37) 21:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x2d5, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept(r1, 0x0, &(0x7f00000000c0)) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001780)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x560d, 0xa, &(0x7f00000015c0)=[{&(0x7f00000001c0)="eabbeb4ba413fe427706e26518ab46ab4b", 0x11, 0x62}, {&(0x7f0000000200)="84bee5126ae1ca48f3ea3ee8e6caff4b70d5f2835776873eae56276c27112454f71155c76e6b27f71da6cbba12994bf720c34c30c7a62f637088d9b440de0aad7040a78c204fd10e742d62339304c987da4235f5af0f36fbd16030271934fc5a656b7db37f6363a216960440fb205fe54a2e582072bb410e8e446f10cf2fb7a62c7ca014b28a648877c0bbf0e09bcaca4fc1324b8d55530cee38700be103aa0b47022c8d8aa3dbbbf0affa6b9f2b7a9704d28a339a2095dd39e4ab4612c1df3e2436f53769895ea3e8796a7c63e1a7ec8093bc3b", 0xd4, 0x8}, {&(0x7f0000000300)="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", 0x1000, 0x74e5}, {&(0x7f0000001300), 0x0, 0x100000000}, {&(0x7f0000001340), 0x0, 0xfff}, {&(0x7f0000001380)="914be1054958106cafd1fa975c2bc7d40f180b2a03883fc38dc8406a24b00c1bc780e28e68760e9dc720e6980c0efab96f5e6a108ad51a9d4ad3af9a6488a8bcfe09929d", 0x44, 0x47198991}, {&(0x7f0000001400)="d3ab913370a7e2d0d016eb76cb918653536321ba5b8912984b88d0115add3599cc84f01fbf27fdbd280e7c5715deb73113183afe71a02e0b9ee40e68fe5175c6b78c413bcd6e9923ef2a06d3ab673f7fc2e664", 0x53, 0x3f}, {&(0x7f0000001480)="914d38068fc3d0ae3a8a106a6e4c1d61dfd5020b68ec9a3ab9d7b5d6631ad88b201d34b68ccc26b8b112405ae69879069b38119d7c6240dd402d42805e6e267df2f4051da2a3b18eb19477d3a312e258a1790197301d0372900dbb9c131b9c031eed835cc5ff7b18af657e77896959fd068f4e40d40dce81bedf7b111f4c7a8e6f9fde9508c1a4f8a67b9c52184092254b721320b835c6741ddc20c7f69d659ac579bfd6ce9190fb3d367556", 0xac, 0x7}, {&(0x7f0000001540), 0x0, 0x8}, {&(0x7f0000001580)="91695b2035bef45eff73b806c6c00a84def1", 0x12, 0x81}], 0x8, &(0x7f00000018c0)={[{@session={'session', 0x3d, 0x62}}, {@session={'session', 0x3d, 0x49}}, {@utf8='utf8'}, {@hide='hide'}, {@gid={'gid', 0x3d, r6}}, {@check_strict='check=strict'}, {@check_relaxed='check=relaxed'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'lo\x00'}}, {@fowner_gt={'fowner>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'self'}}]}) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso%660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf0ffff, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x8100000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xf0a, 0x40000) openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) 21:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x200000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf00}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9%60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x400300, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:23 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x7c000204, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/37) socket$inet_icmp_raw(0x2, 0x3, 0x1) 21:29:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000140)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xfffffff0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x81000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x2000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96%0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:24 executing program 5: r0 = shmget(0x1, 0x2000, 0x48, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/37) 21:29:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x11}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'tunl0\x00', 0xffffffffffff8000}) 21:29:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x9effffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xec0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xd5020000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966%\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:24 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x10000) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x88, 0x1, 0x3}, 0x80000000}}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/37) [ 387.050009] binder: 15796:15801 BC_INCREFS_DONE node 9 has no pending increfs request [ 387.077086] binder: BINDER_SET_CONTEXT_MGR already set [ 387.082972] binder: 15796:15803 ioctl 40046207 0 returned -16 [ 387.089276] binder: 15796:15801 BC_INCREFS_DONE u0000000000000000 no match 21:29:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8000) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x38b801, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000080)={0x3, 0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) accept$inet6(r0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x4030000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xc00e0000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966/\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:25 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x10000, 0x4, 0x2000}, 0x4) vmsplice(r0, &(0x7f0000001340)=[{&(0x7f0000000080)="f14c62b0273d08317f11e31b5071d0ec1802ccc170c10dda65f3467a3b2c494021ffd6fb8b4a80083b86daa8f8306e4d8e4b842081a0fa5d05548b38b5da109354df0b1777b47747bc4b45273352338617dafef17eec49cf50642659b641356bbd752dc16f8d372cc96a0ea080a6e0e2ce75ba9cb86c411c2303a264c0fa9ad721bd9bbc28787baf314b86f691a66f055b1b04818ea55c2aadc9d70818e65763f8e5c757cce2edcf46a286bc3a1e29850ace66d0996812442737b3e41e4da23258b10903ca5cd1593289b1ffa5159a8ec7fb5b117e24362182e934b20d69e8bbed1da3bae2ad7fe7eb04a809be9a5a49b0c4f73fd10df00a7faa18447eabde4d62107e2d25e5f730db219ddaec82de71bce2de59645703d5c2696e4e37106fed158226afe6b8dad3ee138b2843633dc99de820560893eb57d286f646c20bfde7855d9a9b8a59f558a66b9b8c7adbe6c6cea9491fae8a637e6d4389da89128bc9a6673af42885e3747164713a23cf1badc2e703ae4a6284a9887aae32b2f5767afaedbb57d03a1f02c694200498f79f8139684d049e70dd8b4664a30cffa7cacc5aef056ee9d5e5b110602e3614891cc01d678b8f4e991d14c4111f30bf675ef90ec640b6bb9972c38a50f3d28b58ffd6597fc343ea992cddf2d27e46b6bc1466c0dddf940a50b38e09938160cc394d5b1b4ce0d740df0ad58321e37c20f6e34262568205a1461dfda6710b6cbf3ebc25d52c683694957be5d9877641de782a64da3260bdf32200357293a87a55e75e1f6dae42fcde4b0e8ea82ede9af094211fefae7488de1542ed9411ff434b5d0447c13864afaa4563e1ad7be33eee22f7d7123159715cb7bbe290505ed94c59ffa4cc7329aab535604867b7deac676d0f3cac98e38ef9ca6abf306323a763204205c57e0e3df7ca98245751ccd5dfa88af3614480c4b815b89ad68b8cd65e322de2a758e1835b32a4361636bae47849f4d9364b29fb1d86c5e77ed3b2a0d69f492c6ec963f923fcb596c72db4b4cc26302194f43cebbc66495e2979c80fed25c16f81c45f6d3a677a6057e19c9a47239d4641e2a4acb92dae51770add1e9b497bee10c9271c6eb48b453559562ab9627015d6de30329366eeae6f8a871c567807f1603644dfe22943831ea746b5e43da24c3c116925a95e33f99351379c354addd1e4e6ee4696ce20c198ad567eee29aa66583f668995a2753f024a55d0c0cd93b4baf18abec8608c7d4bfe9f95e9bb471526f22210628f084f5cf3df2210a437ad24cdefeb22e4223d4626a9e6b26107c86260199896ed233f90f3de47b0c56f599cab642e4f1b9425dd606516e9eafcd34ae14c09093ea6169a8771deb393f6b7c03af9735da2304e622d0564954d1a441a2a20343443ff7c2ae8324dab6ba86a89e1f9da5c99f18fc3cc85c7b7b7f21b5f8733484320198ac18618b02363e4baaecd72f245d7417362963a9c85f94389b55180e2b5e0771595282ce283b838c9949a221accbf44e180edd13ed86bdec8ce3fcb4f2f95b84d169f0712ef3298be981de8aa04b433b61b77ce5892188d402867ec8f8cb4ccc632a41915bcab4e7f93c075fb1e10884fc6798c3448eb316ee61baf7de0c895ff11f379f47d48dab4c469ef005b711eb17d3a8ed0b632c4275b9956cd0164d2b74e4569f443b7a8c801c60fc4ddfaced1bb7431cc69a89d828af61cc0e60bfe24763b39b170e88ec846738c023e6a870ece7834d84cc3d0a350a3c8f33ec86160b185d46984d852dfc3286718ffcc6756cef7bd11f6365f09af0aa5b1f01433c81a50a2e4fae4999a74410b8e7be8562fc17c6a91fa173c1a05d7c890790bbebf471437113ccf26b153194aa4de6b763f434adcf908b3d9ccbed086de80161e6d5a48fdbe6499db608d2ead05b6aaf6102eb3394f368d78daa13ccaa2d7b305aac0f99569a20e079d0a50835a4318f9012089cfd2782cc0255dc3f309620dbef7da4e95e3ac50dc91a42bfa91a7244bb3a658a95d32209417c62d8e985e8f6bb103b5d6c31b9303a80e49dfec9c21256b64a5c3581eee1e0008674fa5675339d11b1144f299fd5c577315b5e42173884a2216d1236db7fdb5ba6883ef9147b9e302ae9b447d8370f5703f8febd86005a8865b6c87ca8ca0b440ddc0fe06220bf84aac3e6ed66590fcb51339f5cd843a112880668bcff6b7e47cc14a14cc22fff1b6325a1e24f0cffd54ff4b2532a95a21ec4d79cc5e561341dc744d7ee7dee7a12775978864b01d63aeb7aae27872a5e139e010b47657b43be8c076f026d035b79646635cb21a4726a7132f107918266841fb961b63e597bdee8a32383abb2e8e2a4c6b528bb0f655bf7fddc0c8a6ee3fe4ab8c6e4f8b18abd16f7a2a275f716253ae6a998fcbde2d35aed7924d91458629d10d69dca8d42c0ffad86ba069e7580f7dba80036d6db1c17e636eb5efa2004aa8458dddcb6b4272239396acb7729a3d9b0b4f6c486bc21fa969df61aff9371d907e517641aacb8ec70d904faa1754eef050af3e7255a17a50a19df9d4f3c76c7b79a71674e71bf3d1d41f00cba8b14c6232d6745dbffd5708c3887f5430cd6aeb0ba6e1f49420a01df289ee930a0ba6c1b6fda5b036d669448c4c4b4f34b598e5868dbec3bacc6e54699bf7ac3ac031dbc40b9810f1297cf34ef2d97dfff73401d75d74ee354dfd70a3a91c38d86d7d780cd2ea8a97ebd6392f11a3b1fa71d806457306647db525465e5ed6e7134888e16af1072beca5d97e7530d51e6f9f158dfda02607a57f6a0051af45533c067fbf3ab077e345de7c93551c849a6b08e1de5032adc492cb74b487c57b74e67c4fe08bf1ddba5d106d6db53abaf86a19f2e7f93d6f016032f0ad42c86ecc61fcecf45399e47aeab9156db4aab275157bf9b1486e9e5c735d09caf508f132a50fd8b06e13a472cb5b30a8b5f5928915cbc71e86a08d72137966dbf854d03937327b052f882952ea05603008caeaf43b906713488089456576b32a42936f57477e62d7535df34fbf6fe0a849361f32bd62419867930250f46deac7081b14d86eb62a8e1ffc4e44eb8a4d4895d5527659c5baf6456a28fecb735f24b816ef8b5322e6708eaa2323c82c6dd029d6d07bc94c289896e148bc67d466506f9b010ad605e679eab0bb6e2d4d929a11cac86cbc7e0115da9e950fa13468afcb8fd7b22895554c31dbe3a319524b5274506b6ab3ca28db4edb7df6662e80e897dc992b5abec75d8089094d2f95e1c740905ab4528bcdfa5d3041b9a7fab3eed955139acd25f9b4324cdc0b0d34db6c38abf79333f0b81d3d4bde10b53e7ec33f62ac05235366d36df3e8f9343223cfba5904c97054c3fa56a6cad41d78cc6dc0587502482981b7c286f3dee6dfc655c83b67631eb3fadb7e6ad1da6ab340b4c74902c8e30ac5736edcf1c14d4c76ad50876f44a6d8a1353501f1e2658ca840d284695c82008670f4ea1b5fd535b7eb7003652440eb076dfe4d6edef03680d76b20820b3cfb28eda42ef23ae5e4c7b542481900010a06bed65f9ff1bc2bbd36432d03a0da39f60de8c5282cfa776d97c06f41d223019b9ac0373f61593f99a9b14b377fb33bac93cd5606699c40acf5196cfb08cb704cc5fda790afcc9996327786e396bad24a08aad5148797248d080a5def7ea2ae0449e7df106ed781e96231b41fdd1082d1430f1b063b2023ab33fdf95b171e153b6011dcf4482b24e06697292666c55c4816933b21b48d33e5801773cd8b7e42dbc92560e2663cefaabc5eb96e0d73f66368ee23dd9d369b5bf6aa5ad21893ab284b13fc4f053bb4276e0220c0a77721ddd1be5f53dbe7c5bdb10bbd78a5ede913cff17e3080d5885ffa7ee05aaca3a3c25bcaf19d2e4dd1deca0e8b52406e7e939081a67ee6a7d0abd0d0562087b72b9826bb25a38b7b0974530c95a45c6694303c7811c3f3a0599b25aeb0fa94f40a722a45e35b078dc710c27f81c700cbdcd4427415136d3e02901b911a77d10eb2e93675b915befc5f33a7fc3ff29f14bce825a640e4b5bb00d45898e10f1813f7fb3524cb832ac122d45eb29d1ed3a8385e201e8c126c6aa10b43109725b6d6e673bce91a2923de0cec20f6f1dd78f19357a646d5f4c8ae4121bed52b0d9ab077f70e15016cf09a175ce267564ca2fe2b14a1b4cd3492dbb45f9a585760f66cfa7e963efcf584375f83e1c806ea31fb3a1c337888337153b4337d0980bfc1cf6ea1d656e55d17609cde2736e64379609d7f41c59ccc07e18e85a6131053364a33f1026d7268cc331e7dfb57409bc65f5961cd27ac070817244947d776f2275ced0525269470982958450c2814d43b80fb777178b3c24c3e0e9e7be3028d03fbf4c978706650f95106b7d364aa1b79db1571c09514aad2eaba9676d5ffe0cdd90bcad0eacf6cdf2c289795c7dab3331aaf92bb6c642ddd6a5acb85a9ea1cd10f54cc2b7725f6aeac169724b00b9ff12622ac71637ac9f6bd753e64a7da88984b3b9c027b5b5c8bed3b4a2b1cc5a9af49b4c1dfed26704472847a8d9787345d24cf6e23bdba0954b587e85c94b46e7f0ca75a8f72334521a917c51b0aee6daf8e4451b06f993dc1a439354bf1d60c3e03ab38c737384b99070a593ce0a4f4b670c4066e65a23a02a23d843001e629e6e1737e05febc78a3805a8c7f1b18e713e83d2b202d7a88efced4d555044f1be01170bcf7a4561546218852c4ed83c077de4356426215e20f1d1dd8ac063542fb818e844b1fef4df7c9fcd6882a8532d2a5743b2ce5399f26db5e0da20c7a5c47620a4743e1aec30d39c84d4645c26fa73d8ddad79fc86cbba47a1c4b0770eae7ade49640418a9234b13d32293e27ddaea31058222a7938c656f01d3ba399799d54336043426010178bc194e20d2cddbda644eae5aa7150326646e22d2ab55bdc9683f08db0cf2773f6c1caf9f4b96a45667f6344a99c56232e9638bb0de8675e43e5ea98856362ec02c5f80b76fe71bcb5fbb94dc8a329e6b163edc0922d47f2e18465ba3b993515b701d7dd8762dc95e05f09bd02f440af02043c5586054ae34d0571a3a960ebdca40152ded5c411eb4eb24612dc016d75e300b088ab30fc21155d851bde2f1cc39ea3c3ecbd596c8c2e7391f1be87bc811546f72ec9c54c912b064262d9ed42b74b25a5e519fea2b93467306ed75247ec657ed5765a1afdefa3b4fe528b6114aac942f5ff4d9474e6dc775c07a79184e43a681196d459a0b9c315d0ee37d54b2380ed66f23b846753a81e044b12af3f3d3f23565cbdc05ff86d39ff574ad84ebb8c32cc8b1746876a3162af67b3a77ed38a8de57b0494ab906712f0c6be739313996dfadf959580b39adfe765f3e1ef4f284df114d020adba7177daa77439e79b6a2cf08448c68a6bc250a8227445eeea9da05e6b91f6e1e83c3bef7cf04716e9c7c7204744f3b5d8279eb5e03ce6229015d94c43b5e102159786797d4b289b74803c3d902d9fe76ce51bcbeabe1832bf0022d3c5d2e6404dffad7990ae362b3ddba2c61346b1d835ce56266fdd61dc108c207aaa3535deb329f15fd4c5ec986975b843c2f91b92db33f9f660676d7131c7a2eefc358f8ff67460c27cf7f5894de011f13b1b062c452eff41b527d7fc27818e90736d97cbc95eef61e6f9d5bc79058d6a9c1e2c689c8547109f1fb693f235a97dd3fc022e354fc7a2f0f246db2f11bcb624a2e2424fa0c0351a40f73aea04b6a89e790f32d5e7fb232ac503f97b11bc", 0x1000}, {&(0x7f0000001080)="aede54ff5b5d8518c46b4ee24c591b3aa3a320efb2de58f29bb8e4ac68995225fb3b48689f7f9918476b4480ff832e2fab51f9be11373a449fd225560de4c242", 0x19}, {&(0x7f00000010c0)="1051d44221750e4dd86efdcfbe7491c9f14bd60783f32ee9c1d8005b27af7b21ad096a7b84efe52e4217f84c199094263a3ffacfd0c93d8012dfff506e46202d656f043bd633627c692541eef3f63ca739b915d59084300fd58b8eab56a21bbe6906528004b3769f94d83fba016798584c71621aa36a8e474d2773a9710f5000308e5e393840c222f8db03c4b61b1c0b50839a9c0033615d342aa9ca6870e80aacaccf4a82762a169822538a7e429b066471ae6cf08b1aba", 0xb8}, {&(0x7f0000001180)="e422e063dbf4eb4635d90540389f6718edbf9fa64b8dffb2a75d677ff880aed87161c20ed4829e1992ff706f427192e39ee7d18ca35a58663d0cac5b04b17adf19c4b05fecd9a6772a1c33eefb724722b4e3f0e10f2febf8487c09107979c8f3459648e0541a996e4a4c71decc8a204492510998b85c9d855bc39bd9adf6625e3c40cf69bcc5ef2037b6f25953595e23b532715bb7b4dfec506372a8e3b8a6b56e8edb6321c305a3", 0xa8}, {&(0x7f00000013c0)="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", 0xff}], 0x5, 0xc) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) 21:29:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf0ffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:25 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/37) 21:29:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:25 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = socket$pptp(0x18, 0x1, 0x2) fchmod(r0, 0x136) 21:29:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x440400, 0x0) r3 = dup2(r1, r0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r0, r3}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xb040000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf0ffffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xd502000000000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:26 executing program 5: shmget$private(0x0, 0x6000, 0x0, &(0x7f0000ffa000/0x6000)=nil) shmget(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffa000/0x1000)=nil) shmget(0x2, 0x4000, 0x1004, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget(0x3, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/37) 21:29:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x81000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:26 executing program 5: shmget(0x2, 0xe000, 0x0, &(0x7f0000ff0000/0xe000)=nil) r0 = shmget(0x2, 0x1000, 0x21, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/37) 21:29:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x8100, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636e003", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xf000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xc00e000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:27 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x2, {0x1, 0x3, 0x689, 0x1, 0x8}}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/37) 21:29:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x200000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363002", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xffffff7f00000000, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:27 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/4096) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x65, 0x80) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x9) 21:29:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x100000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 389.810095] Unknown ioctl -2143271654 [ 389.828946] Unknown ioctl -2143271654 [ 389.840341] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 389.911644] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x400300}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x2, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:28 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/37) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f00000000c0)=""/4096, 0x1000) 21:29:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x300000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:28 executing program 5: shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x54000150, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x101, 0x8, 0x5, 0x7, "f6510e6022cc9e0eb914718c5e16810eae66c1a97b9ba2076760b4dfe5a43930"}) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x6a0000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x9ad5, 0x3, 0x6, 0xa7c, 0x2, 0x1, 0x92, 0x1, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x100000001}, &(0x7f0000000100)=0x8) r3 = shmget(0x3, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) shmget(0x1, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000180)=""/37) 21:29:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x403000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xc00e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 390.623827] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf0ffff, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:28 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) [ 390.685038] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pkey_alloc(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x8100}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x34000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:29 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x3f, 0x28, 0x1, r1}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10001, 0x101000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x1878}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x40, 0x1, 0x2, 0x7fff, 0x3, 0x2, 0x77ff, {r3, @in={{0x2, 0x4e23, @local}}, 0x9, 0x3, 0x3, 0x46c, 0x2}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0x8, @remote, 0xd58d}}}, 0x84) 21:29:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x9effffff00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 391.524569] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:29 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x800, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e24, 0x8000, @empty, 0x100000001}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x3c, @mcast1, 0xe8a3}}, {{0xa, 0x4e21, 0x7f, @mcast1, 0x4}}]}, 0x190) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="a61fd660794db4a7bacf42573e71307314e0681dc759335edd13523d930c41447446dae2d875544919d5d46a4d68aa3eb1f3759b8468c5c88d79c1fefd5c8a32749478fe20d25354d0b9a6fe87609882da5890febe472cf7c2022af3082e27763e438c18476156640c44e9260805206aea26faa76ed3bcb2f6f40ff62921545e2a7222cb546629ddb1442b31ec73b3dfe1ae967465d55832effa0afa21252eea238f19c4c1bb9bffcd5f40b7541155723bc8e8619b1c1ff2ee947fb470bd08d83895aea05788e3ea3ca4eef496f893655e70dff751c9df678af53bb58c046537e006ce6b6e67bf35836ccfef1a80bf4d") shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) 21:29:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xd502, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 391.604636] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x200000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:29 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x54000008, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/37) 21:29:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x1000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sync_file_range(r0, 0xffffffffffff0e47, 0x995a, 0x7) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0xa, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x444d, 0x0) mkdirat(r5, &(0x7f0000000080)='./file0\x00', 0x110) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:30 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) 21:29:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80002, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xffffffffffffffda, 0x5}, 0x10) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/37) 21:29:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xffffff7f, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x100000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 392.541056] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:30 executing program 5: socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) 21:29:30 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 392.646976] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363004", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x8100, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xffffff7f00000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:30 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/37) 21:29:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf00000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xf0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:30 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/164, 0xa4}], 0x1, 0x0, 0x0, 0x40000002}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0x1}, @in6={0xa, 0x4e24, 0x30000000000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x20, @mcast2, 0xff}, @in6={0xa, 0x4e21, 0x80000001, @local, 0x605}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x7f05}], 0xbc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000340)={@loopback, r1}, 0x14) 21:29:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\a', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x403, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:31 executing program 5: shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmget(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) r0 = shmget(0x1, 0x1000, 0x8, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/37) 21:29:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0xfffffffffffff000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660L', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x2}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x40b}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:31 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x10d5c0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x40, @mcast1, 0x80000000}}, 0x8, 0x7, 0x0, 0x7}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @multicast2}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x33aa}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x5, 0x101}, &(0x7f0000000100)=0x8) 21:29:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x40030000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:32 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x400}, {r0, 0x121}, {r0, 0x14}, {r0, 0x4070}, {r0, 0x80}, {r0, 0x40}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0xff}, 0x8) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000080)=""/72) r1 = shmget(0x0, 0x3000, 0x542, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/241) mlockall(0x0) 21:29:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x9effffff00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x8100, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x8100}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 394.678397] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf0ffffffffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 394.755284] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xfffff000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf00000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 395.000533] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x200000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xffffff7f}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xfffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:33 executing program 5: shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x1004, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x54000200, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/37) 21:29:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xffffff7f}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffff000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:33 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x0, 0x40000) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000200)) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@mcast2, @in=@dev}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xdb) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0xd0e6, 0x13}) [ 395.657901] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:33 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 21:29:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x3000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf00}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:34 executing program 5: shmget(0x1, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmget$private(0x0, 0x1000, 0x7c000000, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0xa04, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/37) 21:29:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = request_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='lo\x00', 0xfffffffffffffffb) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhci\x00', 0x20000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="8bf43bf3bef723ab8b0261699de9ab3bae088f808ca046977ab5dc564b3232222302e33222fcc30dd04b5f3ee3e37aa76a5c43c03b5ec88370a170b2cf3fc23a73dbdf318ecfc5d3abbd4ce67a7f88e7e52ec671b2d3d16bfc0c7a34574ff59f1fad0554ba0946028be521a60aeee17eb41cee9a1e427da0", 0x78, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f00000002c0), 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xb04000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x304}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:34 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20800, 0x100) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)={0x2, [0x4, 0x20]}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x80042) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x2) 21:29:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x8100000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x8100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 396.564119] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 396.624028] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xd5020000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x2000078000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/37) 21:29:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xfffffffffffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x2d5, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 396.891437] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 396.985774] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x800000000, 0x0, 0x0) 21:29:35 executing program 5: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x40200, 0x0) syz_open_pts(r1, 0x200) getsockopt$inet_buf(r0, 0x0, 0x3f, &(0x7f0000000200)=""/130, &(0x7f0000000100)=0xfffffffffffffc8b) r2 = getpgrp(0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x8200, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x2, 0x1, 0x401, 0x1, 0x0, 0x40, 0x1, 0x1, 0xffffffff, 0x0, 0x9, 0x0, 0x10001, 0x100000001, 0x80, 0x3ff, 0x3, 0x2, 0x1, 0x9, 0x8001, 0x7ff, 0x5, 0x20, 0x6, 0x4, 0x4, 0xfffffffffffffffb, 0x2, 0x3ff, 0x7, 0x1, 0x9, 0xfffffffffffff90e, 0x80, 0x7f, 0x0, 0xf8, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1248, 0x0, 0x2, 0x2, 0xcc7, 0x0, 0x3c}, r2, 0xd, r3, 0xb) r4 = getpid() tkill(r4, 0x17) 21:29:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x8100000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xb04}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x403000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 397.460038] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf0ffffff00000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:35 executing program 5: getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x53, "547e477ef7722f1bc74b0b4485ba44176637e022990e148b5c0f93d4559d03312053b09ff3ea3f718f3cca28108ec8de88f55dcedc05a3932842dd4372a81b7cf70bac56a2e9485cf5e0e4a035e6667c5ca131"}, &(0x7f00000000c0)=0x5b) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r0, 0xfffffffffffffdde) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r0, 0x7}, 0x8) [ 397.574397] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 397.823643] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf0ffffffffffff, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x200000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0xc0000) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) finit_module(r0, &(0x7f0000000080)='\x00', 0x2) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/37) 21:29:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000140)=""/233) 21:29:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:36 executing program 5: 21:29:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xd502000000000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 398.511462] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 398.580854] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:36 executing program 5: r0 = shmget$private(0x0, 0x400000, 0x50, &(0x7f0000c00000/0x400000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/37) shmctl$IPC_RMID(r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x406, r2) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="cac72076e000dde7085587c7a9b45c9e", 0x10) 21:29:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x1000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 398.877405] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:36 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20800, 0x100) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)={0x2, [0x4, 0x20]}) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/37) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x80042) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x2) 21:29:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xfffffff0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept(r1, 0x0, &(0x7f00000000c0)) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001780)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x560d, 0xa, &(0x7f00000015c0)=[{&(0x7f00000001c0)="eabbeb4ba413fe427706e26518ab46ab4b", 0x11, 0x62}, {&(0x7f0000000200)="84bee5126ae1ca48f3ea3ee8e6caff4b70d5f2835776873eae56276c27112454f71155c76e6b27f71da6cbba12994bf720c34c30c7a62f637088d9b440de0aad7040a78c204fd10e742d62339304c987da4235f5af0f36fbd16030271934fc5a656b7db37f6363a216960440fb205fe54a2e582072bb410e8e446f10cf2fb7a62c7ca014b28a648877c0bbf0e09bcaca4fc1324b8d55530cee38700be103aa0b47022c8d8aa3dbbbf0affa6b9f2b7a9704d28a339a2095dd39e4ab4612c1df3e2436f53769895ea3e8796a7c63e1a7ec8093bc3b", 0xd4, 0x8}, {&(0x7f0000000300)="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", 0x1000, 0x74e5}, {&(0x7f0000001300), 0x0, 0x100000000}, {&(0x7f0000001340), 0x0, 0xfff}, {&(0x7f0000001380)="914be1054958106cafd1fa975c2bc7d40f180b2a03883fc38dc8406a24b00c1bc780e28e68760e9dc720e6980c0efab96f5e6a108ad51a9d4ad3af9a6488a8bcfe09929d", 0x44, 0x47198991}, {&(0x7f0000001400)="d3ab913370a7e2d0d016eb76cb918653536321ba5b8912984b88d0115add3599cc84f01fbf27fdbd280e7c5715deb73113183afe71a02e0b9ee40e68fe5175c6b78c413bcd6e9923ef2a06d3ab673f7fc2e664", 0x53, 0x3f}, {&(0x7f0000001480)="914d38068fc3d0ae3a8a106a6e4c1d61dfd5020b68ec9a3ab9d7b5d6631ad88b201d34b68ccc26b8b112405ae69879069b38119d7c6240dd402d42805e6e267df2f4051da2a3b18eb19477d3a312e258a1790197301d0372900dbb9c131b9c031eed835cc5ff7b18af657e77896959fd068f4e40d40dce81bedf7b111f4c7a8e6f9fde9508c1a4f8a67b9c52184092254b721320b835c6741ddc20c7f69d659ac579bfd6ce9190fb3d367556", 0xac, 0x7}, {&(0x7f0000001540), 0x0, 0x8}, {&(0x7f0000001580)="91695b2035bef45eff73b806c6c00a84def1", 0x12, 0x81}], 0x8, &(0x7f00000018c0)={[{@session={'session', 0x3d, 0x62}}, {@session={'session', 0x3d, 0x49}}, {@utf8='utf8'}, {@hide='hide'}, {@gid={'gid', 0x3d, r6}}, {@check_strict='check=strict'}, {@check_relaxed='check=relaxed'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'lo\x00'}}, {@fowner_gt={'fowner>', r7}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'self'}}]}) r8 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x100000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffffffff000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630f9", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 399.441166] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xb04000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 21:29:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x81000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf0ffffff00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:38 executing program 5 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 400.411184] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xffffff7f00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf00, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 400.469552] FAULT_INJECTION: forcing a failure. [ 400.469552] name failslab, interval 1, probability 0, space 0, times 0 [ 400.519078] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 400.545728] CPU: 0 PID: 16600 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 400.554241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.563599] Call Trace: [ 400.566219] dump_stack+0x244/0x39d [ 400.569861] ? dump_stack_print_info.cold.1+0x20/0x20 [ 400.575081] ? lock_downgrade+0x900/0x900 [ 400.579243] should_fail.cold.4+0xa/0x17 [ 400.583326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.588460] ? lock_downgrade+0x900/0x900 [ 400.592645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.598195] ? proc_fail_nth_write+0x9e/0x210 [ 400.602705] ? proc_cwd_link+0x1d0/0x1d0 [ 400.606782] ? find_held_lock+0x36/0x1c0 [ 400.610875] ? perf_trace_sched_process_exec+0x860/0x860 [ 400.616345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.621903] __should_failslab+0x124/0x180 [ 400.626151] should_failslab+0x9/0x14 [ 400.629963] __kmalloc+0x2e0/0x760 [ 400.633511] ? strncpy_from_user+0x5a0/0x5a0 [ 400.633545] ? fput+0x130/0x1a0 [ 400.633562] ? do_syscall_64+0x9a/0x820 [ 400.633579] ? __x64_sys_memfd_create+0x142/0x4f0 [ 400.641298] ? do_syscall_64+0x9a/0x820 [ 400.654080] __x64_sys_memfd_create+0x142/0x4f0 [ 400.658787] ? memfd_fcntl+0x1910/0x1910 [ 400.662871] do_syscall_64+0x1b9/0x820 [ 400.666769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 400.672148] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.677103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.681956] ? trace_hardirqs_on_caller+0x310/0x310 [ 400.686983] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 400.692022] ? prepare_exit_to_usermode+0x291/0x3b0 [ 400.697166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.702028] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.707224] RIP: 0033:0x457569 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x40b}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 400.710427] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.729341] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 400.737058] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 400.744350] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 400.751657] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 400.758934] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f382439f6d4 [ 400.766200] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x34000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xc00e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:38 executing program 5 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 400.984868] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 400.999593] FAULT_INJECTION: forcing a failure. [ 400.999593] name failslab, interval 1, probability 0, space 0, times 0 [ 401.020072] CPU: 1 PID: 16641 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 401.028606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.037981] Call Trace: [ 401.040591] dump_stack+0x244/0x39d [ 401.044249] ? dump_stack_print_info.cold.1+0x20/0x20 [ 401.049495] should_fail.cold.4+0xa/0x17 [ 401.053585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.058749] ? zap_class+0x640/0x640 [ 401.062494] ? __lock_acquire+0x62f/0x4c20 [ 401.066740] ? lock_downgrade+0x900/0x900 [ 401.070899] ? check_preemption_disabled+0x48/0x280 [ 401.075935] ? find_held_lock+0x36/0x1c0 [ 401.080028] ? expand_files.part.8+0x571/0x9a0 21:29:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf00000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf0ffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 401.084648] ? perf_trace_sched_process_exec+0x860/0x860 [ 401.090128] ? find_held_lock+0x36/0x1c0 [ 401.094222] __should_failslab+0x124/0x180 [ 401.098473] should_failslab+0x9/0x14 [ 401.102282] kmem_cache_alloc+0x2be/0x730 [ 401.102309] ? shmem_destroy_callback+0xc0/0xc0 [ 401.102328] shmem_alloc_inode+0x1b/0x40 [ 401.102343] alloc_inode+0x63/0x190 [ 401.102359] new_inode_pseudo+0x71/0x1a0 [ 401.102374] ? prune_icache_sb+0x1c0/0x1c0 [ 401.102393] ? _raw_spin_unlock+0x2c/0x50 [ 401.122931] new_inode+0x1c/0x40 [ 401.122951] shmem_get_inode+0xf1/0x920 [ 401.122973] ? shmem_encode_fh+0x340/0x340 [ 401.122990] ? lock_downgrade+0x900/0x900 [ 401.123010] ? lock_release+0xa10/0xa10 [ 401.123024] ? perf_trace_sched_process_exec+0x860/0x860 [ 401.123042] ? usercopy_warn+0x110/0x110 [ 401.123069] __shmem_file_setup.part.50+0x83/0x2a0 [ 401.134799] shmem_file_setup+0x65/0x90 [ 401.134820] __x64_sys_memfd_create+0x2af/0x4f0 [ 401.134837] ? memfd_fcntl+0x1910/0x1910 [ 401.134867] do_syscall_64+0x1b9/0x820 [ 401.143065] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.143086] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.143102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.143130] ? trace_hardirqs_on_caller+0x310/0x310 [ 401.143148] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.143167] ? prepare_exit_to_usermode+0x291/0x3b0 [ 401.143190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.143214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.160822] RIP: 0033:0x457569 [ 401.160839] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.160849] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 401.160865] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 401.160875] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 401.160885] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 401.160894] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f382439f6d4 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfcffffff00000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:38 executing program 5 (fault-call:2 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 401.160910] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 [ 401.355303] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 401.459574] FAULT_INJECTION: forcing a failure. [ 401.459574] name failslab, interval 1, probability 0, space 0, times 0 [ 401.477645] CPU: 1 PID: 16670 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 401.486160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.495520] Call Trace: [ 401.498131] dump_stack+0x244/0x39d [ 401.501785] ? dump_stack_print_info.cold.1+0x20/0x20 [ 401.507002] should_fail.cold.4+0xa/0x17 [ 401.511114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.516229] ? __kernel_text_address+0xd/0x40 [ 401.520727] ? unwind_get_return_address+0x61/0xa0 [ 401.525668] ? find_held_lock+0x36/0x1c0 [ 401.529730] ? perf_trace_sched_process_exec+0x860/0x860 [ 401.535175] __should_failslab+0x124/0x180 [ 401.539397] should_failslab+0x9/0x14 [ 401.543190] kmem_cache_alloc+0x2be/0x730 [ 401.547350] ? mpol_shared_policy_init+0x235/0x650 [ 401.552265] ? current_time+0x72/0x1b0 [ 401.556144] __d_alloc+0xc8/0xb90 [ 401.559581] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 401.564683] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 401.569685] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 401.574860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.580381] ? timespec64_trunc+0xea/0x180 [ 401.584601] ? inode_init_owner+0x340/0x340 [ 401.588920] ? _raw_spin_unlock+0x2c/0x50 [ 401.593056] ? current_time+0x10b/0x1b0 [ 401.597017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.602539] ? __lockdep_init_map+0x105/0x590 [ 401.607023] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 401.612560] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 401.618084] d_alloc_pseudo+0x1d/0x30 [ 401.621891] alloc_file_pseudo+0x158/0x3f0 [ 401.626136] ? alloc_file+0x4d0/0x4d0 [ 401.629926] ? usercopy_warn+0x110/0x110 [ 401.633983] __shmem_file_setup.part.50+0x110/0x2a0 [ 401.638987] shmem_file_setup+0x65/0x90 [ 401.642948] __x64_sys_memfd_create+0x2af/0x4f0 [ 401.647603] ? memfd_fcntl+0x1910/0x1910 [ 401.651665] do_syscall_64+0x1b9/0x820 [ 401.655553] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.660901] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.665814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.670701] ? trace_hardirqs_on_caller+0x310/0x310 [ 401.675711] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.680727] ? prepare_exit_to_usermode+0x291/0x3b0 [ 401.685732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.690563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.695741] RIP: 0033:0x457569 [ 401.698935] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.717819] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 401.725509] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 401.732784] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 401.740071] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 401.747357] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f382439f6d4 [ 401.754633] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4040, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000180)={0x8000, 0x7, 0x20, 0x8, 0x9, 0x4}) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x400, 0xc5) ftruncate(r0, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x10000000}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1, 0x40102) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x86) 21:29:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x9effffff00000000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:39 executing program 5 (fault-call:2 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 401.897541] FAULT_INJECTION: forcing a failure. [ 401.897541] name failslab, interval 1, probability 0, space 0, times 0 [ 401.924695] CPU: 0 PID: 16688 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 401.933204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.942560] Call Trace: 21:29:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xffffff9e}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 401.945162] dump_stack+0x244/0x39d [ 401.948832] ? dump_stack_print_info.cold.1+0x20/0x20 [ 401.954056] ? __save_stack_trace+0x8d/0xf0 [ 401.958399] should_fail.cold.4+0xa/0x17 [ 401.962483] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.967672] ? save_stack+0x43/0xd0 [ 401.971333] ? kasan_kmalloc+0xc7/0xe0 [ 401.975246] ? percpu_ref_put_many+0x11c/0x260 [ 401.975266] ? zap_class+0x640/0x640 [ 401.975285] ? find_held_lock+0x36/0x1c0 [ 401.987648] ? rcu_read_unlock_special+0x18/0x1c0 [ 401.992528] ? perf_trace_sched_process_exec+0x860/0x860 21:29:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf000, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 401.997991] ? lock_downgrade+0x900/0x900 [ 401.998017] __should_failslab+0x124/0x180 [ 401.998041] should_failslab+0x9/0x14 [ 402.010201] kmem_cache_alloc+0x2be/0x730 [ 402.014368] ? d_set_d_op+0x31d/0x410 [ 402.018186] __alloc_file+0xa8/0x470 [ 402.018205] ? file_free_rcu+0xd0/0xd0 [ 402.018225] ? d_instantiate+0x79/0xa0 [ 402.029707] ? lock_downgrade+0x900/0x900 [ 402.033880] ? kasan_check_read+0x11/0x20 [ 402.038067] ? do_raw_spin_unlock+0xa7/0x330 [ 402.042481] ? do_raw_spin_trylock+0x270/0x270 [ 402.042504] alloc_empty_file+0x72/0x170 [ 402.042524] alloc_file+0x5e/0x4d0 [ 402.042543] ? _raw_spin_unlock+0x2c/0x50 [ 402.058841] alloc_file_pseudo+0x261/0x3f0 [ 402.063093] ? alloc_file+0x4d0/0x4d0 [ 402.066908] ? usercopy_warn+0x110/0x110 [ 402.071001] __shmem_file_setup.part.50+0x110/0x2a0 [ 402.076042] shmem_file_setup+0x65/0x90 [ 402.080027] __x64_sys_memfd_create+0x2af/0x4f0 [ 402.084711] ? memfd_fcntl+0x1910/0x1910 [ 402.088800] do_syscall_64+0x1b9/0x820 [ 402.092705] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.098083] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.103023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.107879] ? trace_hardirqs_on_caller+0x310/0x310 [ 402.112909] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.117943] ? prepare_exit_to_usermode+0x291/0x3b0 [ 402.122978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.127841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.133036] RIP: 0033:0x457569 21:29:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xfffffffffffff000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 402.136237] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.155143] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 402.162861] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 402.170139] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 402.177409] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 402.177419] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f382439f6d4 21:29:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:39 executing program 5 (fault-call:2 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 402.177429] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 [ 402.201963] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 402.261262] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 402.343456] FAULT_INJECTION: forcing a failure. [ 402.343456] name failslab, interval 1, probability 0, space 0, times 0 [ 402.369966] CPU: 0 PID: 16717 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 402.378482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.387839] Call Trace: [ 402.390438] dump_stack+0x244/0x39d [ 402.394080] ? dump_stack_print_info.cold.1+0x20/0x20 [ 402.399263] ? lock_downgrade+0x900/0x900 [ 402.403410] ? check_preemption_disabled+0x48/0x280 [ 402.408421] should_fail.cold.4+0xa/0x17 [ 402.412470] ? rcu_softirq_qs+0x20/0x20 [ 402.416435] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.421530] ? is_bpf_text_address+0xd3/0x170 [ 402.426016] ? kernel_text_address+0x79/0xf0 [ 402.430425] ? __kernel_text_address+0xd/0x40 [ 402.434907] ? unwind_get_return_address+0x61/0xa0 [ 402.439856] ? __save_stack_trace+0x8d/0xf0 [ 402.444181] ? find_held_lock+0x36/0x1c0 [ 402.448240] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 402.453069] ? perf_trace_sched_process_exec+0x860/0x860 [ 402.458539] __should_failslab+0x124/0x180 [ 402.462796] should_failslab+0x9/0x14 [ 402.466633] kmem_cache_alloc_trace+0x2d7/0x750 [ 402.471303] ? __might_sleep+0x95/0x190 [ 402.475283] apparmor_file_alloc_security+0x17b/0xac0 [ 402.480497] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 402.486053] ? apparmor_path_rename+0xcd0/0xcd0 [ 402.490742] ? rcu_read_lock_sched_held+0x14f/0x180 [ 402.495756] ? kmem_cache_alloc+0x33a/0x730 [ 402.500064] ? d_set_d_op+0x31d/0x410 [ 402.503862] security_file_alloc+0x4c/0xa0 [ 402.508099] __alloc_file+0x12a/0x470 [ 402.511926] ? file_free_rcu+0xd0/0xd0 [ 402.515803] ? d_instantiate+0x79/0xa0 [ 402.519681] ? lock_downgrade+0x900/0x900 [ 402.523822] ? kasan_check_read+0x11/0x20 [ 402.527962] ? do_raw_spin_unlock+0xa7/0x330 [ 402.532389] ? do_raw_spin_trylock+0x270/0x270 [ 402.536963] alloc_empty_file+0x72/0x170 [ 402.541014] alloc_file+0x5e/0x4d0 [ 402.544540] ? _raw_spin_unlock+0x2c/0x50 [ 402.548693] alloc_file_pseudo+0x261/0x3f0 [ 402.552938] ? alloc_file+0x4d0/0x4d0 [ 402.556748] ? usercopy_warn+0x110/0x110 [ 402.560824] __shmem_file_setup.part.50+0x110/0x2a0 [ 402.565841] shmem_file_setup+0x65/0x90 [ 402.569815] __x64_sys_memfd_create+0x2af/0x4f0 [ 402.574491] ? memfd_fcntl+0x1910/0x1910 [ 402.578562] do_syscall_64+0x1b9/0x820 [ 402.582439] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.587801] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.592749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.597605] ? trace_hardirqs_on_caller+0x310/0x310 [ 402.602659] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.607666] ? prepare_exit_to_usermode+0x291/0x3b0 [ 402.612690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.617553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.622833] RIP: 0033:0x457569 [ 402.626029] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.644916] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 402.652616] RAX: ffffffffffffffda RBX: 0000000020000080 RCX: 0000000000457569 [ 402.659878] RDX: 0000000020000098 RSI: 0000000000000000 RDI: 00000000004bc78a [ 402.667138] RBP: 000000000072bf00 R08: 0000000020000098 R09: 00000000fbad8001 [ 402.674390] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 00007f382439f6d4 [ 402.681697] R13: 00000000004c4a89 R14: 00000000004d7e00 R15: 0000000000000004 21:29:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x300, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x9effffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xb04}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:40 executing program 5 (fault-call:2 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 402.852363] FAULT_INJECTION: forcing a failure. [ 402.852363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.872767] CPU: 0 PID: 16736 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 402.881277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.890646] Call Trace: [ 402.893253] dump_stack+0x244/0x39d [ 402.896912] ? dump_stack_print_info.cold.1+0x20/0x20 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 402.902121] should_fail.cold.4+0xa/0x17 [ 402.902149] ? print_usage_bug+0xc0/0xc0 [ 402.910270] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.910293] ? zap_class+0x640/0x640 [ 402.919097] ? zap_class+0x640/0x640 [ 402.922819] ? __lock_is_held+0xb5/0x140 [ 402.922853] ? __lock_is_held+0xb5/0x140 [ 402.922879] ? lock_release+0xa10/0xa10 [ 402.927366] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 402.930985] ? perf_trace_sched_process_exec+0x860/0x860 [ 402.931006] ? rcu_softirq_qs+0x20/0x20 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xf, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 402.931028] ? __might_sleep+0x95/0x190 [ 402.954686] __alloc_pages_nodemask+0x34b/0xdd0 [ 402.959371] ? mark_held_locks+0x130/0x130 [ 402.963639] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 402.968674] ? __lock_acquire+0x62f/0x4c20 [ 402.972923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.978466] ? check_preemption_disabled+0x48/0x280 [ 402.983671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.983690] ? percpu_counter_add_batch+0x141/0x190 [ 402.983713] ? mpol_shared_policy_lookup+0xf7/0x150 [ 402.983735] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 402.983754] alloc_pages_vma+0x11e/0x4a0 [ 403.008933] shmem_alloc_page+0xa5/0x190 [ 403.013011] ? shmem_swapin+0x230/0x230 [ 403.016996] ? kasan_check_read+0x11/0x20 [ 403.021185] shmem_alloc_and_acct_page+0x248/0xdb0 [ 403.026135] ? shmem_getattr+0x2c0/0x2c0 [ 403.030214] ? print_usage_bug+0xc0/0xc0 [ 403.034298] ? mark_held_locks+0x130/0x130 [ 403.038548] ? zap_class+0x640/0x640 [ 403.042283] ? __lock_acquire+0x62f/0x4c20 [ 403.046528] ? __lock_acquire+0x62f/0x4c20 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.050782] shmem_getpage_gfp+0x71d/0x4840 [ 403.055115] ? print_usage_bug+0xc0/0xc0 [ 403.059200] ? zap_class+0x640/0x640 [ 403.062932] ? shmem_add_to_page_cache+0x1950/0x1950 [ 403.062953] ? __lock_acquire+0x62f/0x4c20 [ 403.062973] ? print_usage_bug+0xc0/0xc0 [ 403.062992] ? print_usage_bug+0xc0/0xc0 [ 403.072328] ? mark_held_locks+0x130/0x130 [ 403.084667] ? __lock_acquire+0x62f/0x4c20 [ 403.088925] ? __lock_acquire+0x62f/0x4c20 [ 403.093171] ? __lock_acquire+0x62f/0x4c20 [ 403.097430] ? print_usage_bug+0xc0/0xc0 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x8100000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.101512] ? mark_held_locks+0x130/0x130 [ 403.105759] ? print_usage_bug+0xc0/0xc0 [ 403.109836] ? print_usage_bug+0xc0/0xc0 [ 403.113932] ? mark_held_locks+0x130/0x130 [ 403.118215] ? lock_unpin_lock+0x4a0/0x4a0 [ 403.122471] ? __lock_acquire+0x62f/0x4c20 [ 403.126726] ? print_usage_bug+0xc0/0xc0 [ 403.130803] ? __lock_acquire+0x62f/0x4c20 [ 403.135060] ? mark_held_locks+0x130/0x130 [ 403.139343] ? mark_held_locks+0x130/0x130 [ 403.143638] ? print_usage_bug+0xc0/0xc0 [ 403.147712] ? check_preemption_disabled+0x48/0x280 [ 403.152746] ? print_usage_bug+0xc0/0xc0 [ 403.156817] ? kasan_check_read+0x11/0x20 [ 403.156840] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 403.166275] ? __lock_acquire+0x62f/0x4c20 [ 403.170571] ? __lock_acquire+0x62f/0x4c20 [ 403.174836] ? __lock_acquire+0x62f/0x4c20 [ 403.179084] ? zap_class+0x640/0x640 [ 403.183318] ? __lock_acquire+0x62f/0x4c20 [ 403.187645] ? zap_class+0x640/0x640 [ 403.191379] ? print_usage_bug+0xc0/0xc0 [ 403.195460] ? find_held_lock+0x36/0x1c0 [ 403.199552] ? find_held_lock+0x36/0x1c0 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfffff000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.203651] ? mark_held_locks+0xc7/0x130 [ 403.207819] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 403.213025] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 403.218249] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 403.222857] ? trace_hardirqs_on+0xbd/0x310 [ 403.227189] ? current_time+0x72/0x1b0 [ 403.231088] ? trace_hardirqs_off_caller+0x300/0x300 [ 403.236201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.236218] ? iov_iter_fault_in_readable+0x22a/0x450 [ 403.236235] ? csum_and_copy_from_iter+0x13d0/0x13d0 21:29:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfcffffff, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.236266] ? __sanitizer_cov_trace_pc+0x32/0x50 [ 403.236285] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 403.262133] shmem_write_begin+0x10a/0x1e0 [ 403.266393] generic_perform_write+0x3aa/0x6a0 [ 403.271000] ? add_page_wait_queue+0x400/0x400 [ 403.275590] ? file_update_time+0xe4/0x640 [ 403.279860] ? current_time+0x1b0/0x1b0 [ 403.283859] ? down_write+0x8a/0x130 [ 403.287593] __generic_file_write_iter+0x26e/0x630 [ 403.292555] generic_file_write_iter+0x436/0x870 [ 403.297329] ? __generic_file_write_iter+0x630/0x630 [ 403.302443] ? do_truncate+0x1ee/0x2d0 [ 403.306348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.312040] ? iov_iter_init+0xc2/0x1e0 [ 403.316035] __vfs_write+0x6b8/0x9f0 [ 403.319766] ? kernel_read+0x120/0x120 [ 403.323676] ? __lock_is_held+0xb5/0x140 [ 403.327772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.333319] ? __sb_start_write+0x1b2/0x370 [ 403.337665] vfs_write+0x1fc/0x560 [ 403.341225] ksys_pwrite64+0x181/0x1b0 [ 403.345123] ? __ia32_sys_pread64+0xf0/0xf0 [ 403.349458] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 403.355006] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.360386] ? trace_hardirqs_off_caller+0x300/0x300 [ 403.365507] ? do_sys_ftruncate+0x449/0x550 [ 403.369820] __x64_sys_pwrite64+0x97/0xf0 [ 403.373968] do_syscall_64+0x1b9/0x820 [ 403.377846] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 403.383196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.388112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.392943] ? trace_hardirqs_on_caller+0x310/0x310 [ 403.397948] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 403.402953] ? prepare_exit_to_usermode+0x291/0x3b0 [ 403.407978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.412832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.418019] RIP: 0033:0x411207 [ 403.421211] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 403.440110] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 403.447823] RAX: ffffffffffffffda RBX: 0000000020000090 RCX: 0000000000411207 [ 403.455109] RDX: 0000000000000082 RSI: 00000000200002c0 RDI: 0000000000000005 [ 403.462377] RBP: 0000000000000000 R08: 0000000020000098 R09: 00000000fbad8001 [ 403.469637] R10: 0000000000009000 R11: 0000000000000293 R12: 0000000000000005 [ 403.476891] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 403.521887] isofs_fill_super: bread failed, dev=loop5, iso_blknum=36, block=72 21:29:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x81000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x300, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:41 executing program 5 (fault-call:2 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x24000, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 403.792109] FAULT_INJECTION: forcing a failure. [ 403.792109] name fail_page_alloc, interval 1, probability 0, space 0, times 0 21:29:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xffffff9e, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.838314] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 403.843078] CPU: 0 PID: 16780 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 403.853181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.862540] Call Trace: [ 403.865139] dump_stack+0x244/0x39d [ 403.868783] ? dump_stack_print_info.cold.1+0x20/0x20 [ 403.873998] should_fail.cold.4+0xa/0x17 [ 403.878069] ? print_usage_bug+0xc0/0xc0 [ 403.882148] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.887280] ? zap_class+0x640/0x640 [ 403.891003] ? zap_class+0x640/0x640 [ 403.894725] ? __lock_is_held+0xb5/0x140 [ 403.898818] ? __lock_is_held+0xb5/0x140 [ 403.902993] ? lock_release+0xa10/0xa10 [ 403.907010] ? perf_trace_sched_process_exec+0x860/0x860 [ 403.912478] ? rcu_softirq_qs+0x20/0x20 [ 403.916468] ? __might_sleep+0x95/0x190 [ 403.920466] __alloc_pages_nodemask+0x34b/0xdd0 [ 403.925147] ? mark_held_locks+0x130/0x130 [ 403.929396] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 403.934425] ? __lock_acquire+0x62f/0x4c20 21:29:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x4030000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 403.938681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.944274] ? check_preemption_disabled+0x48/0x280 [ 403.949321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.954869] ? percpu_counter_add_batch+0x141/0x190 [ 403.959907] ? mpol_shared_policy_lookup+0xf7/0x150 [ 403.964939] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 403.970488] alloc_pages_vma+0x11e/0x4a0 [ 403.974571] shmem_alloc_page+0xa5/0x190 [ 403.978668] ? shmem_swapin+0x230/0x230 [ 403.982735] shmem_alloc_and_acct_page+0x248/0xdb0 21:29:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 403.987686] ? shmem_getattr+0x2c0/0x2c0 [ 403.991765] ? __isolate_free_page+0x610/0x610 [ 403.996369] ? mark_held_locks+0x130/0x130 [ 403.996401] ? __lock_acquire+0x62f/0x4c20 [ 403.996420] ? __lock_acquire+0x62f/0x4c20 [ 404.004905] shmem_getpage_gfp+0x71d/0x4840 [ 404.004922] ? print_usage_bug+0xc0/0xc0 [ 404.004949] ? zap_class+0x640/0x640 [ 404.021247] ? shmem_add_to_page_cache+0x1950/0x1950 [ 404.026374] ? __lock_acquire+0x62f/0x4c20 [ 404.030669] ? print_usage_bug+0xc0/0xc0 [ 404.034763] ? print_usage_bug+0xc0/0xc0 [ 404.038849] ? mark_held_locks+0x130/0x130 [ 404.043104] ? __lock_acquire+0x62f/0x4c20 [ 404.047357] ? __lock_acquire+0x62f/0x4c20 [ 404.051628] ? __lock_acquire+0x62f/0x4c20 [ 404.055882] ? print_usage_bug+0xc0/0xc0 [ 404.059964] ? mark_held_locks+0x130/0x130 [ 404.064212] ? print_usage_bug+0xc0/0xc0 [ 404.068292] ? print_usage_bug+0xc0/0xc0 [ 404.072379] ? mark_held_locks+0x130/0x130 [ 404.076654] ? lock_unpin_lock+0x4a0/0x4a0 [ 404.080913] ? __lock_acquire+0x62f/0x4c20 [ 404.085165] ? print_usage_bug+0xc0/0xc0 21:29:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x403}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfcffffff00000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 404.089268] ? __lock_acquire+0x62f/0x4c20 [ 404.093564] ? mark_held_locks+0x130/0x130 [ 404.097903] ? mark_held_locks+0x130/0x130 [ 404.097919] ? print_usage_bug+0xc0/0xc0 [ 404.097935] ? check_preemption_disabled+0x48/0x280 [ 404.097958] ? print_usage_bug+0xc0/0xc0 [ 404.106243] ? kasan_check_read+0x11/0x20 [ 404.106264] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 404.106288] ? __lock_acquire+0x62f/0x4c20 [ 404.106311] ? __lock_acquire+0x62f/0x4c20 [ 404.106331] ? __lock_acquire+0x62f/0x4c20 [ 404.137599] ? zap_class+0x640/0x640 [ 404.141354] ? __lock_acquire+0x62f/0x4c20 [ 404.145606] ? zap_class+0x640/0x640 [ 404.149370] ? print_usage_bug+0xc0/0xc0 [ 404.153437] ? find_held_lock+0x36/0x1c0 [ 404.153461] ? find_held_lock+0x36/0x1c0 [ 404.153485] ? mark_held_locks+0xc7/0x130 [ 404.165769] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 404.170987] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 404.176190] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 404.180803] ? trace_hardirqs_on+0xbd/0x310 [ 404.185138] ? current_time+0x72/0x1b0 21:29:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf0ffffffffffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 404.189040] ? trace_hardirqs_off_caller+0x300/0x300 [ 404.194167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.199724] ? iov_iter_fault_in_readable+0x22a/0x450 [ 404.204927] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 404.210050] ? __sanitizer_cov_trace_pc+0x32/0x50 [ 404.214906] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 404.220111] shmem_write_begin+0x10a/0x1e0 [ 404.224367] generic_perform_write+0x3aa/0x6a0 [ 404.228986] ? add_page_wait_queue+0x400/0x400 [ 404.233579] ? file_update_time+0xe4/0x640 21:29:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xffffff7f, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 404.237844] ? current_time+0x1b0/0x1b0 [ 404.241852] ? down_write+0x8a/0x130 [ 404.245587] __generic_file_write_iter+0x26e/0x630 [ 404.250555] generic_file_write_iter+0x436/0x870 [ 404.255331] ? __generic_file_write_iter+0x630/0x630 [ 404.260447] ? do_truncate+0x1ee/0x2d0 [ 404.264353] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.269901] ? iov_iter_init+0xc2/0x1e0 [ 404.273898] __vfs_write+0x6b8/0x9f0 [ 404.277650] ? kernel_read+0x120/0x120 [ 404.281567] ? __lock_is_held+0xb5/0x140 21:29:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0xf0ffffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 404.285704] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.291253] ? __sb_start_write+0x1b2/0x370 [ 404.295587] vfs_write+0x1fc/0x560 [ 404.299168] ksys_pwrite64+0x181/0x1b0 [ 404.303108] ? __ia32_sys_pread64+0xf0/0xf0 [ 404.307437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 404.312985] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.318372] ? trace_hardirqs_off_caller+0x300/0x300 [ 404.323501] ? do_sys_ftruncate+0x449/0x550 [ 404.327835] __x64_sys_pwrite64+0x97/0xf0 [ 404.332006] do_syscall_64+0x1b9/0x820 [ 404.335907] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 404.341284] ? syscall_return_slowpath+0x5e0/0x5e0 [ 404.346266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.346287] ? trace_hardirqs_on_caller+0x310/0x310 [ 404.346305] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 404.346323] ? prepare_exit_to_usermode+0x291/0x3b0 [ 404.346344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.356201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.356215] RIP: 0033:0x411207 [ 404.356232] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 404.356241] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 404.356255] RAX: ffffffffffffffda RBX: 0000000020000090 RCX: 0000000000411207 [ 404.356272] RDX: 0000000000000082 RSI: 00000000200002c0 RDI: 0000000000000005 [ 404.413354] RBP: 0000000000000000 R08: 0000000020000098 R09: 00000000fbad8001 [ 404.413364] R10: 0000000000009000 R11: 0000000000000293 R12: 0000000000000005 21:29:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xd502, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 404.413373] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 404.507222] isofs_fill_super: bread failed, dev=loop5, iso_blknum=36, block=72 21:29:42 executing program 5 (fault-call:2 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 404.599424] FAULT_INJECTION: forcing a failure. [ 404.599424] name failslab, interval 1, probability 0, space 0, times 0 [ 404.610998] CPU: 0 PID: 16835 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 404.619496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.628870] Call Trace: [ 404.631451] dump_stack+0x244/0x39d [ 404.635088] ? dump_stack_print_info.cold.1+0x20/0x20 [ 404.640273] should_fail.cold.4+0xa/0x17 [ 404.644326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 404.649451] ? __lock_acquire+0x62f/0x4c20 [ 404.653676] ? do_raw_spin_trylock+0x270/0x270 [ 404.658264] ? print_usage_bug+0xc0/0xc0 [ 404.662315] ? __lock_acquire+0x62f/0x4c20 [ 404.666549] ? print_usage_bug+0xc0/0xc0 [ 404.670617] ? zap_class+0x640/0x640 [ 404.674364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.679924] ? __lock_acquire+0x62f/0x4c20 [ 404.684155] ? zap_class+0x640/0x640 [ 404.687884] ? mark_held_locks+0x130/0x130 [ 404.692139] __should_failslab+0x124/0x180 [ 404.696377] should_failslab+0x9/0x14 [ 404.700190] kmem_cache_alloc+0x47/0x730 [ 404.704248] xas_alloc+0x39c/0x4d0 [ 404.707780] ? minmax_running_min+0x650/0x650 [ 404.712275] xas_create+0x3c0/0x1170 [ 404.716001] ? __lock_is_held+0xb5/0x140 [ 404.720051] ? xas_find_conflict+0x890/0x890 [ 404.724449] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.729986] ? xas_start+0x23d/0x740 [ 404.733711] ? xas_pause+0x490/0x490 [ 404.737430] ? lock_acquire+0x1ed/0x520 [ 404.741421] ? shmem_add_to_page_cache+0xac1/0x1950 [ 404.746445] ? do_raw_spin_lock+0x14f/0x350 [ 404.750758] xas_create_range+0x193/0x5c0 [ 404.754945] shmem_add_to_page_cache+0xaff/0x1950 [ 404.759813] ? shmem_writepage+0x1590/0x1590 [ 404.764211] ? mem_cgroup_throttle_swaprate+0x270/0x884 [ 404.769700] ? lock_downgrade+0x900/0x900 [ 404.773835] ? check_preemption_disabled+0x48/0x280 [ 404.778842] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 404.783766] ? kasan_check_read+0x11/0x20 [ 404.787899] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 404.793182] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 404.798707] ? mem_cgroup_throttle_swaprate+0x2eb/0x884 [ 404.804090] ? swap_duplicate+0x80/0x80 [ 404.808055] ? __lock_acquire+0x62f/0x4c20 [ 404.812283] shmem_getpage_gfp+0x1c99/0x4840 [ 404.816734] ? shmem_add_to_page_cache+0x1950/0x1950 [ 404.821840] ? __lock_acquire+0x62f/0x4c20 [ 404.826064] ? print_usage_bug+0xc0/0xc0 [ 404.830111] ? print_usage_bug+0xc0/0xc0 [ 404.834167] ? mark_held_locks+0x130/0x130 [ 404.838387] ? __lock_acquire+0x62f/0x4c20 [ 404.842690] ? __lock_acquire+0x62f/0x4c20 [ 404.846938] ? __lock_acquire+0x62f/0x4c20 [ 404.851164] ? print_usage_bug+0xc0/0xc0 [ 404.855228] ? mark_held_locks+0x130/0x130 [ 404.859450] ? print_usage_bug+0xc0/0xc0 [ 404.863530] ? print_usage_bug+0xc0/0xc0 [ 404.867578] ? mark_held_locks+0x130/0x130 [ 404.871799] ? lock_unpin_lock+0x4a0/0x4a0 [ 404.876022] ? __lock_acquire+0x62f/0x4c20 [ 404.880267] ? print_usage_bug+0xc0/0xc0 [ 404.884323] ? __lock_acquire+0x62f/0x4c20 [ 404.888548] ? mark_held_locks+0x130/0x130 [ 404.892783] ? mark_held_locks+0x130/0x130 [ 404.897020] ? print_usage_bug+0xc0/0xc0 [ 404.901109] ? check_preemption_disabled+0x48/0x280 [ 404.906118] ? print_usage_bug+0xc0/0xc0 [ 404.910169] ? kasan_check_read+0x11/0x20 [ 404.914307] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 404.919604] ? __lock_acquire+0x62f/0x4c20 [ 404.923841] ? __lock_acquire+0x62f/0x4c20 [ 404.928066] ? __lock_acquire+0x62f/0x4c20 [ 404.932288] ? zap_class+0x640/0x640 [ 404.935997] ? __lock_acquire+0x62f/0x4c20 [ 404.940229] ? zap_class+0x640/0x640 [ 404.943946] ? print_usage_bug+0xc0/0xc0 [ 404.948005] ? find_held_lock+0x36/0x1c0 [ 404.952084] ? find_held_lock+0x36/0x1c0 [ 404.956165] ? mark_held_locks+0xc7/0x130 [ 404.960315] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 404.965505] ? ktime_get_coarse_real_ts64+0x273/0x370 [ 404.970696] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 404.975277] ? trace_hardirqs_on+0xbd/0x310 [ 404.979585] ? current_time+0x72/0x1b0 [ 404.983465] ? trace_hardirqs_off_caller+0x300/0x300 [ 404.988558] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.994082] ? iov_iter_fault_in_readable+0x22a/0x450 [ 404.999257] ? csum_and_copy_from_iter+0x13d0/0x13d0 [ 405.004345] ? __sanitizer_cov_trace_pc+0x32/0x50 [ 405.009275] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 405.014459] shmem_write_begin+0x10a/0x1e0 [ 405.018717] generic_perform_write+0x3aa/0x6a0 [ 405.023308] ? add_page_wait_queue+0x400/0x400 [ 405.027876] ? file_update_time+0xe4/0x640 [ 405.032112] ? current_time+0x1b0/0x1b0 [ 405.036089] ? down_write+0x8a/0x130 [ 405.039793] __generic_file_write_iter+0x26e/0x630 [ 405.044730] generic_file_write_iter+0x436/0x870 [ 405.049476] ? __generic_file_write_iter+0x630/0x630 [ 405.054568] ? do_truncate+0x1ee/0x2d0 [ 405.058454] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.063977] ? iov_iter_init+0xc2/0x1e0 [ 405.067942] __vfs_write+0x6b8/0x9f0 [ 405.071670] ? kernel_read+0x120/0x120 [ 405.075553] ? __lock_is_held+0xb5/0x140 [ 405.079640] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.085163] ? __sb_start_write+0x1b2/0x370 [ 405.089472] vfs_write+0x1fc/0x560 [ 405.093004] ksys_pwrite64+0x181/0x1b0 [ 405.096903] ? __ia32_sys_pread64+0xf0/0xf0 [ 405.101209] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.106737] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.112104] ? trace_hardirqs_off_caller+0x300/0x300 [ 405.117194] ? do_sys_ftruncate+0x449/0x550 [ 405.121519] __x64_sys_pwrite64+0x97/0xf0 [ 405.125704] do_syscall_64+0x1b9/0x820 [ 405.129575] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.134929] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.139860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.144690] ? trace_hardirqs_on_caller+0x310/0x310 [ 405.149709] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.154713] ? prepare_exit_to_usermode+0x291/0x3b0 [ 405.159717] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.164564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.169739] RIP: 0033:0x411207 [ 405.172918] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 51 17 00 00 c3 48 83 ec 08 e8 27 fa ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 6d fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 405.191820] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 21:29:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = accept4(r4, 0x0, &(0x7f0000000040), 0x800) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x400300}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf0ffff, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 405.199523] RAX: ffffffffffffffda RBX: 0000000020000090 RCX: 0000000000411207 [ 405.206787] RDX: 0000000000000082 RSI: 00000000200002c0 RDI: 0000000000000005 [ 405.214060] RBP: 0000000000000000 R08: 0000000020000098 R09: 00000000fbad8001 [ 405.221327] R10: 0000000000009000 R11: 0000000000000293 R12: 0000000000000005 [ 405.228582] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 405.245366] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x2000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 405.295204] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:43 executing program 5 (fault-call:2 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xb040000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 405.382003] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfffffff0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 405.456773] FAULT_INJECTION: forcing a failure. [ 405.456773] name failslab, interval 1, probability 0, space 0, times 0 [ 405.517493] CPU: 0 PID: 16865 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 405.526012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.535370] Call Trace: [ 405.537978] dump_stack+0x244/0x39d [ 405.541671] ? dump_stack_print_info.cold.1+0x20/0x20 [ 405.546910] should_fail.cold.4+0xa/0x17 [ 405.551015] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.556129] ? set_page_dirty+0x639/0x1030 [ 405.560387] ? print_usage_bug+0xc0/0xc0 21:29:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 405.564463] ? check_preemption_disabled+0x48/0x280 [ 405.569491] ? print_usage_bug+0xc0/0xc0 [ 405.573641] ? kasan_check_read+0x11/0x20 [ 405.577816] ? find_held_lock+0x36/0x1c0 [ 405.581968] ? perf_trace_sched_process_exec+0x860/0x860 [ 405.587430] ? zap_class+0x640/0x640 [ 405.591159] ? print_usage_bug+0xc0/0xc0 [ 405.595253] __should_failslab+0x124/0x180 [ 405.599511] should_failslab+0x9/0x14 [ 405.603345] kmem_cache_alloc+0x2be/0x730 [ 405.607506] ? zap_class+0x640/0x640 [ 405.611231] ? print_usage_bug+0xc0/0xc0 [ 405.615307] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.620852] ? shmem_write_end+0x377/0x9d0 [ 405.625078] __alloc_file+0xa8/0x470 [ 405.628781] ? file_free_rcu+0xd0/0xd0 [ 405.632673] ? find_held_lock+0x36/0x1c0 [ 405.636743] ? is_bpf_text_address+0xac/0x170 [ 405.641226] ? lock_downgrade+0x900/0x900 [ 405.645358] ? check_preemption_disabled+0x48/0x280 [ 405.650364] alloc_empty_file+0x72/0x170 [ 405.654414] path_openat+0x170/0x5150 [ 405.658206] ? rcu_softirq_qs+0x20/0x20 [ 405.662187] ? unwind_dump+0x190/0x190 [ 405.666065] ? zap_class+0x640/0x640 [ 405.669774] ? path_lookupat.isra.43+0xc00/0xc00 [ 405.674528] ? unwind_get_return_address+0x61/0xa0 [ 405.679446] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 405.684467] ? expand_files.part.8+0x571/0x9a0 [ 405.689067] ? find_held_lock+0x36/0x1c0 [ 405.693136] ? __alloc_fd+0x347/0x6e0 [ 405.696940] ? lock_downgrade+0x900/0x900 [ 405.701085] ? getname+0x19/0x20 [ 405.704444] ? kasan_check_read+0x11/0x20 [ 405.708580] ? do_raw_spin_unlock+0xa7/0x330 [ 405.712974] ? do_raw_spin_trylock+0x270/0x270 [ 405.717543] ? __lock_is_held+0xb5/0x140 [ 405.721600] ? __check_object_size+0xb1/0x782 [ 405.726137] ? _raw_spin_unlock+0x2c/0x50 [ 405.730286] ? __alloc_fd+0x347/0x6e0 [ 405.734113] do_filp_open+0x255/0x380 [ 405.737903] ? may_open_dev+0x100/0x100 [ 405.741874] ? get_unused_fd_flags+0x122/0x1a0 [ 405.746444] ? __alloc_fd+0x6e0/0x6e0 [ 405.750237] do_sys_open+0x568/0x700 [ 405.753940] ? filp_open+0x80/0x80 [ 405.757480] ? trace_hardirqs_off_caller+0x300/0x300 [ 405.762579] ? do_sys_ftruncate+0x449/0x550 [ 405.766890] __x64_sys_open+0x7e/0xc0 [ 405.770680] do_syscall_64+0x1b9/0x820 [ 405.774555] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.779906] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.784820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.789662] ? trace_hardirqs_on_caller+0x310/0x310 [ 405.794666] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.799673] ? prepare_exit_to_usermode+0x291/0x3b0 [ 405.804682] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.809517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.814689] RIP: 0033:0x4111a1 [ 405.817879] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 405.836776] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 405.844467] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004111a1 [ 405.851731] RDX: 00007f382439eafa RSI: 0000000000000002 RDI: 00007f382439eaf0 [ 405.859008] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 405.866260] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 405.873557] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 405.926547] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 406.004591] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x8100}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfffffffc, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:43 executing program 5 (fault-call:2 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630fe", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf00000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 406.333432] FAULT_INJECTION: forcing a failure. [ 406.333432] name failslab, interval 1, probability 0, space 0, times 0 [ 406.352047] CPU: 1 PID: 16910 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 406.360562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.369923] Call Trace: [ 406.372542] dump_stack+0x244/0x39d [ 406.376196] ? dump_stack_print_info.cold.1+0x20/0x20 21:29:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x9effffff00000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 406.381414] should_fail.cold.4+0xa/0x17 [ 406.385497] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 406.390606] ? set_page_dirty+0x639/0x1030 [ 406.394849] ? print_usage_bug+0xc0/0xc0 [ 406.398897] ? check_preemption_disabled+0x48/0x280 [ 406.403905] ? print_usage_bug+0xc0/0xc0 [ 406.407963] ? kasan_check_read+0x11/0x20 [ 406.412119] ? find_held_lock+0x36/0x1c0 [ 406.416185] ? perf_trace_sched_process_exec+0x860/0x860 [ 406.421632] ? zap_class+0x640/0x640 [ 406.425336] ? print_usage_bug+0xc0/0xc0 [ 406.429400] __should_failslab+0x124/0x180 [ 406.433653] should_failslab+0x9/0x14 [ 406.437444] kmem_cache_alloc+0x2be/0x730 [ 406.441579] ? zap_class+0x640/0x640 [ 406.445282] ? print_usage_bug+0xc0/0xc0 [ 406.449333] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 406.454862] ? shmem_write_end+0x377/0x9d0 [ 406.459089] __alloc_file+0xa8/0x470 [ 406.462802] ? file_free_rcu+0xd0/0xd0 [ 406.466690] ? find_held_lock+0x36/0x1c0 [ 406.470746] ? is_bpf_text_address+0xac/0x170 [ 406.475230] ? lock_downgrade+0x900/0x900 [ 406.479364] ? check_preemption_disabled+0x48/0x280 [ 406.484383] alloc_empty_file+0x72/0x170 [ 406.488437] path_openat+0x170/0x5150 [ 406.492239] ? rcu_softirq_qs+0x20/0x20 [ 406.496203] ? unwind_dump+0x190/0x190 [ 406.500107] ? zap_class+0x640/0x640 [ 406.503825] ? path_lookupat.isra.43+0xc00/0xc00 [ 406.508566] ? unwind_get_return_address+0x61/0xa0 [ 406.513492] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 406.518523] ? expand_files.part.8+0x571/0x9a0 [ 406.523106] ? find_held_lock+0x36/0x1c0 [ 406.527174] ? __alloc_fd+0x347/0x6e0 [ 406.530963] ? lock_downgrade+0x900/0x900 [ 406.535151] ? getname+0x19/0x20 [ 406.538511] ? kasan_check_read+0x11/0x20 [ 406.542658] ? do_raw_spin_unlock+0xa7/0x330 [ 406.547074] ? do_raw_spin_trylock+0x270/0x270 [ 406.551691] ? __lock_is_held+0xb5/0x140 [ 406.555747] ? __check_object_size+0xb1/0x782 [ 406.560232] ? _raw_spin_unlock+0x2c/0x50 [ 406.564368] ? __alloc_fd+0x347/0x6e0 [ 406.568180] do_filp_open+0x255/0x380 [ 406.571967] ? may_open_dev+0x100/0x100 [ 406.575935] ? get_unused_fd_flags+0x122/0x1a0 [ 406.580504] ? __alloc_fd+0x6e0/0x6e0 [ 406.584295] do_sys_open+0x568/0x700 [ 406.588017] ? filp_open+0x80/0x80 [ 406.591545] ? trace_hardirqs_off_caller+0x300/0x300 [ 406.596640] ? do_sys_ftruncate+0x449/0x550 [ 406.600957] __x64_sys_open+0x7e/0xc0 [ 406.604752] do_syscall_64+0x1b9/0x820 [ 406.608634] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 406.613992] ? syscall_return_slowpath+0x5e0/0x5e0 [ 406.618909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.623743] ? trace_hardirqs_on_caller+0x310/0x310 [ 406.628750] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 406.633762] ? prepare_exit_to_usermode+0x291/0x3b0 [ 406.638786] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.643629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.648809] RIP: 0033:0x4111a1 [ 406.651991] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 406.670878] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 21:29:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 406.678570] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004111a1 [ 406.685823] RDX: 00007f382439eafa RSI: 0000000000000002 RDI: 00007f382439eaf0 [ 406.693182] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 406.700455] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 406.707729] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xedf, @dev={0xfe, 0x80, [], 0xf}, 0xffffffffffff2cab}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:44 executing program 5 (fault-call:2 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf0ffffffffffff, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 407.110509] FAULT_INJECTION: forcing a failure. [ 407.110509] name failslab, interval 1, probability 0, space 0, times 0 [ 407.139826] CPU: 0 PID: 16953 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 407.148336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.148343] Call Trace: [ 407.148385] dump_stack+0x244/0x39d [ 407.148414] ? dump_stack_print_info.cold.1+0x20/0x20 [ 407.148435] ? lock_downgrade+0x900/0x900 [ 407.148467] ? check_preemption_disabled+0x48/0x280 [ 407.148491] should_fail.cold.4+0xa/0x17 [ 407.183079] ? rcu_softirq_qs+0x20/0x20 [ 407.187074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.192196] ? is_bpf_text_address+0xd3/0x170 [ 407.196724] ? kernel_text_address+0x79/0xf0 [ 407.201144] ? __kernel_text_address+0xd/0x40 [ 407.205654] ? unwind_get_return_address+0x61/0xa0 [ 407.205674] ? __save_stack_trace+0x8d/0xf0 [ 407.205695] ? find_held_lock+0x36/0x1c0 [ 407.205730] ? do_syscall_64+0x1b9/0x820 [ 407.219036] ? perf_trace_sched_process_exec+0x860/0x860 [ 407.219067] __should_failslab+0x124/0x180 [ 407.219088] should_failslab+0x9/0x14 [ 407.219108] kmem_cache_alloc_trace+0x2d7/0x750 [ 407.236652] ? __might_sleep+0x95/0x190 [ 407.236677] apparmor_file_alloc_security+0x17b/0xac0 [ 407.236700] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 407.245339] ? apparmor_path_rename+0xcd0/0xcd0 [ 407.260732] ? rcu_read_lock_sched_held+0x14f/0x180 [ 407.265763] ? kmem_cache_alloc+0x33a/0x730 [ 407.270098] ? zap_class+0x640/0x640 [ 407.273831] security_file_alloc+0x4c/0xa0 [ 407.278081] __alloc_file+0x12a/0x470 [ 407.281899] ? file_free_rcu+0xd0/0xd0 [ 407.285803] ? find_held_lock+0x36/0x1c0 [ 407.285832] ? is_bpf_text_address+0xac/0x170 [ 407.285851] ? lock_downgrade+0x900/0x900 [ 407.285866] ? check_preemption_disabled+0x48/0x280 [ 407.285889] alloc_empty_file+0x72/0x170 [ 407.285908] path_openat+0x170/0x5150 [ 407.295884] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 407.298591] ? rcu_softirq_qs+0x20/0x20 [ 407.298607] ? unwind_dump+0x190/0x190 [ 407.298650] ? zap_class+0x640/0x640 [ 407.298669] ? path_lookupat.isra.43+0xc00/0xc00 [ 407.334296] ? unwind_get_return_address+0x61/0xa0 [ 407.339241] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 407.344262] ? expand_files.part.8+0x571/0x9a0 [ 407.348857] ? find_held_lock+0x36/0x1c0 [ 407.352932] ? __alloc_fd+0x347/0x6e0 [ 407.356753] ? lock_downgrade+0x900/0x900 [ 407.360930] ? getname+0x19/0x20 [ 407.364334] ? kasan_check_read+0x11/0x20 [ 407.368525] ? do_raw_spin_unlock+0xa7/0x330 [ 407.372935] ? do_raw_spin_trylock+0x270/0x270 [ 407.377520] ? __lock_is_held+0xb5/0x140 [ 407.381583] ? __check_object_size+0xb1/0x782 [ 407.386102] ? _raw_spin_unlock+0x2c/0x50 [ 407.390254] ? __alloc_fd+0x347/0x6e0 [ 407.394073] do_filp_open+0x255/0x380 [ 407.397891] ? may_open_dev+0x100/0x100 [ 407.401894] ? get_unused_fd_flags+0x122/0x1a0 [ 407.406479] ? __alloc_fd+0x6e0/0x6e0 [ 407.410291] do_sys_open+0x568/0x700 [ 407.414015] ? filp_open+0x80/0x80 [ 407.417579] ? trace_hardirqs_off_caller+0x300/0x300 [ 407.422689] ? do_sys_ftruncate+0x449/0x550 [ 407.427018] __x64_sys_open+0x7e/0xc0 [ 407.430826] do_syscall_64+0x1b9/0x820 [ 407.434717] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 407.440087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.445021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.449868] ? trace_hardirqs_on_caller+0x310/0x310 [ 407.454892] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 407.459959] ? prepare_exit_to_usermode+0x291/0x3b0 [ 407.464997] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.469848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.475038] RIP: 0033:0x4111a1 [ 407.478238] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 407.497136] RSP: 002b:00007f382439ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 407.504845] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004111a1 21:29:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xd502000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 407.512111] RDX: 00007f382439eafa RSI: 0000000000000002 RDI: 00007f382439eaf0 [ 407.519418] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 407.526687] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 407.533954] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x2000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x100}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 21:29:45 executing program 5 (fault-call:2 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf00, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 407.802575] FAULT_INJECTION: forcing a failure. [ 407.802575] name failslab, interval 1, probability 0, space 0, times 0 [ 407.837889] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 407.851917] CPU: 0 PID: 16997 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 407.860431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.860438] Call Trace: [ 407.860464] dump_stack+0x244/0x39d [ 407.860491] ? dump_stack_print_info.cold.1+0x20/0x20 [ 407.860523] should_fail.cold.4+0xa/0x17 [ 407.885299] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.890414] ? down_write_nested+0x130/0x130 [ 407.890432] ? down_read+0x120/0x120 21:29:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xc00e0000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 407.890455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 407.890475] ? zap_class+0x640/0x640 [ 407.890490] ? lock_acquire+0x1ed/0x520 [ 407.890508] ? lo_ioctl+0x8e/0x1d60 [ 407.890531] ? find_held_lock+0x36/0x1c0 [ 407.919523] ? __lock_is_held+0xb5/0x140 [ 407.923599] ? vsockmon_setup+0xa8/0x1f0 [ 407.927707] ? perf_trace_sched_process_exec+0x860/0x860 [ 407.933210] __should_failslab+0x124/0x180 [ 407.937465] should_failslab+0x9/0x14 [ 407.941280] kmem_cache_alloc_trace+0x2d7/0x750 [ 407.945964] ? check_preemption_disabled+0x48/0x280 21:29:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf0, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 407.951002] __kthread_create_on_node+0x137/0x540 [ 407.955866] ? loop_get_status64+0x140/0x140 [ 407.960283] ? kthread_parkme+0xb0/0xb0 [ 407.964304] ? __lockdep_init_map+0x105/0x590 [ 407.968818] ? __lockdep_init_map+0x105/0x590 [ 407.968841] ? loop_get_status64+0x140/0x140 [ 407.968861] kthread_create_on_node+0xb1/0xe0 [ 407.968881] ? __kthread_create_on_node+0x540/0x540 [ 407.987299] ? kasan_check_read+0x11/0x20 [ 407.991474] lo_ioctl+0x7f6/0x1d60 [ 407.991503] ? lo_rw_aio+0x1ef0/0x1ef0 [ 407.991525] blkdev_ioctl+0x9ac/0x2010 [ 408.002820] ? blkpg_ioctl+0xc10/0xc10 [ 408.006721] ? lock_downgrade+0x900/0x900 [ 408.010878] ? check_preemption_disabled+0x48/0x280 [ 408.015908] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 408.020846] ? kasan_check_read+0x11/0x20 [ 408.025008] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 408.030308] ? rcu_softirq_qs+0x20/0x20 [ 408.034299] ? __fget+0x4d1/0x740 [ 408.037764] ? ksys_dup3+0x680/0x680 [ 408.041497] block_ioctl+0xee/0x130 [ 408.045127] ? blkdev_fallocate+0x400/0x400 [ 408.049453] do_vfs_ioctl+0x1de/0x1720 [ 408.053350] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 408.058891] ? ioctl_preallocate+0x300/0x300 [ 408.063308] ? __fget_light+0x2e9/0x430 [ 408.067288] ? fget_raw+0x20/0x20 [ 408.070750] ? rcu_read_lock_sched_held+0x14f/0x180 [ 408.075776] ? kmem_cache_free+0x24f/0x290 [ 408.080014] ? putname+0xf7/0x130 [ 408.083472] ? do_syscall_64+0x9a/0x820 [ 408.087456] ? do_syscall_64+0x9a/0x820 [ 408.091440] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 408.096033] ? security_file_ioctl+0x94/0xc0 [ 408.100450] ksys_ioctl+0xa9/0xd0 [ 408.103910] __x64_sys_ioctl+0x73/0xb0 [ 408.107804] do_syscall_64+0x1b9/0x820 [ 408.111713] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.117116] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.122078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.126926] ? trace_hardirqs_on_caller+0x310/0x310 [ 408.131949] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.136969] ? prepare_exit_to_usermode+0x291/0x3b0 [ 408.141995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.146848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.152038] RIP: 0033:0x4573d7 [ 408.155252] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.174151] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.181860] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 408.189127] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 408.196411] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 21:29:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660#', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 408.203690] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 408.210962] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:45 executing program 5 (fault-call:2 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 408.391774] FAULT_INJECTION: forcing a failure. [ 408.391774] name failslab, interval 1, probability 0, space 0, times 0 [ 408.422660] CPU: 0 PID: 17024 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 408.431193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.440538] Call Trace: [ 408.443149] dump_stack+0x244/0x39d [ 408.446806] ? dump_stack_print_info.cold.1+0x20/0x20 [ 408.452049] should_fail.cold.4+0xa/0x17 [ 408.456155] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.461269] ? down_write_nested+0x130/0x130 [ 408.465688] ? down_read+0x120/0x120 [ 408.469412] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 408.474957] ? zap_class+0x640/0x640 [ 408.478677] ? lock_acquire+0x1ed/0x520 [ 408.482661] ? lo_ioctl+0x8e/0x1d60 [ 408.486300] ? find_held_lock+0x36/0x1c0 [ 408.490372] ? __lock_is_held+0xb5/0x140 [ 408.494451] ? perf_trace_sched_process_exec+0x860/0x860 [ 408.499916] __should_failslab+0x124/0x180 [ 408.504159] should_failslab+0x9/0x14 [ 408.507987] kmem_cache_alloc_trace+0x2d7/0x750 [ 408.512662] ? check_preemption_disabled+0x48/0x280 [ 408.517691] __kthread_create_on_node+0x137/0x540 [ 408.522560] ? loop_get_status64+0x140/0x140 [ 408.526985] ? kthread_parkme+0xb0/0xb0 [ 408.530996] ? __lockdep_init_map+0x105/0x590 [ 408.535501] ? __lockdep_init_map+0x105/0x590 [ 408.540002] ? loop_get_status64+0x140/0x140 [ 408.544437] kthread_create_on_node+0xb1/0xe0 [ 408.548943] ? __kthread_create_on_node+0x540/0x540 [ 408.553989] ? kasan_check_read+0x11/0x20 [ 408.558146] lo_ioctl+0x7f6/0x1d60 [ 408.561698] ? lo_rw_aio+0x1ef0/0x1ef0 [ 408.565593] blkdev_ioctl+0x9ac/0x2010 [ 408.569501] ? blkpg_ioctl+0xc10/0xc10 [ 408.573392] ? lock_downgrade+0x900/0x900 [ 408.577543] ? check_preemption_disabled+0x48/0x280 [ 408.582570] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 408.587504] ? kasan_check_read+0x11/0x20 [ 408.591660] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 408.596942] ? rcu_softirq_qs+0x20/0x20 [ 408.600929] ? __fget+0x4d1/0x740 [ 408.604390] ? ksys_dup3+0x680/0x680 [ 408.608118] block_ioctl+0xee/0x130 [ 408.611746] ? blkdev_fallocate+0x400/0x400 [ 408.616075] do_vfs_ioctl+0x1de/0x1720 [ 408.619967] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 408.625540] ? ioctl_preallocate+0x300/0x300 [ 408.629968] ? __fget_light+0x2e9/0x430 [ 408.633963] ? fget_raw+0x20/0x20 [ 408.637421] ? rcu_read_lock_sched_held+0x14f/0x180 [ 408.642439] ? kmem_cache_free+0x24f/0x290 [ 408.646678] ? putname+0xf7/0x130 [ 408.650141] ? do_syscall_64+0x9a/0x820 [ 408.654124] ? do_syscall_64+0x9a/0x820 [ 408.658105] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 408.662692] ? security_file_ioctl+0x94/0xc0 [ 408.667108] ksys_ioctl+0xa9/0xd0 [ 408.670570] __x64_sys_ioctl+0x73/0xb0 [ 408.674462] do_syscall_64+0x1b9/0x820 [ 408.678353] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.683741] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.688674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.693523] ? trace_hardirqs_on_caller+0x310/0x310 [ 408.698544] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.703568] ? prepare_exit_to_usermode+0x291/0x3b0 [ 408.708593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.713471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.718664] RIP: 0033:0x4573d7 [ 408.721861] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.740764] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.748475] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 408.755749] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 408.763017] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 408.770288] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 408.777561] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @remote}, 0xffffffffffffff7b) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x8100, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x81000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:46 executing program 5 (fault-call:2 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 408.897095] FAULT_INJECTION: forcing a failure. [ 408.897095] name failslab, interval 1, probability 0, space 0, times 0 [ 408.908821] CPU: 1 PID: 17041 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 408.917326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.926691] Call Trace: [ 408.929301] dump_stack+0x244/0x39d [ 408.932949] ? dump_stack_print_info.cold.1+0x20/0x20 [ 408.938179] should_fail.cold.4+0xa/0x17 [ 408.942261] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.947385] ? zap_class+0x640/0x640 [ 408.951112] ? attach_entity_load_avg+0x860/0x860 [ 408.955987] ? __lock_acquire+0x62f/0x4c20 [ 408.960239] ? rcu_read_lock_sched_held+0x14f/0x180 [ 408.965286] ? __update_load_avg_blocked_se+0x690/0x690 [ 408.970663] ? zap_class+0x640/0x640 [ 408.974393] ? find_held_lock+0x36/0x1c0 [ 408.978476] ? zap_class+0x640/0x640 [ 408.982197] ? find_held_lock+0x36/0x1c0 [ 408.986278] ? print_usage_bug+0xc0/0xc0 [ 408.990360] __should_failslab+0x124/0x180 [ 408.994622] should_failslab+0x9/0x14 [ 408.998443] kmem_cache_alloc+0x47/0x730 [ 409.002523] ? lock_downgrade+0x900/0x900 [ 409.006691] radix_tree_node_alloc.constprop.19+0x1f7/0x370 [ 409.012455] idr_get_free+0x7a4/0xf70 [ 409.016290] ? radix_tree_iter_tag_clear+0x90/0x90 [ 409.021233] ? __save_stack_trace+0x8d/0xf0 [ 409.025585] ? save_stack+0xa9/0xd0 [ 409.029239] ? save_stack+0x43/0xd0 [ 409.032879] ? kasan_kmalloc+0xc7/0xe0 [ 409.036774] ? kasan_slab_alloc+0x12/0x20 [ 409.040936] ? kmem_cache_alloc+0x12e/0x730 [ 409.045269] ? __kernfs_new_node+0x127/0x8d0 [ 409.049684] ? kernfs_new_node+0x95/0x120 [ 409.053843] ? internal_create_group+0x5fc/0xd80 [ 409.058621] ? sysfs_create_group+0x1f/0x30 [ 409.062988] ? lo_ioctl+0x1307/0x1d60 [ 409.066807] ? blkdev_ioctl+0x9ac/0x2010 [ 409.070890] ? block_ioctl+0xee/0x130 [ 409.074703] ? do_vfs_ioctl+0x1de/0x1720 [ 409.078778] ? ksys_ioctl+0xa9/0xd0 [ 409.082414] ? __x64_sys_ioctl+0x73/0xb0 [ 409.086493] ? do_syscall_64+0x1b9/0x820 [ 409.090561] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.095942] ? find_held_lock+0x36/0x1c0 [ 409.100028] idr_alloc_u32+0x1d4/0x3a0 [ 409.103935] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 409.108789] ? lock_acquire+0x1ed/0x520 [ 409.112773] ? __kernfs_new_node+0x14e/0x8d0 [ 409.117201] ? __lock_is_held+0xb5/0x140 [ 409.121284] idr_alloc_cyclic+0x166/0x350 [ 409.125444] ? idr_alloc+0x1b0/0x1b0 [ 409.125462] ? __radix_tree_preload+0x1f7/0x280 [ 409.125485] __kernfs_new_node+0x1ee/0x8d0 [ 409.125504] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 409.142901] ? _raw_spin_unlock_irq+0x60/0x80 [ 409.147416] ? __schedule+0x168b/0x21d0 [ 409.147438] ? zap_class+0x640/0x640 [ 409.147457] ? zap_class+0x640/0x640 [ 409.147475] ? trace_hardirqs_on+0xbd/0x310 [ 409.147495] ? kasan_check_read+0x11/0x20 [ 409.155193] ? find_held_lock+0x36/0x1c0 [ 409.171426] kernfs_new_node+0x95/0x120 [ 409.175421] kernfs_create_dir_ns+0x4d/0x160 [ 409.179990] internal_create_group+0x5fc/0xd80 [ 409.184624] ? remove_files.isra.1+0x190/0x190 [ 409.189260] ? up_write+0x7b/0x220 [ 409.192811] ? down_write_nested+0x130/0x130 [ 409.197235] ? down_read+0x120/0x120 [ 409.200978] sysfs_create_group+0x1f/0x30 [ 409.205156] lo_ioctl+0x1307/0x1d60 [ 409.208808] ? lo_rw_aio+0x1ef0/0x1ef0 [ 409.212715] blkdev_ioctl+0x9ac/0x2010 [ 409.216657] ? blkpg_ioctl+0xc10/0xc10 [ 409.220559] ? lock_downgrade+0x900/0x900 [ 409.224717] ? check_preemption_disabled+0x48/0x280 [ 409.229755] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 409.234697] ? kasan_check_read+0x11/0x20 [ 409.238860] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 409.244151] ? rcu_softirq_qs+0x20/0x20 [ 409.248178] ? __fget+0x4d1/0x740 [ 409.251730] ? ksys_dup3+0x680/0x680 [ 409.255469] block_ioctl+0xee/0x130 [ 409.259109] ? blkdev_fallocate+0x400/0x400 [ 409.263453] do_vfs_ioctl+0x1de/0x1720 [ 409.267367] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 409.272926] ? ioctl_preallocate+0x300/0x300 [ 409.272943] ? __fget_light+0x2e9/0x430 [ 409.272961] ? fget_raw+0x20/0x20 [ 409.284784] ? rcu_read_lock_sched_held+0x14f/0x180 [ 409.289816] ? kmem_cache_free+0x24f/0x290 [ 409.294108] ? putname+0xf7/0x130 [ 409.297580] ? do_syscall_64+0x9a/0x820 [ 409.301577] ? do_syscall_64+0x9a/0x820 [ 409.305573] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 409.305594] ? security_file_ioctl+0x94/0xc0 [ 409.305625] ksys_ioctl+0xa9/0xd0 [ 409.305647] __x64_sys_ioctl+0x73/0xb0 [ 409.305666] do_syscall_64+0x1b9/0x820 [ 409.318556] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 409.318577] ? syscall_return_slowpath+0x5e0/0x5e0 [ 409.318593] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.318622] ? trace_hardirqs_on_caller+0x310/0x310 [ 409.318645] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 409.351530] ? prepare_exit_to_usermode+0x291/0x3b0 [ 409.356568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.361431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.366643] RIP: 0033:0x4573d7 [ 409.369852] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.388762] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:29:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xfffffffffffff000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf0ffffff, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 409.396527] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 409.403806] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 409.411082] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 409.418369] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 409.418379] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 409.454241] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 409.472057] isofs_fill_super: root inode is not a directory. Corrupted media? [ 409.511288] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xec0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:47 executing program 5 (fault-call:2 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:47 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)='lo\x00', &(0x7f0000000140)='vmnet1\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='lo\x00', &(0x7f0000000200)='lo\x00', &(0x7f0000000240)='eth1]lobdev\x00'], &(0x7f0000000340)=[&(0x7f00000002c0)='lo\x00', &(0x7f0000000300)='lo\x00'], 0xc1e16f8752675cae) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000380)) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 409.807802] FAULT_INJECTION: forcing a failure. [ 409.807802] name failslab, interval 1, probability 0, space 0, times 0 [ 409.819371] CPU: 0 PID: 17093 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 409.827871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.827879] Call Trace: [ 409.827906] dump_stack+0x244/0x39d [ 409.827935] ? dump_stack_print_info.cold.1+0x20/0x20 [ 409.848671] ? radix_tree_tag_set+0x3d0/0x3d0 [ 409.853197] should_fail.cold.4+0xa/0x17 21:29:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xc00e000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x200000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 409.857300] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 409.862421] ? kernfs_activate+0x8e/0x2c0 [ 409.866354] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 409.866585] ? zap_class+0x640/0x640 [ 409.876602] ? lock_release+0xa10/0xa10 [ 409.880607] ? perf_trace_sched_process_exec+0x860/0x860 [ 409.886099] ? find_held_lock+0x36/0x1c0 [ 409.886146] ? __lock_is_held+0xb5/0x140 [ 409.894291] ? perf_trace_sched_process_exec+0x860/0x860 [ 409.899755] ? find_held_lock+0x36/0x1c0 [ 409.903838] __should_failslab+0x124/0x180 [ 409.903860] should_failslab+0x9/0x14 [ 409.903877] kmem_cache_alloc+0x2be/0x730 [ 409.903892] ? find_held_lock+0x36/0x1c0 [ 409.903914] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 409.903933] __kernfs_new_node+0x127/0x8d0 [ 409.903953] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 409.916133] ? kasan_check_write+0x14/0x20 [ 409.916152] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 409.916182] ? __kernfs_new_node+0x697/0x8d0 [ 409.916203] ? wait_for_completion+0x8a0/0x8a0 [ 409.916222] ? zap_class+0x640/0x640 21:29:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 409.916243] ? kasan_check_write+0x14/0x20 [ 409.916263] ? __lock_is_held+0xb5/0x140 [ 409.925326] ? wait_for_completion+0x8a0/0x8a0 [ 409.925358] ? mutex_unlock+0xd/0x10 [ 409.925374] ? kernfs_activate+0x21a/0x2c0 [ 409.925395] kernfs_new_node+0x95/0x120 [ 409.925417] __kernfs_create_file+0x5a/0x340 [ 409.985419] sysfs_add_file_mode_ns+0x222/0x530 [ 409.990108] internal_create_group+0x3df/0xd80 [ 409.994715] ? remove_files.isra.1+0x190/0x190 [ 409.999304] ? up_write+0x7b/0x220 [ 409.999322] ? down_write_nested+0x130/0x130 [ 409.999338] ? down_read+0x120/0x120 [ 409.999370] sysfs_create_group+0x1f/0x30 [ 409.999391] lo_ioctl+0x1307/0x1d60 [ 410.007334] ? lo_rw_aio+0x1ef0/0x1ef0 [ 410.022675] blkdev_ioctl+0x9ac/0x2010 [ 410.026580] ? blkpg_ioctl+0xc10/0xc10 [ 410.030496] ? lock_downgrade+0x900/0x900 [ 410.034667] ? check_preemption_disabled+0x48/0x280 [ 410.039715] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 410.044663] ? kasan_check_read+0x11/0x20 [ 410.048823] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 410.054112] ? rcu_softirq_qs+0x20/0x20 21:29:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x100000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 410.058111] ? __fget+0x4d1/0x740 [ 410.061585] ? ksys_dup3+0x680/0x680 [ 410.065341] block_ioctl+0xee/0x130 [ 410.068982] ? blkdev_fallocate+0x400/0x400 [ 410.073321] do_vfs_ioctl+0x1de/0x1720 [ 410.077229] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 410.082779] ? ioctl_preallocate+0x300/0x300 [ 410.087203] ? __fget_light+0x2e9/0x430 [ 410.091192] ? fget_raw+0x20/0x20 [ 410.094664] ? rcu_read_lock_sched_held+0x14f/0x180 [ 410.099712] ? kmem_cache_free+0x24f/0x290 [ 410.103960] ? putname+0xf7/0x130 21:29:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 410.107429] ? do_syscall_64+0x9a/0x820 [ 410.111416] ? do_syscall_64+0x9a/0x820 [ 410.115403] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.120005] ? security_file_ioctl+0x94/0xc0 [ 410.124431] ksys_ioctl+0xa9/0xd0 [ 410.127897] __x64_sys_ioctl+0x73/0xb0 [ 410.131802] do_syscall_64+0x1b9/0x820 [ 410.135702] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 410.141167] ? syscall_return_slowpath+0x5e0/0x5e0 [ 410.146138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.150998] ? trace_hardirqs_on_caller+0x310/0x310 [ 410.156031] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 410.161061] ? prepare_exit_to_usermode+0x291/0x3b0 [ 410.166098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.170985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.176184] RIP: 0033:0x4573d7 [ 410.179392] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.198303] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:29:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x1000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 410.206018] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 410.213293] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 410.213303] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 410.213312] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 410.213321] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 410.271868] isofs_fill_super: root inode is not a directory. Corrupted media? [ 410.311028] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:48 executing program 5 (fault-call:2 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 410.489655] FAULT_INJECTION: forcing a failure. [ 410.489655] name failslab, interval 1, probability 0, space 0, times 0 [ 410.509195] CPU: 0 PID: 17143 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 410.517705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.527085] Call Trace: [ 410.529667] dump_stack+0x244/0x39d [ 410.533293] ? dump_stack_print_info.cold.1+0x20/0x20 [ 410.538477] should_fail.cold.4+0xa/0x17 [ 410.542548] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.547652] ? lock_release+0xa10/0xa10 [ 410.551656] ? perf_trace_sched_process_exec+0x860/0x860 [ 410.557107] ? zap_class+0x640/0x640 [ 410.560820] ? find_held_lock+0x36/0x1c0 [ 410.564873] ? __lock_is_held+0xb5/0x140 [ 410.568928] ? perf_trace_sched_process_exec+0x860/0x860 [ 410.574363] ? kernfs_activate+0x21a/0x2c0 [ 410.578607] __should_failslab+0x124/0x180 [ 410.582868] should_failslab+0x9/0x14 [ 410.586672] kmem_cache_alloc+0x2be/0x730 [ 410.590813] ? lock_downgrade+0x900/0x900 [ 410.594954] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 410.599958] __kernfs_new_node+0x127/0x8d0 [ 410.604201] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 410.608944] ? zap_class+0x640/0x640 [ 410.612670] ? __lock_is_held+0xb5/0x140 [ 410.616728] ? wait_for_completion+0x8a0/0x8a0 [ 410.621305] ? mutex_unlock+0xd/0x10 [ 410.625005] ? kernfs_activate+0x21a/0x2c0 [ 410.629228] ? kernfs_walk_and_get_ns+0x340/0x340 [ 410.634056] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 21:29:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x81000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 410.639591] ? kernfs_link_sibling+0x1d2/0x3b0 [ 410.644203] kernfs_new_node+0x95/0x120 [ 410.648196] __kernfs_create_file+0x5a/0x340 [ 410.652644] sysfs_add_file_mode_ns+0x222/0x530 [ 410.657337] internal_create_group+0x3df/0xd80 [ 410.661941] ? remove_files.isra.1+0x190/0x190 [ 410.666549] ? up_write+0x7b/0x220 [ 410.666565] ? down_write_nested+0x130/0x130 [ 410.666581] ? down_read+0x120/0x120 [ 410.666627] sysfs_create_group+0x1f/0x30 [ 410.666649] lo_ioctl+0x1307/0x1d60 [ 410.666673] ? lo_rw_aio+0x1ef0/0x1ef0 [ 410.689960] blkdev_ioctl+0x9ac/0x2010 [ 410.693866] ? blkpg_ioctl+0xc10/0xc10 [ 410.697762] ? lock_downgrade+0x900/0x900 [ 410.701923] ? check_preemption_disabled+0x48/0x280 [ 410.706962] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 410.711903] ? kasan_check_read+0x11/0x20 [ 410.716062] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 410.721355] ? rcu_softirq_qs+0x20/0x20 [ 410.725360] ? __fget+0x4d1/0x740 [ 410.728832] ? ksys_dup3+0x680/0x680 [ 410.732570] block_ioctl+0xee/0x130 [ 410.736213] ? blkdev_fallocate+0x400/0x400 21:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x3000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 410.740552] do_vfs_ioctl+0x1de/0x1720 [ 410.744452] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 410.750001] ? ioctl_preallocate+0x300/0x300 [ 410.754421] ? __fget_light+0x2e9/0x430 [ 410.758409] ? fget_raw+0x20/0x20 [ 410.761876] ? rcu_read_lock_sched_held+0x14f/0x180 [ 410.766906] ? kmem_cache_free+0x24f/0x290 [ 410.766924] ? putname+0xf7/0x130 [ 410.766944] ? do_syscall_64+0x9a/0x820 [ 410.766960] ? do_syscall_64+0x9a/0x820 [ 410.766978] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 410.766999] ? security_file_ioctl+0x94/0xc0 [ 410.774683] ksys_ioctl+0xa9/0xd0 [ 410.774705] __x64_sys_ioctl+0x73/0xb0 [ 410.774723] do_syscall_64+0x1b9/0x820 [ 410.774740] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 410.774759] ? syscall_return_slowpath+0x5e0/0x5e0 [ 410.774774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.774793] ? trace_hardirqs_on_caller+0x310/0x310 [ 410.774813] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 410.828065] ? prepare_exit_to_usermode+0x291/0x3b0 [ 410.833123] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x2d5, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 410.837985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.843181] RIP: 0033:0x4573d7 [ 410.846382] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.865285] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.865301] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 410.865310] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 21:29:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 410.865319] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 410.865328] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 410.865338] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 410.919891] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x3, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:48 executing program 5 (fault-call:2 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 411.006600] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 411.111266] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 411.141448] FAULT_INJECTION: forcing a failure. [ 411.141448] name failslab, interval 1, probability 0, space 0, times 0 [ 411.157686] CPU: 0 PID: 17196 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 411.166203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.175659] Call Trace: [ 411.178271] dump_stack+0x244/0x39d [ 411.182406] ? dump_stack_print_info.cold.1+0x20/0x20 [ 411.187645] should_fail.cold.4+0xa/0x17 [ 411.187675] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.187700] ? lock_release+0xa10/0xa10 [ 411.196852] ? perf_trace_sched_process_exec+0x860/0x860 [ 411.196878] ? zap_class+0x640/0x640 [ 411.196905] ? find_held_lock+0x36/0x1c0 [ 411.196927] ? __lock_is_held+0xb5/0x140 [ 411.196945] ? intel_device_info_runtime_init+0x4e88/0x5300 [ 411.196979] ? perf_trace_sched_process_exec+0x860/0x860 [ 411.229339] ? kernfs_activate+0x21a/0x2c0 [ 411.233602] __should_failslab+0x124/0x180 [ 411.237875] should_failslab+0x9/0x14 [ 411.241695] kmem_cache_alloc+0x2be/0x730 [ 411.245878] ? lock_downgrade+0x900/0x900 [ 411.250046] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 411.255077] __kernfs_new_node+0x127/0x8d0 [ 411.259314] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 411.264081] ? zap_class+0x640/0x640 [ 411.267804] ? __lock_is_held+0xb5/0x140 [ 411.271855] ? wait_for_completion+0x8a0/0x8a0 [ 411.276431] ? mutex_unlock+0xd/0x10 [ 411.280163] ? kernfs_activate+0x21a/0x2c0 [ 411.284395] ? kernfs_walk_and_get_ns+0x340/0x340 [ 411.289238] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 411.294803] ? kernfs_link_sibling+0x1d2/0x3b0 [ 411.299395] kernfs_new_node+0x95/0x120 [ 411.303358] __kernfs_create_file+0x5a/0x340 [ 411.307758] sysfs_add_file_mode_ns+0x222/0x530 [ 411.312539] internal_create_group+0x3df/0xd80 [ 411.317129] ? remove_files.isra.1+0x190/0x190 [ 411.321695] ? up_write+0x7b/0x220 [ 411.325222] ? down_write_nested+0x130/0x130 [ 411.329630] ? down_read+0x120/0x120 [ 411.333338] sysfs_create_group+0x1f/0x30 [ 411.337477] lo_ioctl+0x1307/0x1d60 [ 411.341128] ? lo_rw_aio+0x1ef0/0x1ef0 [ 411.345005] blkdev_ioctl+0x9ac/0x2010 [ 411.348882] ? blkpg_ioctl+0xc10/0xc10 [ 411.352757] ? lock_downgrade+0x900/0x900 [ 411.356905] ? check_preemption_disabled+0x48/0x280 [ 411.361915] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 411.366844] ? kasan_check_read+0x11/0x20 [ 411.370981] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 411.376243] ? rcu_softirq_qs+0x20/0x20 [ 411.380229] ? __fget+0x4d1/0x740 [ 411.383674] ? ksys_dup3+0x680/0x680 [ 411.387428] block_ioctl+0xee/0x130 [ 411.391054] ? blkdev_fallocate+0x400/0x400 [ 411.395376] do_vfs_ioctl+0x1de/0x1720 [ 411.399250] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 411.404774] ? ioctl_preallocate+0x300/0x300 [ 411.409181] ? __fget_light+0x2e9/0x430 [ 411.413153] ? fget_raw+0x20/0x20 [ 411.416592] ? rcu_read_lock_sched_held+0x14f/0x180 [ 411.421631] ? kmem_cache_free+0x24f/0x290 [ 411.425869] ? putname+0xf7/0x130 [ 411.429309] ? do_syscall_64+0x9a/0x820 [ 411.433273] ? do_syscall_64+0x9a/0x820 [ 411.437233] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 411.441805] ? security_file_ioctl+0x94/0xc0 [ 411.446215] ksys_ioctl+0xa9/0xd0 [ 411.449658] __x64_sys_ioctl+0x73/0xb0 [ 411.453549] do_syscall_64+0x1b9/0x820 [ 411.457424] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.462786] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.467718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.472561] ? trace_hardirqs_on_caller+0x310/0x310 [ 411.477578] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.482580] ? prepare_exit_to_usermode+0x291/0x3b0 [ 411.487587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.492450] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.497647] RIP: 0033:0x4573d7 [ 411.500825] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.519712] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.527420] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 411.534699] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 411.541984] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 411.549288] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 411.556586] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8000000000002, @remote}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e25, 0x0, @mcast1, 0x80000000000a828}, 0xffffffffffffffa7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x2}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x7}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) syz_read_part_table(0x4, 0x2, &(0x7f0000000040)=[{&(0x7f00000001c0)="e7e52717b9e6deb5ff602d81d2cfb50e2f836f83afac9b88e6f44dcfe0b516d120e8d3fc16d2ced95a1fbfccfa761466e4c998a40f96bd1d006500e12daa23a59c6df5829751e4bf1e765c3bdaf07a10ae710d97466461089d57542bdd5d7493eadd590b1f793b196d4a6dbba54f472fcd81f270ed7e6ce231dd3e475942766951449e55ea31263f4c3a4679fc5928ae6709548731fdddcf2d34bfa02921d526713e90493c827ef1d99b6d4e52214914f2c92430ce8bd8af031210d939ab02d28d961187a1af8be1e32d2b9cb39be0724c8d768c50a911ebf6f79c8deb7596209a20", 0xe2, 0x4}, {&(0x7f00000002c0)="6e650e9f3b8c3ea44871d1c59e303a454628926a7fb6a8818b746d7d5cf6f6b5aa7fc16b48b4b811b89a465c4ca98395793a53c9031feeb5cf9148bb05e168f2ecea3adf8c5b68b9457bb708256f42458f6458cfd68e978d4f55a2392187ecf171a078d8380f484c8e421e0f27deb0cae2fefe5e4b6ed126ade774008188dc08f6c073bafb8448ff9fd0a5b33451586ed3cf380d4d345cd058e2948cd486a7b7c84430cf0fc1d88040f5ff30172d5fc31d714a6337feb202762c27fb4e782dc0446b20", 0xc3, 0xc2}]) 21:29:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf0ffffff00000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636308c", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 411.584249] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:49 executing program 5 (fault-call:2 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xffffff7f00000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 411.856925] FAULT_INJECTION: forcing a failure. [ 411.856925] name failslab, interval 1, probability 0, space 0, times 0 21:29:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 411.899750] CPU: 0 PID: 17228 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 411.908268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.917636] Call Trace: [ 411.920243] dump_stack+0x244/0x39d [ 411.923897] ? dump_stack_print_info.cold.1+0x20/0x20 [ 411.929119] should_fail.cold.4+0xa/0x17 [ 411.933203] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.938316] ? lock_release+0xa10/0xa10 [ 411.942300] ? perf_trace_sched_process_exec+0x860/0x860 [ 411.947771] ? zap_class+0x640/0x640 [ 411.951510] ? find_held_lock+0x36/0x1c0 [ 411.955588] ? __lock_is_held+0xb5/0x140 [ 411.959691] ? perf_trace_sched_process_exec+0x860/0x860 [ 411.965153] ? kernfs_activate+0x21a/0x2c0 [ 411.969413] __should_failslab+0x124/0x180 [ 411.973675] should_failslab+0x9/0x14 [ 411.977492] kmem_cache_alloc+0x2be/0x730 [ 411.981669] ? lock_downgrade+0x900/0x900 [ 411.985835] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 411.990871] __kernfs_new_node+0x127/0x8d0 [ 411.995124] ? kernfs_dop_revalidate+0x3c0/0x3c0 21:29:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 411.999893] ? zap_class+0x640/0x640 [ 412.003719] ? __lock_is_held+0xb5/0x140 [ 412.007792] ? wait_for_completion+0x8a0/0x8a0 [ 412.012395] ? mutex_unlock+0xd/0x10 [ 412.016148] ? kernfs_activate+0x21a/0x2c0 [ 412.020396] ? kernfs_walk_and_get_ns+0x340/0x340 [ 412.025270] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 412.030815] ? kernfs_link_sibling+0x1d2/0x3b0 [ 412.035418] kernfs_new_node+0x95/0x120 [ 412.039413] __kernfs_create_file+0x5a/0x340 [ 412.043837] sysfs_add_file_mode_ns+0x222/0x530 [ 412.048531] internal_create_group+0x3df/0xd80 [ 412.053133] ? remove_files.isra.1+0x190/0x190 [ 412.057743] ? up_write+0x7b/0x220 [ 412.061292] ? down_write_nested+0x130/0x130 [ 412.065715] ? down_read+0x120/0x120 [ 412.069449] sysfs_create_group+0x1f/0x30 [ 412.069470] lo_ioctl+0x1307/0x1d60 [ 412.069496] ? lo_rw_aio+0x1ef0/0x1ef0 [ 412.069519] blkdev_ioctl+0x9ac/0x2010 [ 412.085044] ? blkpg_ioctl+0xc10/0xc10 [ 412.088942] ? lock_downgrade+0x900/0x900 [ 412.093101] ? check_preemption_disabled+0x48/0x280 [ 412.098137] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 412.103074] ? kasan_check_read+0x11/0x20 [ 412.103095] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 412.103114] ? rcu_softirq_qs+0x20/0x20 [ 412.103142] ? __fget+0x4d1/0x740 [ 412.103164] ? ksys_dup3+0x680/0x680 [ 412.103195] block_ioctl+0xee/0x130 [ 412.103214] ? blkdev_fallocate+0x400/0x400 [ 412.129790] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 412.131699] do_vfs_ioctl+0x1de/0x1720 [ 412.131721] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 412.131741] ? ioctl_preallocate+0x300/0x300 [ 412.131758] ? __fget_light+0x2e9/0x430 [ 412.131781] ? fget_raw+0x20/0x20 [ 412.159314] ? rcu_read_lock_sched_held+0x14f/0x180 [ 412.164352] ? kmem_cache_free+0x24f/0x290 [ 412.168601] ? putname+0xf7/0x130 [ 412.172091] ? do_syscall_64+0x9a/0x820 [ 412.176079] ? do_syscall_64+0x9a/0x820 [ 412.180107] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.184703] ? security_file_ioctl+0x94/0xc0 [ 412.189124] ksys_ioctl+0xa9/0xd0 [ 412.192594] __x64_sys_ioctl+0x73/0xb0 [ 412.196544] do_syscall_64+0x1b9/0x820 [ 412.196562] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 412.196581] ? syscall_return_slowpath+0x5e0/0x5e0 [ 412.196597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.196635] ? trace_hardirqs_on_caller+0x310/0x310 [ 412.205867] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 412.205887] ? prepare_exit_to_usermode+0x291/0x3b0 [ 412.205924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.205947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.205989] RIP: 0033:0x4573d7 [ 412.206005] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.206027] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.270660] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 412.277915] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 412.285177] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 412.292447] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 412.299700] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 412.318762] isofs_fill_super: root inode is not a directory. Corrupted media? [ 412.343655] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = getpid() r4 = getpid() setpgid(r3, r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00', 0xfffffffffffffffc}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0xfffffe46) 21:29:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xd5020000, 0x0, 0x0, r1}}, 0x20}}, 0x0) 21:29:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:50 executing program 5 (fault-call:2 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636307f", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 412.610906] FAULT_INJECTION: forcing a failure. [ 412.610906] name failslab, interval 1, probability 0, space 0, times 0 21:29:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0xf000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 412.670576] device lo entered promiscuous mode [ 412.700563] CPU: 0 PID: 17274 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 412.709095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.718458] Call Trace: [ 412.721068] dump_stack+0x244/0x39d [ 412.724719] ? dump_stack_print_info.cold.1+0x20/0x20 [ 412.729936] should_fail.cold.4+0xa/0x17 [ 412.734017] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.739135] ? lock_release+0xa10/0xa10 [ 412.743124] ? perf_trace_sched_process_exec+0x860/0x860 21:29:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 412.748595] ? zap_class+0x640/0x640 [ 412.752345] ? find_held_lock+0x36/0x1c0 [ 412.756424] ? __lock_is_held+0xb5/0x140 [ 412.760515] ? perf_trace_sched_process_exec+0x860/0x860 [ 412.765975] ? kernfs_activate+0x21a/0x2c0 [ 412.770247] __should_failslab+0x124/0x180 [ 412.774501] should_failslab+0x9/0x14 [ 412.778315] kmem_cache_alloc+0x2be/0x730 [ 412.782508] ? lock_downgrade+0x900/0x900 [ 412.786672] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 412.791703] __kernfs_new_node+0x127/0x8d0 [ 412.795957] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 412.800728] ? zap_class+0x640/0x640 [ 412.804480] ? __lock_is_held+0xb5/0x140 [ 412.808620] ? wait_for_completion+0x8a0/0x8a0 [ 412.813244] ? mutex_unlock+0xd/0x10 [ 412.816983] ? kernfs_activate+0x21a/0x2c0 [ 412.821245] ? kernfs_walk_and_get_ns+0x340/0x340 [ 412.826101] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 412.831653] ? kernfs_link_sibling+0x1d2/0x3b0 [ 412.836252] kernfs_new_node+0x95/0x120 [ 412.840237] __kernfs_create_file+0x5a/0x340 [ 412.844669] sysfs_add_file_mode_ns+0x222/0x530 [ 412.849351] internal_create_group+0x3df/0xd80 [ 412.853949] ? remove_files.isra.1+0x190/0x190 [ 412.858532] ? up_write+0x7b/0x220 [ 412.862079] ? down_write_nested+0x130/0x130 [ 412.866494] ? down_read+0x120/0x120 [ 412.870230] sysfs_create_group+0x1f/0x30 [ 412.874391] lo_ioctl+0x1307/0x1d60 [ 412.878030] ? lo_rw_aio+0x1ef0/0x1ef0 [ 412.881930] blkdev_ioctl+0x9ac/0x2010 [ 412.885844] ? blkpg_ioctl+0xc10/0xc10 [ 412.889738] ? lock_downgrade+0x900/0x900 [ 412.893887] ? check_preemption_disabled+0x48/0x280 [ 412.898915] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 412.903847] ? kasan_check_read+0x11/0x20 [ 412.908001] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 412.913286] ? rcu_softirq_qs+0x20/0x20 [ 412.917273] ? __fget+0x4d1/0x740 [ 412.920753] ? ksys_dup3+0x680/0x680 [ 412.924488] block_ioctl+0xee/0x130 [ 412.928120] ? blkdev_fallocate+0x400/0x400 [ 412.932446] do_vfs_ioctl+0x1de/0x1720 [ 412.936340] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 412.941885] ? ioctl_preallocate+0x300/0x300 [ 412.946298] ? __fget_light+0x2e9/0x430 [ 412.950278] ? fget_raw+0x20/0x20 [ 412.953737] ? rcu_read_lock_sched_held+0x14f/0x180 [ 412.958755] ? kmem_cache_free+0x24f/0x290 [ 412.963009] ? putname+0xf7/0x130 [ 412.966469] ? do_syscall_64+0x9a/0x820 [ 412.970445] ? do_syscall_64+0x9a/0x820 [ 412.974427] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 412.979015] ? security_file_ioctl+0x94/0xc0 [ 412.983434] ksys_ioctl+0xa9/0xd0 [ 412.986898] __x64_sys_ioctl+0x73/0xb0 [ 412.990794] do_syscall_64+0x1b9/0x820 [ 412.994684] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.000052] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.004985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.009833] ? trace_hardirqs_on_caller+0x310/0x310 [ 413.014853] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.019874] ? prepare_exit_to_usermode+0x291/0x3b0 [ 413.024901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.029756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.034944] RIP: 0033:0x4573d7 21:29:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 413.038147] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.057046] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.064758] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 413.072028] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 413.079296] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 413.086568] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 413.093841] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 413.143526] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:51 executing program 5 (fault-call:2 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x300000000000000, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 413.393808] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 413.430795] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 413.546124] FAULT_INJECTION: forcing a failure. [ 413.546124] name failslab, interval 1, probability 0, space 0, times 0 [ 413.582527] CPU: 0 PID: 17325 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 21:29:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 413.591040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.600403] Call Trace: [ 413.603008] dump_stack+0x244/0x39d [ 413.606679] ? dump_stack_print_info.cold.1+0x20/0x20 [ 413.611894] should_fail.cold.4+0xa/0x17 [ 413.615975] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 413.621095] ? lock_release+0xa10/0xa10 [ 413.625083] ? perf_trace_sched_process_exec+0x860/0x860 [ 413.630546] ? zap_class+0x640/0x640 [ 413.634283] ? find_held_lock+0x36/0x1c0 [ 413.638364] ? __lock_is_held+0xb5/0x140 [ 413.642451] ? perf_trace_sched_process_exec+0x860/0x860 [ 413.642469] ? kernfs_activate+0x21a/0x2c0 [ 413.642493] __should_failslab+0x124/0x180 [ 413.656396] should_failslab+0x9/0x14 [ 413.660217] kmem_cache_alloc+0x2be/0x730 [ 413.664374] ? lock_downgrade+0x900/0x900 [ 413.668535] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 413.668556] __kernfs_new_node+0x127/0x8d0 [ 413.668576] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 413.682564] ? zap_class+0x640/0x640 [ 413.686300] ? __lock_is_held+0xb5/0x140 [ 413.690377] ? wait_for_completion+0x8a0/0x8a0 [ 413.694987] ? mutex_unlock+0xd/0x10 [ 413.698715] ? kernfs_activate+0x21a/0x2c0 [ 413.702965] ? kernfs_walk_and_get_ns+0x340/0x340 [ 413.707821] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 413.713373] ? kernfs_link_sibling+0x1d2/0x3b0 [ 413.717983] kernfs_new_node+0x95/0x120 [ 413.721974] __kernfs_create_file+0x5a/0x340 [ 413.726405] sysfs_add_file_mode_ns+0x222/0x530 [ 413.731102] internal_create_group+0x3df/0xd80 [ 413.735712] ? remove_files.isra.1+0x190/0x190 [ 413.740305] ? up_write+0x7b/0x220 21:29:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40b}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 413.743855] ? down_write_nested+0x130/0x130 [ 413.748273] ? down_read+0x120/0x120 [ 413.752012] sysfs_create_group+0x1f/0x30 [ 413.756174] lo_ioctl+0x1307/0x1d60 [ 413.759825] ? lo_rw_aio+0x1ef0/0x1ef0 [ 413.763727] blkdev_ioctl+0x9ac/0x2010 [ 413.767647] ? blkpg_ioctl+0xc10/0xc10 [ 413.771550] ? lock_downgrade+0x900/0x900 [ 413.772133] device lo left promiscuous mode [ 413.775706] ? check_preemption_disabled+0x48/0x280 [ 413.775732] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 413.775748] ? kasan_check_read+0x11/0x20 [ 413.775766] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 413.775792] ? rcu_softirq_qs+0x20/0x20 [ 413.785134] ? __fget+0x4d1/0x740 [ 413.794199] ? ksys_dup3+0x680/0x680 [ 413.794229] block_ioctl+0xee/0x130 [ 413.794244] ? blkdev_fallocate+0x400/0x400 [ 413.794258] do_vfs_ioctl+0x1de/0x1720 [ 413.794276] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 413.794296] ? ioctl_preallocate+0x300/0x300 [ 413.794314] ? __fget_light+0x2e9/0x430 [ 413.818659] ? fget_raw+0x20/0x20 [ 413.818679] ? rcu_read_lock_sched_held+0x14f/0x180 [ 413.818697] ? kmem_cache_free+0x24f/0x290 [ 413.818714] ? putname+0xf7/0x130 [ 413.832538] ? do_syscall_64+0x9a/0x820 [ 413.832555] ? do_syscall_64+0x9a/0x820 [ 413.832573] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 413.832595] ? security_file_ioctl+0x94/0xc0 [ 413.869639] ksys_ioctl+0xa9/0xd0 [ 413.873115] __x64_sys_ioctl+0x73/0xb0 [ 413.877022] do_syscall_64+0x1b9/0x820 [ 413.880923] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.886306] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.891251] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:29:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 413.896106] ? trace_hardirqs_on_caller+0x310/0x310 [ 413.901138] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.906167] ? prepare_exit_to_usermode+0x291/0x3b0 [ 413.911207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.916070] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.921265] RIP: 0033:0x4573d7 [ 413.924466] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:29:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x9effffff, 0x0, 0x0, r1}}, 0x20}}, 0x0) [ 413.943375] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.943391] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 413.943400] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 413.943409] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 413.943419] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 413.943427] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 413.996207] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 414.039051] isofs_fill_super: root inode is not a directory. Corrupted media? [ 414.055194] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:51 executing program 5 (fault-call:2 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb04000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x1000000, 0x0, r1}}, 0x20}}, 0x0) [ 414.202232] FAULT_INJECTION: forcing a failure. [ 414.202232] name failslab, interval 1, probability 0, space 0, times 0 [ 414.213926] CPU: 1 PID: 17371 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 414.222439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.231801] Call Trace: [ 414.234412] dump_stack+0x244/0x39d [ 414.238070] ? dump_stack_print_info.cold.1+0x20/0x20 [ 414.243288] should_fail.cold.4+0xa/0x17 [ 414.243318] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 414.243342] ? lock_release+0xa10/0xa10 [ 414.252496] ? perf_trace_sched_process_exec+0x860/0x860 [ 414.261904] ? zap_class+0x640/0x640 [ 414.265645] ? find_held_lock+0x36/0x1c0 [ 414.265667] ? __lock_is_held+0xb5/0x140 [ 414.265696] ? perf_trace_sched_process_exec+0x860/0x860 [ 414.273798] ? kernfs_activate+0x21a/0x2c0 [ 414.273827] __should_failslab+0x124/0x180 [ 414.273848] should_failslab+0x9/0x14 [ 414.273867] kmem_cache_alloc+0x2be/0x730 [ 414.295685] ? lock_downgrade+0x900/0x900 [ 414.299854] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 414.304892] __kernfs_new_node+0x127/0x8d0 [ 414.309153] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 414.313927] ? zap_class+0x640/0x640 [ 414.317670] ? __lock_is_held+0xb5/0x140 [ 414.321740] ? wait_for_completion+0x8a0/0x8a0 [ 414.326316] ? mutex_unlock+0xd/0x10 [ 414.330034] ? kernfs_activate+0x21a/0x2c0 [ 414.334260] ? kernfs_walk_and_get_ns+0x340/0x340 [ 414.339093] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 414.344628] ? kernfs_link_sibling+0x1d2/0x3b0 [ 414.349233] kernfs_new_node+0x95/0x120 [ 414.353216] __kernfs_create_file+0x5a/0x340 [ 414.357627] sysfs_add_file_mode_ns+0x222/0x530 [ 414.362292] internal_create_group+0x3df/0xd80 [ 414.366870] ? remove_files.isra.1+0x190/0x190 [ 414.371436] ? up_write+0x7b/0x220 [ 414.374973] ? down_write_nested+0x130/0x130 [ 414.379374] ? down_read+0x120/0x120 [ 414.383086] sysfs_create_group+0x1f/0x30 [ 414.387240] lo_ioctl+0x1307/0x1d60 [ 414.390879] ? lo_rw_aio+0x1ef0/0x1ef0 [ 414.394774] blkdev_ioctl+0x9ac/0x2010 [ 414.398661] ? blkpg_ioctl+0xc10/0xc10 [ 414.402536] ? lock_downgrade+0x900/0x900 [ 414.406671] ? check_preemption_disabled+0x48/0x280 [ 414.411698] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 414.416639] ? kasan_check_read+0x11/0x20 [ 414.420797] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 414.426063] ? rcu_softirq_qs+0x20/0x20 [ 414.430032] ? __fget+0x4d1/0x740 [ 414.433477] ? ksys_dup3+0x680/0x680 [ 414.437185] block_ioctl+0xee/0x130 [ 414.440798] ? blkdev_fallocate+0x400/0x400 [ 414.445112] do_vfs_ioctl+0x1de/0x1720 [ 414.448994] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 414.454534] ? ioctl_preallocate+0x300/0x300 [ 414.458930] ? __fget_light+0x2e9/0x430 [ 414.462894] ? fget_raw+0x20/0x20 [ 414.466344] ? rcu_read_lock_sched_held+0x14f/0x180 [ 414.471347] ? kmem_cache_free+0x24f/0x290 [ 414.475586] ? putname+0xf7/0x130 [ 414.479038] ? do_syscall_64+0x9a/0x820 [ 414.482997] ? do_syscall_64+0x9a/0x820 [ 414.486977] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 414.491549] ? security_file_ioctl+0x94/0xc0 [ 414.495949] ksys_ioctl+0xa9/0xd0 [ 414.499390] __x64_sys_ioctl+0x73/0xb0 [ 414.503286] do_syscall_64+0x1b9/0x820 [ 414.507162] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 414.512515] ? syscall_return_slowpath+0x5e0/0x5e0 [ 414.517431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.522279] ? trace_hardirqs_on_caller+0x310/0x310 [ 414.527299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 414.532315] ? prepare_exit_to_usermode+0x291/0x3b0 [ 414.537329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.542164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.547342] RIP: 0033:0x4573d7 [ 414.550521] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.569407] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.577099] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 414.584366] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 414.591645] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 21:29:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1308792ddb0968db3248204ee450b1bf462b6b5b06615d51151bf62d73a6fb04edf863d1ce145a9e55963196209c096fd155c5a028d0cda531d39be677810dac782da0caaf21b4192569fdf22a4af2862fb7a971dbf2b55e4576c28d5014d74bd620584c3ade47ac13100d728b5c561584146f6a4deee685705f36f02787ba69bb9081ee89060601490536c068642ce382187a92e58995b8c1dc088bfd4edd69a939d891f06b1acd3e904c2cd0eab479ad53bba10e7bf20fb1729d6331818159ff1b58e774c7e4ea423e8f37225682ce6a5809ab5d96f9a95bdd8ee988f27fc7f6ff5f5230b0", 0xe6, 0x0, 0x0, 0x0) 21:29:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xffffff7f, 0x0, r1}}, 0x20}}, 0x0) [ 414.598901] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 414.606171] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 414.640362] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf00000000000000, 0x0, r1}}, 0x20}}, 0x0) 21:29:52 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf00}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 414.728372] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:52 executing program 5 (fault-call:2 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8100000000000000, 0x0, r1}}, 0x20}}, 0x0) [ 414.837500] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 414.918563] FAULT_INJECTION: forcing a failure. [ 414.918563] name failslab, interval 1, probability 0, space 0, times 0 [ 414.958085] CPU: 0 PID: 17408 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 21:29:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 414.966607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.975992] Call Trace: [ 414.978598] dump_stack+0x244/0x39d [ 414.982276] ? dump_stack_print_info.cold.1+0x20/0x20 [ 414.987496] should_fail.cold.4+0xa/0x17 [ 414.991579] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 414.996717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.002267] ? wake_up_klogd+0x11a/0x180 [ 415.006335] ? console_device+0xc0/0xc0 [ 415.006356] ? __down_trylock_console_sem+0x151/0x1f0 [ 415.006376] ? zap_class+0x640/0x640 [ 415.006390] ? vprintk_emit+0x293/0x990 [ 415.006412] ? find_held_lock+0x36/0x1c0 [ 415.006432] ? __lock_is_held+0xb5/0x140 [ 415.006461] ? perf_trace_sched_process_exec+0x860/0x860 [ 415.036842] ? vprintk_default+0x28/0x30 [ 415.040922] __should_failslab+0x124/0x180 [ 415.045174] should_failslab+0x9/0x14 [ 415.048993] kmem_cache_alloc_trace+0x2d7/0x750 [ 415.053692] kobject_uevent_env+0x2f3/0x101e [ 415.058123] kobject_uevent+0x1f/0x24 [ 415.061969] lo_ioctl+0x1385/0x1d60 [ 415.061997] ? lo_rw_aio+0x1ef0/0x1ef0 [ 415.069523] blkdev_ioctl+0x9ac/0x2010 [ 415.069544] ? blkpg_ioctl+0xc10/0xc10 [ 415.069566] ? lock_downgrade+0x900/0x900 [ 415.081466] ? check_preemption_disabled+0x48/0x280 [ 415.086507] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 415.091452] ? kasan_check_read+0x11/0x20 [ 415.095632] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 415.100930] ? rcu_softirq_qs+0x20/0x20 [ 415.104923] ? __fget+0x4d1/0x740 [ 415.108392] ? ksys_dup3+0x680/0x680 [ 415.108424] block_ioctl+0xee/0x130 [ 415.108445] ? blkdev_fallocate+0x400/0x400 [ 415.112253] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 415.115787] do_vfs_ioctl+0x1de/0x1720 [ 415.115807] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 415.115826] ? ioctl_preallocate+0x300/0x300 [ 415.115844] ? __fget_light+0x2e9/0x430 [ 415.115861] ? fget_raw+0x20/0x20 [ 415.115879] ? rcu_read_lock_sched_held+0x14f/0x180 [ 415.115899] ? kmem_cache_free+0x24f/0x290 [ 415.156977] ? putname+0xf7/0x130 [ 415.160444] ? do_syscall_64+0x9a/0x820 [ 415.164431] ? do_syscall_64+0x9a/0x820 [ 415.168424] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 415.173024] ? security_file_ioctl+0x94/0xc0 [ 415.177450] ksys_ioctl+0xa9/0xd0 [ 415.181436] __x64_sys_ioctl+0x73/0xb0 [ 415.181458] do_syscall_64+0x1b9/0x820 [ 415.181475] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 415.181495] ? syscall_return_slowpath+0x5e0/0x5e0 [ 415.189258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.189279] ? trace_hardirqs_on_caller+0x310/0x310 [ 415.189296] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 415.189316] ? prepare_exit_to_usermode+0x291/0x3b0 [ 415.219444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.224309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.229512] RIP: 0033:0x4573d7 [ 415.232716] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.251752] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.259483] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 415.266791] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 415.274048] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 415.281303] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 415.288559] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 415.304511] isofs_fill_super: root inode is not a directory. Corrupted media? [ 415.361874] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfefb, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfffffffffffff000, 0x0, r1}}, 0x20}}, 0x0) 21:29:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:53 executing program 5 (fault-call:2 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 415.675552] FAULT_INJECTION: forcing a failure. [ 415.675552] name failslab, interval 1, probability 0, space 0, times 0 [ 415.707229] CPU: 0 PID: 17446 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 415.715741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:29:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x100000000000000, 0x0, r1}}, 0x20}}, 0x0) [ 415.725121] Call Trace: [ 415.725149] dump_stack+0x244/0x39d [ 415.725177] ? dump_stack_print_info.cold.1+0x20/0x20 [ 415.725203] ? is_bpf_text_address+0xd3/0x170 [ 415.725229] should_fail.cold.4+0xa/0x17 [ 415.725257] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 415.750293] ? zap_class+0x640/0x640 [ 415.754029] ? save_stack+0x43/0xd0 [ 415.757666] ? kasan_kmalloc+0xc7/0xe0 [ 415.761097] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 415.761574] ? kmem_cache_alloc_trace+0x152/0x750 [ 415.772721] ? kobject_uevent_env+0x2f3/0x101e [ 415.777316] ? kobject_uevent+0x1f/0x24 [ 415.781304] ? lo_ioctl+0x1385/0x1d60 [ 415.785120] ? find_held_lock+0x36/0x1c0 [ 415.789199] ? __lock_is_held+0xb5/0x140 [ 415.793287] ? perf_trace_sched_process_exec+0x860/0x860 [ 415.798760] __should_failslab+0x124/0x180 [ 415.803009] should_failslab+0x9/0x14 [ 415.806823] __kmalloc+0x2e0/0x760 [ 415.806841] ? kobject_uevent_env+0x2f3/0x101e [ 415.806859] ? rcu_read_lock_sched_held+0x14f/0x180 [ 415.806877] ? kobject_get_path+0xc2/0x1b0 [ 415.819990] ? kmem_cache_alloc_trace+0x353/0x750 [ 415.820010] kobject_get_path+0xc2/0x1b0 [ 415.820030] kobject_uevent_env+0x314/0x101e [ 415.837546] kobject_uevent+0x1f/0x24 [ 415.841366] lo_ioctl+0x1385/0x1d60 [ 415.841394] ? lo_rw_aio+0x1ef0/0x1ef0 [ 415.841414] blkdev_ioctl+0x9ac/0x2010 [ 415.841439] ? blkpg_ioctl+0xc10/0xc10 [ 415.852845] ? lock_downgrade+0x900/0x900 [ 415.852862] ? check_preemption_disabled+0x48/0x280 [ 415.852886] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 415.852903] ? kasan_check_read+0x11/0x20 21:29:53 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 415.852922] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 415.852940] ? rcu_softirq_qs+0x20/0x20 [ 415.852968] ? __fget+0x4d1/0x740 [ 415.852996] ? ksys_dup3+0x680/0x680 [ 415.891492] block_ioctl+0xee/0x130 [ 415.895129] ? blkdev_fallocate+0x400/0x400 [ 415.899464] do_vfs_ioctl+0x1de/0x1720 [ 415.903370] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 415.908921] ? ioctl_preallocate+0x300/0x300 [ 415.913346] ? __fget_light+0x2e9/0x430 [ 415.917333] ? fget_raw+0x20/0x20 [ 415.920800] ? rcu_read_lock_sched_held+0x14f/0x180 21:29:53 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 415.925830] ? kmem_cache_free+0x24f/0x290 [ 415.930083] ? putname+0xf7/0x130 [ 415.933552] ? do_syscall_64+0x9a/0x820 [ 415.937542] ? do_syscall_64+0x9a/0x820 [ 415.941532] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 415.946129] ? security_file_ioctl+0x94/0xc0 [ 415.950546] ksys_ioctl+0xa9/0xd0 [ 415.954013] __x64_sys_ioctl+0x73/0xb0 [ 415.957912] do_syscall_64+0x1b9/0x820 [ 415.961810] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 415.967188] ? syscall_return_slowpath+0x5e0/0x5e0 [ 415.972126] ? trace_hardirqs_off_thunk+0x1a/0x1c 21:29:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfcffffff00000000, 0x0, r1}}, 0x20}}, 0x0) [ 415.976987] ? trace_hardirqs_on_caller+0x310/0x310 [ 415.982016] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 415.987050] ? prepare_exit_to_usermode+0x291/0x3b0 [ 415.992081] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.996943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.002144] RIP: 0033:0x4573d7 [ 416.005348] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.024258] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.031974] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 416.039249] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 416.046524] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 416.053801] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 416.061076] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 416.093379] isofs_fill_super: root inode is not a directory. Corrupted media? [ 416.134475] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xec0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xffffff7f00000000, 0x0, r1}}, 0x20}}, 0x0) 21:29:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660t', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r5, 0x8}, 0x8) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:54 executing program 5 (fault-call:2 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 416.619294] FAULT_INJECTION: forcing a failure. [ 416.619294] name failslab, interval 1, probability 0, space 0, times 0 [ 416.630804] CPU: 0 PID: 17494 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 416.639309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.648674] Call Trace: [ 416.651282] dump_stack+0x244/0x39d [ 416.654932] ? dump_stack_print_info.cold.1+0x20/0x20 [ 416.660140] ? is_bpf_text_address+0xd3/0x170 [ 416.664675] should_fail.cold.4+0xa/0x17 [ 416.668763] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 416.673888] ? zap_class+0x640/0x640 [ 416.673907] ? save_stack+0x43/0xd0 [ 416.673920] ? kasan_kmalloc+0xc7/0xe0 [ 416.673937] ? kmem_cache_alloc_trace+0x152/0x750 [ 416.673951] ? kobject_uevent_env+0x2f3/0x101e [ 416.673964] ? kobject_uevent+0x1f/0x24 [ 416.673981] ? lo_ioctl+0x1385/0x1d60 [ 416.674001] ? find_held_lock+0x36/0x1c0 [ 416.674021] ? __lock_is_held+0xb5/0x140 [ 416.681375] ? perf_trace_sched_process_exec+0x860/0x860 [ 416.681404] __should_failslab+0x124/0x180 [ 416.681426] should_failslab+0x9/0x14 [ 416.681441] __kmalloc+0x2e0/0x760 [ 416.681458] ? kobject_uevent_env+0x2f3/0x101e [ 416.681478] ? rcu_read_lock_sched_held+0x14f/0x180 [ 416.690189] ? kobject_get_path+0xc2/0x1b0 [ 416.690206] ? kmem_cache_alloc_trace+0x353/0x750 [ 416.690226] kobject_get_path+0xc2/0x1b0 [ 416.690247] kobject_uevent_env+0x314/0x101e [ 416.690275] kobject_uevent+0x1f/0x24 [ 416.690294] lo_ioctl+0x1385/0x1d60 [ 416.690318] ? lo_rw_aio+0x1ef0/0x1ef0 [ 416.698863] blkdev_ioctl+0x9ac/0x2010 [ 416.698886] ? blkpg_ioctl+0xc10/0xc10 [ 416.698902] ? lock_downgrade+0x900/0x900 [ 416.698918] ? check_preemption_disabled+0x48/0x280 [ 416.698941] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 416.698957] ? kasan_check_read+0x11/0x20 [ 416.698978] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 416.797487] ? rcu_softirq_qs+0x20/0x20 [ 416.801486] ? __fget+0x4d1/0x740 [ 416.805054] ? ksys_dup3+0x680/0x680 [ 416.808790] block_ioctl+0xee/0x130 [ 416.812425] ? blkdev_fallocate+0x400/0x400 21:29:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 416.816763] do_vfs_ioctl+0x1de/0x1720 [ 416.820673] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 416.826231] ? ioctl_preallocate+0x300/0x300 [ 416.830665] ? __fget_light+0x2e9/0x430 [ 416.834665] ? fget_raw+0x20/0x20 [ 416.838135] ? rcu_read_lock_sched_held+0x14f/0x180 [ 416.843167] ? kmem_cache_free+0x24f/0x290 [ 416.847415] ? putname+0xf7/0x130 [ 416.850884] ? do_syscall_64+0x9a/0x820 [ 416.854874] ? do_syscall_64+0x9a/0x820 [ 416.858864] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 416.863465] ? security_file_ioctl+0x94/0xc0 21:29:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xd502, 0x0, r1}}, 0x20}}, 0x0) [ 416.867887] ksys_ioctl+0xa9/0xd0 [ 416.871360] __x64_sys_ioctl+0x73/0xb0 [ 416.875262] do_syscall_64+0x1b9/0x820 [ 416.875279] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 416.875299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 416.884539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.884559] ? trace_hardirqs_on_caller+0x310/0x310 [ 416.884577] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 416.884595] ? prepare_exit_to_usermode+0x291/0x3b0 [ 416.884633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.914329] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.919531] RIP: 0033:0x4573d7 [ 416.922736] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.922746] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.922762] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 416.922772] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 21:29:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e0000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 416.922782] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 416.922791] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 416.922801] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 416.998132] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3, 0x0, r1}}, 0x20}}, 0x0) 21:29:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:54 executing program 5 (fault-call:2 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 417.301438] FAULT_INJECTION: forcing a failure. [ 417.301438] name failslab, interval 1, probability 0, space 0, times 0 [ 417.326056] CPU: 0 PID: 17543 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 417.334573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.343952] Call Trace: [ 417.344043] dump_stack+0x244/0x39d [ 417.344071] ? dump_stack_print_info.cold.1+0x20/0x20 [ 417.344104] should_fail.cold.4+0xa/0x17 [ 417.350321] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 417.350351] ? lock_release+0xa10/0xa10 [ 417.350367] ? perf_trace_sched_process_exec+0x860/0x860 [ 417.350388] ? zap_class+0x640/0x640 [ 417.377791] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 417.382817] ? find_held_lock+0x36/0x1c0 [ 417.386884] ? __lock_is_held+0xb5/0x140 [ 417.390958] ? put_dec+0x3b/0xf0 [ 417.394340] ? perf_trace_sched_process_exec+0x860/0x860 [ 417.399794] ? zap_class+0x640/0x640 [ 417.403500] __should_failslab+0x124/0x180 [ 417.407726] should_failslab+0x9/0x14 [ 417.411516] kmem_cache_alloc_node+0x26e/0x730 [ 417.416084] ? find_held_lock+0x36/0x1c0 [ 417.420142] __alloc_skb+0x114/0x770 [ 417.423860] ? netdev_alloc_frag+0x1f0/0x1f0 [ 417.428276] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 417.433223] ? kasan_check_read+0x11/0x20 [ 417.437386] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 417.442681] ? rcu_softirq_qs+0x20/0x20 [ 417.446682] ? netlink_has_listeners+0x2cb/0x4a0 21:29:55 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x5, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r1, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2d5, 0x0, r1}}, 0x20}}, 0x0) 21:29:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf00000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 417.451456] ? netlink_tap_init_net+0x3d0/0x3d0 [ 417.456136] alloc_uevent_skb+0x84/0x1da [ 417.460207] kobject_uevent_env+0xa52/0x101e [ 417.464652] kobject_uevent+0x1f/0x24 [ 417.468474] lo_ioctl+0x1385/0x1d60 [ 417.472124] ? lo_rw_aio+0x1ef0/0x1ef0 [ 417.476027] blkdev_ioctl+0x9ac/0x2010 [ 417.479932] ? blkpg_ioctl+0xc10/0xc10 [ 417.483834] ? lock_downgrade+0x900/0x900 [ 417.487990] ? check_preemption_disabled+0x48/0x280 [ 417.493023] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 417.497969] ? kasan_check_read+0x11/0x20 [ 417.502131] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 417.507423] ? rcu_softirq_qs+0x20/0x20 [ 417.511426] ? __fget+0x4d1/0x740 [ 417.514898] ? ksys_dup3+0x680/0x680 [ 417.518656] block_ioctl+0xee/0x130 [ 417.522299] ? blkdev_fallocate+0x400/0x400 [ 417.526647] do_vfs_ioctl+0x1de/0x1720 [ 417.530555] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 417.536102] ? ioctl_preallocate+0x300/0x300 [ 417.540523] ? __fget_light+0x2e9/0x430 [ 417.544509] ? fget_raw+0x20/0x20 [ 417.547975] ? rcu_read_lock_sched_held+0x14f/0x180 21:29:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 417.553006] ? kmem_cache_free+0x24f/0x290 [ 417.557254] ? putname+0xf7/0x130 [ 417.560720] ? do_syscall_64+0x9a/0x820 [ 417.564708] ? do_syscall_64+0x9a/0x820 [ 417.568696] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 417.573297] ? security_file_ioctl+0x94/0xc0 [ 417.577725] ksys_ioctl+0xa9/0xd0 [ 417.581195] __x64_sys_ioctl+0x73/0xb0 [ 417.585099] do_syscall_64+0x1b9/0x820 [ 417.588999] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 417.594378] ? syscall_return_slowpath+0x5e0/0x5e0 21:29:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 417.599317] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.604178] ? trace_hardirqs_on_caller+0x310/0x310 [ 417.609211] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 417.614242] ? prepare_exit_to_usermode+0x291/0x3b0 [ 417.619274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.624135] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.629330] RIP: 0033:0x4573d7 [ 417.632535] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:29:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9effffff00000000, 0x0, r1}}, 0x20}}, 0x0) [ 417.651442] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.659162] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 417.666439] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 417.673712] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 417.680987] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 417.688268] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 417.741757] isofs_fill_super: root inode is not a directory. Corrupted media? [ 417.750998] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 417.824652] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:55 executing program 5 (fault-call:2 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 418.034454] FAULT_INJECTION: forcing a failure. [ 418.034454] name failslab, interval 1, probability 0, space 0, times 0 [ 418.048397] CPU: 0 PID: 17594 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 418.056913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.066254] Call Trace: [ 418.068836] dump_stack+0x244/0x39d [ 418.072542] ? dump_stack_print_info.cold.1+0x20/0x20 [ 418.077725] ? lock_downgrade+0x900/0x900 [ 418.081868] should_fail.cold.4+0xa/0x17 [ 418.085939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 418.091034] ? rcu_softirq_qs+0x20/0x20 [ 418.094995] ? unwind_dump+0x190/0x190 [ 418.098876] ? is_bpf_text_address+0xd3/0x170 [ 418.103358] ? zap_class+0x640/0x640 [ 418.107091] ? __kernel_text_address+0xd/0x40 [ 418.111597] ? unwind_get_return_address+0x61/0xa0 [ 418.116549] ? find_held_lock+0x36/0x1c0 [ 418.120599] ? __lock_is_held+0xb5/0x140 [ 418.124675] ? kobject_uevent+0x1f/0x24 [ 418.128649] ? perf_trace_sched_process_exec+0x860/0x860 [ 418.134093] ? do_vfs_ioctl+0x1de/0x1720 [ 418.138147] ? ksys_ioctl+0xa9/0xd0 [ 418.141760] ? __x64_sys_ioctl+0x73/0xb0 [ 418.145816] ? do_syscall_64+0x1b9/0x820 [ 418.149876] __should_failslab+0x124/0x180 [ 418.154117] should_failslab+0x9/0x14 [ 418.157911] kmem_cache_alloc+0x2be/0x730 [ 418.162056] skb_clone+0x1bb/0x500 [ 418.165586] ? skb_split+0x11e0/0x11e0 [ 418.169473] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 418.174522] ? netlink_trim+0x1b4/0x380 [ 418.178498] ? netlink_skb_destructor+0x210/0x210 [ 418.183350] netlink_broadcast_filtered+0x110f/0x1680 [ 418.188530] ? __netlink_sendskb+0xd0/0xd0 [ 418.192787] ? kasan_check_read+0x11/0x20 [ 418.196941] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 418.202225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.207755] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 418.213213] ? refcount_add_not_zero_checked+0x330/0x330 [ 418.218653] ? netlink_has_listeners+0x2cb/0x4a0 [ 418.223397] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 418.228416] netlink_broadcast+0x3a/0x50 [ 418.232493] kobject_uevent_env+0xa83/0x101e [ 418.236910] kobject_uevent+0x1f/0x24 [ 418.240703] lo_ioctl+0x1385/0x1d60 [ 418.244327] ? lo_rw_aio+0x1ef0/0x1ef0 [ 418.248206] blkdev_ioctl+0x9ac/0x2010 [ 418.252098] ? blkpg_ioctl+0xc10/0xc10 [ 418.255991] ? lock_downgrade+0x900/0x900 [ 418.260126] ? check_preemption_disabled+0x48/0x280 [ 418.265138] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 418.270054] ? kasan_check_read+0x11/0x20 [ 418.274219] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 418.279486] ? rcu_softirq_qs+0x20/0x20 21:29:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0x40000) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000380)={0xd6, &(0x7f0000000280)=""/214}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket(0x10, 0xa, 0x8000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x68, "75938398bf910dd59a92a5edcbf24805048ca2a5abfd820bb4d2e6b0fa12a7c716b692ddadcffd10e2d2809c9a4f3b68c0c634f4c7ee936ed82d468daf4e2724f84c87860457dd62c7f9d7ffd464346cca457abbe4a1dc903e5dee76b8e577f4f3238bd371433938"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000480)=@assoc_value={r5}, 0x8) r6 = accept4(r2, 0x0, &(0x7f0000000000)=0xfffffffffffffdc1, 0x7fc) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x54, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @local, 0xce38}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x1f}, @in6={0xa, 0x4e21, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={r7, 0x4}, &(0x7f0000000200)=0xc) 21:29:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfcffffff, 0x0, r1}}, 0x20}}, 0x0) 21:29:55 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 418.283454] ? __fget+0x4d1/0x740 [ 418.286898] ? ksys_dup3+0x680/0x680 [ 418.290651] block_ioctl+0xee/0x130 [ 418.294277] ? blkdev_fallocate+0x400/0x400 [ 418.298598] do_vfs_ioctl+0x1de/0x1720 [ 418.302515] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 418.308063] ? ioctl_preallocate+0x300/0x300 [ 418.312483] ? __fget_light+0x2e9/0x430 [ 418.316463] ? fget_raw+0x20/0x20 [ 418.319926] ? rcu_read_lock_sched_held+0x14f/0x180 [ 418.324951] ? kmem_cache_free+0x24f/0x290 [ 418.329199] ? putname+0xf7/0x130 [ 418.332667] ? do_syscall_64+0x9a/0x820 [ 418.332685] ? do_syscall_64+0x9a/0x820 [ 418.332704] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 418.332725] ? security_file_ioctl+0x94/0xc0 [ 418.340666] ksys_ioctl+0xa9/0xd0 [ 418.340688] __x64_sys_ioctl+0x73/0xb0 [ 418.340709] do_syscall_64+0x1b9/0x820 [ 418.360877] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 418.366255] ? syscall_return_slowpath+0x5e0/0x5e0 [ 418.371197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.376057] ? trace_hardirqs_on_caller+0x310/0x310 [ 418.381087] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 418.386121] ? prepare_exit_to_usermode+0x291/0x3b0 [ 418.391154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.396023] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.401223] RIP: 0033:0x4573d7 [ 418.404430] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.423537] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:29:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 418.431247] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 00000000004573d7 [ 418.438502] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 418.445759] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 418.453015] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 418.460287] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 418.489847] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 418.519955] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2000000, 0x0, r1}}, 0x20}}, 0x0) [ 418.558186] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:56 executing program 5 (fault-call:2 fault-nth:26): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf000, 0x0, r1}}, 0x20}}, 0x0) 21:29:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 418.753316] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 418.788025] FAULT_INJECTION: forcing a failure. [ 418.788025] name failslab, interval 1, probability 0, space 0, times 0 [ 418.823071] CPU: 0 PID: 17628 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 418.831585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.840948] Call Trace: [ 418.843550] dump_stack+0x244/0x39d [ 418.847192] ? dump_stack_print_info.cold.1+0x20/0x20 [ 418.852392] ? print_usage_bug+0xc0/0xc0 [ 418.856460] should_fail.cold.4+0xa/0x17 [ 418.860531] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 418.865650] ? walk_component+0x3fe/0x2590 [ 418.869885] ? zap_class+0x640/0x640 [ 418.873642] ? zap_class+0x640/0x640 [ 418.877363] ? mark_held_locks+0x130/0x130 [ 418.881599] ? path_parentat.isra.41+0x20/0x160 [ 418.886287] ? find_held_lock+0x36/0x1c0 [ 418.890358] ? __lock_is_held+0xb5/0x140 [ 418.894438] ? perf_trace_sched_process_exec+0x860/0x860 [ 418.899902] __should_failslab+0x124/0x180 [ 418.904144] should_failslab+0x9/0x14 [ 418.907983] kmem_cache_alloc+0x2be/0x730 [ 418.912143] __d_alloc+0xc8/0xb90 [ 418.915638] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 418.920668] ? d_alloc_parallel+0x1f40/0x1f40 [ 418.925163] ? d_lookup+0x255/0x300 [ 418.928796] ? d_lookup+0x255/0x300 [ 418.932427] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 418.937035] ? lookup_dcache+0x22/0x140 [ 418.941019] ? trace_hardirqs_off_caller+0x300/0x300 [ 418.946134] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 418.951161] d_alloc+0x96/0x380 [ 418.954447] ? __d_lookup+0x9e0/0x9e0 [ 418.958270] ? __d_alloc+0xb90/0xb90 [ 418.962000] __lookup_hash+0xd9/0x190 [ 418.965808] filename_create+0x1e5/0x5b0 [ 418.969876] ? kern_path_mountpoint+0x40/0x40 [ 418.974374] ? fget_raw+0x20/0x20 [ 418.977836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.983383] ? getname_flags+0x26e/0x590 [ 418.987450] do_mkdirat+0xda/0x310 [ 418.990994] ? __ia32_sys_mknod+0xb0/0xb0 [ 418.995143] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.000514] ? trace_hardirqs_off_caller+0x300/0x300 [ 419.005636] ? ksys_ioctl+0x81/0xd0 [ 419.009270] __x64_sys_mkdir+0x5c/0x80 [ 419.013162] do_syscall_64+0x1b9/0x820 [ 419.017051] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 419.022416] ? syscall_return_slowpath+0x5e0/0x5e0 [ 419.027347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.032193] ? trace_hardirqs_on_caller+0x310/0x310 [ 419.037217] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 419.042237] ? prepare_exit_to_usermode+0x291/0x3b0 [ 419.047262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.052117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.057343] RIP: 0033:0x456987 [ 419.060542] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 419.079440] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 419.087147] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 419.094420] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 419.101691] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 419.108962] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 419.116230] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 419.138089] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x40000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=,port=0x0000000000004e21,timeout=0x000000000000004c,smackfsroot=GPL+)trustedtrusted,defcontext=staff_u,dont_hash,dont_hash,\x00']) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000240)) 21:29:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf00, 0x0, r1}}, 0x20}}, 0x0) 21:29:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb040000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:56 executing program 5 (fault-call:2 fault-nth:27): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:56 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 419.336941] FAULT_INJECTION: forcing a failure. [ 419.336941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 419.348792] CPU: 1 PID: 17642 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 419.357288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.366653] Call Trace: [ 419.369255] dump_stack+0x244/0x39d [ 419.372908] ? dump_stack_print_info.cold.1+0x20/0x20 [ 419.378129] should_fail.cold.4+0xa/0x17 [ 419.382212] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 419.387324] ? kobject_uevent_env+0xf76/0x101e [ 419.391936] ? wait_for_completion+0x8a0/0x8a0 [ 419.396541] ? mark_held_locks+0x130/0x130 [ 419.400788] ? kobject_uevent_env+0x100d/0x101e [ 419.405482] ? mutex_unlock+0xd/0x10 [ 419.409213] ? lo_ioctl+0xe6/0x1d60 [ 419.412862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.418410] ? should_fail+0x22d/0xd01 [ 419.422310] ? blkdev_ioctl+0x15d/0x2010 [ 419.426387] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 419.431501] ? blkpg_ioctl+0xc10/0xc10 [ 419.435396] ? lock_downgrade+0x900/0x900 [ 419.439561] __alloc_pages_nodemask+0x34b/0xdd0 [ 419.444239] ? kasan_check_read+0x11/0x20 [ 419.448401] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 419.453704] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 419.458743] ? find_held_lock+0x36/0x1c0 [ 419.462841] ? trace_hardirqs_off+0xb8/0x310 [ 419.467264] cache_grow_begin+0xa5/0x8c0 [ 419.471338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.476885] ? check_preemption_disabled+0x48/0x280 [ 419.481918] kmem_cache_alloc+0x66b/0x730 [ 419.486081] ? fget_raw+0x20/0x20 [ 419.489551] getname_flags+0xd0/0x590 [ 419.493365] do_mkdirat+0xc5/0x310 [ 419.496925] ? __ia32_sys_mknod+0xb0/0xb0 [ 419.501081] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.506458] ? trace_hardirqs_off_caller+0x300/0x300 [ 419.511569] ? ksys_ioctl+0x81/0xd0 [ 419.515213] __x64_sys_mkdir+0x5c/0x80 [ 419.519117] do_syscall_64+0x1b9/0x820 [ 419.523022] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 419.528398] ? syscall_return_slowpath+0x5e0/0x5e0 [ 419.533342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.538196] ? trace_hardirqs_on_caller+0x310/0x310 [ 419.543223] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 419.548250] ? prepare_exit_to_usermode+0x291/0x3b0 [ 419.553283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.558151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.563350] RIP: 0033:0x456987 [ 419.566553] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf0, 0x0, r1}}, 0x20}}, 0x0) [ 419.585462] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 419.593183] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 419.600460] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 419.607733] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 419.615019] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 419.622295] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb04}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 419.637508] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, r1}}, 0x20}}, 0x0) [ 419.715549] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 419.727367] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$security_smack_transmute(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x3) r3 = socket$inet6(0xa, 0x5, 0xb340) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @loopback, 0x6}}, 0x100000000, 0xe872}, &(0x7f0000000200)=0x90) r5 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1d78000, 0x141000) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) r7 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:57 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:57 executing program 5 (fault-call:2 fault-nth:28): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x200000000000000, 0x0, r1}}, 0x20}}, 0x0) 21:29:57 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc00e}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfffff000, 0x0, r1}}, 0x20}}, 0x0) 21:29:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 420.311300] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 420.386802] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x81000000, 0x0, r1}}, 0x20}}, 0x0) 21:29:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 420.519080] FAULT_INJECTION: forcing a failure. [ 420.519080] name failslab, interval 1, probability 0, space 0, times 0 [ 420.538949] CPU: 0 PID: 17694 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 420.547461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.556818] Call Trace: [ 420.559424] dump_stack+0x244/0x39d [ 420.563072] ? dump_stack_print_info.cold.1+0x20/0x20 [ 420.568287] ? print_usage_bug+0xc0/0xc0 [ 420.572362] should_fail.cold.4+0xa/0x17 [ 420.576442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 420.581554] ? walk_component+0x3fe/0x2590 [ 420.585796] ? zap_class+0x640/0x640 [ 420.589529] ? zap_class+0x640/0x640 [ 420.593259] ? mark_held_locks+0x130/0x130 [ 420.597504] ? path_parentat.isra.41+0x20/0x160 [ 420.602188] ? find_held_lock+0x36/0x1c0 [ 420.606265] ? __lock_is_held+0xb5/0x140 [ 420.610352] ? perf_trace_sched_process_exec+0x860/0x860 [ 420.615830] __should_failslab+0x124/0x180 [ 420.620083] should_failslab+0x9/0x14 [ 420.623894] kmem_cache_alloc+0x2be/0x730 [ 420.628063] __d_alloc+0xc8/0xb90 [ 420.631531] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 420.636566] ? d_alloc_parallel+0x1f40/0x1f40 [ 420.641074] ? d_lookup+0x255/0x300 [ 420.644713] ? d_lookup+0x255/0x300 [ 420.648350] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 420.652948] ? lookup_dcache+0x22/0x140 [ 420.656934] ? trace_hardirqs_off_caller+0x300/0x300 [ 420.662058] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.667091] d_alloc+0x96/0x380 [ 420.670381] ? __d_lookup+0x9e0/0x9e0 [ 420.674194] ? __d_alloc+0xb90/0xb90 [ 420.677929] __lookup_hash+0xd9/0x190 [ 420.681750] filename_create+0x1e5/0x5b0 [ 420.685831] ? kern_path_mountpoint+0x40/0x40 [ 420.690336] ? fget_raw+0x20/0x20 [ 420.693805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.699350] ? getname_flags+0x26e/0x590 [ 420.703423] do_mkdirat+0xda/0x310 [ 420.706998] ? __ia32_sys_mknod+0xb0/0xb0 [ 420.711155] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.716530] ? trace_hardirqs_off_caller+0x300/0x300 [ 420.721655] ? ksys_ioctl+0x81/0xd0 [ 420.725299] __x64_sys_mkdir+0x5c/0x80 [ 420.729207] do_syscall_64+0x1b9/0x820 [ 420.733107] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 420.738484] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.743423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.748278] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.753309] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.758337] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.763373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.768237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.773435] RIP: 0033:0x456987 [ 420.776652] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.795564] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 420.803281] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 420.810558] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 420.817830] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 420.825105] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 420.832380] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x80100, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) listen(r0, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:29:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xd5020000, 0x0, r1}}, 0x20}}, 0x0) 21:29:58 executing program 5 (fault-call:2 fault-nth:29): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:29:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8100000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:58 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 421.277731] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 421.317398] FAULT_INJECTION: forcing a failure. 21:29:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3000000, 0x0, r1}}, 0x20}}, 0x0) [ 421.317398] name failslab, interval 1, probability 0, space 0, times 0 [ 421.369528] CPU: 0 PID: 17714 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 421.378056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.387415] Call Trace: [ 421.390048] dump_stack+0x244/0x39d [ 421.393697] ? dump_stack_print_info.cold.1+0x20/0x20 [ 421.398907] ? perf_trace_sched_process_exec+0x860/0x860 [ 421.404374] ? lock_downgrade+0x900/0x900 [ 421.408543] should_fail.cold.4+0xa/0x17 [ 421.412644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 421.417757] ? block_commit_write+0x30/0x30 [ 421.422088] ? print_usage_bug+0xc0/0xc0 [ 421.426176] ? __ext4_handle_dirty_metadata+0x1e0/0x5a0 [ 421.431560] ? kasan_check_write+0x14/0x20 [ 421.435805] ? zap_class+0x640/0x640 [ 421.439554] ? __lock_is_held+0xb5/0x140 [ 421.443661] ? perf_trace_sched_process_exec+0x860/0x860 [ 421.449132] ? __lock_acquire+0x62f/0x4c20 [ 421.453385] __should_failslab+0x124/0x180 [ 421.457655] should_failslab+0x9/0x14 [ 421.461492] __kmalloc+0x2e0/0x760 [ 421.465053] ? ext4_find_extent+0x757/0x9b0 [ 421.469389] ext4_find_extent+0x757/0x9b0 [ 421.473561] ext4_ext_map_blocks+0x28c/0x48e0 [ 421.478067] ? kasan_check_write+0x14/0x20 [ 421.482325] ? ext4_ext_release+0x10/0x10 [ 421.486494] ? zap_class+0x640/0x640 [ 421.490223] ? zap_class+0x640/0x640 [ 421.493950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.499497] ? check_preemption_disabled+0x48/0x280 [ 421.504547] ? lock_acquire+0x1ed/0x520 [ 421.508530] ? ext4_map_blocks+0x487/0x1b50 [ 421.512867] ? lock_release+0xa10/0xa10 [ 421.516853] ? perf_trace_sched_process_exec+0x860/0x860 [ 421.522321] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 421.527006] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 421.531944] ? kasan_check_read+0x11/0x20 [ 421.536105] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.541413] ? down_read+0x8d/0x120 [ 421.545049] ? ext4_map_blocks+0x487/0x1b50 [ 421.549382] ? __down_interruptible+0x700/0x700 [ 421.554069] ? kernel_text_address+0x79/0xf0 [ 421.558501] ext4_map_blocks+0xe2d/0x1b50 [ 421.562668] ? __save_stack_trace+0x8d/0xf0 [ 421.567012] ? ext4_issue_zeroout+0x190/0x190 [ 421.571523] ? save_stack+0x43/0xd0 [ 421.575157] ? __kasan_slab_free+0x102/0x150 [ 421.579573] ? kasan_slab_free+0xe/0x10 [ 421.583556] ? kmem_cache_free+0x83/0x290 [ 421.587717] ext4_getblk+0x10e/0x630 [ 421.591450] ? ext4_iomap_begin+0x1390/0x1390 [ 421.595960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.601508] ? __dquot_initialize+0x629/0xdd0 [ 421.606018] ext4_bread+0x95/0x2b0 [ 421.609573] ? ext4_getblk+0x630/0x630 [ 421.613468] ? dquot_get_next_dqblk+0x180/0x180 [ 421.618153] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 421.623092] ? common_perm+0x1f6/0x7b0 [ 421.627001] ext4_append+0x14e/0x370 [ 421.630735] ext4_mkdir+0x532/0xe60 [ 421.634382] ? ext4_init_dot_dotdot+0x510/0x510 [ 421.639098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.644660] ? security_inode_permission+0xd2/0x100 [ 421.649781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.655327] ? security_inode_mkdir+0xe8/0x120 [ 421.659925] vfs_mkdir+0x42e/0x6b0 [ 421.663479] do_mkdirat+0x27a/0x310 [ 421.667120] ? __ia32_sys_mknod+0xb0/0xb0 [ 421.671281] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.676669] ? trace_hardirqs_off_caller+0x300/0x300 [ 421.681783] ? ksys_ioctl+0x81/0xd0 [ 421.685426] __x64_sys_mkdir+0x5c/0x80 [ 421.689327] do_syscall_64+0x1b9/0x820 [ 421.693225] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 421.698600] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.703551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.708408] ? trace_hardirqs_on_caller+0x310/0x310 [ 421.713436] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.718488] ? prepare_exit_to_usermode+0x291/0x3b0 [ 421.723522] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.728384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.733581] RIP: 0033:0x456987 [ 421.736794] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.755700] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 421.763417] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 21:29:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 421.770694] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 421.777967] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 421.785239] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 421.792515] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:29:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xfffffff0, 0x0, r1}}, 0x20}}, 0x0) [ 421.821428] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 421.962548] isofs_fill_super: root inode is not a directory. Corrupted media? 21:29:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:29:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:29:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xffffff9e, 0x0, r1}}, 0x20}}, 0x0) 21:29:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) 21:29:59 executing program 5 (fault-call:2 fault-nth:30): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 422.245593] FAULT_INJECTION: forcing a failure. [ 422.245593] name failslab, interval 1, probability 0, space 0, times 0 [ 422.271627] CPU: 1 PID: 17746 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 422.280143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.289548] Call Trace: [ 422.292158] dump_stack+0x244/0x39d [ 422.295810] ? dump_stack_print_info.cold.1+0x20/0x20 [ 422.301020] ? rcu_softirq_qs+0x20/0x20 [ 422.305010] should_fail.cold.4+0xa/0x17 [ 422.305035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 422.305053] ? kernel_text_address+0x79/0xf0 [ 422.305070] ? __kernel_text_address+0xd/0x40 [ 422.305092] ? __save_stack_trace+0x8d/0xf0 [ 422.314244] ? zap_class+0x640/0x640 [ 422.314274] ? save_stack+0xa9/0xd0 [ 422.314294] ? __lock_is_held+0xb5/0x140 [ 422.323208] ? print_usage_bug+0xc0/0xc0 [ 422.323233] ? trace_hardirqs_off+0xb8/0x310 [ 422.323253] ? trace_hardirqs_on+0x310/0x310 [ 422.323270] ? perf_trace_sched_process_exec+0x860/0x860 [ 422.323295] ? __lock_acquire+0x62f/0x4c20 [ 422.331322] __should_failslab+0x124/0x180 [ 422.331344] should_failslab+0x9/0x14 [ 422.331360] __kmalloc+0x2e0/0x760 [ 422.331381] ? ext4_find_extent+0x757/0x9b0 [ 422.339051] ext4_find_extent+0x757/0x9b0 [ 422.339080] ext4_ext_map_blocks+0x28c/0x48e0 [ 422.339099] ? kasan_check_write+0x14/0x20 [ 422.339133] ? ext4_ext_release+0x10/0x10 [ 422.394516] ? zap_class+0x640/0x640 [ 422.398242] ? zap_class+0x640/0x640 [ 422.401973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.407522] ? check_preemption_disabled+0x48/0x280 [ 422.412568] ? lock_acquire+0x1ed/0x520 [ 422.416552] ? ext4_map_blocks+0x88f/0x1b50 [ 422.420890] ? lock_release+0xa10/0xa10 [ 422.424873] ? perf_trace_sched_process_exec+0x860/0x860 [ 422.430336] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 422.435019] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 422.439961] ? kasan_check_read+0x11/0x20 [ 422.444121] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 422.449431] ? down_write+0x8a/0x130 [ 422.453160] ? ext4_map_blocks+0x88f/0x1b50 [ 422.457495] ? down_read+0x120/0x120 [ 422.461218] ? kernel_text_address+0x79/0xf0 [ 422.465675] ext4_map_blocks+0x8f7/0x1b50 [ 422.469836] ? __save_stack_trace+0x8d/0xf0 [ 422.474177] ? ext4_issue_zeroout+0x190/0x190 [ 422.478690] ? save_stack+0x43/0xd0 [ 422.482330] ? __kasan_slab_free+0x102/0x150 [ 422.486747] ? kasan_slab_free+0xe/0x10 [ 422.490732] ? kmem_cache_free+0x83/0x290 [ 422.494893] ext4_getblk+0x10e/0x630 [ 422.498632] ? ext4_iomap_begin+0x1390/0x1390 [ 422.503150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.508698] ? __dquot_initialize+0x629/0xdd0 [ 422.513205] ext4_bread+0x95/0x2b0 [ 422.516762] ? ext4_getblk+0x630/0x630 [ 422.520656] ? dquot_get_next_dqblk+0x180/0x180 [ 422.525336] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 422.530303] ? common_perm+0x1f6/0x7b0 [ 422.534207] ext4_append+0x14e/0x370 [ 422.537941] ext4_mkdir+0x532/0xe60 [ 422.541592] ? ext4_init_dot_dotdot+0x510/0x510 [ 422.546290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.551840] ? security_inode_permission+0xd2/0x100 [ 422.556869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.562418] ? security_inode_mkdir+0xe8/0x120 [ 422.567014] vfs_mkdir+0x42e/0x6b0 [ 422.570569] do_mkdirat+0x27a/0x310 [ 422.574215] ? __ia32_sys_mknod+0xb0/0xb0 [ 422.578373] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.583751] ? trace_hardirqs_off_caller+0x300/0x300 [ 422.588867] ? ksys_ioctl+0x81/0xd0 [ 422.592508] __x64_sys_mkdir+0x5c/0x80 [ 422.596411] do_syscall_64+0x1b9/0x820 [ 422.600310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.605687] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.610636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.615492] ? trace_hardirqs_on_caller+0x310/0x310 [ 422.620523] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.625549] ? prepare_exit_to_usermode+0x291/0x3b0 [ 422.630581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.635452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.640660] RIP: 0033:0x456987 [ 422.643862] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.662768] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 422.670485] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 422.677759] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 422.685032] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 21:30:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf0ffffff, 0x0, r1}}, 0x20}}, 0x0) 21:30:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 422.692305] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 422.699584] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf0ffff, 0x0, r1}}, 0x20}}, 0x0) 21:30:00 executing program 5 (fault-call:2 fault-nth:31): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xb, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x300, 0x0, r1}}, 0x20}}, 0x0) 21:30:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0x2000000c, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 422.987365] FAULT_INJECTION: forcing a failure. [ 422.987365] name failslab, interval 1, probability 0, space 0, times 0 [ 422.999028] CPU: 1 PID: 17773 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 423.007531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.016892] Call Trace: [ 423.019493] dump_stack+0x244/0x39d [ 423.023144] ? dump_stack_print_info.cold.1+0x20/0x20 [ 423.028357] should_fail.cold.4+0xa/0x17 [ 423.032437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.037562] ? mark_held_locks+0x130/0x130 [ 423.041824] ? find_held_lock+0x36/0x1c0 [ 423.045908] ? is_bpf_text_address+0xac/0x170 [ 423.050420] ? lock_downgrade+0x900/0x900 [ 423.054579] ? check_preemption_disabled+0x48/0x280 [ 423.059639] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.064583] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.069883] ? rcu_softirq_qs+0x20/0x20 [ 423.073874] ? rcu_softirq_qs+0x20/0x20 [ 423.077859] ? unwind_dump+0x190/0x190 [ 423.081763] ? zap_class+0x640/0x640 21:30:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xfe0000000000, 0x400) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x24401) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="f30f1222470f01bb00400000c744240084000000c7442402c2000000ff1c24c4e2850a350ba935672ef30f09410f01d1c4c1b1d0fa660f38829d00900000c4015df30666baf80cb8ae09138fef66bafc0c66b8bb4766ef", 0x57}], 0x1, 0x10, &(0x7f0000000300), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xfffffffffffffffe, 0x56000) dup3(r4, r1, 0x80000) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001ff) r7 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:00 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0x8, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8100, 0x0, r1}}, 0x20}}, 0x0) [ 423.085494] __should_failslab+0x124/0x180 [ 423.089747] should_failslab+0x9/0x14 [ 423.093561] kmem_cache_alloc+0x47/0x730 [ 423.097669] ? __es_tree_search.isra.12+0x1ba/0x220 [ 423.102696] ? find_held_lock+0x36/0x1c0 [ 423.106775] __es_insert_extent+0x30c/0x1120 [ 423.111208] ? ext4_es_free_extent+0x790/0x790 [ 423.115809] ? kasan_check_read+0x11/0x20 [ 423.119967] ? do_raw_write_lock+0x14f/0x310 [ 423.124389] ? do_raw_read_unlock+0x70/0x70 [ 423.128728] ? __lock_is_held+0xb5/0x140 [ 423.132812] ext4_es_insert_extent+0x352/0xbd0 [ 423.137421] ? ext4_es_scan_clu+0x50/0x50 [ 423.141594] ? __lock_is_held+0xb5/0x140 [ 423.145693] ? rcu_read_lock_sched_held+0x14f/0x180 [ 423.150729] ext4_ext_put_gap_in_cache+0x15f/0x1f0 [ 423.155725] ? ext4_rereserve_cluster+0x240/0x240 [ 423.160586] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 423.166165] ext4_ext_map_blocks+0x1d92/0x48e0 [ 423.170768] ? kasan_check_write+0x14/0x20 [ 423.175030] ? ext4_ext_release+0x10/0x10 [ 423.179409] ? zap_class+0x640/0x640 [ 423.183121] ? zap_class+0x640/0x640 [ 423.183150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.183167] ? check_preemption_disabled+0x48/0x280 [ 423.183201] ? lock_acquire+0x1ed/0x520 [ 423.183216] ? ext4_map_blocks+0x487/0x1b50 [ 423.183236] ? lock_release+0xa10/0xa10 [ 423.197480] ? perf_trace_sched_process_exec+0x860/0x860 [ 423.197500] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 423.197520] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.197537] ? kasan_check_read+0x11/0x20 [ 423.197558] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.209827] ? down_read+0x8d/0x120 [ 423.209844] ? ext4_map_blocks+0x487/0x1b50 [ 423.209863] ? __down_interruptible+0x700/0x700 [ 423.209883] ? kernel_text_address+0x79/0xf0 [ 423.209903] ext4_map_blocks+0xe2d/0x1b50 [ 423.246922] ? __save_stack_trace+0x8d/0xf0 [ 423.246952] ? ext4_issue_zeroout+0x190/0x190 [ 423.246975] ? save_stack+0x43/0xd0 [ 423.246995] ? __kasan_slab_free+0x102/0x150 [ 423.259849] ? kasan_slab_free+0xe/0x10 [ 423.259864] ? kmem_cache_free+0x83/0x290 [ 423.259886] ext4_getblk+0x10e/0x630 [ 423.259913] ? ext4_iomap_begin+0x1390/0x1390 21:30:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 423.259934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.288745] ? __dquot_initialize+0x629/0xdd0 [ 423.288768] ext4_bread+0x95/0x2b0 [ 423.288786] ? ext4_getblk+0x630/0x630 [ 423.288802] ? dquot_get_next_dqblk+0x180/0x180 [ 423.288819] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 423.288839] ? common_perm+0x1f6/0x7b0 [ 423.320271] ext4_append+0x14e/0x370 [ 423.324004] ext4_mkdir+0x532/0xe60 [ 423.327654] ? ext4_init_dot_dotdot+0x510/0x510 [ 423.332341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 21:30:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 423.337897] ? security_inode_permission+0xd2/0x100 [ 423.337918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.337934] ? security_inode_mkdir+0xe8/0x120 [ 423.337954] vfs_mkdir+0x42e/0x6b0 [ 423.337980] do_mkdirat+0x27a/0x310 [ 423.360270] ? __ia32_sys_mknod+0xb0/0xb0 [ 423.364432] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.369816] ? trace_hardirqs_off_caller+0x300/0x300 [ 423.374930] ? ksys_ioctl+0x81/0xd0 [ 423.374952] __x64_sys_mkdir+0x5c/0x80 [ 423.374972] do_syscall_64+0x1b9/0x820 [ 423.374988] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.375008] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.375023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.375042] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.386427] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.386447] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.386470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.386495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.386508] RIP: 0033:0x456987 [ 423.386527] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.401635] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 423.401651] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 423.401661] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 423.401671] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 423.401680] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 21:30:01 executing program 5 (fault-call:2 fault-nth:32): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x300000000000000, 0x0, r1}}, 0x20}}, 0x0) [ 423.401690] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 423.412443] isofs_fill_super: root inode is not a directory. Corrupted media? [ 423.494229] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 423.560705] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 423.616920] FAULT_INJECTION: forcing a failure. [ 423.616920] name failslab, interval 1, probability 0, space 0, times 0 [ 423.628354] CPU: 0 PID: 17804 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 423.636853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.646206] Call Trace: [ 423.648803] dump_stack+0x244/0x39d [ 423.652440] ? dump_stack_print_info.cold.1+0x20/0x20 [ 423.657654] ? rcu_softirq_qs+0x20/0x20 [ 423.661650] should_fail.cold.4+0xa/0x17 [ 423.665724] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.670831] ? kernel_text_address+0x79/0xf0 [ 423.675244] ? __kernel_text_address+0xd/0x40 [ 423.679747] ? __save_stack_trace+0x8d/0xf0 [ 423.684095] ? zap_class+0x640/0x640 [ 423.687828] ? save_stack+0xa9/0xd0 [ 423.691461] ? __lock_is_held+0xb5/0x140 [ 423.695521] ? print_usage_bug+0xc0/0xc0 [ 423.699595] ? trace_hardirqs_off+0xb8/0x310 [ 423.704025] ? trace_hardirqs_on+0x310/0x310 [ 423.708436] ? perf_trace_sched_process_exec+0x860/0x860 [ 423.713897] ? __lock_acquire+0x62f/0x4c20 [ 423.718139] __should_failslab+0x124/0x180 [ 423.722380] should_failslab+0x9/0x14 [ 423.726182] __kmalloc+0x2e0/0x760 [ 423.729733] ? ext4_find_extent+0x757/0x9b0 [ 423.734063] ext4_find_extent+0x757/0x9b0 [ 423.738226] ext4_ext_map_blocks+0x28c/0x48e0 [ 423.742818] ? kasan_check_write+0x14/0x20 [ 423.747074] ? ext4_ext_release+0x10/0x10 [ 423.751228] ? zap_class+0x640/0x640 [ 423.754950] ? zap_class+0x640/0x640 [ 423.758686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.764226] ? check_preemption_disabled+0x48/0x280 [ 423.769265] ? lock_acquire+0x1ed/0x520 [ 423.773240] ? ext4_map_blocks+0x88f/0x1b50 [ 423.777576] ? lock_release+0xa10/0xa10 [ 423.781555] ? perf_trace_sched_process_exec+0x860/0x860 [ 423.787007] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 423.791680] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 423.796699] ? kasan_check_read+0x11/0x20 [ 423.800853] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 423.806145] ? down_write+0x8a/0x130 [ 423.809864] ? ext4_map_blocks+0x88f/0x1b50 [ 423.814188] ? down_read+0x120/0x120 [ 423.817908] ? kernel_text_address+0x79/0xf0 [ 423.822323] ext4_map_blocks+0x8f7/0x1b50 [ 423.826479] ? __save_stack_trace+0x8d/0xf0 [ 423.830815] ? ext4_issue_zeroout+0x190/0x190 [ 423.835318] ? save_stack+0x43/0xd0 [ 423.838947] ? __kasan_slab_free+0x102/0x150 [ 423.843352] ? kasan_slab_free+0xe/0x10 [ 423.847325] ? kmem_cache_free+0x83/0x290 [ 423.851479] ext4_getblk+0x10e/0x630 [ 423.855199] ? ext4_iomap_begin+0x1390/0x1390 [ 423.859702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.865241] ? __dquot_initialize+0x629/0xdd0 [ 423.869745] ext4_bread+0x95/0x2b0 [ 423.873289] ? ext4_getblk+0x630/0x630 [ 423.877181] ? dquot_get_next_dqblk+0x180/0x180 [ 423.881852] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 423.886790] ? common_perm+0x1f6/0x7b0 [ 423.890689] ext4_append+0x14e/0x370 [ 423.894436] ext4_mkdir+0x532/0xe60 [ 423.898075] ? ext4_init_dot_dotdot+0x510/0x510 [ 423.902769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.908318] ? security_inode_permission+0xd2/0x100 [ 423.913342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.918885] ? security_inode_mkdir+0xe8/0x120 [ 423.923470] vfs_mkdir+0x42e/0x6b0 [ 423.927021] do_mkdirat+0x27a/0x310 [ 423.930661] ? __ia32_sys_mknod+0xb0/0xb0 [ 423.934814] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.940181] ? trace_hardirqs_off_caller+0x300/0x300 [ 423.945286] ? ksys_ioctl+0x81/0xd0 [ 423.948920] __x64_sys_mkdir+0x5c/0x80 [ 423.952813] do_syscall_64+0x1b9/0x820 [ 423.956703] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.962087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.967018] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.971866] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.976885] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.981906] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.986931] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.991784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.996971] RIP: 0033:0x456987 [ 424.000170] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:30:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf0ffffffffffff, 0x0, r1}}, 0x20}}, 0x0) [ 424.019076] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 424.026803] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 424.034088] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 424.041358] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 424.048636] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 424.055904] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:01 executing program 5 (fault-call:2 fault-nth:33): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:01 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:01 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf0ffffff00000000, 0x0, r1}}, 0x20}}, 0x0) [ 424.264124] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 424.298191] FAULT_INJECTION: forcing a failure. [ 424.298191] name failslab, interval 1, probability 0, space 0, times 0 [ 424.324683] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 424.332936] CPU: 0 PID: 17824 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 424.341450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.350806] Call Trace: [ 424.353413] dump_stack+0x244/0x39d [ 424.357071] ? dump_stack_print_info.cold.1+0x20/0x20 [ 424.362288] should_fail.cold.4+0xa/0x17 [ 424.366370] ? fault_create_debugfs_attr+0x1f0/0x1f0 21:30:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x9effffff, 0x0, r1}}, 0x20}}, 0x0) 21:30:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 424.371483] ? find_held_lock+0x36/0x1c0 [ 424.375586] ? mntput_no_expire+0x1ba/0xc00 [ 424.379940] ? lock_downgrade+0x900/0x900 [ 424.384098] ? check_preemption_disabled+0x48/0x280 [ 424.389138] ? find_held_lock+0x36/0x1c0 [ 424.393219] ? rtl_pci_probe+0x44e8/0x66d2 [ 424.393251] ? perf_trace_sched_process_exec+0x860/0x860 [ 424.393274] ? dput.part.25+0x26d/0x860 [ 424.393295] __should_failslab+0x124/0x180 [ 424.393322] should_failslab+0x9/0x14 [ 424.402997] __kmalloc_track_caller+0x2d1/0x760 [ 424.403017] ? strncpy_from_user+0x5a0/0x5a0 21:30:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xd502000000000000, 0x0, r1}}, 0x20}}, 0x0) [ 424.403037] ? strndup_user+0x77/0xd0 [ 424.403057] memdup_user+0x2c/0xa0 [ 424.424098] strndup_user+0x77/0xd0 [ 424.424116] ksys_mount+0x3c/0x140 [ 424.424133] __x64_sys_mount+0xbe/0x150 [ 424.424155] do_syscall_64+0x1b9/0x820 [ 424.424170] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 424.424188] ? syscall_return_slowpath+0x5e0/0x5e0 [ 424.424203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.424222] ? trace_hardirqs_on_caller+0x310/0x310 [ 424.424239] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 424.424256] ? prepare_exit_to_usermode+0x291/0x3b0 [ 424.424278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.435254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.471762] RIP: 0033:0x459fda [ 424.471780] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 424.471790] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 424.471805] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 424.471815] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 424.471829] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 424.486863] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 424.486873] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf000000, 0x0, r1}}, 0x20}}, 0x0) 21:30:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 424.730017] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 424.789487] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:02 executing program 5 (fault-call:2 fault-nth:34): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2, 0x0, r1}}, 0x20}}, 0x0) 21:30:02 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:02 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7c) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x40000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x2b, @loopback, 0xfffffffffffffffa, 0x2, 'sed\x00', 0x8, 0x10000, 0x3d}, {@remote, 0x4e22, 0x7, 0x3, 0x6}}, 0x44) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 425.181211] FAULT_INJECTION: forcing a failure. [ 425.181211] name failslab, interval 1, probability 0, space 0, times 0 [ 425.204830] CPU: 0 PID: 17865 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 425.213334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.222691] Call Trace: [ 425.225305] dump_stack+0x244/0x39d [ 425.228961] ? dump_stack_print_info.cold.1+0x20/0x20 [ 425.234165] ? zap_class+0x640/0x640 [ 425.237892] ? __mark_inode_dirty+0xfb5/0x1500 [ 425.242492] should_fail.cold.4+0xa/0x17 [ 425.246574] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 425.251730] ? __lock_is_held+0xb5/0x140 [ 425.255814] ? zap_class+0x640/0x640 [ 425.259537] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 425.265083] ? __mark_inode_dirty+0x4ad/0x1500 [ 425.269677] ? __inode_attach_wb+0x13f0/0x13f0 [ 425.274275] ? __lock_is_held+0xb5/0x140 [ 425.278348] ? rcu_softirq_qs+0x20/0x20 [ 425.282344] ? inode_add_bytes+0xd3/0xf0 [ 425.286417] ? perf_trace_sched_process_exec+0x860/0x860 [ 425.291881] ? __dquot_alloc_space+0x4b9/0x8c0 [ 425.296476] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 425.301508] __should_failslab+0x124/0x180 [ 425.305755] should_failslab+0x9/0x14 [ 425.309570] kmem_cache_alloc+0x2be/0x730 [ 425.313871] ext4_mb_new_blocks+0x782/0x4820 [ 425.318295] ? find_held_lock+0x36/0x1c0 [ 425.322394] ? ext4_discard_preallocations+0x1900/0x1900 [ 425.327862] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 425.332801] ? kasan_check_read+0x11/0x20 [ 425.336964] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 425.342250] ? rcu_softirq_qs+0x20/0x20 [ 425.346235] ? rcu_softirq_qs+0x20/0x20 [ 425.350218] ? unwind_dump+0x190/0x190 [ 425.354126] ? is_bpf_text_address+0xd3/0x170 [ 425.358647] ? kernel_text_address+0x79/0xf0 [ 425.363069] ? __kernel_text_address+0xd/0x40 [ 425.367575] ? unwind_get_return_address+0x61/0xa0 [ 425.372514] ? __save_stack_trace+0x8d/0xf0 [ 425.376864] ? save_stack+0xa9/0xd0 [ 425.380501] ? save_stack+0x43/0xd0 [ 425.384132] ? kasan_kmalloc+0xc7/0xe0 [ 425.388026] ? __kmalloc+0x15b/0x760 [ 425.391748] ? ext4_find_extent+0x757/0x9b0 [ 425.396075] ? ext4_ext_map_blocks+0x28c/0x48e0 [ 425.400750] ? ext4_map_blocks+0x8f7/0x1b50 [ 425.405103] ? ext4_getblk+0x10e/0x630 [ 425.409007] ? ext4_bread+0x95/0x2b0 [ 425.412727] ? ext4_append+0x14e/0x370 [ 425.416632] ? ext4_mkdir+0x532/0xe60 [ 425.420440] ? vfs_mkdir+0x42e/0x6b0 [ 425.424159] ? do_mkdirat+0x27a/0x310 [ 425.427964] ? __x64_sys_mkdir+0x5c/0x80 [ 425.432035] ? do_syscall_64+0x1b9/0x820 [ 425.436121] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.441516] ? save_stack+0xa9/0xd0 [ 425.445159] ? zap_class+0x640/0x640 [ 425.448889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.454440] ? check_preemption_disabled+0x48/0x280 [ 425.459474] ? __lock_is_held+0xb5/0x140 [ 425.463557] ? rcu_read_lock_sched_held+0x14f/0x180 [ 425.468580] ? __kmalloc+0x5ee/0x760 [ 425.472319] ? ext4_find_extent+0x757/0x9b0 [ 425.476664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.476683] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.476699] ? ext4_inode_to_goal_block+0x2e3/0x3f0 [ 425.476723] ext4_ext_map_blocks+0x2715/0x48e0 [ 425.488314] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 425.492822] ? ext4_ext_release+0x10/0x10 [ 425.492843] ? zap_class+0x640/0x640 [ 425.492860] ? zap_class+0x640/0x640 [ 425.492878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.492894] ? check_preemption_disabled+0x48/0x280 [ 425.492927] ? lock_acquire+0x1ed/0x520 [ 425.529840] ? ext4_map_blocks+0x88f/0x1b50 [ 425.534179] ? lock_release+0xa10/0xa10 [ 425.538160] ? perf_trace_sched_process_exec+0x860/0x860 [ 425.543634] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 425.548320] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 425.553260] ? kasan_check_read+0x11/0x20 [ 425.557418] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 425.562721] ? down_write+0x8a/0x130 [ 425.566444] ? ext4_map_blocks+0x88f/0x1b50 [ 425.570781] ? down_read+0x120/0x120 [ 425.574510] ? kernel_text_address+0x79/0xf0 [ 425.578937] ext4_map_blocks+0x8f7/0x1b50 [ 425.583094] ? __save_stack_trace+0x8d/0xf0 [ 425.587436] ? ext4_issue_zeroout+0x190/0x190 [ 425.591945] ? save_stack+0x43/0xd0 [ 425.595581] ? __kasan_slab_free+0x102/0x150 [ 425.600004] ? kasan_slab_free+0xe/0x10 [ 425.603983] ? kmem_cache_free+0x83/0x290 [ 425.608140] ext4_getblk+0x10e/0x630 [ 425.611871] ? ext4_iomap_begin+0x1390/0x1390 [ 425.616380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.621925] ? __dquot_initialize+0x629/0xdd0 [ 425.626444] ext4_bread+0x95/0x2b0 [ 425.630000] ? ext4_getblk+0x630/0x630 [ 425.633899] ? dquot_get_next_dqblk+0x180/0x180 [ 425.638576] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 425.643522] ? common_perm+0x1f6/0x7b0 [ 425.647425] ext4_append+0x14e/0x370 [ 425.651154] ext4_mkdir+0x532/0xe60 [ 425.654805] ? ext4_init_dot_dotdot+0x510/0x510 [ 425.659490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.665038] ? security_inode_permission+0xd2/0x100 [ 425.670066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.675631] ? security_inode_mkdir+0xe8/0x120 [ 425.680226] vfs_mkdir+0x42e/0x6b0 [ 425.683779] do_mkdirat+0x27a/0x310 [ 425.687419] ? __ia32_sys_mknod+0xb0/0xb0 [ 425.691577] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.696959] ? trace_hardirqs_off_caller+0x300/0x300 [ 425.702068] ? ksys_ioctl+0x81/0xd0 [ 425.705711] __x64_sys_mkdir+0x5c/0x80 [ 425.709610] do_syscall_64+0x1b9/0x820 [ 425.713524] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 425.718901] ? syscall_return_slowpath+0x5e0/0x5e0 [ 425.723841] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.728699] ? trace_hardirqs_on_caller+0x310/0x310 [ 425.733734] ? prepare_exit_to_usermode+0x291/0x3b0 [ 425.738765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 425.743643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.748837] RIP: 0033:0x456987 [ 425.752042] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 425.770948] RSP: 002b:00007f382439ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 21:30:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0xf, 0x0, r1}}, 0x20}}, 0x0) [ 425.778661] RAX: ffffffffffffffda RBX: 00000000200000a8 RCX: 0000000000456987 [ 425.785935] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000380 [ 425.793210] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 425.800483] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 425.807756] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x9effffff, r1}}, 0x20}}, 0x0) [ 425.880961] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:03 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:03 executing program 5 (fault-call:2 fault-nth:35): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xd502, r1}}, 0x20}}, 0x0) 21:30:03 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 426.078315] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 426.094292] FAULT_INJECTION: forcing a failure. [ 426.094292] name failslab, interval 1, probability 0, space 0, times 0 [ 426.133937] CPU: 1 PID: 17889 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 426.142463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.151829] Call Trace: [ 426.154442] dump_stack+0x244/0x39d [ 426.158111] ? dump_stack_print_info.cold.1+0x20/0x20 [ 426.163325] ? __kernel_text_address+0xd/0x40 [ 426.167846] ? unwind_get_return_address+0x61/0xa0 [ 426.172792] should_fail.cold.4+0xa/0x17 [ 426.176877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.181999] ? save_stack+0x43/0xd0 [ 426.185648] ? kasan_kmalloc+0xc7/0xe0 [ 426.189554] ? __kmalloc_track_caller+0x157/0x760 [ 426.194402] ? memdup_user+0x2c/0xa0 [ 426.198105] ? do_syscall_64+0x1b9/0x820 [ 426.202159] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.207517] ? find_held_lock+0x36/0x1c0 [ 426.211570] ? get_key_knc1+0xe8/0x260 [ 426.215469] ? perf_trace_sched_process_exec+0x860/0x860 [ 426.220911] ? lock_release+0xa10/0xa10 [ 426.224874] ? perf_trace_sched_process_exec+0x860/0x860 [ 426.230333] __should_failslab+0x124/0x180 [ 426.234573] should_failslab+0x9/0x14 [ 426.238388] __kmalloc_track_caller+0x2d1/0x760 [ 426.243069] ? strncpy_from_user+0x5a0/0x5a0 [ 426.247470] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.252999] ? strndup_user+0x77/0xd0 [ 426.256800] memdup_user+0x2c/0xa0 [ 426.260336] strndup_user+0x77/0xd0 [ 426.263950] ksys_mount+0x73/0x140 [ 426.267494] __x64_sys_mount+0xbe/0x150 [ 426.271461] do_syscall_64+0x1b9/0x820 [ 426.275335] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 426.280684] ? syscall_return_slowpath+0x5e0/0x5e0 [ 426.285624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.290469] ? trace_hardirqs_on_caller+0x310/0x310 [ 426.295473] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 426.300479] ? prepare_exit_to_usermode+0x291/0x3b0 [ 426.305485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.310320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.315496] RIP: 0033:0x459fda 21:30:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x1f}, 0x1, r1}) listen(r0, 0x7f) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23}}, 0x8, 0x6}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3}, &(0x7f0000000240)=0x8) ioctl$RTC_UIE_ON(r4, 0x7003) 21:30:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00, r1}}, 0x20}}, 0x0) 21:30:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 426.318678] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 426.337565] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 426.345258] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 426.352531] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 426.359790] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 426.367043] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 426.374383] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 426.410353] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfffffff0, r1}}, 0x20}}, 0x0) 21:30:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:04 executing program 5 (fault-call:2 fault-nth:36): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0ffffff00000000, r1}}, 0x20}}, 0x0) 21:30:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 426.653697] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 426.724434] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 426.737588] FAULT_INJECTION: forcing a failure. [ 426.737588] name failslab, interval 1, probability 0, space 0, times 0 [ 426.749021] CPU: 0 PID: 17929 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 426.757521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.766877] Call Trace: [ 426.769483] dump_stack+0x244/0x39d [ 426.773134] ? dump_stack_print_info.cold.1+0x20/0x20 [ 426.778340] ? kernel_text_address+0x79/0xf0 [ 426.782762] should_fail.cold.4+0xa/0x17 [ 426.786848] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 426.791976] ? save_stack+0xa9/0xd0 [ 426.795640] ? save_stack+0x43/0xd0 [ 426.799290] ? kmem_cache_alloc_trace+0x152/0x750 [ 426.804156] ? vfs_new_fs_context+0x5e/0x77c [ 426.804174] ? do_mount+0x613/0x1d90 [ 426.804186] ? ksys_mount+0x12d/0x140 [ 426.804199] ? __x64_sys_mount+0xbe/0x150 [ 426.804215] ? do_syscall_64+0x1b9/0x820 [ 426.804231] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.804253] ? find_held_lock+0x36/0x1c0 [ 426.804276] ? gcm_hash_crypt_remain_done+0xa8/0xc0 [ 426.816188] ? perf_trace_sched_process_exec+0x860/0x860 [ 426.816204] ? debug_mutex_init+0x2d/0x60 [ 426.816230] __should_failslab+0x124/0x180 [ 426.824422] should_failslab+0x9/0x14 [ 426.824440] kmem_cache_alloc_trace+0x2d7/0x750 [ 426.824458] ? rcu_read_lock_sched_held+0x14f/0x180 [ 426.824475] ? kmem_cache_alloc_trace+0x353/0x750 [ 426.824501] legacy_init_fs_context+0x187/0x230 [ 426.875683] ? vfs_dup_fs_context+0x400/0x400 [ 426.880188] vfs_new_fs_context+0x3f4/0x77c [ 426.884529] do_mount+0x613/0x1d90 [ 426.888085] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 426.893656] ? copy_mount_string+0x40/0x40 [ 426.897910] ? copy_mount_options+0x5f/0x430 [ 426.902333] ? kmem_cache_alloc_trace+0x353/0x750 [ 426.907190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 426.912764] ? _copy_from_user+0xdf/0x150 [ 426.916931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.922480] ? copy_mount_options+0x315/0x430 [ 426.926988] ksys_mount+0x12d/0x140 [ 426.930657] __x64_sys_mount+0xbe/0x150 [ 426.934659] do_syscall_64+0x1b9/0x820 [ 426.938557] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 426.943932] ? syscall_return_slowpath+0x5e0/0x5e0 [ 426.948873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.953725] ? trace_hardirqs_on_caller+0x310/0x310 [ 426.958758] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 426.963789] ? prepare_exit_to_usermode+0x291/0x3b0 [ 426.968820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 426.973680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 426.978875] RIP: 0033:0x459fda [ 426.982080] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 427.000985] RSP: 002b:00007f382437da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 427.008701] RAX: ffffffffffffffda RBX: 00007f382437db30 RCX: 0000000000459fda [ 427.015975] RDX: 00007f382437dad0 RSI: 0000000020000380 RDI: 00007f382437daf0 [ 427.023247] RBP: 0000000020000380 R08: 00007f382437db30 R09: 00007f382437dad0 [ 427.030517] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000004 [ 427.037795] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000003 21:30:04 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffffff7f, r1}}, 0x20}}, 0x0) 21:30:04 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630f5", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) getdents(r3, &(0x7f00000001c0)=""/4096, 0x1000) r4 = memfd_create(&(0x7f0000000100)='cpusetsystem\x00', 0x0) lseek(r4, 0x7ffffffffffffffb, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000011c0)={'filter\x00', 0x4}, 0x68) fcntl$lock(r4, 0x6, &(0x7f0000000180)={0x0, 0x200000001, 0x358}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00H\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:04 executing program 5 (fault-call:2 fault-nth:37): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x8100, r1}}, 0x20}}, 0x0) [ 427.386498] FAULT_INJECTION: forcing a failure. [ 427.386498] name failslab, interval 1, probability 0, space 0, times 0 [ 427.433031] CPU: 1 PID: 17941 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 427.441553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.450910] Call Trace: [ 427.453520] dump_stack+0x244/0x39d [ 427.457176] ? dump_stack_print_info.cold.1+0x20/0x20 [ 427.462388] ? __kernel_text_address+0xd/0x40 [ 427.466897] ? unwind_get_return_address+0x61/0xa0 [ 427.471844] should_fail.cold.4+0xa/0x17 [ 427.475924] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.481065] ? save_stack+0x43/0xd0 [ 427.484697] ? kasan_kmalloc+0xc7/0xe0 [ 427.488598] ? __kmalloc_track_caller+0x157/0x760 [ 427.493467] ? memdup_user+0x2c/0xa0 [ 427.497198] ? do_syscall_64+0x1b9/0x820 [ 427.501271] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.506664] ? find_held_lock+0x36/0x1c0 [ 427.510748] ? perf_trace_sched_switch+0x168/0xed0 [ 427.515700] ? perf_trace_sched_process_exec+0x860/0x860 [ 427.521167] ? lock_release+0xa10/0xa10 [ 427.525155] ? perf_trace_sched_process_exec+0x860/0x860 [ 427.530633] __should_failslab+0x124/0x180 [ 427.534895] should_failslab+0x9/0x14 [ 427.538712] __kmalloc_track_caller+0x2d1/0x760 [ 427.543397] ? strncpy_from_user+0x5a0/0x5a0 [ 427.547822] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 427.553375] ? strndup_user+0x77/0xd0 [ 427.557192] memdup_user+0x2c/0xa0 [ 427.560746] strndup_user+0x77/0xd0 [ 427.564386] ksys_mount+0x73/0x140 [ 427.567940] __x64_sys_mount+0xbe/0x150 [ 427.571934] do_syscall_64+0x1b9/0x820 [ 427.575837] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 21:30:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300000000000000, r1}}, 0x20}}, 0x0) [ 427.581214] ? syscall_return_slowpath+0x5e0/0x5e0 [ 427.586163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.591021] ? trace_hardirqs_on_caller+0x310/0x310 [ 427.596051] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 427.601079] ? prepare_exit_to_usermode+0x291/0x3b0 [ 427.606113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 427.610985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.616186] RIP: 0033:0x459fda [ 427.619395] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 427.638316] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 427.638332] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 427.638343] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 427.638353] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 427.638362] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 427.638372] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0ffffffffffff, r1}}, 0x20}}, 0x0) 21:30:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 5 (fault-call:2 fault-nth:38): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 427.874991] FAULT_INJECTION: forcing a failure. [ 427.874991] name failslab, interval 1, probability 0, space 0, times 0 [ 427.898414] CPU: 1 PID: 17972 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 427.906922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.916279] Call Trace: [ 427.918886] dump_stack+0x244/0x39d [ 427.922535] ? dump_stack_print_info.cold.1+0x20/0x20 [ 427.927740] ? find_held_lock+0x36/0x1c0 [ 427.931823] should_fail.cold.4+0xa/0x17 [ 427.935905] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 427.941027] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 427.945969] ? kasan_check_read+0x11/0x20 [ 427.950138] ? rcu_softirq_qs+0x20/0x20 [ 427.954137] ? rcu_softirq_qs+0x20/0x20 [ 427.958122] ? unwind_dump+0x190/0x190 [ 427.962038] ? find_held_lock+0x36/0x1c0 [ 427.966138] ? perf_trace_sched_process_exec+0x860/0x860 [ 427.971598] ? save_stack+0xa9/0xd0 [ 427.975249] ? kmem_cache_alloc_trace+0x152/0x750 [ 427.980101] ? copy_mount_options+0x5f/0x430 [ 427.984528] __should_failslab+0x124/0x180 [ 427.988779] should_failslab+0x9/0x14 [ 427.992588] kmem_cache_alloc+0x2be/0x730 [ 427.996759] ? find_held_lock+0x36/0x1c0 [ 428.000862] getname_flags+0xd0/0x590 [ 428.004682] user_path_at_empty+0x2d/0x50 [ 428.008845] do_mount+0x180/0x1d90 [ 428.012401] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 428.017955] ? rcu_pm_notify+0xc0/0xc0 [ 428.021858] ? copy_mount_string+0x40/0x40 [ 428.026109] ? copy_mount_options+0x5f/0x430 [ 428.030535] ? rcu_read_lock_sched_held+0x14f/0x180 [ 428.035563] ? kmem_cache_alloc_trace+0x353/0x750 [ 428.040420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.045975] ? _copy_from_user+0xdf/0x150 [ 428.050148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.055720] ? copy_mount_options+0x315/0x430 [ 428.060231] ksys_mount+0x12d/0x140 [ 428.063877] __x64_sys_mount+0xbe/0x150 [ 428.067872] do_syscall_64+0x1b9/0x820 [ 428.071774] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.077156] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.082099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.086963] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.091996] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.097028] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.102062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.106927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.112133] RIP: 0033:0x459fda [ 428.115347] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 428.134257] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 428.141977] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 428.149261] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 428.156538] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 428.163814] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 428.163825] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 428.187114] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) truncate(&(0x7f0000000040)='./file0\x00', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf00000000000000, r1}}, 0x20}}, 0x0) 21:30:05 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:05 executing program 5 (fault-call:2 fault-nth:39): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 428.252080] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630f6", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x100000000000000, r1}}, 0x20}}, 0x0) [ 428.377081] FAULT_INJECTION: forcing a failure. [ 428.377081] name failslab, interval 1, probability 0, space 0, times 0 [ 428.396559] CPU: 1 PID: 17994 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 428.405065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.414422] Call Trace: [ 428.417030] dump_stack+0x244/0x39d [ 428.420688] ? dump_stack_print_info.cold.1+0x20/0x20 [ 428.425897] ? __kernel_text_address+0xd/0x40 [ 428.430406] ? unwind_get_return_address+0x61/0xa0 [ 428.435355] should_fail.cold.4+0xa/0x17 [ 428.435380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 428.435401] ? kasan_kmalloc+0xc7/0xe0 [ 428.444555] ? __kmalloc_track_caller+0x157/0x760 [ 428.444573] ? memdup_user+0x2c/0xa0 [ 428.444590] ? zap_class+0x640/0x640 [ 428.444606] ? do_syscall_64+0x1b9/0x820 [ 428.444644] ? find_held_lock+0x36/0x1c0 [ 428.468889] ? perf_trace_sched_process_exec+0x860/0x860 [ 428.474352] ? lock_release+0xa10/0xa10 [ 428.478337] ? perf_trace_sched_process_exec+0x860/0x860 [ 428.483801] ? usercopy_warn+0x110/0x110 [ 428.487876] __should_failslab+0x124/0x180 [ 428.492136] should_failslab+0x9/0x14 [ 428.495952] kmem_cache_alloc_trace+0x2d7/0x750 [ 428.500645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.506204] ? _copy_from_user+0xdf/0x150 [ 428.510379] copy_mount_options+0x5f/0x430 [ 428.514638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.520199] ksys_mount+0xd0/0x140 [ 428.523752] __x64_sys_mount+0xbe/0x150 [ 428.523774] do_syscall_64+0x1b9/0x820 [ 428.523791] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.523809] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.523824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.523843] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.523859] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.523877] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.523902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.531767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.531781] RIP: 0033:0x459fda [ 428.531798] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 428.531813] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 428.601749] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 428.609026] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 428.616301] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 21:30:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 428.623575] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 428.630870] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1000000, r1}}, 0x20}}, 0x0) 21:30:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:06 executing program 5 (fault-call:2 fault-nth:40): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:06 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:06 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0ffff, r1}}, 0x20}}, 0x0) [ 429.330926] FAULT_INJECTION: forcing a failure. [ 429.330926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.342773] CPU: 1 PID: 18032 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 429.351271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.360632] Call Trace: [ 429.363257] dump_stack+0x244/0x39d [ 429.366906] ? dump_stack_print_info.cold.1+0x20/0x20 [ 429.372120] should_fail.cold.4+0xa/0x17 [ 429.376212] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.381330] ? print_usage_bug+0xc0/0xc0 [ 429.381361] ? mark_held_locks+0x130/0x130 [ 429.389678] ? zap_class+0x640/0x640 [ 429.392852] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 429.393403] ? print_usage_bug+0xc0/0xc0 [ 429.403775] ? find_held_lock+0x36/0x1c0 [ 429.407860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.413419] ? should_fail+0x22d/0xd01 [ 429.417319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.422456] __alloc_pages_nodemask+0x34b/0xdd0 [ 429.427141] ? rcu_softirq_qs+0x20/0x20 [ 429.431140] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 429.436174] ? find_held_lock+0x36/0x1c0 [ 429.440256] ? __jbd2_journal_refile_buffer+0x568/0x590 [ 429.445657] ? trace_hardirqs_off+0xb8/0x310 [ 429.450106] cache_grow_begin+0xa5/0x8c0 [ 429.454178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.459725] ? check_preemption_disabled+0x48/0x280 [ 429.464761] kmem_cache_alloc+0x66b/0x730 [ 429.468917] ? find_held_lock+0x36/0x1c0 [ 429.472996] getname_flags+0xd0/0x590 [ 429.476815] user_path_at_empty+0x2d/0x50 [ 429.480981] do_mount+0x180/0x1d90 [ 429.484533] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 429.490085] ? rcu_pm_notify+0xc0/0xc0 [ 429.493986] ? copy_mount_string+0x40/0x40 [ 429.498245] ? copy_mount_options+0x5f/0x430 [ 429.502667] ? rcu_read_lock_sched_held+0x14f/0x180 [ 429.507697] ? kmem_cache_alloc_trace+0x353/0x750 [ 429.512557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.518107] ? _copy_from_user+0xdf/0x150 [ 429.522280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.527831] ? copy_mount_options+0x315/0x430 [ 429.532338] ksys_mount+0x12d/0x140 [ 429.535979] __x64_sys_mount+0xbe/0x150 [ 429.539970] do_syscall_64+0x1b9/0x820 [ 429.543869] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.549248] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.554197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.559054] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.564081] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.569141] ? prepare_exit_to_usermode+0x291/0x3b0 [ 429.574224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.579138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.584333] RIP: 0033:0x459fda [ 429.587537] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 429.606446] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 429.614164] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 429.621440] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 21:30:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300, r1}}, 0x20}}, 0x0) 21:30:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 429.628712] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 429.635992] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 429.643264] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, r1}}, 0x20}}, 0x0) [ 429.704767] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 429.858242] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x80000001, {{0xa, 0x4e24, 0x48, @dev={0xfe, 0x80, [], 0x14}, 0x1}}}, 0x2e8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) inotify_init1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getdents64(r3, &(0x7f0000000240)=""/106, 0x6a) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10001, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xc7, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x9) 21:30:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2d5, r1}}, 0x20}}, 0x0) 21:30:07 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:07 executing program 5 (fault-call:2 fault-nth:41): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 430.327863] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 430.364227] FAULT_INJECTION: forcing a failure. [ 430.364227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.376070] CPU: 1 PID: 18066 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 430.384561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.393917] Call Trace: [ 430.396521] dump_stack+0x244/0x39d [ 430.400184] ? dump_stack_print_info.cold.1+0x20/0x20 [ 430.405390] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 430.409985] ? retint_kernel+0x2d/0x2d [ 430.413892] ? trace_hardirqs_on_caller+0xc0/0x310 [ 430.418836] should_fail.cold.4+0xa/0x17 [ 430.422918] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.428039] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 430.432816] ? mark_held_locks+0x130/0x130 [ 430.437061] ? zap_class+0x640/0x640 [ 430.440793] ? print_usage_bug+0xc0/0xc0 [ 430.444870] ? update_stack_state+0x23f/0x690 [ 430.449390] ? find_held_lock+0x36/0x1c0 [ 430.453485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.459035] ? should_fail+0x22d/0xd01 [ 430.462941] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.468061] __alloc_pages_nodemask+0x34b/0xdd0 [ 430.472745] ? rcu_softirq_qs+0x20/0x20 [ 430.476736] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 430.481775] ? find_held_lock+0x36/0x1c0 [ 430.485874] ? trace_hardirqs_off+0xb8/0x310 [ 430.490295] cache_grow_begin+0xa5/0x8c0 [ 430.494379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.499933] ? check_preemption_disabled+0x48/0x280 [ 430.504969] kmem_cache_alloc+0x66b/0x730 [ 430.509147] getname_flags+0xd0/0x590 [ 430.512964] user_path_at_empty+0x2d/0x50 [ 430.517138] do_mount+0x180/0x1d90 [ 430.520691] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 430.526242] ? rcu_pm_notify+0xc0/0xc0 [ 430.530153] ? copy_mount_string+0x40/0x40 [ 430.534408] ? copy_mount_options+0x5f/0x430 [ 430.538830] ? rcu_read_lock_sched_held+0x14f/0x180 [ 430.543861] ? kmem_cache_alloc_trace+0x353/0x750 [ 430.548723] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.554283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.559832] ? copy_mount_options+0x315/0x430 [ 430.564343] ksys_mount+0x12d/0x140 [ 430.567995] __x64_sys_mount+0xbe/0x150 [ 430.571984] do_syscall_64+0x1b9/0x820 [ 430.575891] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.581269] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.586213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.591073] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.596100] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.601134] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.601159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.601183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.601199] RIP: 0033:0x459fda [ 430.619418] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 430.638326] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 430.646047] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 430.653341] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 430.660633] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 430.667912] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 21:30:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfffff000, r1}}, 0x20}}, 0x0) [ 430.675186] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 430.725339] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 430.735827] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 430.904962] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 430.969833] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5, 0x10000}, 0x8) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:08 executing program 5 (fault-call:2 fault-nth:42): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x81000000, r1}}, 0x20}}, 0x0) 21:30:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:08 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:08 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3000000, r1}}, 0x20}}, 0x0) [ 431.360849] FAULT_INJECTION: forcing a failure. [ 431.360849] name failslab, interval 1, probability 0, space 0, times 0 [ 431.375201] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 431.389059] CPU: 0 PID: 18104 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 431.397607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.397623] Call Trace: [ 431.397653] dump_stack+0x244/0x39d [ 431.397677] ? dump_stack_print_info.cold.1+0x20/0x20 [ 431.397700] ? is_bpf_text_address+0xd3/0x170 [ 431.422958] should_fail.cold.4+0xa/0x17 [ 431.427029] ? __save_stack_trace+0x8d/0xf0 [ 431.431365] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.431395] ? save_stack+0xa9/0xd0 [ 431.431412] ? kasan_kmalloc+0xc7/0xe0 [ 431.431427] ? kmem_cache_alloc_trace+0x152/0x750 [ 431.431444] ? legacy_init_fs_context+0x187/0x230 [ 431.431476] ? vfs_new_fs_context+0x3f4/0x77c [ 431.444094] ? do_mount+0x613/0x1d90 [ 431.444107] ? ksys_mount+0x12d/0x140 [ 431.444120] ? __x64_sys_mount+0xbe/0x150 [ 431.444136] ? do_syscall_64+0x1b9/0x820 [ 431.444174] ? find_held_lock+0x36/0x1c0 [ 431.444222] ? check_preemption_disabled+0x48/0x280 [ 431.453938] ? perf_trace_sched_process_exec+0x860/0x860 [ 431.453963] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 431.453986] __should_failslab+0x124/0x180 [ 431.454006] should_failslab+0x9/0x14 [ 431.454023] kmem_cache_alloc_trace+0x2d7/0x750 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 431.454040] ? legacy_init_fs_context+0x187/0x230 [ 431.454059] ? rcu_read_lock_sched_held+0x14f/0x180 [ 431.516756] ? kmem_cache_alloc_trace+0x353/0x750 [ 431.521609] ? rcu_read_lock_sched_held+0x14f/0x180 [ 431.526671] apparmor_fs_context_alloc+0x43/0xa0 [ 431.531456] security_fs_context_alloc+0x54/0xb0 [ 431.536227] vfs_new_fs_context+0x446/0x77c [ 431.540574] do_mount+0x613/0x1d90 [ 431.544136] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 431.544161] ? copy_mount_string+0x40/0x40 [ 431.544185] ? copy_mount_options+0x5f/0x430 [ 431.544204] ? kmem_cache_alloc_trace+0x353/0x750 [ 431.544225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.544247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.544267] ? copy_mount_options+0x315/0x430 [ 431.554030] ksys_mount+0x12d/0x140 [ 431.554050] __x64_sys_mount+0xbe/0x150 [ 431.554072] do_syscall_64+0x1b9/0x820 [ 431.554089] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.554108] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.554127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.605487] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.610518] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.615546] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.620586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.625468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.630664] RIP: 0033:0x459fda [ 431.633868] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 431.652777] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 431.660495] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 431.667772] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 431.675048] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 431.682328] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 431.689600] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2, r1}}, 0x20}}, 0x0) 21:30:09 executing program 5 (fault-call:2 fault-nth:43): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 431.759108] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660z', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x200000000000000, r1}}, 0x20}}, 0x0) 21:30:09 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 431.985414] FAULT_INJECTION: forcing a failure. [ 431.985414] name failslab, interval 1, probability 0, space 0, times 0 [ 432.028790] CPU: 0 PID: 18139 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 432.037323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.046681] Call Trace: [ 432.049290] dump_stack+0x244/0x39d [ 432.052943] ? dump_stack_print_info.cold.1+0x20/0x20 [ 432.058154] should_fail.cold.4+0xa/0x17 [ 432.062232] ? unwind_get_return_address+0x61/0xa0 [ 432.067217] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.072344] ? save_stack+0x43/0xd0 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 432.075976] ? kasan_kmalloc+0xc7/0xe0 [ 432.079878] ? kmem_cache_alloc_trace+0x152/0x750 [ 432.084734] ? apparmor_fs_context_alloc+0x43/0xa0 [ 432.089675] ? security_fs_context_alloc+0x54/0xb0 [ 432.094669] ? find_held_lock+0x36/0x1c0 [ 432.098802] ? perf_trace_sched_process_exec+0x860/0x860 [ 432.104263] ? check_preemption_disabled+0x48/0x280 [ 432.109300] __should_failslab+0x124/0x180 [ 432.113554] should_failslab+0x9/0x14 [ 432.117365] __kmalloc_track_caller+0x2d1/0x760 [ 432.122046] ? m_show+0x5d0/0x5d0 21:30:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 432.125506] ? apparmor_fs_context_alloc+0x43/0xa0 [ 432.130456] ? rcu_read_lock_sched_held+0x14f/0x180 [ 432.135491] ? vfs_parse_fs_string+0x191/0x2b0 [ 432.140096] kmemdup_nul+0x31/0xa0 [ 432.143671] vfs_parse_fs_string+0x191/0x2b0 [ 432.143693] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 432.143711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.143732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.143755] do_mount+0x666/0x1d90 [ 432.152666] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 432.152690] ? copy_mount_string+0x40/0x40 [ 432.152713] ? copy_mount_options+0x5f/0x430 [ 432.181478] ? kmem_cache_alloc_trace+0x353/0x750 [ 432.186336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.191901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.197452] ? copy_mount_options+0x315/0x430 [ 432.201962] ksys_mount+0x12d/0x140 [ 432.205604] __x64_sys_mount+0xbe/0x150 [ 432.209639] do_syscall_64+0x1b9/0x820 [ 432.213530] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.218886] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.223814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.228674] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.233705] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.238730] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.243764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.248645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.253855] RIP: 0033:0x459fda [ 432.257037] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 432.275923] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 432.283630] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 432.290885] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 432.298146] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 432.305401] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 432.312659] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000, r1}}, 0x20}}, 0x0) 21:30:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363006", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x4, &(0x7f0000000080), 0x1d0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200ce0000000000000000000000000000000000000000000c000002000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:10 executing program 5 (fault-call:2 fault-nth:44): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 432.743301] FAULT_INJECTION: forcing a failure. [ 432.743301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.755143] CPU: 1 PID: 18161 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 432.755154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.755160] Call Trace: [ 432.755183] dump_stack+0x244/0x39d [ 432.755207] ? dump_stack_print_info.cold.1+0x20/0x20 [ 432.755233] should_fail.cold.4+0xa/0x17 [ 432.788503] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.793633] ? __lock_acquire+0x62f/0x4c20 [ 432.797884] ? lock_downgrade+0x900/0x900 [ 432.802047] ? check_preemption_disabled+0x48/0x280 [ 432.807090] ? mark_held_locks+0x130/0x130 [ 432.807111] ? mark_held_locks+0x130/0x130 [ 432.807151] ? is_bpf_text_address+0xd3/0x170 [ 432.820071] ? kernel_text_address+0x79/0xf0 [ 432.824497] ? __kernel_text_address+0xd/0x40 [ 432.829008] ? unwind_get_return_address+0x61/0xa0 [ 432.833954] ? __save_stack_trace+0x8d/0xf0 [ 432.838290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.843839] ? should_fail+0x22d/0xd01 [ 432.847746] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.852866] __alloc_pages_nodemask+0x34b/0xdd0 [ 432.857551] ? __kmalloc_track_caller+0x157/0x760 [ 432.862401] ? memdup_user+0x2c/0xa0 [ 432.862425] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 432.862450] ? find_held_lock+0x36/0x1c0 [ 432.862490] ? trace_hardirqs_off+0xb8/0x310 [ 432.875262] cache_grow_begin+0xa5/0x8c0 [ 432.875282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.875299] ? check_preemption_disabled+0x48/0x280 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfcffffff00000000, r1}}, 0x20}}, 0x0) 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf, r1}}, 0x20}}, 0x0) [ 432.875322] kmem_cache_alloc_trace+0x684/0x750 [ 432.875342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.889340] copy_mount_options+0x5f/0x430 [ 432.889360] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.889378] ksys_mount+0xd0/0x140 [ 432.889395] __x64_sys_mount+0xbe/0x150 [ 432.904607] do_syscall_64+0x1b9/0x820 [ 432.925751] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.931141] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.936088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.940952] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.945982] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.951012] ? prepare_exit_to_usermode+0x291/0x3b0 [ 432.956044] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.960909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.966109] RIP: 0033:0x459fda [ 432.969317] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x9effffff00000000, r1}}, 0x20}}, 0x0) 21:30:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 432.988224] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 432.995941] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 433.003222] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 433.010502] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 433.017783] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 433.025059] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xd502000000000000, r1}}, 0x20}}, 0x0) [ 433.110582] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:10 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:10 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660h', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x8100000000000000, r1}}, 0x20}}, 0x0) 21:30:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x9, 0x0, 0x10002, 0xe90}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000080)={0x0, r5, 0x8010000, 0x7}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000140)={0x2, r6, 0x10000, 0xfffffffffffffff7}) r7 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) ioctl$EVIOCGNAME(r4, 0x80404506, &(0x7f00000001c0)=""/122) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:11 executing program 5 (fault-call:2 fault-nth:45): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xfcffffff, r1}}, 0x20}}, 0x0) 21:30:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xd5020000, r1}}, 0x20}}, 0x0) 21:30:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 433.766352] FAULT_INJECTION: forcing a failure. [ 433.766352] name failslab, interval 1, probability 0, space 0, times 0 [ 433.778522] CPU: 0 PID: 18215 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 433.787030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.796391] Call Trace: [ 433.799005] dump_stack+0x244/0x39d [ 433.802667] ? dump_stack_print_info.cold.1+0x20/0x20 [ 433.807869] ? find_held_lock+0x36/0x1c0 [ 433.807894] should_fail.cold.4+0xa/0x17 21:30:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 433.807914] ? is_bpf_text_address+0xac/0x170 [ 433.807936] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.825654] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.830777] ? kasan_check_read+0x11/0x20 [ 433.830797] ? zap_class+0x640/0x640 [ 433.830816] ? rcu_softirq_qs+0x20/0x20 [ 433.830840] ? rcu_softirq_qs+0x20/0x20 [ 433.846658] ? find_held_lock+0x36/0x1c0 [ 433.850759] ? perf_trace_sched_process_exec+0x860/0x860 [ 433.856227] ? rcu_pm_notify+0xc0/0xc0 [ 433.860134] __should_failslab+0x124/0x180 [ 433.860156] should_failslab+0x9/0x14 [ 433.860174] kmem_cache_alloc+0x2be/0x730 [ 433.860200] getname_kernel+0x54/0x370 [ 433.860217] kern_path+0x1e/0x40 [ 433.879645] lookup_bdev+0x10c/0x250 [ 433.883371] ? blkdev_open+0x280/0x280 [ 433.887285] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 433.892840] ? rcu_pm_notify+0xc0/0xc0 [ 433.896751] blkdev_get_by_path+0x1f/0xe0 [ 433.896770] mount_bdev+0x61/0x3e0 [ 433.896788] ? isofs_bread+0xf0/0xf0 [ 433.896809] isofs_mount+0x3c/0x50 [ 433.896828] ? isofs_readpage+0x20/0x20 [ 433.915705] legacy_get_tree+0x131/0x460 [ 433.919779] vfs_get_tree+0x1cb/0x5c0 [ 433.919799] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 433.919820] do_mount+0x70c/0x1d90 [ 433.919838] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 433.919860] ? copy_mount_string+0x40/0x40 [ 433.941686] ? copy_mount_options+0x5f/0x430 [ 433.946109] ? kmem_cache_alloc_trace+0x353/0x750 [ 433.950965] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.956516] ? _copy_from_user+0xdf/0x150 [ 433.960679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 21:30:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf000, r1}}, 0x20}}, 0x0) [ 433.966227] ? copy_mount_options+0x315/0x430 [ 433.970742] ksys_mount+0x12d/0x140 [ 433.974384] __x64_sys_mount+0xbe/0x150 [ 433.974407] do_syscall_64+0x1b9/0x820 [ 433.974424] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 433.974442] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.974463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.978562] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 433.982316] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.982336] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.982354] ? prepare_exit_to_usermode+0x291/0x3b0 [ 433.982380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.003804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.003818] RIP: 0033:0x459fda [ 434.003835] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 434.003844] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 434.003859] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda 21:30:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 434.003868] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 434.003877] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 434.003886] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 434.003895] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 434.125221] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:12 executing program 5 (fault-call:2 fault-nth:46): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00', 0x400000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0, r1}}, 0x20}}, 0x0) [ 434.655561] FAULT_INJECTION: forcing a failure. [ 434.655561] name failslab, interval 1, probability 0, space 0, times 0 [ 434.686819] CPU: 1 PID: 18245 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 434.695334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.704698] Call Trace: [ 434.707307] dump_stack+0x244/0x39d [ 434.710960] ? dump_stack_print_info.cold.1+0x20/0x20 [ 434.716171] ? rcu_softirq_qs+0x20/0x20 [ 434.716195] should_fail.cold.4+0xa/0x17 [ 434.716219] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.716237] ? kernel_text_address+0x79/0xf0 [ 434.716255] ? __kernel_text_address+0xd/0x40 [ 434.716276] ? __save_stack_trace+0x8d/0xf0 [ 434.729407] ? find_held_lock+0x36/0x1c0 [ 434.729433] ? ieee80211_txq_setup_flows+0x6e8/0xaf0 [ 434.742733] ? find_held_lock+0x36/0x1c0 [ 434.742751] ? perf_trace_sched_process_exec+0x860/0x860 [ 434.742773] ? ieee80211_txq_setup_flows+0x6e8/0xaf0 [ 434.742796] __should_failslab+0x124/0x180 [ 434.742817] should_failslab+0x9/0x14 [ 434.742837] __kmalloc_track_caller+0x2d1/0x760 [ 434.751999] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 434.752018] ? rcu_pm_notify+0xc0/0xc0 [ 434.752038] ? apparmor_fs_context_parse_param+0x1d9/0x490 [ 434.752057] krealloc+0x65/0xb0 [ 434.779333] apparmor_fs_context_parse_param+0x1d9/0x490 [ 434.788748] security_fs_context_parse_param+0x5a/0xb0 [ 434.788771] vfs_parse_fs_param+0x1ea/0x3c0 [ 434.788791] vfs_parse_fs_string+0x1d5/0x2b0 [ 434.817124] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 434.821646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.827211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.832768] do_mount+0x666/0x1d90 [ 434.836325] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 434.841881] ? copy_mount_string+0x40/0x40 [ 434.846166] ? copy_mount_options+0x5f/0x430 [ 434.850590] ? kmem_cache_alloc_trace+0x353/0x750 [ 434.855467] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.861019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.866565] ? copy_mount_options+0x315/0x430 [ 434.871078] ksys_mount+0x12d/0x140 [ 434.874717] __x64_sys_mount+0xbe/0x150 [ 434.878707] do_syscall_64+0x1b9/0x820 [ 434.882607] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.888008] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.892954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.897813] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.902841] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.907872] ? prepare_exit_to_usermode+0x291/0x3b0 [ 434.912902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.917765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.922959] RIP: 0033:0x459fda [ 434.926169] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 434.945076] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 21:30:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, r1}}, 0x20}}, 0x0) 21:30:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {0x0, 0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 434.952794] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 434.960068] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 434.967345] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 434.974628] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 434.981910] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffffff9e, r1}}, 0x20}}, 0x0) 21:30:12 executing program 5 (fault-call:2 fault-nth:47): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:12 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:12 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0xec0, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 435.154942] FAULT_INJECTION: forcing a failure. [ 435.154942] name failslab, interval 1, probability 0, space 0, times 0 [ 435.192469] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 435.203006] CPU: 1 PID: 18280 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 435.211530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.220887] Call Trace: [ 435.223522] dump_stack+0x244/0x39d [ 435.227180] ? dump_stack_print_info.cold.1+0x20/0x20 [ 435.232418] ? __x64_sys_mount+0xbe/0x150 [ 435.232439] ? do_syscall_64+0x1b9/0x820 [ 435.232468] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.240675] should_fail.cold.4+0xa/0x17 [ 435.240700] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.240723] ? check_preemption_disabled+0x48/0x280 [ 435.260244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.265793] ? check_preemption_disabled+0x48/0x280 [ 435.270834] ? find_held_lock+0x36/0x1c0 [ 435.274931] ? perf_trace_sched_process_exec+0x860/0x860 [ 435.280394] ? rcu_pm_notify+0xc0/0xc0 [ 435.284328] __should_failslab+0x124/0x180 [ 435.288580] should_failslab+0x9/0x14 [ 435.292402] __kmalloc_track_caller+0x2d1/0x760 [ 435.297086] ? vfs_parse_fs_string+0x1fd/0x2b0 [ 435.301687] ? legacy_parse_monolithic+0xde/0x1e0 [ 435.306546] kmemdup+0x24/0x50 [ 435.309764] legacy_parse_monolithic+0xde/0x1e0 [ 435.314936] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 435.319706] do_mount+0x6e9/0x1d90 [ 435.323262] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 435.328814] ? copy_mount_string+0x40/0x40 [ 435.333066] ? copy_mount_options+0x5f/0x430 [ 435.337490] ? kmem_cache_alloc_trace+0x353/0x750 [ 435.342351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.347915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.353464] ? copy_mount_options+0x315/0x430 [ 435.357975] ksys_mount+0x12d/0x140 [ 435.361610] __x64_sys_mount+0xbe/0x150 [ 435.365649] do_syscall_64+0x1b9/0x820 [ 435.369549] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.374921] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.379861] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.384719] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.389747] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.394774] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.399819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.404680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.409879] RIP: 0033:0x459fda [ 435.413083] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 435.431989] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 435.439702] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 435.446980] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 21:30:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2000000, r1}}, 0x20}}, 0x0) 21:30:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0xf, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 435.454253] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 435.461526] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 435.468799] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:13 executing program 5 (fault-call:2 fault-nth:48): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 435.532950] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf000000, r1}}, 0x20}}, 0x0) 21:30:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x10, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:13 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 435.660413] FAULT_INJECTION: forcing a failure. [ 435.660413] name failslab, interval 1, probability 0, space 0, times 0 [ 435.679640] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 435.703164] CPU: 0 PID: 18305 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 435.711675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.721037] Call Trace: [ 435.723664] dump_stack+0x244/0x39d [ 435.727322] ? dump_stack_print_info.cold.1+0x20/0x20 [ 435.732536] ? rcu_softirq_qs+0x20/0x20 [ 435.732560] should_fail.cold.4+0xa/0x17 [ 435.732585] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.732603] ? kernel_text_address+0x79/0xf0 [ 435.732636] ? __kernel_text_address+0xd/0x40 [ 435.732657] ? __save_stack_trace+0x8d/0xf0 [ 435.740711] ? find_held_lock+0x36/0x1c0 [ 435.740737] ? writecache_ctr+0x2e38/0x3ce0 [ 435.740765] ? find_held_lock+0x36/0x1c0 [ 435.740782] ? perf_trace_sched_process_exec+0x860/0x860 [ 435.740801] ? writecache_ctr+0x2e38/0x3ce0 [ 435.750302] __should_failslab+0x124/0x180 [ 435.750324] should_failslab+0x9/0x14 [ 435.750343] __kmalloc_track_caller+0x2d1/0x760 [ 435.750362] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 435.750380] ? rcu_pm_notify+0xc0/0xc0 [ 435.750402] ? apparmor_fs_context_parse_param+0x1d9/0x490 [ 435.759203] krealloc+0x65/0xb0 [ 435.759225] apparmor_fs_context_parse_param+0x1d9/0x490 [ 435.759252] security_fs_context_parse_param+0x5a/0xb0 [ 435.759275] vfs_parse_fs_param+0x1ea/0x3c0 [ 435.759298] vfs_parse_fs_string+0x1d5/0x2b0 [ 435.831828] ? vfs_parse_fs_param+0x3c0/0x3c0 [ 435.836332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.841886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.847445] do_mount+0x666/0x1d90 [ 435.850997] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 435.856549] ? copy_mount_string+0x40/0x40 [ 435.860806] ? copy_mount_options+0x5f/0x430 [ 435.865228] ? kmem_cache_alloc_trace+0x353/0x750 [ 435.870086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.875660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.881210] ? copy_mount_options+0x315/0x430 [ 435.885718] ksys_mount+0x12d/0x140 [ 435.889361] __x64_sys_mount+0xbe/0x150 [ 435.893358] do_syscall_64+0x1b9/0x820 [ 435.897258] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.902649] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.907590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.912459] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.917489] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.922519] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.927551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.932411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.937611] RIP: 0033:0x459fda [ 435.940843] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 21:30:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xffffff7f00000000, r1}}, 0x20}}, 0x0) 21:30:13 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0xc0, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 435.959749] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 435.967468] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 435.974747] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 435.982022] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 435.989300] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 435.996573] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 436.043950] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000000, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000040)={0x6, [0x7, 0x5, 0x9, 0x1, 0x800, 0x0]}) 21:30:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:14 executing program 5 (fault-call:2 fault-nth:49): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0xfffffdef, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xf0ffffff, r1}}, 0x20}}, 0x0) 21:30:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660l', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 436.436482] FAULT_INJECTION: forcing a failure. [ 436.436482] name failslab, interval 1, probability 0, space 0, times 0 [ 436.465109] CPU: 1 PID: 18336 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 436.473640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.483085] Call Trace: [ 436.485693] dump_stack+0x244/0x39d [ 436.489345] ? dump_stack_print_info.cold.1+0x20/0x20 [ 436.494561] should_fail.cold.4+0xa/0x17 [ 436.498645] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.503776] ? zap_class+0x640/0x640 [ 436.507498] ? save_stack+0xa9/0xd0 [ 436.511138] ? save_stack+0x43/0xd0 [ 436.514774] ? kasan_kmalloc+0xc7/0xe0 [ 436.518668] ? __kmalloc+0x15b/0x760 [ 436.522396] ? find_held_lock+0x36/0x1c0 [ 436.526473] ? __lock_is_held+0xb5/0x140 [ 436.530563] ? perf_trace_sched_process_exec+0x860/0x860 [ 436.536023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.541570] ? check_preemption_disabled+0x48/0x280 [ 436.546603] __should_failslab+0x124/0x180 [ 436.550865] should_failslab+0x9/0x14 [ 436.554678] kmem_cache_alloc_node_trace+0x270/0x740 [ 436.559804] __kmalloc_node+0x3c/0x70 [ 436.563629] kvmalloc_node+0x65/0xf0 [ 436.567356] __list_lru_init+0x5d9/0x840 [ 436.571430] ? list_lru_destroy+0x500/0x500 [ 436.575765] ? up_write+0x7b/0x220 [ 436.579335] ? down_write_nested+0x130/0x130 [ 436.583754] ? down_read+0x120/0x120 [ 436.587480] ? init_wait_entry+0x1c0/0x1c0 [ 436.591720] ? prealloc_shrinker+0x172/0x340 [ 436.596156] alloc_super+0x907/0xb40 [ 436.599892] ? destroy_unused_super.part.10+0x110/0x110 [ 436.605260] ? sget_userns+0x17c/0x850 [ 436.609162] ? lock_downgrade+0x900/0x900 [ 436.613328] ? kasan_check_read+0x11/0x20 [ 436.617493] ? do_raw_spin_trylock+0x270/0x270 [ 436.622083] ? security_capable+0x99/0xc0 [ 436.626255] sget_userns+0x278/0x850 [ 436.629976] ? kill_litter_super+0x60/0x60 [ 436.634229] ? test_single_super+0x10/0x10 [ 436.638472] ? vfs_get_super+0x270/0x270 [ 436.642539] ? kasan_check_read+0x11/0x20 [ 436.646696] ? do_raw_spin_unlock+0xa7/0x330 [ 436.651109] ? do_raw_spin_trylock+0x270/0x270 [ 436.655715] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 436.661292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.666842] ? ns_capable_common+0x13f/0x170 [ 436.671270] ? kill_litter_super+0x60/0x60 [ 436.675514] sget+0x10b/0x150 [ 436.678642] ? test_single_super+0x10/0x10 [ 436.682894] mount_bdev+0x115/0x3e0 [ 436.686529] ? isofs_bread+0xf0/0xf0 [ 436.690608] isofs_mount+0x3c/0x50 [ 436.694176] ? isofs_readpage+0x20/0x20 [ 436.698165] legacy_get_tree+0x131/0x460 [ 436.702250] vfs_get_tree+0x1cb/0x5c0 [ 436.706065] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 436.710833] do_mount+0x70c/0x1d90 [ 436.714385] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 436.719939] ? copy_mount_string+0x40/0x40 [ 436.724193] ? copy_mount_options+0x5f/0x430 [ 436.728613] ? kmem_cache_alloc_trace+0x353/0x750 [ 436.733482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.739029] ? _copy_from_user+0xdf/0x150 [ 436.743194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.748743] ? copy_mount_options+0x315/0x430 [ 436.753252] ksys_mount+0x12d/0x140 [ 436.756889] __x64_sys_mount+0xbe/0x150 [ 436.760880] do_syscall_64+0x1b9/0x820 [ 436.764780] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 436.770157] ? syscall_return_slowpath+0x5e0/0x5e0 [ 436.775095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.779957] ? trace_hardirqs_on_caller+0x310/0x310 [ 436.784986] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 436.790011] ? prepare_exit_to_usermode+0x291/0x3b0 [ 436.795045] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.799908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.805104] RIP: 0033:0x459fda [ 436.808316] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 436.827220] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 21:30:14 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x33fe0, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfcffffff}}, 0x20}}, 0x0) 21:30:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 436.834937] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 436.842212] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 436.849486] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 436.856767] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 436.864041] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:14 executing program 5 (fault-call:2 fault-nth:50): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 436.921661] device bond_slave_1 entered promiscuous mode 21:30:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:14 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 437.036866] FAULT_INJECTION: forcing a failure. [ 437.036866] name failslab, interval 1, probability 0, space 0, times 0 [ 437.068286] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 437.075316] CPU: 1 PID: 18355 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 437.083826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.093185] Call Trace: [ 437.095788] dump_stack+0x244/0x39d [ 437.099437] ? dump_stack_print_info.cold.1+0x20/0x20 [ 437.104652] ? __kernel_text_address+0xd/0x40 [ 437.109165] ? unwind_get_return_address+0x61/0xa0 [ 437.114371] should_fail.cold.4+0xa/0x17 [ 437.118449] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.123577] ? save_stack+0x43/0xd0 [ 437.127207] ? kasan_kmalloc+0xc7/0xe0 [ 437.131102] ? kmem_cache_alloc_trace+0x152/0x750 [ 437.135963] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 437.141161] ? __list_lru_init+0x4d6/0x840 [ 437.145407] ? zap_class+0x640/0x640 [ 437.149137] ? mount_bdev+0x115/0x3e0 [ 437.152947] ? isofs_mount+0x3c/0x50 [ 437.156672] ? legacy_get_tree+0x131/0x460 [ 437.160917] ? vfs_get_tree+0x1cb/0x5c0 [ 437.164903] ? do_mount+0x70c/0x1d90 [ 437.168631] ? ksys_mount+0x12d/0x140 [ 437.172440] ? __x64_sys_mount+0xbe/0x150 [ 437.176605] ? find_held_lock+0x36/0x1c0 [ 437.180828] ? __lock_is_held+0xb5/0x140 [ 437.184900] ? hpsa_ioaccel_submit.isra.89+0x1008/0x2650 [ 437.190377] ? perf_trace_sched_process_exec+0x860/0x860 [ 437.195853] __should_failslab+0x124/0x180 [ 437.200102] should_failslab+0x9/0x14 [ 437.203918] kmem_cache_alloc_trace+0x2d7/0x750 [ 437.208601] ? __kmalloc_node+0x3c/0x70 [ 437.212603] ? __kmalloc_node+0x3c/0x70 [ 437.216602] ? rcu_read_lock_sched_held+0x14f/0x180 [ 437.221653] __memcg_init_list_lru_node+0x185/0x2d0 [ 437.226685] ? kvfree_rcu+0x20/0x20 [ 437.230327] ? __kmalloc_node+0x50/0x70 [ 437.234320] __list_lru_init+0x4d6/0x840 [ 437.238394] ? list_lru_destroy+0x500/0x500 [ 437.242730] ? up_write+0x7b/0x220 [ 437.246282] ? down_write_nested+0x130/0x130 [ 437.250704] ? down_read+0x120/0x120 [ 437.254434] ? init_wait_entry+0x1c0/0x1c0 [ 437.258695] ? prealloc_shrinker+0x172/0x340 [ 437.263136] alloc_super+0x907/0xb40 [ 437.266870] ? destroy_unused_super.part.10+0x110/0x110 [ 437.272246] ? sget_userns+0x17c/0x850 [ 437.276155] ? lock_downgrade+0x900/0x900 [ 437.280338] ? kasan_check_read+0x11/0x20 [ 437.284496] ? do_raw_spin_trylock+0x270/0x270 [ 437.289094] ? security_capable+0x99/0xc0 [ 437.293265] sget_userns+0x278/0x850 [ 437.296987] ? kill_litter_super+0x60/0x60 [ 437.301235] ? test_single_super+0x10/0x10 [ 437.305480] ? vfs_get_super+0x270/0x270 [ 437.309559] ? kasan_check_read+0x11/0x20 [ 437.314244] ? do_raw_spin_unlock+0xa7/0x330 [ 437.318662] ? do_raw_spin_trylock+0x270/0x270 [ 437.323265] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 437.328839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.334392] ? ns_capable_common+0x13f/0x170 [ 437.338816] ? kill_litter_super+0x60/0x60 [ 437.343060] sget+0x10b/0x150 [ 437.346175] ? test_single_super+0x10/0x10 [ 437.350425] mount_bdev+0x115/0x3e0 [ 437.354061] ? isofs_bread+0xf0/0xf0 [ 437.357788] isofs_mount+0x3c/0x50 [ 437.361346] ? isofs_readpage+0x20/0x20 [ 437.365329] legacy_get_tree+0x131/0x460 [ 437.369406] vfs_get_tree+0x1cb/0x5c0 [ 437.373240] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 437.378057] do_mount+0x70c/0x1d90 [ 437.381612] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 437.387178] ? copy_mount_string+0x40/0x40 [ 437.391431] ? copy_mount_options+0x5f/0x430 [ 437.395859] ? kmem_cache_alloc_trace+0x353/0x750 [ 437.400716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.406265] ? _copy_from_user+0xdf/0x150 [ 437.410427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.415974] ? copy_mount_options+0x315/0x430 [ 437.420484] ksys_mount+0x12d/0x140 [ 437.424140] __x64_sys_mount+0xbe/0x150 [ 437.428138] do_syscall_64+0x1b9/0x820 [ 437.432034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 437.437411] ? syscall_return_slowpath+0x5e0/0x5e0 [ 437.442348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.447209] ? trace_hardirqs_on_caller+0x310/0x310 [ 437.452235] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 437.457264] ? prepare_exit_to_usermode+0x291/0x3b0 [ 437.462298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.467166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.472363] RIP: 0033:0x459fda 21:30:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x3000000}}, 0x20}}, 0x0) 21:30:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x13308b8d, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge0\x00', 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x7ffff000, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:15 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 437.475567] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 437.494472] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 437.502205] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 437.509482] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 437.516760] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 437.524034] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 437.531307] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x23, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 437.580927] device bond_slave_1 left promiscuous mode [ 437.596628] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:15 executing program 5 (fault-call:2 fault-nth:51): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 437.793886] FAULT_INJECTION: forcing a failure. [ 437.793886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.805738] CPU: 0 PID: 18381 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 437.814237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.823588] Call Trace: [ 437.826205] dump_stack+0x244/0x39d [ 437.829854] ? dump_stack_print_info.cold.1+0x20/0x20 [ 437.835062] ? rcu_softirq_qs+0x20/0x20 [ 437.839056] should_fail.cold.4+0xa/0x17 [ 437.843136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.848251] ? kernel_text_address+0x79/0xf0 [ 437.852677] ? __kernel_text_address+0xd/0x40 [ 437.857196] ? mark_held_locks+0x130/0x130 [ 437.861451] ? save_stack+0xa9/0xd0 [ 437.865119] ? save_stack+0x43/0xd0 [ 437.868762] ? kasan_kmalloc+0xc7/0xe0 [ 437.872668] ? __kmalloc_track_caller+0x157/0x760 [ 437.877522] ? krealloc+0x65/0xb0 [ 437.880985] ? apparmor_fs_context_parse_param+0x1d9/0x490 [ 437.886638] ? security_fs_context_parse_param+0x5a/0xb0 [ 437.892102] ? vfs_parse_fs_param+0x1ea/0x3c0 [ 437.896607] ? vfs_parse_fs_string+0x1d5/0x2b0 [ 437.901216] ? do_mount+0x666/0x1d90 [ 437.904946] ? ksys_mount+0x12d/0x140 [ 437.908751] ? __x64_sys_mount+0xbe/0x150 [ 437.912914] ? do_syscall_64+0x1b9/0x820 [ 437.916996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.922547] ? should_fail+0x22d/0xd01 [ 437.926449] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.931576] __alloc_pages_nodemask+0x34b/0xdd0 [ 437.936272] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 437.941299] ? check_preemption_disabled+0x48/0x280 [ 437.946333] ? find_held_lock+0x36/0x1c0 [ 437.950428] ? trace_hardirqs_off+0xb8/0x310 [ 437.954856] cache_grow_begin+0xa5/0x8c0 [ 437.958930] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.964476] ? check_preemption_disabled+0x48/0x280 [ 437.969508] __kmalloc_track_caller+0x69b/0x760 [ 437.974195] ? vfs_parse_fs_string+0x1fd/0x2b0 [ 437.978794] ? legacy_parse_monolithic+0xde/0x1e0 [ 437.983667] kmemdup+0x24/0x50 [ 437.986878] legacy_parse_monolithic+0xde/0x1e0 [ 437.991561] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 437.996329] do_mount+0x6e9/0x1d90 [ 437.999886] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 438.005438] ? copy_mount_string+0x40/0x40 [ 438.009691] ? copy_mount_options+0x5f/0x430 [ 438.014111] ? kmem_cache_alloc_trace+0x353/0x750 [ 438.018967] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.024523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.030074] ? copy_mount_options+0x315/0x430 [ 438.034584] ksys_mount+0x12d/0x140 [ 438.038238] __x64_sys_mount+0xbe/0x150 [ 438.042231] do_syscall_64+0x1b9/0x820 [ 438.046131] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 438.051514] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.056456] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.061486] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.066517] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 438.073197] ? __switch_to_asm+0x40/0x70 [ 438.077266] ? __switch_to_asm+0x34/0x70 [ 438.081341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.086207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.091404] RIP: 0033:0x459fda [ 438.094609] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 438.113550] RSP: 002b:00007f382437da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 438.121267] RAX: ffffffffffffffda RBX: 00007f382437db30 RCX: 0000000000459fda [ 438.128542] RDX: 00007f382437dad0 RSI: 0000000020000380 RDI: 00007f382437daf0 [ 438.135820] RBP: 0000000020000380 R08: 00007f382437db30 R09: 00007f382437dad0 [ 438.143098] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 438.150370] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 438.173072] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.180318] bridge0: port 1(bridge_slave_0) entered disabled state 21:30:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x200004ec, 0x26, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 438.189542] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:15 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0xf, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 438.306876] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x67, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x502, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x508, 0x0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2000000}}, 0x20}}, 0x0) 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x8100000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 5 (fault-call:2 fault-nth:52): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 438.673862] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 438.785394] FAULT_INJECTION: forcing a failure. [ 438.785394] name failslab, interval 1, probability 0, space 0, times 0 [ 438.807718] CPU: 0 PID: 18407 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 438.816229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.825589] Call Trace: [ 438.828207] dump_stack+0x244/0x39d [ 438.831883] ? dump_stack_print_info.cold.1+0x20/0x20 [ 438.837104] should_fail.cold.4+0xa/0x17 [ 438.841180] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.841210] ? zap_class+0x640/0x640 [ 438.850013] ? save_stack+0xa9/0xd0 [ 438.853667] ? save_stack+0x43/0xd0 [ 438.857304] ? kasan_kmalloc+0xc7/0xe0 [ 438.861204] ? __kmalloc+0x15b/0x760 [ 438.864937] ? find_held_lock+0x36/0x1c0 [ 438.869014] ? __lock_is_held+0xb5/0x140 [ 438.873091] ? __x64_sys_mlockall+0x128/0x630 [ 438.877613] ? perf_trace_sched_process_exec+0x860/0x860 [ 438.883089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.883107] ? check_preemption_disabled+0x48/0x280 [ 438.883133] __should_failslab+0x124/0x180 [ 438.883154] should_failslab+0x9/0x14 [ 438.883171] kmem_cache_alloc_node_trace+0x270/0x740 [ 438.883197] __kmalloc_node+0x3c/0x70 [ 438.893756] kvmalloc_node+0x65/0xf0 [ 438.893776] __list_lru_init+0x5d9/0x840 [ 438.893796] ? list_lru_destroy+0x500/0x500 [ 438.893814] ? up_write+0x7b/0x220 [ 438.893833] ? down_write_nested+0x130/0x130 [ 438.901855] ? down_read+0x120/0x120 [ 438.901876] ? init_wait_entry+0x1c0/0x1c0 [ 438.901891] ? prealloc_shrinker+0x172/0x340 [ 438.901915] alloc_super+0x907/0xb40 [ 438.910803] ? destroy_unused_super.part.10+0x110/0x110 [ 438.910817] ? sget_userns+0x17c/0x850 [ 438.910835] ? lock_downgrade+0x900/0x900 [ 438.910858] ? kasan_check_read+0x11/0x20 [ 438.952239] ? do_raw_spin_trylock+0x270/0x270 [ 438.952259] ? security_capable+0x99/0xc0 [ 438.952285] sget_userns+0x278/0x850 [ 438.952307] ? kill_litter_super+0x60/0x60 [ 438.981107] ? test_single_super+0x10/0x10 [ 438.985210] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 438.985351] ? vfs_get_super+0x270/0x270 [ 438.995720] ? kasan_check_read+0x11/0x20 [ 438.999877] ? do_raw_spin_unlock+0xa7/0x330 [ 439.004293] ? do_raw_spin_trylock+0x270/0x270 [ 439.008899] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.014470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.014487] ? ns_capable_common+0x13f/0x170 [ 439.014508] ? kill_litter_super+0x60/0x60 [ 439.014527] sget+0x10b/0x150 [ 439.024463] ? test_single_super+0x10/0x10 [ 439.024483] mount_bdev+0x115/0x3e0 [ 439.024501] ? isofs_bread+0xf0/0xf0 [ 439.024522] isofs_mount+0x3c/0x50 [ 439.024540] ? isofs_readpage+0x20/0x20 [ 439.024561] legacy_get_tree+0x131/0x460 [ 439.054966] vfs_get_tree+0x1cb/0x5c0 [ 439.058783] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 439.063556] do_mount+0x70c/0x1d90 [ 439.064902] device bond_slave_1 entered promiscuous mode [ 439.067113] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 439.067137] ? copy_mount_string+0x40/0x40 [ 439.067161] ? copy_mount_options+0x5f/0x430 [ 439.067181] ? kmem_cache_alloc_trace+0x353/0x750 [ 439.067203] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.097185] ? _copy_from_user+0xdf/0x150 [ 439.101351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.106901] ? copy_mount_options+0x315/0x430 [ 439.111413] ksys_mount+0x12d/0x140 [ 439.115052] __x64_sys_mount+0xbe/0x150 [ 439.119041] do_syscall_64+0x1b9/0x820 [ 439.122943] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.128316] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.133259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.138114] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.143136] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.143156] ? prepare_exit_to_usermode+0x291/0x3b0 [ 439.143179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.143203] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.143216] RIP: 0033:0x459fda [ 439.143233] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 21:30:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x200000000000000}}, 0x20}}, 0x0) 21:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf0ffffffffffff}}, 0x20}}, 0x0) 21:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd502000000000000}}, 0x20}}, 0x0) 21:30:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfffffffffffff000}}, 0x20}}, 0x0) 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x40030000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 439.143246] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 439.193557] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 439.200833] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 439.208107] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 439.215380] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 439.222660] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 21:30:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xc00e0000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:16 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:17 executing program 5 (fault-call:2 fault-nth:53): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 439.306332] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 439.315901] device bond_slave_1 left promiscuous mode 21:30:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 439.454062] FAULT_INJECTION: forcing a failure. [ 439.454062] name failslab, interval 1, probability 0, space 0, times 0 [ 439.485803] CPU: 0 PID: 18445 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 439.494315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.503672] Call Trace: [ 439.506296] dump_stack+0x244/0x39d [ 439.509951] ? dump_stack_print_info.cold.1+0x20/0x20 [ 439.515158] ? __kernel_text_address+0xd/0x40 [ 439.519671] ? unwind_get_return_address+0x61/0xa0 [ 439.524633] should_fail.cold.4+0xa/0x17 [ 439.528716] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.533842] ? save_stack+0x43/0xd0 [ 439.537475] ? kasan_kmalloc+0xc7/0xe0 [ 439.541372] ? kmem_cache_alloc_trace+0x152/0x750 [ 439.546222] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 439.551432] ? __list_lru_init+0x4d6/0x840 [ 439.555677] ? zap_class+0x640/0x640 [ 439.559439] ? mount_bdev+0x115/0x3e0 [ 439.563266] ? isofs_mount+0x3c/0x50 [ 439.566995] ? legacy_get_tree+0x131/0x460 [ 439.571235] ? vfs_get_tree+0x1cb/0x5c0 [ 439.575220] ? do_mount+0x70c/0x1d90 [ 439.578938] ? ksys_mount+0x12d/0x140 [ 439.582744] ? __x64_sys_mount+0xbe/0x150 [ 439.586907] ? find_held_lock+0x36/0x1c0 [ 439.590981] ? __lock_is_held+0xb5/0x140 [ 439.595065] ? perf_trace_sched_process_exec+0x860/0x860 [ 439.600538] __should_failslab+0x124/0x180 [ 439.604793] should_failslab+0x9/0x14 [ 439.608604] kmem_cache_alloc_trace+0x2d7/0x750 [ 439.613296] ? __kmalloc_node+0x3c/0x70 [ 439.617281] ? __kmalloc_node+0x3c/0x70 [ 439.621267] ? rcu_read_lock_sched_held+0x14f/0x180 [ 439.626299] __memcg_init_list_lru_node+0x185/0x2d0 [ 439.631331] ? kvfree_rcu+0x20/0x20 [ 439.634972] ? __kmalloc_node+0x50/0x70 [ 439.638964] __list_lru_init+0x4d6/0x840 [ 439.643044] ? list_lru_destroy+0x500/0x500 [ 439.647382] ? up_write+0x7b/0x220 [ 439.650932] ? down_write_nested+0x130/0x130 [ 439.655348] ? down_read+0x120/0x120 [ 439.659074] ? init_wait_entry+0x1c0/0x1c0 [ 439.663314] ? prealloc_shrinker+0x172/0x340 [ 439.667744] alloc_super+0x907/0xb40 [ 439.671472] ? destroy_unused_super.part.10+0x110/0x110 [ 439.676841] ? sget_userns+0x17c/0x850 [ 439.680745] ? lock_downgrade+0x900/0x900 [ 439.684914] ? kasan_check_read+0x11/0x20 [ 439.689077] ? do_raw_spin_trylock+0x270/0x270 [ 439.693673] ? security_capable+0x99/0xc0 [ 439.697843] sget_userns+0x278/0x850 [ 439.701566] ? kill_litter_super+0x60/0x60 [ 439.705819] ? test_single_super+0x10/0x10 [ 439.710059] ? vfs_get_super+0x270/0x270 [ 439.714131] ? kasan_check_read+0x11/0x20 [ 439.718303] ? do_raw_spin_unlock+0xa7/0x330 [ 439.722720] ? do_raw_spin_trylock+0x270/0x270 [ 439.727322] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.732895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.738447] ? ns_capable_common+0x13f/0x170 [ 439.742869] ? kill_litter_super+0x60/0x60 [ 439.747112] sget+0x10b/0x150 [ 439.750231] ? test_single_super+0x10/0x10 [ 439.754480] mount_bdev+0x115/0x3e0 [ 439.758119] ? isofs_bread+0xf0/0xf0 [ 439.761847] isofs_mount+0x3c/0x50 [ 439.765395] ? isofs_readpage+0x20/0x20 [ 439.769389] legacy_get_tree+0x131/0x460 [ 439.773469] vfs_get_tree+0x1cb/0x5c0 [ 439.777283] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 439.782056] do_mount+0x70c/0x1d90 [ 439.785634] ? copy_mount_string+0x40/0x40 [ 439.789889] ? retint_kernel+0x2d/0x2d [ 439.793799] ? copy_mount_options+0x239/0x430 [ 439.798308] ? copy_mount_options+0x242/0x430 [ 439.802814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.808364] ? copy_mount_options+0x315/0x430 [ 439.812869] ksys_mount+0x12d/0x140 [ 439.816508] __x64_sys_mount+0xbe/0x150 [ 439.820514] do_syscall_64+0x1b9/0x820 [ 439.824424] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.829812] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.834756] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.839785] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.844858] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 439.851532] ? __switch_to_asm+0x40/0x70 [ 439.855597] ? __switch_to_asm+0x34/0x70 [ 439.859688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.864547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.869758] RIP: 0033:0x459fda [ 439.872981] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 439.891886] RSP: 002b:00007f382437da88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 439.899601] RAX: ffffffffffffffda RBX: 00007f382437db30 RCX: 0000000000459fda [ 439.906888] RDX: 00007f382437dad0 RSI: 0000000020000380 RDI: 00007f382437daf0 [ 439.914164] RBP: 0000000020000380 R08: 00007f382437db30 R09: 00007f382437dad0 [ 439.921436] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 439.928723] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 439.950706] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 440.103816] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0x28, &(0x7f0000000080)='@+^\\cpusetcpusetsystem-posix_acl_access\x00', 0xffffffffffffffff}, 0x30) prctl$getname(0x10, &(0x7f00000002c0)=""/72) ptrace$getenv(0x4201, r4, 0xfffffffffffffffb, &(0x7f0000000280)) r5 = semget$private(0x0, 0x0, 0x204) semctl$GETPID(r5, 0x3, 0xb, &(0x7f00000001c0)=""/181) r6 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) 21:30:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfffff000}}, 0x20}}, 0x0) 21:30:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xfffffff0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:17 executing program 5 (fault-call:2 fault-nth:54): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:17 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:17 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf00000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 440.294514] FAULT_INJECTION: forcing a failure. [ 440.294514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.306460] CPU: 0 PID: 18465 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 440.314966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.324320] Call Trace: [ 440.326942] dump_stack+0x244/0x39d [ 440.330599] ? dump_stack_print_info.cold.1+0x20/0x20 [ 440.335827] should_fail.cold.4+0xa/0x17 [ 440.339908] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.345025] ? find_held_lock+0x36/0x1c0 [ 440.349111] ? mark_held_locks+0x130/0x130 [ 440.353355] ? zap_class+0x640/0x640 [ 440.357087] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 440.362025] ? kasan_check_read+0x11/0x20 [ 440.366183] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 440.371490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.377033] ? should_fail+0x22d/0xd01 [ 440.380931] ? is_bpf_text_address+0xac/0x170 [ 440.385443] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.390564] __alloc_pages_nodemask+0x34b/0xdd0 [ 440.395242] ? rcu_softirq_qs+0x20/0x20 [ 440.399245] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 440.404281] ? find_held_lock+0x36/0x1c0 [ 440.408362] ? __ceph_setxattr+0x6f8/0x13b0 [ 440.412713] ? trace_hardirqs_off+0xb8/0x310 [ 440.417136] cache_grow_begin+0xa5/0x8c0 [ 440.421210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.426757] ? check_preemption_disabled+0x48/0x280 [ 440.431791] kmem_cache_alloc+0x66b/0x730 [ 440.435961] getname_kernel+0x54/0x370 [ 440.439864] kern_path+0x1e/0x40 [ 440.443246] lookup_bdev+0x10c/0x250 [ 440.446971] ? blkdev_open+0x280/0x280 [ 440.450874] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 440.456423] ? rcu_pm_notify+0xc0/0xc0 [ 440.460327] blkdev_get_by_path+0x1f/0xe0 [ 440.464490] mount_bdev+0x61/0x3e0 [ 440.468046] ? isofs_bread+0xf0/0xf0 [ 440.471774] isofs_mount+0x3c/0x50 [ 440.475326] ? isofs_readpage+0x20/0x20 [ 440.479312] legacy_get_tree+0x131/0x460 [ 440.483385] vfs_get_tree+0x1cb/0x5c0 [ 440.487201] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 440.491969] do_mount+0x70c/0x1d90 [ 440.495524] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 440.501079] ? copy_mount_string+0x40/0x40 [ 440.505332] ? copy_mount_options+0x5f/0x430 [ 440.509756] ? kmem_cache_alloc_trace+0x353/0x750 [ 440.514625] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.520186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.525734] ? copy_mount_options+0x315/0x430 [ 440.530241] ksys_mount+0x12d/0x140 [ 440.533878] __x64_sys_mount+0xbe/0x150 [ 440.537869] do_syscall_64+0x1b9/0x820 [ 440.541764] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 440.547139] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.552077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.556934] ? trace_hardirqs_on_caller+0x310/0x310 [ 440.561960] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 440.566993] ? prepare_exit_to_usermode+0x291/0x3b0 [ 440.572029] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.576895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.582094] RIP: 0033:0x459fda [ 440.585297] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 440.604201] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 440.611919] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 440.619192] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 440.626467] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 440.633740] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 21:30:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1000000}}, 0x20}}, 0x0) [ 440.641014] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 440.661150] isofs_fill_super: root inode is not a directory. Corrupted media? [ 440.675804] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x40b, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf0ffff}}, 0x20}}, 0x0) [ 440.734403] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 440.832375] device bond_slave_1 entered promiscuous mode 21:30:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x40, 0x202}, &(0x7f0000000240)=0x10) preadv(r2, &(0x7f0000000480), 0x2000000000000113, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000340)={'team0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000300)='net/fib_triestat\x00'}, 0x30) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) sendfile(r2, r4, 0x0, 0x1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000480)=""/21) listen(r0, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x44, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'}) r8 = dup3(r6, r6, 0x80000) ioctl$RTC_EPOCH_READ(r8, 0x8008700d, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000280)=0xfff, &(0x7f00000002c0)=0x4) sendto$inet6(r10, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:18 executing program 5 (fault-call:2 fault-nth:55): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x9effffff00000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:18 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x100000000000000}}, 0x20}}, 0x0) 21:30:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf000000}}, 0x20}}, 0x0) [ 441.149672] FAULT_INJECTION: forcing a failure. [ 441.149672] name failslab, interval 1, probability 0, space 0, times 0 [ 441.188146] CPU: 0 PID: 18498 Comm: syz-executor5 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 441.196667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.206024] Call Trace: [ 441.206053] dump_stack+0x244/0x39d [ 441.206079] ? dump_stack_print_info.cold.1+0x20/0x20 [ 441.206105] ? __kernel_text_address+0xd/0x40 [ 441.221967] ? unwind_get_return_address+0x61/0xa0 [ 441.226916] should_fail.cold.4+0xa/0x17 [ 441.230994] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.236123] ? save_stack+0x43/0xd0 [ 441.239755] ? kasan_kmalloc+0xc7/0xe0 [ 441.243668] ? kmem_cache_alloc_trace+0x152/0x750 [ 441.248519] ? __memcg_init_list_lru_node+0x185/0x2d0 [ 441.253715] ? __list_lru_init+0x4d6/0x840 [ 441.257959] ? zap_class+0x640/0x640 [ 441.257973] ? mount_bdev+0x115/0x3e0 [ 441.257994] ? isofs_mount+0x3c/0x50 [ 441.269734] ? legacy_get_tree+0x131/0x460 [ 441.269748] ? vfs_get_tree+0x1cb/0x5c0 [ 441.269764] ? do_mount+0x70c/0x1d90 [ 441.269776] ? ksys_mount+0x12d/0x140 [ 441.269789] ? __x64_sys_mount+0xbe/0x150 [ 441.269812] ? find_held_lock+0x36/0x1c0 [ 441.269833] ? __lock_is_held+0xb5/0x140 [ 441.269870] ? perf_trace_sched_process_exec+0x860/0x860 [ 441.278083] __should_failslab+0x124/0x180 [ 441.278110] should_failslab+0x9/0x14 [ 441.285605] kmem_cache_alloc_trace+0x2d7/0x750 [ 441.285635] ? __kmalloc_node+0x3c/0x70 [ 441.285651] ? __kmalloc_node+0x3c/0x70 [ 441.285669] ? rcu_read_lock_sched_held+0x14f/0x180 [ 441.285690] __memcg_init_list_lru_node+0x185/0x2d0 [ 441.285708] ? kvfree_rcu+0x20/0x20 [ 441.303393] ? __kmalloc_node+0x50/0x70 [ 441.303418] __list_lru_init+0x4d6/0x840 [ 441.303438] ? list_lru_destroy+0x500/0x500 [ 441.303464] ? up_write+0x7b/0x220 [ 441.353791] ? down_write_nested+0x130/0x130 [ 441.358209] ? down_read+0x120/0x120 [ 441.361940] ? init_wait_entry+0x1c0/0x1c0 [ 441.366205] ? prealloc_shrinker+0x172/0x340 [ 441.370685] alloc_super+0x907/0xb40 [ 441.374415] ? destroy_unused_super.part.10+0x110/0x110 [ 441.379784] ? sget_userns+0x17c/0x850 [ 441.383685] ? lock_downgrade+0x900/0x900 [ 441.387850] ? kasan_check_read+0x11/0x20 [ 441.392010] ? do_raw_spin_trylock+0x270/0x270 [ 441.396604] ? security_capable+0x99/0xc0 [ 441.400792] sget_userns+0x278/0x850 [ 441.404516] ? kill_litter_super+0x60/0x60 [ 441.408772] ? test_single_super+0x10/0x10 [ 441.413015] ? vfs_get_super+0x270/0x270 [ 441.417086] ? kasan_check_read+0x11/0x20 [ 441.421271] ? do_raw_spin_unlock+0xa7/0x330 [ 441.425688] ? do_raw_spin_trylock+0x270/0x270 [ 441.430295] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.435870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.441421] ? ns_capable_common+0x13f/0x170 [ 441.445848] ? kill_litter_super+0x60/0x60 [ 441.450108] sget+0x10b/0x150 [ 441.453233] ? test_single_super+0x10/0x10 [ 441.457490] mount_bdev+0x115/0x3e0 [ 441.461130] ? isofs_bread+0xf0/0xf0 [ 441.464859] isofs_mount+0x3c/0x50 [ 441.468411] ? isofs_readpage+0x20/0x20 [ 441.472394] legacy_get_tree+0x131/0x460 [ 441.476471] vfs_get_tree+0x1cb/0x5c0 [ 441.480283] ? legacy_fs_context_dup+0x1d0/0x1d0 [ 441.485083] do_mount+0x70c/0x1d90 [ 441.488666] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 441.494238] ? copy_mount_string+0x40/0x40 [ 441.498509] ? copy_mount_options+0x5f/0x430 [ 441.502932] ? kmem_cache_alloc_trace+0x353/0x750 [ 441.507792] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.513344] ? _copy_from_user+0xdf/0x150 [ 441.517539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.523094] ? copy_mount_options+0x315/0x430 [ 441.527602] ksys_mount+0x12d/0x140 [ 441.531315] __x64_sys_mount+0xbe/0x150 [ 441.535315] do_syscall_64+0x1b9/0x820 [ 441.539214] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 441.544591] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.549546] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.554405] ? trace_hardirqs_on_caller+0x310/0x310 [ 441.559434] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 441.564467] ? prepare_exit_to_usermode+0x291/0x3b0 [ 441.569497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.574355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.579550] RIP: 0033:0x459fda [ 441.582756] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 21:30:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf0ffffff00000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 441.601666] RSP: 002b:00007f382439ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 441.609384] RAX: ffffffffffffffda RBX: 00007f382439eb30 RCX: 0000000000459fda [ 441.616662] RDX: 00007f382439ead0 RSI: 0000000020000380 RDI: 00007f382439eaf0 [ 441.623940] RBP: 0000000020000380 R08: 00007f382439eb30 R09: 00007f382439ead0 [ 441.631215] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000005 [ 441.638493] R13: 0000000000000001 R14: 00000000004d7e00 R15: 0000000000000004 [ 441.701513] device bond_slave_1 left promiscuous mode [ 441.777643] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xfffff000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x1f, "b240c8725da8fa22cc5cefe75737d9a35959a4a528acbaeed864ea89f4b2b0"}, &(0x7f0000000100)=0x27) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000140)={r5, 0x7, 0x2, [0x0, 0x80000001]}, 0xc) 21:30:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 442.115554] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf0}}, 0x20}}, 0x0) 21:30:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363003", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:19 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x8100, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:19 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf00, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfcffffff00000000}}, 0x20}}, 0x0) 21:30:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfffffff0}}, 0x20}}, 0x0) [ 442.504268] device bond_slave_1 entered promiscuous mode [ 442.574266] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='\nso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffefa, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xffffffffffffffaa, 0x8001, 0x0, 0x0) 21:30:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x1000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xfffffffc}}, 0x20}}, 0x0) 21:30:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='%so9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xb040000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xffffff7f}}, 0x20}}, 0x0) 21:30:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 443.177215] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:20 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x2000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x3}}, 0x20}}, 0x0) 21:30:20 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 443.290327] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 443.343705] device bond_slave_1 left promiscuous mode 21:30:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0xffffffffffffffba, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000002c40)=ANY=[@ANYRES32=r4, @ANYBLOB="060000000100ef1324241493d1e14ef31a2dbfca3cac5fa286ddfc970c4c4f824c13a7c382267c638a036d685a834506e694ac99b2f98df40854290a3b2180c39f935f4073e9742f59d306e998ea103e53f06fde0ec6c4bdaf8de022379c2fe671b8ca8c0774ddaaa45db3126e10d77b3b924763a73f18314555b5b232c868f9466c100191772e0b7db551b7ecc11a1ca6e85856489c18ab04d5fba0a81834bb89a316f50655e6ab3015245c7b33c5b72a7eb64ec2187da8f7bd949b43f27a0be044d1903d19d7fb803ad178e6d266a7576818a333aa63f5ddf691d6cd79ed9b7bd514a2339901"]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180)=r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = accept4(r0, 0x0, &(0x7f0000000040)=0xfffffffffffffef3, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 21:30:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i%o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x81000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xffffff9e}}, 0x20}}, 0x0) 21:30:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:21 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x9effffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:21 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 444.062932] device bond_slave_1 entered promiscuous mode [ 444.204807] QAT: Invalid ioctl 21:30:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ido9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 444.533514] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 444.603369] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x8100000000000000}}, 0x20}}, 0x0) 21:30:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:22 executing program 1: 21:30:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i+o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 444.905090] QAT: Invalid ioctl 21:30:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x300000000000000}}, 0x20}}, 0x0) 21:30:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x2, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 444.998107] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 1: r0 = semget(0xffffffffffffffff, 0x7, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x0) [ 445.078741] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xffffff9e, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000017c0)}, &(0x7f00000018c0)) 21:30:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i.o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf00000000000000}}, 0x20}}, 0x0) 21:30:22 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x200000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) getpeername(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000180)=0x80) 21:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x9effffff}}, 0x20}}, 0x0) [ 445.330935] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf0ffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 445.405036] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iio9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd5020000}}, 0x20}}, 0x0) 21:30:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xc00e, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000380)=""/234, 0xfffffd0e) [ 445.595936] device bond_slave_1 left promiscuous mode 21:30:23 executing program 1: r0 = semget(0xffffffffffffffff, 0x7, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, &(0x7f0000000040)) semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f00000001c0)) 21:30:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ff22ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000048007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000d00, 0x1c, 0x29, &(0x7f0000000440)="b90703e6680d698cb89e40f088a8d5dc57ee41dea43e63a377fb8a97", &(0x7f00000000c0)=""/41, 0x109}, 0x28) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)) 21:30:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i\no9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xfffffffffffff000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363010", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x300}}, 0x20}}, 0x0) 21:30:23 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) unshare(0x8000600) splice(r0, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f0000000100), 0x1ff, 0x0) 21:30:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xffffff7f00000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 446.209999] device bond_slave_1 entered promiscuous mode 21:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2}}, 0x20}}, 0x0) 21:30:23 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf0ffffffffffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i-o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363005", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 446.397647] device bond_slave_1 left promiscuous mode 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf0ffffff, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xfffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r1 = getpid() tkill(r1, 0xb) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf00}}, 0x20}}, 0x0) 21:30:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/127, 0x1c4) getdents64(r1, &(0x7f0000000080)=""/75, 0x4b) 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x400300, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ipo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 446.602277] device bond_slave_1 entered promiscuous mode 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf0ffffff}}, 0x20}}, 0x0) 21:30:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/234, 0xea) 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xb04, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 446.729741] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x8100}}, 0x20}}, 0x0) [ 446.815997] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:24 executing program 1: syslog(0x3, &(0x7f0000000200)=""/147, 0xffffffffffffff29) 21:30:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xec0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ixo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="01"]}) [ 447.070761] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb}, 0xb) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20008088) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000001c0)=0x6) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="027cd3f0bbf5d258"], 0x1, 0x0) 21:30:24 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x100000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf}}, 0x20}}, 0x0) [ 447.279808] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iXo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 447.417924] device bond_slave_1 left promiscuous mode 21:30:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xffffff7f, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c1262858e8070") socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "4cd1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) 21:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xffffff7f00000000}}, 0x20}}, 0x0) 21:30:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x34000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf0ffffff00000000}}, 0x20}}, 0x0) 21:30:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630c0", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iuo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xb04000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x9effffff00000000}}, 0x20}}, 0x0) 21:30:25 executing program 1: unshare(0x24020400) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) r3 = getpid() execve(&(0x7f0000000100)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000140)) fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) dup2(r1, r2) tkill(r0, 0x16) 21:30:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xc00e000000000000, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x81000000}}, 0x20}}, 0x0) 21:30:25 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0xf0, 0x0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i#o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:25 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 448.150732] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xf000}}, 0x20}}, 0x0) [ 448.345255] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ioo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)) 21:30:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd502}}, 0x20}}, 0x0) 21:30:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xc00e000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i*o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x100000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 448.897054] device bond_slave_1 entered promiscuous mode 21:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2d5}}, 0x20}}, 0x0) 21:30:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 448.946821] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]}) 21:30:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x81000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 449.039726] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 449.055596] device bond_slave_1 left promiscuous mode 21:30:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ilo9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\n', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xffffff9e}}, 0x20}}, 0x0) 21:30:26 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xc00e, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:26 executing program 1: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f000089b000), 0x4) 21:30:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfcffffff}}, 0x20}}, 0x0) 21:30:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xec0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 1: 21:30:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='i0o9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:27 executing program 1: 21:30:27 executing program 1: [ 449.683514] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:27 executing program 1: 21:30:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x34000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='ico9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 449.836043] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xffffff7f}}, 0x20}}, 0x0) 21:30:27 executing program 1: 21:30:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:27 executing program 1: 21:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf0ffff}}, 0x20}}, 0x0) 21:30:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf0ffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 1: 21:30:27 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 450.113189] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfffffff0}}, 0x20}}, 0x0) 21:30:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='is\n9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:27 executing program 1: [ 450.199591] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:27 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x3}}, 0x20}}, 0x0) 21:30:27 executing program 1: 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x8100000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: [ 450.397556] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 450.456830] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf00000000000000}}, 0x20}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='is%9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x400300, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf00000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf0ffffffffffff}}, 0x20}}, 0x0) [ 450.660141] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='isoc660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 450.725469] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1000000}}, 0x20}}, 0x0) 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x200000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660 ', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf0ffffff}}, 0x20}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xb04, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xd5020000}}, 0x20}}, 0x0) 21:30:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso%660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf0ffffffffffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660H', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 1: 21:30:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xd502}}, 0x20}}, 0x0) 21:30:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x9effffff00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xfffffffffffff000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='isoQ660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2d5}}, 0x20}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x2000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf}}, 0x20}}, 0x0) [ 451.580198] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf0ffffff00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 451.707010] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:29 executing program 1: 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xc00e0000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636300f", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso\t660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf0ffffff00000000}}, 0x20}}, 0x0) 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf0ffffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {0x0, 0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x9effffff00000000}}, 0x20}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9+60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\t', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x2, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfffff000}}, 0x20}}, 0x0) 21:30:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:29 executing program 1: 21:30:29 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x40030000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x8100000000000000}}, 0x20}}, 0x0) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9\n60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:30 executing program 1: 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x100000000000000}}, 0x20}}, 0x0) 21:30:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xfffff000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x8000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:30 executing program 1: 21:30:30 executing program 1: 21:30:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x1000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2000000}}, 0x20}}, 0x0) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 1: 21:30:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9-60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 452.717567] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x8100, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 452.782717] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf000}}, 0x20}}, 0x0) 21:30:30 executing program 1: 21:30:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfffffffc}}, 0x20}}, 0x0) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf00, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 1: 21:30:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9060\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 453.070585] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:30 executing program 1: 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xffffff7f00000000}}, 0x20}}, 0x0) 21:30:30 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xffffff9e, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:30 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 453.149468] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:30 executing program 1: 21:30:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xff0f, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x81000000}}, 0x20}}, 0x0) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/uhid\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000cc0)=@random={'user.', '/dev/uhid\x00'}) 21:30:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9Q60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xb04000000000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf00}}, 0x20}}, 0x0) [ 453.392532] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x4, 0x338, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000100), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x2, 0x8917, 'team0\x00', 'gre0\x00', 'bond_slave_1\x00', 'irlan0\x00', @broadcast, [0xff, 0x0, 0x0, 0xb5551748a362dd48, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', 0x6}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x10, 0x1c, 'yam0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'erspan0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff], @dev={[], 0xe}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xc0, 0xf0, 0x128, [@helper={'helper\x00', 0x28, {{0x0, 'sip-20000\x00'}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6b6}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_0\x00', '\x00', 'ip6tnl0\x00', 'vcan0\x00', @broadcast, [], @random="55a0a8ec427b", [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x3b0) [ 453.467729] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xffffff7f00000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x6c, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x2}}, 0x20}}, 0x0) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xffffff7f, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9%60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 453.635597] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 453.662608] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x200000000000000}}, 0x20}}, 0x0) 21:30:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 453.742554] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xf000000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 453.825424] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xc0ed0000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xd502000000000000}}, 0x20}}, 0x0) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x9effffff, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 453.914077] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x3000000}}, 0x20}}, 0x0) 21:30:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9#60\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:31 executing program 1 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) [ 454.036047] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xb040000, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 454.096123] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf000000}}, 0x20}}, 0x0) 21:30:31 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0xfffffff0, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:31 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 454.252957] FAULT_INJECTION: forcing a failure. [ 454.252957] name failslab, interval 1, probability 0, space 0, times 0 [ 454.281896] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 454.302127] CPU: 1 PID: 19465 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 454.310657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.320021] Call Trace: [ 454.322644] dump_stack+0x244/0x39d [ 454.326312] ? dump_stack_print_info.cold.1+0x20/0x20 [ 454.331525] ? lock_downgrade+0x900/0x900 [ 454.335704] should_fail.cold.4+0xa/0x17 [ 454.339789] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.344915] ? lock_downgrade+0x900/0x900 21:30:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 454.349082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.354658] ? proc_fail_nth_write+0x9e/0x210 [ 454.359164] ? proc_cwd_link+0x1d0/0x1d0 [ 454.359190] ? find_held_lock+0x36/0x1c0 [ 454.359217] ? tracing_reset_all_online_cpus+0x78/0xb0 [ 454.359248] ? perf_trace_sched_process_exec+0x860/0x860 [ 454.359268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.372676] __should_failslab+0x124/0x180 [ 454.372699] should_failslab+0x9/0x14 [ 454.372716] __kmalloc+0x2e0/0x760 [ 454.372731] ? strncpy_from_user+0x5a0/0x5a0 [ 454.372751] ? fput+0x130/0x1a0 [ 454.387959] ? do_syscall_64+0x9a/0x820 [ 454.387975] ? __x64_sys_memfd_create+0x142/0x4f0 [ 454.387991] ? do_syscall_64+0x9a/0x820 [ 454.388011] __x64_sys_memfd_create+0x142/0x4f0 [ 454.388034] ? memfd_fcntl+0x1910/0x1910 [ 454.395403] do_syscall_64+0x1b9/0x820 [ 454.395422] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.395441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.395457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.395477] ? trace_hardirqs_on_caller+0x310/0x310 [ 454.448675] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 454.453710] ? prepare_exit_to_usermode+0x291/0x3b0 [ 454.458749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.463614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.468829] RIP: 0033:0x457569 [ 454.472035] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.490944] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 21:30:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x300}}, 0x20}}, 0x0) [ 454.498686] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 [ 454.505966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a [ 454.513242] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 454.520568] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 454.527849] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 21:30:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96-0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 454.588746] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x40b, {}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:32 executing program 1 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xf0}}, 0x20}}, 0x0) 21:30:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x8100000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96#0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 454.896503] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 454.933100] FAULT_INJECTION: forcing a failure. [ 454.933100] name failslab, interval 1, probability 0, space 0, times 0 21:30:32 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfffffffffffff000}}, 0x20}}, 0x0) [ 454.968509] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 454.979073] CPU: 0 PID: 19507 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 454.987601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.987609] Call Trace: [ 454.987651] dump_stack+0x244/0x39d [ 454.987679] ? dump_stack_print_info.cold.1+0x20/0x20 [ 455.008424] should_fail.cold.4+0xa/0x17 [ 455.012505] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.017644] ? zap_class+0x640/0x640 [ 455.021368] ? __lock_acquire+0x62f/0x4c20 [ 455.025605] ? lock_downgrade+0x900/0x900 [ 455.029769] ? check_preemption_disabled+0x48/0x280 [ 455.034795] ? find_held_lock+0x36/0x1c0 [ 455.038878] ? expand_files.part.8+0x571/0x9a0 [ 455.043463] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.048938] ? find_held_lock+0x36/0x1c0 [ 455.053007] __should_failslab+0x124/0x180 [ 455.057254] should_failslab+0x9/0x14 [ 455.061057] kmem_cache_alloc+0x2be/0x730 [ 455.065215] ? shmem_destroy_callback+0xc0/0xc0 [ 455.069892] shmem_alloc_inode+0x1b/0x40 [ 455.073952] alloc_inode+0x63/0x190 [ 455.077614] new_inode_pseudo+0x71/0x1a0 [ 455.081695] ? prune_icache_sb+0x1c0/0x1c0 [ 455.085939] ? _raw_spin_unlock+0x2c/0x50 [ 455.090093] new_inode+0x1c/0x40 [ 455.093470] shmem_get_inode+0xf1/0x920 [ 455.097455] ? shmem_encode_fh+0x340/0x340 [ 455.101696] ? lock_downgrade+0x900/0x900 [ 455.105849] ? lock_release+0xa10/0xa10 [ 455.109828] ? perf_trace_sched_process_exec+0x860/0x860 [ 455.115285] ? usercopy_warn+0x110/0x110 [ 455.119363] __shmem_file_setup.part.50+0x83/0x2a0 [ 455.124302] shmem_file_setup+0x65/0x90 [ 455.128279] __x64_sys_memfd_create+0x2af/0x4f0 [ 455.132953] ? memfd_fcntl+0x1910/0x1910 [ 455.137028] do_syscall_64+0x1b9/0x820 [ 455.140921] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 455.146288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.151221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.156069] ? trace_hardirqs_on_caller+0x310/0x310 [ 455.161090] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 455.166123] ? prepare_exit_to_usermode+0x291/0x3b0 [ 455.171148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.176002] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.181692] RIP: 0033:0x457569 [ 455.184888] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.203792] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 455.211506] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 21:30:32 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 455.218774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a [ 455.226040] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 455.233308] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 455.240579] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 21:30:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xfcffffff00000000}}, 0x20}}, 0x0) 21:30:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x34000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 1 (fault-call:3 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96+0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x300000000000000}}, 0x20}}, 0x0) 21:30:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xec0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x200000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x9effffff}}, 0x20}}, 0x0) 21:30:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96\n0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 455.899303] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 455.965078] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 455.973574] FAULT_INJECTION: forcing a failure. [ 455.973574] name failslab, interval 1, probability 0, space 0, times 0 [ 456.002231] CPU: 0 PID: 19555 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 456.010772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.020131] Call Trace: [ 456.022737] dump_stack+0x244/0x39d [ 456.026394] ? dump_stack_print_info.cold.1+0x20/0x20 [ 456.031612] should_fail.cold.4+0xa/0x17 [ 456.035714] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.040834] ? __kernel_text_address+0xd/0x40 [ 456.045340] ? unwind_get_return_address+0x61/0xa0 [ 456.050309] ? find_held_lock+0x36/0x1c0 [ 456.054405] ? perf_trace_sched_process_exec+0x860/0x860 [ 456.059877] __should_failslab+0x124/0x180 [ 456.064130] should_failslab+0x9/0x14 [ 456.067947] kmem_cache_alloc+0x2be/0x730 [ 456.072110] ? mpol_shared_policy_init+0x235/0x650 [ 456.077047] ? current_time+0x72/0x1b0 [ 456.077071] __d_alloc+0xc8/0xb90 [ 456.077096] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 456.089434] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.094458] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 456.094476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.094496] ? timespec64_trunc+0xea/0x180 [ 456.109443] ? inode_init_owner+0x340/0x340 [ 456.113784] ? _raw_spin_unlock+0x2c/0x50 [ 456.117951] ? current_time+0x10b/0x1b0 [ 456.121944] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.127491] ? __lockdep_init_map+0x105/0x590 [ 456.132003] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.137551] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 456.143108] d_alloc_pseudo+0x1d/0x30 [ 456.146924] alloc_file_pseudo+0x158/0x3f0 [ 456.151178] ? alloc_file+0x4d0/0x4d0 [ 456.154995] ? usercopy_warn+0x110/0x110 [ 456.159079] __shmem_file_setup.part.50+0x110/0x2a0 [ 456.164112] shmem_file_setup+0x65/0x90 [ 456.168101] __x64_sys_memfd_create+0x2af/0x4f0 [ 456.172778] ? memfd_fcntl+0x1910/0x1910 [ 456.176878] do_syscall_64+0x1b9/0x820 [ 456.180778] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 456.186158] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.191096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.195952] ? trace_hardirqs_on_caller+0x310/0x310 [ 456.200984] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 456.206013] ? prepare_exit_to_usermode+0x291/0x3b0 [ 456.211046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.215912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.221107] RIP: 0033:0x457569 [ 456.224313] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.243244] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 456.250963] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 [ 456.258256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a 21:30:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x8100}}, 0x20}}, 0x0) [ 456.265537] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 456.272814] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 456.280092] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 21:30:34 executing program 1 (fault-call:3 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x23000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf0ffffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0xec0}}, 0x0) 21:30:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9600\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 456.478896] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0xfffffdef}}, 0x0) [ 456.530594] FAULT_INJECTION: forcing a failure. [ 456.530594] name failslab, interval 1, probability 0, space 0, times 0 [ 456.565876] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 456.586795] CPU: 1 PID: 19585 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 456.595342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.604712] Call Trace: [ 456.607331] dump_stack+0x244/0x39d [ 456.610984] ? dump_stack_print_info.cold.1+0x20/0x20 [ 456.616203] should_fail.cold.4+0xa/0x17 [ 456.620288] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.625403] ? __kernel_text_address+0xd/0x40 [ 456.629914] ? unwind_get_return_address+0x61/0xa0 [ 456.634882] ? find_held_lock+0x36/0x1c0 [ 456.638985] ? perf_trace_sched_process_exec+0x860/0x860 [ 456.644461] __should_failslab+0x124/0x180 [ 456.648715] should_failslab+0x9/0x14 [ 456.652538] kmem_cache_alloc+0x2be/0x730 [ 456.656702] ? mpol_shared_policy_init+0x235/0x650 [ 456.661651] ? current_time+0x72/0x1b0 [ 456.665560] __d_alloc+0xc8/0xb90 [ 456.669032] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 456.674061] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.679091] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 456.684396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.689948] ? timespec64_trunc+0xea/0x180 [ 456.694192] ? inode_init_owner+0x340/0x340 [ 456.698533] ? _raw_spin_unlock+0x2c/0x50 [ 456.702699] ? current_time+0x10b/0x1b0 [ 456.706690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.712240] ? __lockdep_init_map+0x105/0x590 [ 456.716756] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.722326] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 456.727896] d_alloc_pseudo+0x1d/0x30 [ 456.731713] alloc_file_pseudo+0x158/0x3f0 [ 456.735969] ? alloc_file+0x4d0/0x4d0 [ 456.739790] ? usercopy_warn+0x110/0x110 [ 456.743878] __shmem_file_setup.part.50+0x110/0x2a0 [ 456.748911] shmem_file_setup+0x65/0x90 [ 456.752905] __x64_sys_memfd_create+0x2af/0x4f0 [ 456.757592] ? memfd_fcntl+0x1910/0x1910 [ 456.761696] do_syscall_64+0x1b9/0x820 [ 456.765596] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 456.770984] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.775923] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.780778] ? trace_hardirqs_on_caller+0x310/0x310 [ 456.785828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 456.790860] ? prepare_exit_to_usermode+0x291/0x3b0 [ 456.795897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.800764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.800778] RIP: 0033:0x457569 [ 456.800795] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.800804] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 21:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20000520}}, 0x0) 21:30:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x81000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 456.828093] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 [ 456.828103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a [ 456.828111] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 [ 456.828121] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 456.828136] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 21:30:34 executing program 1 (fault-call:3 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x2, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0xc0}}, 0x0) 21:30:34 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xb040000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96Q0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 457.050499] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 457.070045] FAULT_INJECTION: forcing a failure. [ 457.070045] name failslab, interval 1, probability 0, space 0, times 0 [ 457.092365] CPU: 0 PID: 19614 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 457.100877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.100884] Call Trace: [ 457.100912] dump_stack+0x244/0x39d [ 457.100939] ? dump_stack_print_info.cold.1+0x20/0x20 [ 457.121675] ? lock_downgrade+0x900/0x900 [ 457.125833] ? check_preemption_disabled+0x48/0x280 [ 457.130865] should_fail.cold.4+0xa/0x17 [ 457.134936] ? rcu_softirq_qs+0x20/0x20 [ 457.134960] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.134985] ? is_bpf_text_address+0xd3/0x170 [ 457.148536] ? kernel_text_address+0x79/0xf0 [ 457.152957] ? __kernel_text_address+0xd/0x40 [ 457.157462] ? unwind_get_return_address+0x61/0xa0 [ 457.162410] ? __save_stack_trace+0x8d/0xf0 [ 457.166750] ? find_held_lock+0x36/0x1c0 [ 457.170840] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 457.175699] ? perf_trace_sched_process_exec+0x860/0x860 [ 457.181638] __should_failslab+0x124/0x180 [ 457.185899] should_failslab+0x9/0x14 [ 457.189718] kmem_cache_alloc_trace+0x2d7/0x750 [ 457.194414] ? __might_sleep+0x95/0x190 [ 457.198410] apparmor_file_alloc_security+0x17b/0xac0 [ 457.203616] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 457.209185] ? apparmor_path_rename+0xcd0/0xcd0 [ 457.213872] ? rcu_read_lock_sched_held+0x14f/0x180 [ 457.218901] ? kmem_cache_alloc+0x33a/0x730 [ 457.223230] ? d_set_d_op+0x31d/0x410 [ 457.227047] security_file_alloc+0x4c/0xa0 [ 457.231301] __alloc_file+0x12a/0x470 [ 457.235115] ? file_free_rcu+0xd0/0xd0 [ 457.239012] ? d_instantiate+0x79/0xa0 [ 457.242915] ? lock_downgrade+0x900/0x900 [ 457.247084] ? kasan_check_read+0x11/0x20 [ 457.251241] ? do_raw_spin_unlock+0xa7/0x330 [ 457.255666] ? do_raw_spin_trylock+0x270/0x270 [ 457.260263] alloc_empty_file+0x72/0x170 [ 457.264342] alloc_file+0x5e/0x4d0 [ 457.267896] ? _raw_spin_unlock+0x2c/0x50 [ 457.272060] alloc_file_pseudo+0x261/0x3f0 [ 457.276319] ? alloc_file+0x4d0/0x4d0 [ 457.280134] ? usercopy_warn+0x110/0x110 [ 457.284217] __shmem_file_setup.part.50+0x110/0x2a0 [ 457.289252] shmem_file_setup+0x65/0x90 [ 457.293238] __x64_sys_memfd_create+0x2af/0x4f0 [ 457.297921] ? memfd_fcntl+0x1910/0x1910 [ 457.302005] do_syscall_64+0x1b9/0x820 [ 457.305903] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.311278] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.316350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.321204] ? trace_hardirqs_on_caller+0x310/0x310 [ 457.326243] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.331274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 457.336308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.341167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.346363] RIP: 0033:0x457569 [ 457.349570] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.368479] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 457.376194] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 [ 457.383467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a [ 457.390745] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 21:30:35 executing program 1 (fault-call:3 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x33fe0}}, 0x0) 21:30:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf0ffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 457.398017] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 457.405290] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 [ 457.434880] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x7ffff000}}, 0x0) 21:30:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x400300}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 457.602579] FAULT_INJECTION: forcing a failure. [ 457.602579] name failslab, interval 1, probability 0, space 0, times 0 [ 457.638274] CPU: 1 PID: 19637 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 457.646798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.656158] Call Trace: [ 457.658758] dump_stack+0x244/0x39d [ 457.662407] ? dump_stack_print_info.cold.1+0x20/0x20 [ 457.667613] ? lock_downgrade+0x900/0x900 [ 457.671781] ? check_preemption_disabled+0x48/0x280 [ 457.676817] should_fail.cold.4+0xa/0x17 [ 457.680893] ? rcu_softirq_qs+0x20/0x20 [ 457.684886] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 457.690013] ? is_bpf_text_address+0xd3/0x170 [ 457.694521] ? kernel_text_address+0x79/0xf0 [ 457.698946] ? __kernel_text_address+0xd/0x40 [ 457.703450] ? unwind_get_return_address+0x61/0xa0 [ 457.708394] ? __save_stack_trace+0x8d/0xf0 [ 457.712734] ? find_held_lock+0x36/0x1c0 [ 457.716813] ? btrfs_ioctl+0x4188/0xa710 [ 457.720898] ? __x64_sys_memfd_create+0x2af/0x4f0 [ 457.725753] ? perf_trace_sched_process_exec+0x860/0x860 [ 457.731229] __should_failslab+0x124/0x180 [ 457.735482] should_failslab+0x9/0x14 [ 457.739292] kmem_cache_alloc_trace+0x2d7/0x750 [ 457.743974] ? __might_sleep+0x95/0x190 [ 457.747972] apparmor_file_alloc_security+0x17b/0xac0 [ 457.753179] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 457.753203] ? apparmor_path_rename+0xcd0/0xcd0 [ 457.753227] ? rcu_read_lock_sched_held+0x14f/0x180 [ 457.753249] ? kmem_cache_alloc+0x33a/0x730 [ 457.763534] ? d_set_d_op+0x31d/0x410 [ 457.763558] security_file_alloc+0x4c/0xa0 [ 457.763579] __alloc_file+0x12a/0x470 [ 457.763603] ? file_free_rcu+0xd0/0xd0 [ 457.788633] ? d_instantiate+0x79/0xa0 [ 457.792546] ? lock_downgrade+0x900/0x900 [ 457.796720] ? kasan_check_read+0x11/0x20 21:30:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x100000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 457.800877] ? do_raw_spin_unlock+0xa7/0x330 [ 457.805468] ? do_raw_spin_trylock+0x270/0x270 [ 457.810159] alloc_empty_file+0x72/0x170 [ 457.814233] alloc_file+0x5e/0x4d0 [ 457.817785] ? _raw_spin_unlock+0x2c/0x50 [ 457.821954] alloc_file_pseudo+0x261/0x3f0 [ 457.826206] ? alloc_file+0x4d0/0x4d0 [ 457.830026] ? usercopy_warn+0x110/0x110 [ 457.834114] __shmem_file_setup.part.50+0x110/0x2a0 [ 457.839162] shmem_file_setup+0x65/0x90 [ 457.843162] __x64_sys_memfd_create+0x2af/0x4f0 [ 457.847850] ? memfd_fcntl+0x1910/0x1910 [ 457.851944] do_syscall_64+0x1b9/0x820 [ 457.855845] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 457.855866] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.855882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.855903] ? trace_hardirqs_on_caller+0x310/0x310 [ 457.866210] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 457.866230] ? prepare_exit_to_usermode+0x291/0x3b0 [ 457.866253] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.866276] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.896195] RIP: 0033:0x457569 21:30:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xffffff7f}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 457.899411] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.918327] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 457.926048] RAX: ffffffffffffffda RBX: 0000000020000800 RCX: 0000000000457569 [ 457.933323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc78a [ 457.940634] RBP: 000000000072bf00 R08: 0000000000100020 R09: 00000000fbad8001 21:30:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso96%0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0xf}}, 0x0) 21:30:35 executing program 1 (fault-call:3 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) [ 457.947941] R10: 0000000020000800 R11: 0000000000000246 R12: 00007fb6b2c006d4 [ 457.955220] R13: 00000000004c4a1e R14: 00000000004d7d88 R15: 0000000000000003 [ 457.974612] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:35 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:35 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x40030000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 458.046931] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x6800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x10}}, 0x0) [ 458.150426] FAULT_INJECTION: forcing a failure. [ 458.150426] name failslab, interval 1, probability 0, space 0, times 0 [ 458.196309] CPU: 1 PID: 19664 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 458.204846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.214209] Call Trace: [ 458.216815] dump_stack+0x244/0x39d [ 458.220469] ? dump_stack_print_info.cold.1+0x20/0x20 [ 458.225697] ? print_usage_bug+0xc0/0xc0 [ 458.225723] should_fail.cold.4+0xa/0x17 [ 458.225738] ? find_held_lock+0x36/0x1c0 [ 458.225760] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.225782] ? lock_downgrade+0x900/0x900 [ 458.233896] ? check_preemption_disabled+0x48/0x280 [ 458.233919] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 458.233936] ? kasan_check_read+0x11/0x20 [ 458.233963] ? find_held_lock+0x36/0x1c0 [ 458.243140] ? perf_trace_sched_process_exec+0x860/0x860 [ 458.243169] __should_failslab+0x124/0x180 [ 458.243194] should_failslab+0x9/0x14 [ 458.252352] kmem_cache_alloc+0x2be/0x730 [ 458.283052] ? zap_class+0x640/0x640 [ 458.286777] ? print_usage_bug+0xc0/0xc0 [ 458.290853] ? mark_held_locks+0x130/0x130 [ 458.295110] __alloc_file+0xa8/0x470 [ 458.298845] ? file_free_rcu+0xd0/0xd0 [ 458.302746] ? find_held_lock+0x36/0x1c0 [ 458.306830] ? is_bpf_text_address+0xac/0x170 [ 458.311341] ? lock_downgrade+0x900/0x900 [ 458.315501] ? check_preemption_disabled+0x48/0x280 [ 458.320532] alloc_empty_file+0x72/0x170 [ 458.324612] path_openat+0x170/0x5150 [ 458.328440] ? rcu_softirq_qs+0x20/0x20 [ 458.332425] ? unwind_dump+0x190/0x190 [ 458.336330] ? zap_class+0x640/0x640 [ 458.340056] ? path_lookupat.isra.43+0xc00/0xc00 [ 458.344824] ? unwind_get_return_address+0x61/0xa0 [ 458.349784] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 458.349802] ? expand_files.part.8+0x571/0x9a0 [ 458.349822] ? find_held_lock+0x36/0x1c0 [ 458.359424] ? __alloc_fd+0x347/0x6e0 [ 458.359448] ? lock_downgrade+0x900/0x900 [ 458.371427] ? getname+0x19/0x20 [ 458.374817] ? kasan_check_read+0x11/0x20 [ 458.378980] ? do_raw_spin_unlock+0xa7/0x330 [ 458.383403] ? do_raw_spin_trylock+0x270/0x270 [ 458.388003] ? __lock_is_held+0xb5/0x140 [ 458.392071] ? __check_object_size+0xb1/0x782 [ 458.392096] ? _raw_spin_unlock+0x2c/0x50 [ 458.392115] ? __alloc_fd+0x347/0x6e0 [ 458.400764] do_filp_open+0x255/0x380 [ 458.400786] ? may_open_dev+0x100/0x100 [ 458.412358] ? get_unused_fd_flags+0x122/0x1a0 [ 458.416951] ? __alloc_fd+0x6e0/0x6e0 [ 458.420767] ? __lock_is_held+0xb5/0x140 [ 458.424855] do_sys_open+0x568/0x700 [ 458.428588] ? filp_open+0x80/0x80 [ 458.432159] ? trace_hardirqs_off_caller+0x300/0x300 [ 458.437272] ? do_sys_ftruncate+0x449/0x550 [ 458.441610] __x64_sys_open+0x7e/0xc0 [ 458.445436] do_syscall_64+0x1b9/0x820 [ 458.449334] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 458.454712] ? syscall_return_slowpath+0x5e0/0x5e0 [ 458.459661] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.464519] ? trace_hardirqs_on_caller+0x310/0x310 [ 458.469548] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 458.474576] ? prepare_exit_to_usermode+0x291/0x3b0 [ 458.479607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.484483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.489681] RIP: 0033:0x4111a1 [ 458.492883] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 458.511791] RSP: 002b:00007fb6b2bffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 458.520118] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004111a1 [ 458.527401] RDX: 00007fb6b2bffafa RSI: 0000000000000002 RDI: 00007fb6b2bffaf0 [ 458.534678] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 21:30:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x2}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 458.541953] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 458.549227] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x2}, 0x0) 21:30:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636e003", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xfffffff0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 458.615163] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:36 executing program 1 (fault-call:3 fault-nth:7): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x8}, 0x0) [ 458.679568] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x2000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xb04000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 458.846290] FAULT_INJECTION: forcing a failure. [ 458.846290] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.858136] CPU: 0 PID: 19700 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 458.858147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.858154] Call Trace: [ 458.858180] dump_stack+0x244/0x39d [ 458.858204] ? dump_stack_print_info.cold.1+0x20/0x20 [ 458.858233] should_fail.cold.4+0xa/0x17 [ 458.858257] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.891524] ? print_usage_bug+0xc0/0xc0 [ 458.891558] ? mark_held_locks+0x130/0x130 [ 458.891573] ? zap_class+0x640/0x640 [ 458.891592] ? print_usage_bug+0xc0/0xc0 [ 458.900762] ? zap_class+0x640/0x640 [ 458.900778] ? lock_downgrade+0x900/0x900 [ 458.900794] ? check_preemption_disabled+0x48/0x280 [ 458.900826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.908755] ? should_fail+0x22d/0xd01 [ 458.908770] ? find_held_lock+0x36/0x1c0 [ 458.908793] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.908823] __alloc_pages_nodemask+0x34b/0xdd0 [ 458.948920] ? current_time+0x72/0x1b0 [ 458.952829] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 458.957856] ? inode_init_owner+0x340/0x340 [ 458.962194] ? find_held_lock+0x36/0x1c0 [ 458.966295] ? trace_hardirqs_off+0xb8/0x310 [ 458.970720] cache_grow_begin+0xa5/0x8c0 [ 458.974793] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 458.980346] ? check_preemption_disabled+0x48/0x280 [ 458.985382] kmem_cache_alloc+0x66b/0x730 [ 458.989542] ? do_sys_ftruncate+0x428/0x550 [ 458.993879] getname_flags+0xd0/0x590 [ 458.997692] ? __lock_is_held+0xb5/0x140 [ 459.001768] getname+0x19/0x20 [ 459.004975] do_sys_open+0x383/0x700 [ 459.008701] ? filp_open+0x80/0x80 [ 459.012258] ? trace_hardirqs_off_caller+0x300/0x300 [ 459.017370] ? do_sys_ftruncate+0x449/0x550 [ 459.021706] __x64_sys_open+0x7e/0xc0 [ 459.025520] do_syscall_64+0x1b9/0x820 [ 459.029418] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.034795] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.039737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.044593] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.049656] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.054696] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.059733] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.064597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.069812] RIP: 0033:0x4111a1 [ 459.073014] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 21:30:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0xffffff1f}, 0x0) 21:30:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636ffff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 459.091921] RSP: 002b:00007fb6b2bffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 459.099652] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004111a1 [ 459.106929] RDX: 00007fb6b2bffafa RSI: 0000000000000002 RDI: 00007fb6b2bffaf0 [ 459.114202] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 459.121474] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 459.128755] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x300}, 0x0) [ 459.205962] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:36 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x1000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:36 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x403}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x8100000000000000}, 0x0) [ 459.301475] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 459.464258] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:37 executing program 1 (fault-call:3 fault-nth:8): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xc00e0000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x304}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 21:30:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966#\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfffff000}, 0x0) 21:30:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfffffffffffff000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 459.643885] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 459.677035] FAULT_INJECTION: forcing a failure. [ 459.677035] name failslab, interval 1, probability 0, space 0, times 0 [ 459.689323] CPU: 1 PID: 19747 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 459.697834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.707186] Call Trace: [ 459.707214] dump_stack+0x244/0x39d [ 459.707240] ? dump_stack_print_info.cold.1+0x20/0x20 [ 459.707260] ? print_usage_bug+0xc0/0xc0 [ 459.707289] should_fail.cold.4+0xa/0x17 [ 459.707310] ? find_held_lock+0x36/0x1c0 [ 459.718695] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.718722] ? lock_downgrade+0x900/0x900 [ 459.718737] ? check_preemption_disabled+0x48/0x280 [ 459.718765] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 459.750091] ? kasan_check_read+0x11/0x20 [ 459.754274] ? find_held_lock+0x36/0x1c0 [ 459.758355] ? tipc_nl_compat_doit+0x38/0x650 [ 459.762879] ? perf_trace_sched_process_exec+0x860/0x860 [ 459.768353] __should_failslab+0x124/0x180 [ 459.772604] should_failslab+0x9/0x14 [ 459.776430] kmem_cache_alloc+0x2be/0x730 [ 459.780589] ? zap_class+0x640/0x640 [ 459.784325] ? print_usage_bug+0xc0/0xc0 [ 459.788397] ? mark_held_locks+0x130/0x130 [ 459.792662] __alloc_file+0xa8/0x470 [ 459.796394] ? file_free_rcu+0xd0/0xd0 [ 459.800298] ? find_held_lock+0x36/0x1c0 [ 459.804377] ? is_bpf_text_address+0xac/0x170 [ 459.804397] ? lock_downgrade+0x900/0x900 [ 459.804414] ? check_preemption_disabled+0x48/0x280 [ 459.804435] alloc_empty_file+0x72/0x170 [ 459.804453] path_openat+0x170/0x5150 [ 459.813099] ? rcu_softirq_qs+0x20/0x20 [ 459.813115] ? unwind_dump+0x190/0x190 [ 459.813148] ? zap_class+0x640/0x640 [ 459.813168] ? path_lookupat.isra.43+0xc00/0xc00 [ 459.813181] ? unwind_get_return_address+0x61/0xa0 [ 459.813200] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 459.813219] ? expand_files.part.8+0x571/0x9a0 [ 459.856882] ? find_held_lock+0x36/0x1c0 [ 459.860967] ? __alloc_fd+0x347/0x6e0 [ 459.864781] ? lock_downgrade+0x900/0x900 [ 459.868935] ? getname+0x19/0x20 [ 459.872318] ? kasan_check_read+0x11/0x20 [ 459.876478] ? do_raw_spin_unlock+0xa7/0x330 [ 459.880897] ? do_raw_spin_trylock+0x270/0x270 [ 459.885497] ? __lock_is_held+0xb5/0x140 [ 459.889572] ? __check_object_size+0xb1/0x782 21:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x8100}, 0x0) 21:30:37 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x8100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 459.894086] ? _raw_spin_unlock+0x2c/0x50 [ 459.894105] ? __alloc_fd+0x347/0x6e0 [ 459.894141] do_filp_open+0x255/0x380 [ 459.894158] ? may_open_dev+0x100/0x100 [ 459.894186] ? get_unused_fd_flags+0x122/0x1a0 [ 459.894199] ? __alloc_fd+0x6e0/0x6e0 [ 459.894215] ? __lock_is_held+0xb5/0x140 [ 459.894236] do_sys_open+0x568/0x700 [ 459.894254] ? filp_open+0x80/0x80 [ 459.894275] ? trace_hardirqs_off_caller+0x300/0x300 [ 459.922391] ? do_sys_ftruncate+0x449/0x550 [ 459.922415] __x64_sys_open+0x7e/0xc0 [ 459.922435] do_syscall_64+0x1b9/0x820 [ 459.922455] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 459.952158] ? syscall_return_slowpath+0x5e0/0x5e0 [ 459.957103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.961973] ? trace_hardirqs_on_caller+0x310/0x310 [ 459.967004] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 459.972035] ? prepare_exit_to_usermode+0x291/0x3b0 [ 459.977077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.981942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.987148] RIP: 0033:0x4111a1 21:30:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf00}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 459.990353] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 460.009264] RSP: 002b:00007fb6b2bffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 460.016981] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004111a1 [ 460.024259] RDX: 00007fb6b2bffafa RSI: 0000000000000002 RDI: 00007fb6b2bffaf0 [ 460.024269] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 460.024278] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 460.024288] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:37 executing program 1 (fault-call:3 fault-nth:9): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x2d5}, 0x0) [ 460.093470] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 460.211340] FAULT_INJECTION: forcing a failure. [ 460.211340] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 460.223203] CPU: 1 PID: 19771 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 460.231697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.241140] Call Trace: [ 460.241168] dump_stack+0x244/0x39d [ 460.241195] ? dump_stack_print_info.cold.1+0x20/0x20 [ 460.241216] ? zap_class+0x640/0x640 [ 460.241243] should_fail.cold.4+0xa/0x17 [ 460.260405] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.265520] ? find_held_lock+0x36/0x1c0 [ 460.269604] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 460.275165] ? lock_downgrade+0x900/0x900 [ 460.279326] ? check_preemption_disabled+0x48/0x280 [ 460.284364] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 460.289302] ? kasan_check_read+0x11/0x20 [ 460.293461] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 460.298752] ? zap_class+0x640/0x640 [ 460.302474] ? rcu_softirq_qs+0x20/0x20 [ 460.306489] ? rcu_read_unlock+0x16/0x60 [ 460.310566] __alloc_pages_nodemask+0x34b/0xdd0 [ 460.315251] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 460.320189] ? kasan_check_read+0x11/0x20 [ 460.324349] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 460.329373] ? __lock_is_held+0xb5/0x140 [ 460.333457] ? rcu_read_unlock+0x33/0x60 [ 460.337551] ? trace_hardirqs_off+0xb8/0x310 [ 460.341972] cache_grow_begin+0xa5/0x8c0 [ 460.346045] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 460.351592] ? check_preemption_disabled+0x48/0x280 [ 460.356643] kmem_cache_alloc+0x66b/0x730 [ 460.360805] ? zap_class+0x640/0x640 [ 460.364524] ? print_usage_bug+0xc0/0xc0 [ 460.368603] ? mark_held_locks+0x130/0x130 [ 460.372866] __alloc_file+0xa8/0x470 [ 460.376588] ? file_free_rcu+0xd0/0xd0 [ 460.380493] ? find_held_lock+0x36/0x1c0 [ 460.384578] ? is_bpf_text_address+0xac/0x170 [ 460.389087] ? lock_downgrade+0x900/0x900 [ 460.393247] ? check_preemption_disabled+0x48/0x280 [ 460.398277] alloc_empty_file+0x72/0x170 [ 460.402351] path_openat+0x170/0x5150 [ 460.406170] ? rcu_softirq_qs+0x20/0x20 [ 460.410155] ? unwind_dump+0x190/0x190 [ 460.414061] ? zap_class+0x640/0x640 [ 460.417789] ? path_lookupat.isra.43+0xc00/0xc00 [ 460.422556] ? unwind_get_return_address+0x61/0xa0 [ 460.427496] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 460.432524] ? expand_files.part.8+0x571/0x9a0 [ 460.437125] ? find_held_lock+0x36/0x1c0 [ 460.441212] ? __alloc_fd+0x347/0x6e0 [ 460.445025] ? lock_downgrade+0x900/0x900 [ 460.449176] ? getname+0x19/0x20 [ 460.452561] ? kasan_check_read+0x11/0x20 [ 460.456721] ? do_raw_spin_unlock+0xa7/0x330 [ 460.461142] ? do_raw_spin_trylock+0x270/0x270 [ 460.465736] ? __lock_is_held+0xb5/0x140 [ 460.469803] ? __check_object_size+0xb1/0x782 [ 460.474316] ? _raw_spin_unlock+0x2c/0x50 [ 460.478476] ? __alloc_fd+0x347/0x6e0 [ 460.482302] do_filp_open+0x255/0x380 [ 460.486115] ? may_open_dev+0x100/0x100 [ 460.490117] ? get_unused_fd_flags+0x122/0x1a0 [ 460.494715] ? __alloc_fd+0x6e0/0x6e0 [ 460.498525] ? __lock_is_held+0xb5/0x140 [ 460.502603] do_sys_open+0x568/0x700 [ 460.506340] ? filp_open+0x80/0x80 [ 460.509897] ? trace_hardirqs_off_caller+0x300/0x300 [ 460.515012] ? do_sys_ftruncate+0x449/0x550 [ 460.519346] __x64_sys_open+0x7e/0xc0 [ 460.523166] do_syscall_64+0x1b9/0x820 [ 460.527066] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 460.532441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 460.537379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.542231] ? trace_hardirqs_on_caller+0x310/0x310 [ 460.547257] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 460.552288] ? prepare_exit_to_usermode+0x291/0x3b0 [ 460.557320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.562181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.567375] RIP: 0033:0x4111a1 [ 460.570582] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 460.589505] RSP: 002b:00007fb6b2bffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 460.597227] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004111a1 [ 460.604515] RDX: 00007fb6b2bffafa RSI: 0000000000000002 RDI: 00007fb6b2bffaf0 21:30:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x4030000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xfffffffffffff000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x2}, 0x0) 21:30:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966/\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 460.611799] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 460.619079] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 460.626353] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 460.694549] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x400300}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:38 executing program 1 (fault-call:3 fault-nth:10): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xffffff9e}, 0x0) 21:30:38 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xc00e}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 460.799984] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 460.908922] FAULT_INJECTION: forcing a failure. [ 460.908922] name failslab, interval 1, probability 0, space 0, times 0 [ 460.921077] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 460.924507] CPU: 0 PID: 19796 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 460.935913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.945265] Call Trace: [ 460.947862] dump_stack+0x244/0x39d [ 460.951497] ? dump_stack_print_info.cold.1+0x20/0x20 [ 460.956702] should_fail.cold.4+0xa/0x17 [ 460.960778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.965882] ? pick_next_task_fair+0xa35/0x1c90 [ 460.970556] ? rcu_read_lock_sched_held+0x14f/0x180 [ 460.975582] ? zap_class+0x640/0x640 [ 460.979299] ? print_usage_bug+0xc0/0xc0 [ 460.983364] ? __account_cfs_rq_runtime+0x790/0x790 [ 460.988392] ? find_held_lock+0x36/0x1c0 [ 460.992460] ? __lock_is_held+0xb5/0x140 [ 460.996536] ? perf_trace_sched_process_exec+0x860/0x860 [ 461.002002] __should_failslab+0x124/0x180 [ 461.006244] should_failslab+0x9/0x14 [ 461.010045] kmem_cache_alloc+0x2be/0x730 [ 461.014201] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 461.019221] __kernfs_new_node+0x127/0x8d0 [ 461.023465] ? trace_hardirqs_off_caller+0x300/0x300 [ 461.028572] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 461.033341] ? _raw_spin_unlock_irq+0x60/0x80 [ 461.037841] ? __schedule+0x168b/0x21d0 [ 461.041825] ? zap_class+0x640/0x640 [ 461.045542] ? zap_class+0x640/0x640 [ 461.049258] ? trace_hardirqs_on+0xbd/0x310 [ 461.053584] ? kasan_check_read+0x11/0x20 [ 461.057744] ? find_held_lock+0x36/0x1c0 [ 461.061816] kernfs_new_node+0x95/0x120 [ 461.065798] kernfs_create_dir_ns+0x4d/0x160 [ 461.070214] internal_create_group+0x5fc/0xd80 [ 461.074813] ? remove_files.isra.1+0x190/0x190 [ 461.079395] ? up_write+0x7b/0x220 [ 461.082940] ? down_write_nested+0x130/0x130 [ 461.087348] ? down_read+0x120/0x120 [ 461.091076] sysfs_create_group+0x1f/0x30 [ 461.095234] lo_ioctl+0x1307/0x1d60 [ 461.098871] ? lo_rw_aio+0x1ef0/0x1ef0 [ 461.102762] blkdev_ioctl+0x9ac/0x2010 [ 461.106669] ? blkpg_ioctl+0xc10/0xc10 [ 461.110562] ? lock_downgrade+0x900/0x900 [ 461.114713] ? check_preemption_disabled+0x48/0x280 [ 461.119741] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 461.124673] ? kasan_check_read+0x11/0x20 [ 461.128826] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 461.134111] ? rcu_softirq_qs+0x20/0x20 [ 461.138097] ? __fget+0x4d1/0x740 [ 461.141556] ? ksys_dup3+0x680/0x680 [ 461.145289] block_ioctl+0xee/0x130 [ 461.148922] ? blkdev_fallocate+0x400/0x400 [ 461.153246] do_vfs_ioctl+0x1de/0x1720 [ 461.157138] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 461.162682] ? ioctl_preallocate+0x300/0x300 [ 461.167094] ? __fget_light+0x2e9/0x430 [ 461.171068] ? fget_raw+0x20/0x20 [ 461.174523] ? rcu_read_lock_sched_held+0x14f/0x180 [ 461.180056] ? kmem_cache_free+0x24f/0x290 [ 461.184293] ? putname+0xf7/0x130 [ 461.187754] ? do_syscall_64+0x9a/0x820 [ 461.191733] ? do_syscall_64+0x9a/0x820 [ 461.195719] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 461.200305] ? security_file_ioctl+0x94/0xc0 [ 461.204721] ksys_ioctl+0xa9/0xd0 [ 461.208200] __x64_sys_ioctl+0x73/0xb0 [ 461.212094] do_syscall_64+0x1b9/0x820 [ 461.215982] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 461.221348] ? syscall_return_slowpath+0x5e0/0x5e0 [ 461.226278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.231129] ? trace_hardirqs_on_caller+0x310/0x310 [ 461.236147] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 461.241171] ? prepare_exit_to_usermode+0x291/0x3b0 [ 461.246197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.251054] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 461.256243] RIP: 0033:0x4573d7 [ 461.259437] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 461.278347] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.286071] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 461.293341] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 461.300627] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 21:30:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 21:30:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966Q\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 461.307910] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 461.315359] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x4c000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xc00e000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x1000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xd5020000}, 0x0) [ 461.465122] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:39 executing program 1 (fault-call:3 fault-nth:11): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf00}, 0x0) 21:30:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf0ffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x9effffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 461.714341] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 461.715402] FAULT_INJECTION: forcing a failure. [ 461.715402] name failslab, interval 1, probability 0, space 0, times 0 [ 461.745816] CPU: 1 PID: 19828 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 461.754323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.763679] Call Trace: [ 461.766277] dump_stack+0x244/0x39d [ 461.769919] ? dump_stack_print_info.cold.1+0x20/0x20 [ 461.775112] ? radix_tree_tag_set+0x3d0/0x3d0 [ 461.779631] should_fail.cold.4+0xa/0x17 [ 461.783710] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 461.788828] ? kernfs_activate+0x8e/0x2c0 [ 461.792989] ? zap_class+0x640/0x640 [ 461.796710] ? lock_release+0xa10/0xa10 [ 461.800689] ? perf_trace_sched_process_exec+0x860/0x860 [ 461.806180] ? find_held_lock+0x36/0x1c0 [ 461.810252] ? __lock_is_held+0xb5/0x140 [ 461.814334] ? perf_trace_sched_process_exec+0x860/0x860 [ 461.819785] ? find_held_lock+0x36/0x1c0 [ 461.823860] __should_failslab+0x124/0x180 [ 461.828119] should_failslab+0x9/0x14 [ 461.831927] kmem_cache_alloc+0x2be/0x730 [ 461.836089] ? find_held_lock+0x36/0x1c0 [ 461.840171] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 461.845194] __kernfs_new_node+0x127/0x8d0 [ 461.849439] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 461.854202] ? kasan_check_write+0x14/0x20 [ 461.858442] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 461.863373] ? __kernfs_new_node+0x697/0x8d0 [ 461.867790] ? wait_for_completion+0x8a0/0x8a0 [ 461.872382] ? zap_class+0x640/0x640 [ 461.876102] ? kasan_check_write+0x14/0x20 [ 461.880348] ? __lock_is_held+0xb5/0x140 [ 461.884420] ? wait_for_completion+0x8a0/0x8a0 [ 461.889017] ? mutex_unlock+0xd/0x10 [ 461.892736] ? kernfs_activate+0x21a/0x2c0 [ 461.896979] kernfs_new_node+0x95/0x120 [ 461.900963] __kernfs_create_file+0x5a/0x340 [ 461.905395] sysfs_add_file_mode_ns+0x222/0x530 [ 461.910076] internal_create_group+0x3df/0xd80 [ 461.914675] ? remove_files.isra.1+0x190/0x190 [ 461.919262] ? up_write+0x7b/0x220 [ 461.922827] ? down_write_nested+0x130/0x130 [ 461.927241] ? down_read+0x120/0x120 [ 461.930973] sysfs_create_group+0x1f/0x30 [ 461.935136] lo_ioctl+0x1307/0x1d60 [ 461.938780] ? lo_rw_aio+0x1ef0/0x1ef0 [ 461.942675] blkdev_ioctl+0x9ac/0x2010 [ 461.946569] ? blkpg_ioctl+0xc10/0xc10 [ 461.950458] ? lock_downgrade+0x900/0x900 [ 461.954608] ? check_preemption_disabled+0x48/0x280 [ 461.959651] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 461.964590] ? kasan_check_read+0x11/0x20 [ 461.968758] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 461.974039] ? rcu_softirq_qs+0x20/0x20 [ 461.978031] ? __fget+0x4d1/0x740 [ 461.981492] ? ksys_dup3+0x680/0x680 [ 461.985225] block_ioctl+0xee/0x130 [ 461.988861] ? blkdev_fallocate+0x400/0x400 [ 461.993186] do_vfs_ioctl+0x1de/0x1720 [ 461.997087] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 462.002638] ? ioctl_preallocate+0x300/0x300 [ 462.007054] ? __fget_light+0x2e9/0x430 [ 462.011037] ? fget_raw+0x20/0x20 [ 462.014502] ? rcu_read_lock_sched_held+0x14f/0x180 [ 462.019535] ? kmem_cache_free+0x24f/0x290 [ 462.023781] ? putname+0xf7/0x130 [ 462.027243] ? do_syscall_64+0x9a/0x820 [ 462.031220] ? do_syscall_64+0x9a/0x820 [ 462.035205] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 462.039795] ? security_file_ioctl+0x94/0xc0 [ 462.044213] ksys_ioctl+0xa9/0xd0 [ 462.047673] __x64_sys_ioctl+0x73/0xb0 [ 462.051566] do_syscall_64+0x1b9/0x820 [ 462.055456] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 462.060827] ? syscall_return_slowpath+0x5e0/0x5e0 [ 462.065764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.070611] ? trace_hardirqs_on_caller+0x310/0x310 [ 462.075648] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 462.080675] ? prepare_exit_to_usermode+0x291/0x3b0 [ 462.085702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 462.090562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.095758] RIP: 0033:0x4573d7 21:30:39 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966%\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf}, 0x0) 21:30:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf00}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x2000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 462.098958] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 462.117858] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.125570] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 462.132838] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 462.140106] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 462.147381] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 462.154654] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x2000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 462.194734] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 462.225585] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf00000000000000}, 0x0) 21:30:39 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xffffff9e}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:39 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 1 (fault-call:3 fault-nth:12): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) [ 462.360677] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf0}, 0x0) [ 462.437979] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x40b}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966+\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x100000000000000}, 0x0) 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x8100}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x200000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 462.632592] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 462.678259] FAULT_INJECTION: forcing a failure. [ 462.678259] name failslab, interval 1, probability 0, space 0, times 0 [ 462.728591] CPU: 0 PID: 19881 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 462.737142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.746503] Call Trace: [ 462.749107] dump_stack+0x244/0x39d [ 462.752755] ? dump_stack_print_info.cold.1+0x20/0x20 [ 462.757969] should_fail.cold.4+0xa/0x17 [ 462.762048] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 462.767172] ? lock_release+0xa10/0xa10 [ 462.771162] ? perf_trace_sched_process_exec+0x860/0x860 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xb04}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xfffff000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 462.776648] ? zap_class+0x640/0x640 [ 462.780385] ? find_held_lock+0x36/0x1c0 [ 462.784465] ? __lock_is_held+0xb5/0x140 [ 462.788550] ? perf_trace_sched_process_exec+0x860/0x860 [ 462.794013] ? kernfs_activate+0x21a/0x2c0 [ 462.798274] __should_failslab+0x124/0x180 [ 462.802531] should_failslab+0x9/0x14 [ 462.806343] kmem_cache_alloc+0x2be/0x730 [ 462.810503] ? lock_downgrade+0x900/0x900 [ 462.814676] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 462.819711] __kernfs_new_node+0x127/0x8d0 [ 462.823963] ? kernfs_dop_revalidate+0x3c0/0x3c0 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf0ffffff00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 462.828733] ? zap_class+0x640/0x640 [ 462.832466] ? __lock_is_held+0xb5/0x140 [ 462.836542] ? wait_for_completion+0x8a0/0x8a0 [ 462.841154] ? mutex_unlock+0xd/0x10 [ 462.844880] ? kernfs_activate+0x21a/0x2c0 [ 462.849133] ? kernfs_walk_and_get_ns+0x340/0x340 [ 462.853999] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 462.859548] ? kernfs_link_sibling+0x1d2/0x3b0 [ 462.864145] kernfs_new_node+0x95/0x120 [ 462.868141] __kernfs_create_file+0x5a/0x340 [ 462.872567] sysfs_add_file_mode_ns+0x222/0x530 [ 462.877262] internal_create_group+0x3df/0xd80 [ 462.881874] ? remove_files.isra.1+0x190/0x190 [ 462.886469] ? up_write+0x7b/0x220 [ 462.890024] ? down_write_nested+0x130/0x130 [ 462.894449] ? down_read+0x120/0x120 [ 462.898190] sysfs_create_group+0x1f/0x30 [ 462.902351] lo_ioctl+0x1307/0x1d60 [ 462.906006] ? lo_rw_aio+0x1ef0/0x1ef0 [ 462.909910] blkdev_ioctl+0x9ac/0x2010 [ 462.913814] ? blkpg_ioctl+0xc10/0xc10 [ 462.917746] ? lock_downgrade+0x900/0x900 [ 462.921906] ? check_preemption_disabled+0x48/0x280 [ 462.926939] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 462.931880] ? kasan_check_read+0x11/0x20 [ 462.936042] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 462.941331] ? rcu_softirq_qs+0x20/0x20 [ 462.945328] ? __fget+0x4d1/0x740 [ 462.948799] ? ksys_dup3+0x680/0x680 [ 462.952526] block_ioctl+0xee/0x130 [ 462.956154] ? blkdev_fallocate+0x400/0x400 [ 462.960494] do_vfs_ioctl+0x1de/0x1720 [ 462.964386] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 462.969919] ? ioctl_preallocate+0x300/0x300 [ 462.974340] ? __fget_light+0x2e9/0x430 [ 462.978338] ? fget_raw+0x20/0x20 [ 462.981783] ? rcu_read_lock_sched_held+0x14f/0x180 [ 462.987166] ? kmem_cache_free+0x24f/0x290 [ 462.991396] ? putname+0xf7/0x130 [ 462.994869] ? do_syscall_64+0x9a/0x820 [ 462.998846] ? do_syscall_64+0x9a/0x820 [ 463.002827] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 463.007429] ? security_file_ioctl+0x94/0xc0 [ 463.011845] ksys_ioctl+0xa9/0xd0 [ 463.015313] __x64_sys_ioctl+0x73/0xb0 [ 463.019204] do_syscall_64+0x1b9/0x820 [ 463.023079] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.028429] ? syscall_return_slowpath+0x5e0/0x5e0 [ 463.033348] ? trace_hardirqs_on_caller+0x310/0x310 [ 463.038353] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 463.043357] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 463.050009] ? __switch_to_asm+0x40/0x70 [ 463.054056] ? __switch_to_asm+0x34/0x70 [ 463.058107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.062956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.068149] RIP: 0033:0x4573d7 [ 463.071333] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 463.090241] RSP: 002b:00007fb6b2b9ca88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.097937] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 463.105221] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 463.112497] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 463.119752] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 463.127029] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:40 executing program 1 (fault-call:3 fault-nth:13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x9effffff00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xffffff7f00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xffffff7f}, 0x0) [ 463.181734] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966-\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:40 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf00000000000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x3}, 0x0) 21:30:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf0ffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 463.385614] FAULT_INJECTION: forcing a failure. [ 463.385614] name failslab, interval 1, probability 0, space 0, times 0 [ 463.417221] CPU: 1 PID: 19910 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 463.425748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.435107] Call Trace: [ 463.435143] dump_stack+0x244/0x39d [ 463.435172] ? dump_stack_print_info.cold.1+0x20/0x20 [ 463.435204] should_fail.cold.4+0xa/0x17 [ 463.450658] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 463.455775] ? lock_release+0xa10/0xa10 [ 463.459762] ? perf_trace_sched_process_exec+0x860/0x860 [ 463.464063] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 463.465231] ? zap_class+0x640/0x640 [ 463.465258] ? find_held_lock+0x36/0x1c0 [ 463.465278] ? __lock_is_held+0xb5/0x140 [ 463.483438] ? perf_trace_sched_process_exec+0x860/0x860 [ 463.488897] ? kernfs_activate+0x21a/0x2c0 [ 463.493163] __should_failslab+0x124/0x180 [ 463.497414] should_failslab+0x9/0x14 [ 463.501228] kmem_cache_alloc+0x2be/0x730 [ 463.505387] ? lock_downgrade+0x900/0x900 [ 463.509550] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 463.514582] __kernfs_new_node+0x127/0x8d0 [ 463.518840] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 463.523609] ? zap_class+0x640/0x640 [ 463.527355] ? __lock_is_held+0xb5/0x140 [ 463.531426] ? wait_for_completion+0x8a0/0x8a0 [ 463.536036] ? mutex_unlock+0xd/0x10 [ 463.539759] ? kernfs_activate+0x21a/0x2c0 [ 463.544011] ? kernfs_walk_and_get_ns+0x340/0x340 [ 463.548873] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 463.554429] ? kernfs_link_sibling+0x1d2/0x3b0 [ 463.559029] kernfs_new_node+0x95/0x120 [ 463.563021] __kernfs_create_file+0x5a/0x340 [ 463.567447] sysfs_add_file_mode_ns+0x222/0x530 [ 463.572142] internal_create_group+0x3df/0xd80 [ 463.576754] ? remove_files.isra.1+0x190/0x190 [ 463.581348] ? up_write+0x7b/0x220 [ 463.584901] ? down_write_nested+0x130/0x130 [ 463.589325] ? down_read+0x120/0x120 [ 463.593069] sysfs_create_group+0x1f/0x30 [ 463.597232] lo_ioctl+0x1307/0x1d60 [ 463.600881] ? lo_rw_aio+0x1ef0/0x1ef0 [ 463.604780] blkdev_ioctl+0x9ac/0x2010 [ 463.608692] ? blkpg_ioctl+0xc10/0xc10 [ 463.612589] ? lock_downgrade+0x900/0x900 [ 463.616758] ? check_preemption_disabled+0x48/0x280 [ 463.621794] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 463.626739] ? kasan_check_read+0x11/0x20 [ 463.630900] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 463.636193] ? rcu_softirq_qs+0x20/0x20 [ 463.640195] ? __fget+0x4d1/0x740 [ 463.643685] ? ksys_dup3+0x680/0x680 [ 463.647423] block_ioctl+0xee/0x130 [ 463.651061] ? blkdev_fallocate+0x400/0x400 [ 463.655397] do_vfs_ioctl+0x1de/0x1720 [ 463.659297] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 463.664857] ? ioctl_preallocate+0x300/0x300 [ 463.669275] ? __fget_light+0x2e9/0x430 [ 463.673266] ? fget_raw+0x20/0x20 [ 463.676737] ? rcu_read_lock_sched_held+0x14f/0x180 [ 463.681770] ? kmem_cache_free+0x24f/0x290 [ 463.686019] ? putname+0xf7/0x130 [ 463.689487] ? do_syscall_64+0x9a/0x820 [ 463.693474] ? do_syscall_64+0x9a/0x820 [ 463.697464] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 463.702060] ? security_file_ioctl+0x94/0xc0 [ 463.706487] ksys_ioctl+0xa9/0xd0 [ 463.706508] __x64_sys_ioctl+0x73/0xb0 [ 463.706527] do_syscall_64+0x1b9/0x820 [ 463.713919] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 463.723158] ? syscall_return_slowpath+0x5e0/0x5e0 [ 463.728099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.732961] ? trace_hardirqs_on_caller+0x310/0x310 [ 463.737992] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 463.743020] ? prepare_exit_to_usermode+0x291/0x3b0 [ 463.748052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.752921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 463.758127] RIP: 0033:0x4573d7 [ 463.761341] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x200000000000000}, 0x0) 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x300000000000000}, 0x0) 21:30:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 463.780251] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.787972] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 463.795248] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 463.795257] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 463.795267] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 463.795276] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 463.855158] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 463.856092] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:41 executing program 1 (fault-call:3 fault-nth:14): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xffffff7f00000000}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x100000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) 21:30:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso966.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x74000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:41 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xf0ffffffffffff}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 21:30:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 464.054452] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 464.081271] FAULT_INJECTION: forcing a failure. [ 464.081271] name failslab, interval 1, probability 0, space 0, times 0 [ 464.135371] CPU: 1 PID: 19950 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 464.143902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.143909] Call Trace: [ 464.143937] dump_stack+0x244/0x39d [ 464.143965] ? dump_stack_print_info.cold.1+0x20/0x20 [ 464.143996] should_fail.cold.4+0xa/0x17 [ 464.144023] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 464.144045] ? lock_release+0xa10/0xa10 [ 464.144061] ? perf_trace_sched_process_exec+0x860/0x860 [ 464.144083] ? zap_class+0x640/0x640 [ 464.177949] ? find_held_lock+0x36/0x1c0 [ 464.177971] ? __lock_is_held+0xb5/0x140 [ 464.195244] ? perf_trace_sched_process_exec+0x860/0x860 [ 464.195261] ? kernfs_activate+0x21a/0x2c0 [ 464.195287] __should_failslab+0x124/0x180 [ 464.209190] should_failslab+0x9/0x14 [ 464.213180] kmem_cache_alloc+0x2be/0x730 [ 464.217342] ? lock_downgrade+0x900/0x900 [ 464.221515] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 464.226548] __kernfs_new_node+0x127/0x8d0 [ 464.230799] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 464.235568] ? zap_class+0x640/0x640 [ 464.239304] ? __lock_is_held+0xb5/0x140 [ 464.243384] ? wait_for_completion+0x8a0/0x8a0 [ 464.247998] ? mutex_unlock+0xd/0x10 [ 464.251726] ? kernfs_activate+0x21a/0x2c0 [ 464.255976] ? kernfs_walk_and_get_ns+0x340/0x340 [ 464.260838] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 464.266389] ? kernfs_link_sibling+0x1d2/0x3b0 [ 464.270994] kernfs_new_node+0x95/0x120 [ 464.274990] __kernfs_create_file+0x5a/0x340 [ 464.279419] sysfs_add_file_mode_ns+0x222/0x530 21:30:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xd502000000000000}, 0x0) 21:30:41 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 464.284114] internal_create_group+0x3df/0xd80 [ 464.288727] ? remove_files.isra.1+0x190/0x190 [ 464.293319] ? up_write+0x7b/0x220 [ 464.296868] ? down_write_nested+0x130/0x130 [ 464.296886] ? down_read+0x120/0x120 [ 464.296913] sysfs_create_group+0x1f/0x30 [ 464.305023] lo_ioctl+0x1307/0x1d60 [ 464.312787] ? lo_rw_aio+0x1ef0/0x1ef0 [ 464.316692] blkdev_ioctl+0x9ac/0x2010 [ 464.320594] ? blkpg_ioctl+0xc10/0xc10 [ 464.324505] ? lock_downgrade+0x900/0x900 [ 464.328667] ? check_preemption_disabled+0x48/0x280 [ 464.333699] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 464.338647] ? kasan_check_read+0x11/0x20 [ 464.342811] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 464.348099] ? rcu_softirq_qs+0x20/0x20 [ 464.352104] ? __fget+0x4d1/0x740 [ 464.355576] ? ksys_dup3+0x680/0x680 [ 464.355607] block_ioctl+0xee/0x130 [ 464.362953] ? blkdev_fallocate+0x400/0x400 [ 464.367289] do_vfs_ioctl+0x1de/0x1720 [ 464.371190] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 464.376742] ? ioctl_preallocate+0x300/0x300 [ 464.381176] ? __fget_light+0x2e9/0x430 21:30:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0xffffff9e}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 464.385170] ? fget_raw+0x20/0x20 [ 464.388650] ? rcu_read_lock_sched_held+0x14f/0x180 [ 464.393684] ? kmem_cache_free+0x24f/0x290 [ 464.397931] ? putname+0xf7/0x130 [ 464.401395] ? do_syscall_64+0x9a/0x820 [ 464.405378] ? do_syscall_64+0x9a/0x820 [ 464.409368] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 464.413971] ? security_file_ioctl+0x94/0xc0 [ 464.418399] ksys_ioctl+0xa9/0xd0 [ 464.421889] __x64_sys_ioctl+0x73/0xb0 [ 464.425794] do_syscall_64+0x1b9/0x820 [ 464.425810] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 464.425828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 464.425844] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.425862] ? trace_hardirqs_on_caller+0x310/0x310 [ 464.425878] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 464.425893] ? prepare_exit_to_usermode+0x291/0x3b0 [ 464.425913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.425935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.425953] RIP: 0033:0x4573d7 [ 464.459986] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.492088] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.499818] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 464.507095] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 464.514377] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 464.514387] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 464.514397] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 464.574460] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:42 executing program 1 (fault-call:3 fault-nth:15): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x81000000}, 0x0) 21:30:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xfffffdf9, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f393636ffff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x40030000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfcffffff}, 0x0) 21:30:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 464.712111] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 464.755591] FAULT_INJECTION: forcing a failure. [ 464.755591] name failslab, interval 1, probability 0, space 0, times 0 [ 464.792429] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 464.814593] CPU: 1 PID: 19988 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 464.823154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.832513] Call Trace: [ 464.832541] dump_stack+0x244/0x39d [ 464.832567] ? dump_stack_print_info.cold.1+0x20/0x20 [ 464.832601] should_fail.cold.4+0xa/0x17 [ 464.848066] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 464.848088] ? lock_release+0xa10/0xa10 [ 464.848103] ? perf_trace_sched_process_exec+0x860/0x860 [ 464.848125] ? zap_class+0x640/0x640 [ 464.857199] ? find_held_lock+0x36/0x1c0 [ 464.857221] ? __lock_is_held+0xb5/0x140 [ 464.857253] ? perf_trace_sched_process_exec+0x860/0x860 [ 464.866399] ? kernfs_activate+0x21a/0x2c0 [ 464.866429] __should_failslab+0x124/0x180 [ 464.866450] should_failslab+0x9/0x14 [ 464.866470] kmem_cache_alloc+0x2be/0x730 [ 464.896423] ? lock_downgrade+0x900/0x900 [ 464.900583] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 464.905638] __kernfs_new_node+0x127/0x8d0 [ 464.909897] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 464.914664] ? zap_class+0x640/0x640 [ 464.918399] ? __lock_is_held+0xb5/0x140 [ 464.922480] ? wait_for_completion+0x8a0/0x8a0 [ 464.927085] ? mutex_unlock+0xd/0x10 [ 464.930818] ? kernfs_activate+0x21a/0x2c0 [ 464.935070] ? kernfs_walk_and_get_ns+0x340/0x340 [ 464.939926] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 464.945474] ? kernfs_link_sibling+0x1d2/0x3b0 [ 464.950081] kernfs_new_node+0x95/0x120 [ 464.954077] __kernfs_create_file+0x5a/0x340 [ 464.958511] sysfs_add_file_mode_ns+0x222/0x530 [ 464.963205] internal_create_group+0x3df/0xd80 [ 464.967813] ? remove_files.isra.1+0x190/0x190 [ 464.972404] ? up_write+0x7b/0x220 [ 464.975955] ? down_write_nested+0x130/0x130 [ 464.980374] ? down_read+0x120/0x120 [ 464.984114] sysfs_create_group+0x1f/0x30 [ 464.988284] lo_ioctl+0x1307/0x1d60 [ 464.991932] ? lo_rw_aio+0x1ef0/0x1ef0 [ 464.995835] blkdev_ioctl+0x9ac/0x2010 [ 464.999747] ? blkpg_ioctl+0xc10/0xc10 [ 465.003650] ? lock_downgrade+0x900/0x900 [ 465.007810] ? check_preemption_disabled+0x48/0x280 [ 465.012841] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 465.017786] ? kasan_check_read+0x11/0x20 [ 465.021949] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 465.027245] ? rcu_softirq_qs+0x20/0x20 [ 465.031243] ? __fget+0x4d1/0x740 [ 465.034720] ? ksys_dup3+0x680/0x680 [ 465.038464] block_ioctl+0xee/0x130 [ 465.042102] ? blkdev_fallocate+0x400/0x400 [ 465.046449] do_vfs_ioctl+0x1de/0x1720 [ 465.050367] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 465.055933] ? ioctl_preallocate+0x300/0x300 [ 465.060354] ? __fget_light+0x2e9/0x430 21:30:42 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf00000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.064344] ? fget_raw+0x20/0x20 [ 465.067816] ? rcu_read_lock_sched_held+0x14f/0x180 [ 465.072843] ? kmem_cache_free+0x24f/0x290 [ 465.077092] ? putname+0xf7/0x130 [ 465.080558] ? do_syscall_64+0x9a/0x820 [ 465.084541] ? do_syscall_64+0x9a/0x820 [ 465.088527] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 465.093118] ? security_file_ioctl+0x94/0xc0 [ 465.097552] ksys_ioctl+0xa9/0xd0 [ 465.101032] __x64_sys_ioctl+0x73/0xb0 [ 465.104937] do_syscall_64+0x1b9/0x820 [ 465.108841] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 465.114218] ? syscall_return_slowpath+0x5e0/0x5e0 [ 465.119162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.124020] ? trace_hardirqs_on_caller+0x310/0x310 [ 465.129060] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 465.134092] ? prepare_exit_to_usermode+0x291/0x3b0 [ 465.139137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.144003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 465.149199] RIP: 0033:0x4573d7 21:30:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf0ffff}, 0x0) 21:30:42 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.152406] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 465.171322] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.179044] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 465.186588] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 465.193872] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 465.201149] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 465.208425] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 465.264719] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:43 executing program 1 (fault-call:3 fault-nth:16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x74, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x2000000}, 0x0) 21:30:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x9effffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.404754] isofs_fill_super: root inode is not a directory. Corrupted media? [ 465.438129] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x3000000}, 0x0) [ 465.459440] FAULT_INJECTION: forcing a failure. [ 465.459440] name failslab, interval 1, probability 0, space 0, times 0 [ 465.500182] CPU: 1 PID: 20019 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 465.508716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.508723] Call Trace: [ 465.508750] dump_stack+0x244/0x39d [ 465.508778] ? dump_stack_print_info.cold.1+0x20/0x20 [ 465.508808] should_fail.cold.4+0xa/0x17 [ 465.508838] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 465.524389] ? lock_release+0xa10/0xa10 [ 465.524405] ? perf_trace_sched_process_exec+0x860/0x860 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.524429] ? zap_class+0x640/0x640 [ 465.524456] ? find_held_lock+0x36/0x1c0 [ 465.524476] ? __lock_is_held+0xb5/0x140 [ 465.538832] ? perf_trace_sched_process_exec+0x860/0x860 [ 465.538853] ? kernfs_activate+0x21a/0x2c0 [ 465.556022] __should_failslab+0x124/0x180 [ 465.556044] should_failslab+0x9/0x14 [ 465.556064] kmem_cache_alloc+0x2be/0x730 [ 465.569798] ? lock_downgrade+0x900/0x900 [ 465.569820] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 465.569845] __kernfs_new_node+0x127/0x8d0 [ 465.591161] ? kernfs_dop_revalidate+0x3c0/0x3c0 21:30:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.591180] ? zap_class+0x640/0x640 [ 465.591206] ? __lock_is_held+0xb5/0x140 [ 465.607938] ? wait_for_completion+0x8a0/0x8a0 [ 465.612547] ? mutex_unlock+0xd/0x10 [ 465.616271] ? kernfs_activate+0x21a/0x2c0 [ 465.616291] ? kernfs_walk_and_get_ns+0x340/0x340 [ 465.616311] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 465.616330] ? kernfs_link_sibling+0x1d2/0x3b0 [ 465.630924] kernfs_new_node+0x95/0x120 [ 465.630948] __kernfs_create_file+0x5a/0x340 [ 465.630976] sysfs_add_file_mode_ns+0x222/0x530 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x300}, 0x0) [ 465.648585] internal_create_group+0x3df/0xd80 [ 465.648613] ? remove_files.isra.1+0x190/0x190 [ 465.657777] ? up_write+0x7b/0x220 [ 465.657794] ? down_write_nested+0x130/0x130 [ 465.657815] ? down_read+0x120/0x120 [ 465.669492] sysfs_create_group+0x1f/0x30 [ 465.673666] lo_ioctl+0x1307/0x1d60 [ 465.677319] ? lo_rw_aio+0x1ef0/0x1ef0 [ 465.681231] blkdev_ioctl+0x9ac/0x2010 [ 465.685147] ? blkpg_ioctl+0xc10/0xc10 [ 465.689052] ? lock_downgrade+0x900/0x900 [ 465.693225] ? check_preemption_disabled+0x48/0x280 [ 465.693250] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 465.693267] ? kasan_check_read+0x11/0x20 [ 465.693285] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 465.693303] ? rcu_softirq_qs+0x20/0x20 [ 465.693328] ? __fget+0x4d1/0x740 [ 465.693348] ? ksys_dup3+0x680/0x680 [ 465.693376] block_ioctl+0xee/0x130 [ 465.707461] ? blkdev_fallocate+0x400/0x400 [ 465.707479] do_vfs_ioctl+0x1de/0x1720 [ 465.707504] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 465.720191] ? ioctl_preallocate+0x300/0x300 [ 465.720210] ? __fget_light+0x2e9/0x430 21:30:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 465.720228] ? fget_raw+0x20/0x20 [ 465.735746] ? rcu_read_lock_sched_held+0x14f/0x180 [ 465.735766] ? kmem_cache_free+0x24f/0x290 [ 465.735784] ? putname+0xf7/0x130 [ 465.735803] ? do_syscall_64+0x9a/0x820 [ 465.735822] ? do_syscall_64+0x9a/0x820 [ 465.749728] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 465.749750] ? security_file_ioctl+0x94/0xc0 [ 465.749771] ksys_ioctl+0xa9/0xd0 [ 465.749790] __x64_sys_ioctl+0x73/0xb0 [ 465.758726] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 465.762483] do_syscall_64+0x1b9/0x820 [ 465.762502] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 465.762520] ? syscall_return_slowpath+0x5e0/0x5e0 [ 465.762539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.769960] ? trace_hardirqs_on_caller+0x310/0x310 [ 465.769981] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 465.770000] ? prepare_exit_to_usermode+0x291/0x3b0 [ 465.770021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.835427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 465.840632] RIP: 0033:0x4573d7 [ 465.843839] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 465.862753] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.870470] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 465.877756] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 465.885035] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 465.892309] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 465.899585] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 465.964459] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:43 executing program 1 (fault-call:3 fault-nth:17): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfffffffc}, 0x0) 21:30:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xf5ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 466.080259] isofs_fill_super: root inode is not a directory. Corrupted media? [ 466.107807] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x9effffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 466.136144] isofs_fill_super: root inode is not a directory. Corrupted media? [ 466.172192] FAULT_INJECTION: forcing a failure. [ 466.172192] name failslab, interval 1, probability 0, space 0, times 0 [ 466.193118] CPU: 0 PID: 20058 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 466.201654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.211016] Call Trace: [ 466.213640] dump_stack+0x244/0x39d [ 466.217466] ? dump_stack_print_info.cold.1+0x20/0x20 [ 466.222684] should_fail.cold.4+0xa/0x17 [ 466.226770] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 466.231890] ? lock_release+0xa10/0xa10 [ 466.231906] ? perf_trace_sched_process_exec+0x860/0x860 [ 466.231932] ? zap_class+0x640/0x640 [ 466.231959] ? find_held_lock+0x36/0x1c0 [ 466.231980] ? __lock_is_held+0xb5/0x140 [ 466.232007] ? perf_trace_sched_process_exec+0x860/0x860 [ 466.245124] ? kernfs_activate+0x21a/0x2c0 [ 466.245154] __should_failslab+0x124/0x180 [ 466.245175] should_failslab+0x9/0x14 [ 466.245194] kmem_cache_alloc+0x2be/0x730 [ 466.275150] ? lock_downgrade+0x900/0x900 [ 466.279317] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 466.284348] __kernfs_new_node+0x127/0x8d0 [ 466.288594] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 466.293378] ? zap_class+0x640/0x640 [ 466.297116] ? __lock_is_held+0xb5/0x140 [ 466.301190] ? wait_for_completion+0x8a0/0x8a0 [ 466.305795] ? mutex_unlock+0xd/0x10 [ 466.305812] ? kernfs_activate+0x21a/0x2c0 [ 466.305832] ? kernfs_walk_and_get_ns+0x340/0x340 [ 466.305854] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 466.305870] ? kernfs_link_sibling+0x1d2/0x3b0 [ 466.305893] kernfs_new_node+0x95/0x120 [ 466.305914] __kernfs_create_file+0x5a/0x340 [ 466.318723] sysfs_add_file_mode_ns+0x222/0x530 [ 466.318752] internal_create_group+0x3df/0xd80 [ 466.318781] ? remove_files.isra.1+0x190/0x190 [ 466.318796] ? up_write+0x7b/0x220 [ 466.318814] ? down_write_nested+0x130/0x130 [ 466.359024] ? down_read+0x120/0x120 [ 466.362765] sysfs_create_group+0x1f/0x30 [ 466.366929] lo_ioctl+0x1307/0x1d60 [ 466.370578] ? lo_rw_aio+0x1ef0/0x1ef0 [ 466.374484] blkdev_ioctl+0x9ac/0x2010 [ 466.378392] ? blkpg_ioctl+0xc10/0xc10 [ 466.382296] ? lock_downgrade+0x900/0x900 [ 466.382312] ? check_preemption_disabled+0x48/0x280 [ 466.382337] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 466.382355] ? kasan_check_read+0x11/0x20 [ 466.382374] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 466.382392] ? rcu_softirq_qs+0x20/0x20 [ 466.382417] ? __fget+0x4d1/0x740 [ 466.396489] ? ksys_dup3+0x680/0x680 [ 466.396521] block_ioctl+0xee/0x130 [ 466.396541] ? blkdev_fallocate+0x400/0x400 [ 466.424996] do_vfs_ioctl+0x1de/0x1720 [ 466.428899] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 466.434452] ? ioctl_preallocate+0x300/0x300 [ 466.438879] ? __fget_light+0x2e9/0x430 [ 466.442868] ? fget_raw+0x20/0x20 [ 466.446336] ? rcu_read_lock_sched_held+0x14f/0x180 [ 466.451364] ? kmem_cache_free+0x24f/0x290 [ 466.455606] ? putname+0xf7/0x130 [ 466.455643] ? do_syscall_64+0x9a/0x820 [ 466.455671] ? do_syscall_64+0x9a/0x820 [ 466.463097] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 466.463120] ? security_file_ioctl+0x94/0xc0 [ 466.463140] ksys_ioctl+0xa9/0xd0 [ 466.463160] __x64_sys_ioctl+0x73/0xb0 [ 466.463179] do_syscall_64+0x1b9/0x820 [ 466.463196] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 466.463214] ? syscall_return_slowpath+0x5e0/0x5e0 [ 466.463234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.502505] ? trace_hardirqs_on_caller+0x310/0x310 [ 466.507536] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 466.512567] ? prepare_exit_to_usermode+0x291/0x3b0 [ 466.517606] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 466.522489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.527683] RIP: 0033:0x4573d7 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 466.530887] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.549795] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.557512] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 466.564786] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 466.572060] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 466.579335] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 466.586611] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 466.606255] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 466.668342] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:44 executing program 1 (fault-call:3 fault-nth:18): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x9effffff}, 0x0) 21:30:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x403000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 466.826685] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 466.863790] FAULT_INJECTION: forcing a failure. [ 466.863790] name failslab, interval 1, probability 0, space 0, times 0 [ 466.878966] CPU: 0 PID: 20090 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 466.887473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.887481] Call Trace: [ 466.887509] dump_stack+0x244/0x39d [ 466.887538] ? dump_stack_print_info.cold.1+0x20/0x20 [ 466.887563] ? is_bpf_text_address+0xd3/0x170 [ 466.887587] should_fail.cold.4+0xa/0x17 [ 466.887614] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 466.887676] ? zap_class+0x640/0x640 [ 466.887696] ? save_stack+0x43/0xd0 [ 466.887709] ? kasan_kmalloc+0xc7/0xe0 [ 466.887725] ? kmem_cache_alloc_trace+0x152/0x750 [ 466.887745] ? kobject_uevent_env+0x2f3/0x101e [ 466.929423] ? kobject_uevent+0x1f/0x24 [ 466.929442] ? lo_ioctl+0x1385/0x1d60 [ 466.929464] ? find_held_lock+0x36/0x1c0 [ 466.954748] ? __lock_is_held+0xb5/0x140 [ 466.958838] ? perf_trace_sched_process_exec+0x860/0x860 [ 466.964302] __should_failslab+0x124/0x180 [ 466.968553] should_failslab+0x9/0x14 [ 466.972368] __kmalloc+0x2e0/0x760 [ 466.972387] ? kobject_uevent_env+0x2f3/0x101e [ 466.972408] ? rcu_read_lock_sched_held+0x14f/0x180 [ 466.985521] ? kobject_get_path+0xc2/0x1b0 [ 466.985539] ? kmem_cache_alloc_trace+0x353/0x750 [ 466.985558] kobject_get_path+0xc2/0x1b0 [ 466.985579] kobject_uevent_env+0x314/0x101e [ 466.985604] kobject_uevent+0x1f/0x24 [ 466.998731] lo_ioctl+0x1385/0x1d60 [ 466.998758] ? lo_rw_aio+0x1ef0/0x1ef0 [ 466.998780] blkdev_ioctl+0x9ac/0x2010 [ 467.006980] ? blkpg_ioctl+0xc10/0xc10 [ 467.006997] ? lock_downgrade+0x900/0x900 [ 467.007017] ? check_preemption_disabled+0x48/0x280 [ 467.031443] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 467.036387] ? kasan_check_read+0x11/0x20 [ 467.040550] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 467.045845] ? rcu_softirq_qs+0x20/0x20 [ 467.049848] ? __fget+0x4d1/0x740 [ 467.053411] ? ksys_dup3+0x680/0x680 [ 467.057148] block_ioctl+0xee/0x130 [ 467.060784] ? blkdev_fallocate+0x400/0x400 [ 467.065120] do_vfs_ioctl+0x1de/0x1720 [ 467.069028] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 467.074593] ? ioctl_preallocate+0x300/0x300 [ 467.079122] ? __fget_light+0x2e9/0x430 [ 467.083116] ? fget_raw+0x20/0x20 [ 467.086589] ? rcu_read_lock_sched_held+0x14f/0x180 [ 467.091646] ? kmem_cache_free+0x24f/0x290 [ 467.091665] ? putname+0xf7/0x130 [ 467.091685] ? do_syscall_64+0x9a/0x820 [ 467.103329] ? do_syscall_64+0x9a/0x820 [ 467.103349] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 467.103369] ? security_file_ioctl+0x94/0xc0 [ 467.103389] ksys_ioctl+0xa9/0xd0 [ 467.103409] __x64_sys_ioctl+0x73/0xb0 [ 467.103429] do_syscall_64+0x1b9/0x820 [ 467.116369] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.116390] ? syscall_return_slowpath+0x5e0/0x5e0 [ 467.116410] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.123737] ? trace_hardirqs_on_caller+0x310/0x310 [ 467.123755] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 467.123774] ? prepare_exit_to_usermode+0x291/0x3b0 [ 467.123797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.123819] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.167831] RIP: 0033:0x4573d7 [ 467.171037] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.190468] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.198186] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 467.205459] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 467.212733] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 467.220016] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 21:30:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x2000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x81000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 467.227293] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 467.297153] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:45 executing program 1 (fault-call:3 fault-nth:19): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf000}, 0x0) 21:30:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0x8100}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x40000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630c0", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0xc}]}, 0x2c}}, 0x0) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfffffff0}, 0x0) [ 467.451849] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 467.523884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 467.532653] FAULT_INJECTION: forcing a failure. [ 467.532653] name failslab, interval 1, probability 0, space 0, times 0 [ 467.555994] CPU: 0 PID: 20124 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 467.564513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.573872] Call Trace: [ 467.576477] dump_stack+0x244/0x39d [ 467.580125] ? dump_stack_print_info.cold.1+0x20/0x20 [ 467.585342] should_fail.cold.4+0xa/0x17 [ 467.589419] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 467.594545] ? lock_release+0xa10/0xa10 [ 467.598550] ? perf_trace_sched_process_exec+0x860/0x860 [ 467.604012] ? zap_class+0x640/0x640 [ 467.607738] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 467.612771] ? find_held_lock+0x36/0x1c0 [ 467.616849] ? __lock_is_held+0xb5/0x140 [ 467.620983] ? put_dec+0x3b/0xf0 [ 467.624389] ? perf_trace_sched_process_exec+0x860/0x860 [ 467.629858] ? zap_class+0x640/0x640 [ 467.633591] __should_failslab+0x124/0x180 [ 467.637863] should_failslab+0x9/0x14 [ 467.641676] kmem_cache_alloc_node+0x26e/0x730 [ 467.646272] ? find_held_lock+0x36/0x1c0 [ 467.650356] __alloc_skb+0x114/0x770 [ 467.654089] ? netdev_alloc_frag+0x1f0/0x1f0 [ 467.658512] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 467.663452] ? kasan_check_read+0x11/0x20 [ 467.667614] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 467.672920] ? rcu_softirq_qs+0x20/0x20 [ 467.676917] ? netlink_has_listeners+0x2cb/0x4a0 [ 467.681697] ? netlink_tap_init_net+0x3d0/0x3d0 [ 467.686396] alloc_uevent_skb+0x84/0x1da [ 467.690477] kobject_uevent_env+0xa52/0x101e [ 467.694912] kobject_uevent+0x1f/0x24 [ 467.698733] lo_ioctl+0x1385/0x1d60 [ 467.702384] ? lo_rw_aio+0x1ef0/0x1ef0 [ 467.706284] blkdev_ioctl+0x9ac/0x2010 [ 467.710185] ? blkpg_ioctl+0xc10/0xc10 [ 467.714083] ? lock_downgrade+0x900/0x900 [ 467.718239] ? check_preemption_disabled+0x48/0x280 [ 467.723269] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 467.728214] ? kasan_check_read+0x11/0x20 [ 467.732372] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 467.737686] ? rcu_softirq_qs+0x20/0x20 [ 467.741688] ? __fget+0x4d1/0x740 [ 467.745159] ? ksys_dup3+0x680/0x680 [ 467.748899] block_ioctl+0xee/0x130 [ 467.752552] ? blkdev_fallocate+0x400/0x400 [ 467.756888] do_vfs_ioctl+0x1de/0x1720 [ 467.760796] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 467.766350] ? ioctl_preallocate+0x300/0x300 [ 467.770797] ? __fget_light+0x2e9/0x430 [ 467.774783] ? fget_raw+0x20/0x20 [ 467.778249] ? rcu_read_lock_sched_held+0x14f/0x180 [ 467.783278] ? kmem_cache_free+0x24f/0x290 [ 467.787522] ? putname+0xf7/0x130 [ 467.790986] ? do_syscall_64+0x9a/0x820 [ 467.794969] ? do_syscall_64+0x9a/0x820 [ 467.798960] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 467.803557] ? security_file_ioctl+0x94/0xc0 [ 467.807981] ksys_ioctl+0xa9/0xd0 [ 467.811453] __x64_sys_ioctl+0x73/0xb0 [ 467.815359] do_syscall_64+0x1b9/0x820 [ 467.819260] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 467.824655] ? syscall_return_slowpath+0x5e0/0x5e0 [ 467.829596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.834473] ? trace_hardirqs_on_caller+0x310/0x310 [ 467.839500] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 467.844530] ? prepare_exit_to_usermode+0x291/0x3b0 [ 467.849565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.854432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.859644] RIP: 0033:0x4573d7 [ 467.862852] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.881764] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.889480] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 467.896758] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 467.904031] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 467.911335] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 467.918610] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) 21:30:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630f5", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 467.950529] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 467.974835] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:45 executing program 1 (fault-call:3 fault-nth:20): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x3}]}, 0x2c}}, 0x0) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x20100000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xfcffffff00000000}, 0x0) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:45 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0xe}]}, 0x2c}}, 0x0) [ 468.118438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 468.205672] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 468.217053] FAULT_INJECTION: forcing a failure. [ 468.217053] name failslab, interval 1, probability 0, space 0, times 0 [ 468.244529] CPU: 1 PID: 20161 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 21:30:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 468.253068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.262424] Call Trace: [ 468.265030] dump_stack+0x244/0x39d [ 468.268685] ? dump_stack_print_info.cold.1+0x20/0x20 [ 468.273916] ? is_bpf_text_address+0xd3/0x170 [ 468.278451] should_fail.cold.4+0xa/0x17 [ 468.282538] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 468.287684] ? zap_class+0x640/0x640 [ 468.291418] ? save_stack+0x43/0xd0 [ 468.295074] ? kasan_kmalloc+0xc7/0xe0 [ 468.298991] ? kmem_cache_alloc_trace+0x152/0x750 21:30:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 468.303841] ? kobject_uevent_env+0x2f3/0x101e [ 468.308432] ? kobject_uevent+0x1f/0x24 [ 468.312418] ? lo_ioctl+0x1385/0x1d60 [ 468.316239] ? find_held_lock+0x36/0x1c0 [ 468.320316] ? __lock_is_held+0xb5/0x140 [ 468.324385] ? rvt_create_qp+0x1478/0x2930 [ 468.328655] ? perf_trace_sched_process_exec+0x860/0x860 [ 468.334129] __should_failslab+0x124/0x180 [ 468.334159] should_failslab+0x9/0x14 [ 468.334175] __kmalloc+0x2e0/0x760 [ 468.334193] ? kobject_uevent_env+0x2f3/0x101e [ 468.334210] ? rcu_read_lock_sched_held+0x14f/0x180 [ 468.334223] ? kobject_get_path+0xc2/0x1b0 [ 468.334239] ? kmem_cache_alloc_trace+0x353/0x750 [ 468.334256] kobject_get_path+0xc2/0x1b0 [ 468.345831] kobject_uevent_env+0x314/0x101e [ 468.345860] kobject_uevent+0x1f/0x24 [ 468.345880] lo_ioctl+0x1385/0x1d60 [ 468.345904] ? lo_rw_aio+0x1ef0/0x1ef0 [ 468.355485] blkdev_ioctl+0x9ac/0x2010 [ 468.355507] ? blkpg_ioctl+0xc10/0xc10 [ 468.355523] ? lock_downgrade+0x900/0x900 [ 468.355543] ? check_preemption_disabled+0x48/0x280 [ 468.364605] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 468.364633] ? kasan_check_read+0x11/0x20 [ 468.364667] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 468.364685] ? rcu_softirq_qs+0x20/0x20 [ 468.364712] ? __fget+0x4d1/0x740 [ 468.423095] ? ksys_dup3+0x680/0x680 [ 468.426857] block_ioctl+0xee/0x130 [ 468.430500] ? blkdev_fallocate+0x400/0x400 [ 468.434837] do_vfs_ioctl+0x1de/0x1720 [ 468.438736] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 468.444293] ? ioctl_preallocate+0x300/0x300 [ 468.448717] ? __fget_light+0x2e9/0x430 [ 468.452706] ? fget_raw+0x20/0x20 [ 468.456173] ? rcu_read_lock_sched_held+0x14f/0x180 [ 468.461198] ? kmem_cache_free+0x24f/0x290 [ 468.465453] ? putname+0xf7/0x130 [ 468.468920] ? do_syscall_64+0x9a/0x820 [ 468.472909] ? do_syscall_64+0x9a/0x820 [ 468.476897] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 468.481494] ? security_file_ioctl+0x94/0xc0 [ 468.485948] ksys_ioctl+0xa9/0xd0 [ 468.489418] __x64_sys_ioctl+0x73/0xb0 [ 468.493323] do_syscall_64+0x1b9/0x820 [ 468.497239] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 468.502614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 468.507563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.512425] ? trace_hardirqs_on_caller+0x310/0x310 [ 468.517457] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 468.522485] ? prepare_exit_to_usermode+0x291/0x3b0 [ 468.527691] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.532555] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.537750] RIP: 0033:0x4573d7 21:30:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x1000000}, 0x0) [ 468.540958] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.559872] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.567593] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 468.574879] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 468.582162] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 468.589434] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 468.589448] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 [ 468.648607] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 468.657299] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:46 executing program 1 (fault-call:3 fault-nth:21): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xfffffffffffff000}}]}, 0x2c}}, 0x0) 21:30:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xf000000}, 0x0) 21:30:46 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf}}]}, 0x2c}}, 0x0) 21:30:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0xd502}, 0x0) 21:30:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f3936363006", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:46 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 468.846658] FAULT_INJECTION: forcing a failure. [ 468.846658] name failslab, interval 1, probability 0, space 0, times 0 [ 468.873494] CPU: 1 PID: 20193 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 468.882015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.891463] Call Trace: [ 468.894071] dump_stack+0x244/0x39d [ 468.897733] ? dump_stack_print_info.cold.1+0x20/0x20 [ 468.902945] ? lock_downgrade+0x900/0x900 [ 468.907114] should_fail.cold.4+0xa/0x17 [ 468.911192] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 468.916301] ? rcu_softirq_qs+0x20/0x20 [ 468.920261] ? unwind_dump+0x190/0x190 [ 468.924158] ? is_bpf_text_address+0xd3/0x170 [ 468.928652] ? zap_class+0x640/0x640 [ 468.932356] ? __kernel_text_address+0xd/0x40 [ 468.936856] ? unwind_get_return_address+0x61/0xa0 [ 468.941776] ? find_held_lock+0x36/0x1c0 [ 468.945825] ? __lock_is_held+0xb5/0x140 [ 468.949885] ? sata_down_spd_limit+0x28/0x420 [ 468.954399] ? kobject_uevent+0x1f/0x24 [ 468.958385] ? perf_trace_sched_process_exec+0x860/0x860 [ 468.963832] ? do_vfs_ioctl+0x1de/0x1720 [ 468.967905] ? ksys_ioctl+0xa9/0xd0 [ 468.971521] ? __x64_sys_ioctl+0x73/0xb0 [ 468.975570] ? do_syscall_64+0x1b9/0x820 [ 468.979635] __should_failslab+0x124/0x180 [ 468.983885] should_failslab+0x9/0x14 [ 468.987720] kmem_cache_alloc+0x2be/0x730 [ 468.991864] skb_clone+0x1bb/0x500 [ 468.995391] ? skb_split+0x11e0/0x11e0 [ 468.999268] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.004275] ? netlink_trim+0x1b4/0x380 [ 469.008239] ? netlink_skb_destructor+0x210/0x210 [ 469.013097] netlink_broadcast_filtered+0x110f/0x1680 [ 469.018299] ? __netlink_sendskb+0xd0/0xd0 [ 469.022528] ? kasan_check_read+0x11/0x20 [ 469.026667] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 469.031933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.037458] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 469.042913] ? refcount_add_not_zero_checked+0x330/0x330 [ 469.048364] ? netlink_has_listeners+0x2cb/0x4a0 [ 469.053106] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.058118] netlink_broadcast+0x3a/0x50 [ 469.062172] kobject_uevent_env+0xa83/0x101e [ 469.066573] kobject_uevent+0x1f/0x24 [ 469.070371] lo_ioctl+0x1385/0x1d60 [ 469.074006] ? lo_rw_aio+0x1ef0/0x1ef0 [ 469.077883] blkdev_ioctl+0x9ac/0x2010 [ 469.081763] ? blkpg_ioctl+0xc10/0xc10 [ 469.085647] ? lock_downgrade+0x900/0x900 [ 469.089784] ? check_preemption_disabled+0x48/0x280 [ 469.094790] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 469.099723] ? kasan_check_read+0x11/0x20 [ 469.103872] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 469.109142] ? rcu_softirq_qs+0x20/0x20 [ 469.113114] ? __fget+0x4d1/0x740 [ 469.116595] ? ksys_dup3+0x680/0x680 [ 469.120321] block_ioctl+0xee/0x130 [ 469.123934] ? blkdev_fallocate+0x400/0x400 [ 469.128243] do_vfs_ioctl+0x1de/0x1720 [ 469.132123] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 469.137653] ? ioctl_preallocate+0x300/0x300 [ 469.142059] ? __fget_light+0x2e9/0x430 [ 469.146025] ? fget_raw+0x20/0x20 [ 469.149468] ? rcu_read_lock_sched_held+0x14f/0x180 [ 469.154473] ? kmem_cache_free+0x24f/0x290 [ 469.158710] ? putname+0xf7/0x130 [ 469.162166] ? do_syscall_64+0x9a/0x820 [ 469.166139] ? do_syscall_64+0x9a/0x820 [ 469.170106] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 469.174683] ? security_file_ioctl+0x94/0xc0 [ 469.179081] ksys_ioctl+0xa9/0xd0 [ 469.182669] __x64_sys_ioctl+0x73/0xb0 [ 469.186554] do_syscall_64+0x1b9/0x820 [ 469.190442] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 469.195811] ? syscall_return_slowpath+0x5e0/0x5e0 [ 469.200728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.205570] ? trace_hardirqs_on_caller+0x310/0x310 [ 469.210589] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 469.215596] ? prepare_exit_to_usermode+0x291/0x3b0 [ 469.220629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.225465] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.230649] RIP: 0033:0x4573d7 [ 469.233841] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.252735] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.260432] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 469.267687] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 469.274941] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 469.282195] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 469.289462] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 469.305429] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 469.335081] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x403000000000000}}]}, 0x2c}}, 0x0) 21:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) [ 469.352227] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:47 executing program 1 (fault-call:3 fault-nth:22): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x2}}]}, 0x2c}}, 0x0) 21:30:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf0ffffff00000000}}]}, 0x2c}}, 0x0) 21:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 21:30:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 469.525925] FAULT_INJECTION: forcing a failure. [ 469.525925] name failslab, interval 1, probability 0, space 0, times 0 [ 469.564866] CPU: 0 PID: 20220 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 469.573421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.582758] Call Trace: [ 469.585347] dump_stack+0x244/0x39d [ 469.588988] ? dump_stack_print_info.cold.1+0x20/0x20 [ 469.594184] ? lock_downgrade+0x900/0x900 [ 469.598323] should_fail.cold.4+0xa/0x17 [ 469.602373] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 469.607466] ? rcu_softirq_qs+0x20/0x20 [ 469.611425] ? unwind_dump+0x190/0x190 [ 469.615307] ? is_bpf_text_address+0xd3/0x170 [ 469.619807] ? zap_class+0x640/0x640 [ 469.623510] ? __kernel_text_address+0xd/0x40 [ 469.627994] ? unwind_get_return_address+0x61/0xa0 [ 469.632913] ? find_held_lock+0x36/0x1c0 [ 469.636964] ? __lock_is_held+0xb5/0x140 [ 469.641018] ? kobject_uevent+0x1f/0x24 [ 469.644987] ? perf_trace_sched_process_exec+0x860/0x860 [ 469.650424] ? do_vfs_ioctl+0x1de/0x1720 [ 469.654482] ? ksys_ioctl+0xa9/0xd0 [ 469.658140] ? __x64_sys_ioctl+0x73/0xb0 [ 469.662203] ? do_syscall_64+0x1b9/0x820 [ 469.666263] __should_failslab+0x124/0x180 [ 469.670488] should_failslab+0x9/0x14 [ 469.674281] kmem_cache_alloc+0x2be/0x730 [ 469.678437] skb_clone+0x1bb/0x500 [ 469.681981] ? skb_split+0x11e0/0x11e0 [ 469.685873] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.690880] ? netlink_trim+0x1b4/0x380 [ 469.694858] ? netlink_skb_destructor+0x210/0x210 [ 469.699709] netlink_broadcast_filtered+0x110f/0x1680 [ 469.704892] ? __netlink_sendskb+0xd0/0xd0 [ 469.709134] ? kasan_check_read+0x11/0x20 [ 469.713300] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 469.718568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.724094] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 469.729534] ? refcount_add_not_zero_checked+0x330/0x330 [ 469.734972] ? netlink_has_listeners+0x2cb/0x4a0 [ 469.739725] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 469.744743] netlink_broadcast+0x3a/0x50 [ 469.748804] kobject_uevent_env+0xa83/0x101e [ 469.753242] kobject_uevent+0x1f/0x24 [ 469.757050] lo_ioctl+0x1385/0x1d60 [ 469.760670] ? lo_rw_aio+0x1ef0/0x1ef0 [ 469.764558] blkdev_ioctl+0x9ac/0x2010 [ 469.768447] ? blkpg_ioctl+0xc10/0xc10 [ 469.772320] ? lock_downgrade+0x900/0x900 [ 469.776456] ? check_preemption_disabled+0x48/0x280 [ 469.781462] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 469.786380] ? kasan_check_read+0x11/0x20 [ 469.790522] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 469.795803] ? rcu_softirq_qs+0x20/0x20 [ 469.799781] ? __fget+0x4d1/0x740 [ 469.803226] ? ksys_dup3+0x680/0x680 [ 469.806933] block_ioctl+0xee/0x130 [ 469.810545] ? blkdev_fallocate+0x400/0x400 [ 469.814855] do_vfs_ioctl+0x1de/0x1720 [ 469.818732] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 469.824258] ? ioctl_preallocate+0x300/0x300 [ 469.828660] ? __fget_light+0x2e9/0x430 [ 469.832639] ? fget_raw+0x20/0x20 [ 469.836085] ? rcu_read_lock_sched_held+0x14f/0x180 [ 469.841089] ? kmem_cache_free+0x24f/0x290 [ 469.845308] ? putname+0xf7/0x130 [ 469.848763] ? do_syscall_64+0x9a/0x820 [ 469.852723] ? do_syscall_64+0x9a/0x820 [ 469.856687] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 469.861259] ? security_file_ioctl+0x94/0xc0 [ 469.865678] ksys_ioctl+0xa9/0xd0 [ 469.869125] __x64_sys_ioctl+0x73/0xb0 [ 469.873014] do_syscall_64+0x1b9/0x820 [ 469.876891] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 469.882247] ? syscall_return_slowpath+0x5e0/0x5e0 [ 469.887162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.891993] ? trace_hardirqs_on_caller+0x310/0x310 [ 469.897012] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 469.902049] ? prepare_exit_to_usermode+0x291/0x3b0 [ 469.907056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.911895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.917088] RIP: 0033:0x4573d7 [ 469.920270] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.939156] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.946861] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 00000000004573d7 [ 469.954127] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 469.961393] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 469.968653] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf0ffffffffffff}}]}, 0x2c}}, 0x0) [ 469.975908] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 470.006164] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 470.035663] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue 21:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 21:30:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf0ffff}}]}, 0x2c}}, 0x0) [ 470.055551] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:47 executing program 1 (fault-call:3 fault-nth:23): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) [ 470.102708] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) [ 470.154795] isofs_fill_super: root inode is not a directory. Corrupted media? 21:30:47 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x8100}}]}, 0x2c}}, 0x0) 21:30:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 21:30:47 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 470.238952] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 470.245601] FAULT_INJECTION: forcing a failure. [ 470.245601] name failslab, interval 1, probability 0, space 0, times 0 [ 470.258914] CPU: 0 PID: 20253 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 470.267421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.276800] Call Trace: [ 470.276826] dump_stack+0x244/0x39d [ 470.276848] ? dump_stack_print_info.cold.1+0x20/0x20 [ 470.276866] ? lo_ioctl+0xe6/0x1d60 [ 470.276889] should_fail.cold.4+0xa/0x17 [ 470.291890] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 470.291910] ? blkpg_ioctl+0xc10/0xc10 [ 470.291925] ? lock_downgrade+0x900/0x900 [ 470.291946] ? check_preemption_disabled+0x48/0x280 [ 470.301111] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 470.301129] ? kasan_check_read+0x11/0x20 [ 470.301147] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 470.301176] ? find_held_lock+0x36/0x1c0 [ 470.309206] ? perf_trace_sched_process_exec+0x860/0x860 [ 470.309224] ? block_ioctl+0xee/0x130 [ 470.309246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.319178] __should_failslab+0x124/0x180 [ 470.319200] should_failslab+0x9/0x14 [ 470.319222] kmem_cache_alloc+0x2be/0x730 [ 470.359614] ? fget_raw+0x20/0x20 [ 470.363104] getname_flags+0xd0/0x590 [ 470.366920] do_mkdirat+0xc5/0x310 [ 470.370473] ? __ia32_sys_mknod+0xb0/0xb0 [ 470.374646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.380023] ? trace_hardirqs_off_caller+0x300/0x300 [ 470.385137] ? ksys_ioctl+0x81/0xd0 [ 470.388778] __x64_sys_mkdir+0x5c/0x80 [ 470.392678] do_syscall_64+0x1b9/0x820 [ 470.396576] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 470.401949] ? syscall_return_slowpath+0x5e0/0x5e0 [ 470.406889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.411747] ? trace_hardirqs_on_caller+0x310/0x310 [ 470.416778] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 470.421807] ? prepare_exit_to_usermode+0x291/0x3b0 [ 470.426839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.431702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.436895] RIP: 0033:0x456987 [ 470.440099] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.459003] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 470.466722] RAX: ffffffffffffffda RBX: 0000000020000810 RCX: 0000000000456987 [ 470.473995] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 470.481269] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 21:30:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630ff", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 470.488548] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 470.495823] R13: 0000000000000000 R14: 00000000004d7d88 R15: 0000000000000003 21:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) [ 470.536041] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue [ 470.551266] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x100000000000000}}]}, 0x2c}}, 0x0) 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:48 executing program 1 (fault-call:3 fault-nth:24): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x9effffff00000000}}]}, 0x2c}}, 0x0) 21:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 470.751991] FAULT_INJECTION: forcing a failure. [ 470.751991] name failslab, interval 1, probability 0, space 0, times 0 [ 470.789022] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xffffff7f00000000}}]}, 0x2c}}, 0x0) [ 470.811848] CPU: 1 PID: 20281 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 470.820374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.829735] Call Trace: [ 470.832351] dump_stack+0x244/0x39d [ 470.836009] ? dump_stack_print_info.cold.1+0x20/0x20 [ 470.841217] ? __handle_mm_fault+0xa57/0x5be0 [ 470.845735] should_fail.cold.4+0xa/0x17 [ 470.849840] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 470.854963] ? kasan_check_read+0x11/0x20 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 470.859124] ? do_raw_spin_unlock+0xa7/0x330 [ 470.863562] ? trace_hardirqs_on+0x310/0x310 [ 470.867984] ? zap_class+0x640/0x640 [ 470.871714] ? zap_class+0x640/0x640 [ 470.875441] ? zap_class+0x640/0x640 [ 470.879177] ? find_held_lock+0x36/0x1c0 [ 470.883256] ? r5c_cache_data+0x478/0xc10 [ 470.887434] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 470.892381] ? perf_trace_sched_process_exec+0x860/0x860 [ 470.897853] ? rcu_softirq_qs+0x20/0x20 [ 470.901845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.907408] __should_failslab+0x124/0x180 [ 470.911668] should_failslab+0x9/0x14 [ 470.915485] __kmalloc_track_caller+0x2d1/0x760 [ 470.915506] ? strncpy_from_user+0x5a0/0x5a0 [ 470.915527] ? strndup_user+0x77/0xd0 [ 470.915548] memdup_user+0x2c/0xa0 [ 470.915567] strndup_user+0x77/0xd0 [ 470.915590] ksys_mount+0x3c/0x140 [ 470.924685] __x64_sys_mount+0xbe/0x150 [ 470.924708] do_syscall_64+0x1b9/0x820 [ 470.924725] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 470.924745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 470.924760] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.924779] ? trace_hardirqs_on_caller+0x310/0x310 [ 470.924796] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 470.924814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.924831] ? prepare_exit_to_usermode+0x291/0x3b0 [ 470.924851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.932194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.932208] RIP: 0033:0x459fda 21:30:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xfffff000}}]}, 0x2c}}, 0x0) 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 470.932225] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 470.932234] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 470.932249] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 470.932265] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 470.939416] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 470.939426] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 470.939435] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 21:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 21:30:48 executing program 1 (fault-call:3 fault-nth:25): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) [ 471.074933] isofs_fill_super: root inode is not a directory. Corrupted media? [ 471.082239] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:48 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf000000}}]}, 0x2c}}, 0x0) 21:30:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x900, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) [ 471.193921] isofs_fill_super: root inode is not a directory. Corrupted media? [ 471.246913] FAULT_INJECTION: forcing a failure. [ 471.246913] name failslab, interval 1, probability 0, space 0, times 0 [ 471.284170] CPU: 0 PID: 20311 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 471.292719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.302077] Call Trace: [ 471.304689] dump_stack+0x244/0x39d [ 471.308336] ? dump_stack_print_info.cold.1+0x20/0x20 [ 471.313729] ? find_held_lock+0x36/0x1c0 [ 471.317807] should_fail.cold.4+0xa/0x17 [ 471.321892] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 471.327015] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 471.331960] ? kasan_check_read+0x11/0x20 [ 471.336135] ? rcu_softirq_qs+0x20/0x20 [ 471.340127] ? rcu_softirq_qs+0x20/0x20 [ 471.344112] ? unwind_dump+0x190/0x190 [ 471.348026] ? find_held_lock+0x36/0x1c0 [ 471.352121] ? perf_trace_sched_process_exec+0x860/0x860 [ 471.357588] ? save_stack+0xa9/0xd0 [ 471.361246] ? kmem_cache_alloc_trace+0x152/0x750 [ 471.366106] ? copy_mount_options+0x5f/0x430 [ 471.370560] __should_failslab+0x124/0x180 [ 471.374826] should_failslab+0x9/0x14 [ 471.378651] kmem_cache_alloc+0x2be/0x730 [ 471.382815] ? find_held_lock+0x36/0x1c0 [ 471.386890] getname_flags+0xd0/0x590 [ 471.386912] user_path_at_empty+0x2d/0x50 21:30:48 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x1000000}}]}, 0x2c}}, 0x0) 21:30:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 471.386935] do_mount+0x180/0x1d90 [ 471.386955] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 471.386974] ? rcu_pm_notify+0xc0/0xc0 [ 471.398445] ? copy_mount_string+0x40/0x40 [ 471.398471] ? copy_mount_options+0x5f/0x430 [ 471.398488] ? rcu_read_lock_sched_held+0x14f/0x180 [ 471.398505] ? kmem_cache_alloc_trace+0x353/0x750 [ 471.398526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.398547] ? _copy_from_user+0xdf/0x150 [ 471.407979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.407998] ? copy_mount_options+0x315/0x430 [ 471.408019] ksys_mount+0x12d/0x140 [ 471.408037] __x64_sys_mount+0xbe/0x150 [ 471.408059] do_syscall_64+0x1b9/0x820 [ 471.408079] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 471.416706] ? syscall_return_slowpath+0x5e0/0x5e0 [ 471.416723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.416742] ? trace_hardirqs_on_caller+0x310/0x310 [ 471.416760] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 471.416777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.416793] ? prepare_exit_to_usermode+0x291/0x3b0 21:30:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xffffff7f}}]}, 0x2c}}, 0x0) [ 471.416816] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.426671] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.426685] RIP: 0033:0x459fda [ 471.426703] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 471.426712] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 471.426732] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 471.436397] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 21:30:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffffff00000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 471.436407] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 471.436417] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 471.436426] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 21:30:49 executing program 1 (fault-call:3 fault-nth:26): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf00}}]}, 0x2c}}, 0x0) [ 471.593279] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 471.645270] isofs_fill_super: root inode is not a directory. Corrupted media? [ 471.682242] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 471.706249] isofs_fill_super: root inode is not a directory. Corrupted media? [ 471.720383] FAULT_INJECTION: forcing a failure. [ 471.720383] name failslab, interval 1, probability 0, space 0, times 0 [ 471.732400] CPU: 1 PID: 20345 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 471.740912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.750265] Call Trace: [ 471.752870] dump_stack+0x244/0x39d [ 471.756516] ? dump_stack_print_info.cold.1+0x20/0x20 [ 471.761713] ? __kernel_text_address+0xd/0x40 [ 471.766212] ? unwind_get_return_address+0x61/0xa0 [ 471.771155] should_fail.cold.4+0xa/0x17 [ 471.775240] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 471.780355] ? kasan_kmalloc+0xc7/0xe0 [ 471.784249] ? __kmalloc_track_caller+0x157/0x760 [ 471.789103] ? memdup_user+0x2c/0xa0 [ 471.792845] ? zap_class+0x640/0x640 [ 471.796561] ? do_syscall_64+0x1b9/0x820 [ 471.800634] ? zap_class+0x640/0x640 [ 471.804380] ? zap_class+0x640/0x640 [ 471.808103] ? find_held_lock+0x36/0x1c0 [ 471.812195] ? perf_trace_sched_process_exec+0x860/0x860 [ 471.817651] ? lock_release+0xa10/0xa10 [ 471.821633] ? perf_trace_sched_process_exec+0x860/0x860 [ 471.827090] ? usercopy_warn+0x110/0x110 [ 471.831167] __should_failslab+0x124/0x180 [ 471.835409] should_failslab+0x9/0x14 [ 471.839212] kmem_cache_alloc_trace+0x2d7/0x750 [ 471.843887] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.849426] ? _copy_from_user+0xdf/0x150 [ 471.853588] copy_mount_options+0x5f/0x430 [ 471.857841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.863399] ksys_mount+0xd0/0x140 [ 471.866960] __x64_sys_mount+0xbe/0x150 [ 471.870939] do_syscall_64+0x1b9/0x820 [ 471.874832] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 471.880200] ? syscall_return_slowpath+0x5e0/0x5e0 [ 471.885139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.889988] ? trace_hardirqs_on_caller+0x310/0x310 [ 471.895007] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 471.900029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.905575] ? prepare_exit_to_usermode+0x291/0x3b0 [ 471.910603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.915463] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.920659] RIP: 0033:0x459fda [ 471.923858] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 471.942759] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 471.950472] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda 21:30:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xfffffff0}}]}, 0x2c}}, 0x0) 21:30:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf0ffffffffffff}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\r', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 471.957742] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 471.965013] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 471.972281] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 471.979552] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 21:30:49 executing program 1 (fault-call:3 fault-nth:27): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x8100000000000000}}]}, 0x2c}}, 0x0) 21:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 21:30:49 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xffffff7f}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:49 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x200000000000000}}]}, 0x2c}}, 0x0) [ 472.157105] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 472.221955] FAULT_INJECTION: forcing a failure. [ 472.221955] name failslab, interval 1, probability 0, space 0, times 0 21:30:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 21:30:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660#', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) [ 472.263059] CPU: 1 PID: 20368 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 472.271600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.271608] Call Trace: [ 472.271646] dump_stack+0x244/0x39d [ 472.271674] ? dump_stack_print_info.cold.1+0x20/0x20 [ 472.271698] ? find_held_lock+0x36/0x1c0 [ 472.296509] should_fail.cold.4+0xa/0x17 [ 472.300595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 472.305731] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 472.310671] ? kasan_check_read+0x11/0x20 [ 472.314840] ? rcu_softirq_qs+0x20/0x20 [ 472.318834] ? rcu_softirq_qs+0x20/0x20 [ 472.322265] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 472.322817] ? unwind_dump+0x190/0x190 [ 472.322848] ? find_held_lock+0x36/0x1c0 [ 472.322887] ? perf_trace_sched_process_exec+0x860/0x860 [ 472.322902] ? save_stack+0xa9/0xd0 [ 472.322921] ? kmem_cache_alloc_trace+0x152/0x750 [ 472.351063] ? copy_mount_options+0x5f/0x430 [ 472.355483] __should_failslab+0x124/0x180 [ 472.359726] should_failslab+0x9/0x14 [ 472.363550] kmem_cache_alloc+0x2be/0x730 [ 472.367707] ? find_held_lock+0x36/0x1c0 [ 472.371782] getname_flags+0xd0/0x590 [ 472.375591] user_path_at_empty+0x2d/0x50 [ 472.379754] do_mount+0x180/0x1d90 [ 472.383302] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 472.388845] ? rcu_pm_notify+0xc0/0xc0 [ 472.392743] ? copy_mount_string+0x40/0x40 [ 472.396993] ? copy_mount_options+0x5f/0x430 [ 472.401406] ? rcu_read_lock_sched_held+0x14f/0x180 [ 472.406429] ? kmem_cache_alloc_trace+0x353/0x750 [ 472.411286] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 472.416843] ? _copy_from_user+0xdf/0x150 [ 472.421001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.426549] ? copy_mount_options+0x315/0x430 [ 472.431052] ksys_mount+0x12d/0x140 [ 472.434687] __x64_sys_mount+0xbe/0x150 [ 472.438670] do_syscall_64+0x1b9/0x820 [ 472.442560] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 472.447929] ? syscall_return_slowpath+0x5e0/0x5e0 [ 472.452859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.457708] ? trace_hardirqs_on_caller+0x310/0x310 [ 472.462734] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 472.467756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.473305] ? prepare_exit_to_usermode+0x291/0x3b0 [ 472.478333] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.483191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.488399] RIP: 0033:0x459fda [ 472.491600] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 472.510512] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 472.518227] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 472.525497] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 472.532769] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 472.540043] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 472.547313] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 21:30:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0xf6ffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xb04}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) 21:30:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf00000000000000}}]}, 0x2c}}, 0x0) 21:30:50 executing program 1 (fault-call:3 fault-nth:28): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)="69736f39363630fd", &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 21:30:50 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0x34000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:50 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x4030000}}]}, 0x2c}}, 0x0) [ 472.878614] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 472.894595] FAULT_INJECTION: forcing a failure. [ 472.894595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 472.906447] CPU: 0 PID: 20403 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 472.914946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.924308] Call Trace: [ 472.926915] dump_stack+0x244/0x39d [ 472.930564] ? dump_stack_print_info.cold.1+0x20/0x20 [ 472.935770] ? mark_held_locks+0x130/0x130 [ 472.940021] ? set_next_entity+0x485/0xc60 [ 472.944269] ? __lock_acquire+0x62f/0x4c20 [ 472.948522] should_fail.cold.4+0xa/0x17 [ 472.948547] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 472.948568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.963273] ? __perf_event_task_sched_out+0x33a/0x1bf0 [ 472.968668] ? mark_held_locks+0x130/0x130 [ 472.968693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.978451] ? zap_class+0x640/0x640 [ 472.982182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.987731] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 472.992943] ? find_held_lock+0x36/0x1c0 [ 472.997024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.002573] ? should_fail+0x22d/0xd01 [ 473.006481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 473.011609] __alloc_pages_nodemask+0x34b/0xdd0 [ 473.016313] ? trace_hardirqs_on+0xbd/0x310 [ 473.020657] ? kasan_check_read+0x11/0x20 [ 473.024826] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 473.029858] ? compat_start_thread+0x80/0x80 [ 473.034286] ? find_held_lock+0x36/0x1c0 [ 473.038419] ? trace_hardirqs_off+0xb8/0x310 [ 473.042846] cache_grow_begin+0xa5/0x8c0 [ 473.042866] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.042883] ? check_preemption_disabled+0x48/0x280 [ 473.042904] kmem_cache_alloc+0x66b/0x730 [ 473.052501] ? find_held_lock+0x36/0x1c0 [ 473.065758] getname_flags+0xd0/0x590 [ 473.069574] ? retint_kernel+0x2d/0x2d [ 473.073478] user_path_at_empty+0x2d/0x50 [ 473.077661] do_mount+0x180/0x1d90 [ 473.081224] ? copy_mount_string+0x40/0x40 [ 473.085477] ? retint_kernel+0x2d/0x2d [ 473.089388] ? copy_mount_options+0x25c/0x430 [ 473.093903] ? copy_mount_options+0x25c/0x430 [ 473.098414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.103962] ? copy_mount_options+0x315/0x430 [ 473.108472] ksys_mount+0x12d/0x140 [ 473.112113] __x64_sys_mount+0xbe/0x150 [ 473.116096] do_syscall_64+0x1b9/0x820 [ 473.119993] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 473.125368] ? syscall_return_slowpath+0x5e0/0x5e0 [ 473.125385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.125403] ? trace_hardirqs_on_caller+0x310/0x310 [ 473.125424] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 473.140198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.140216] ? prepare_exit_to_usermode+0x291/0x3b0 [ 473.140237] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.160645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.165845] RIP: 0033:0x459fda 21:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xfffffffc}, 0x0) 21:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 21:30:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 473.169051] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 473.188461] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 473.196183] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 473.203455] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 473.203466] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 473.203475] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 473.203485] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 [ 473.286676] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue [ 473.303393] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x4000000, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x2d5}, 0x0) 21:30:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xf}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x2000000}}]}, 0x2c}}, 0x0) 21:30:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:51 executing program 1 (fault-call:3 fault-nth:29): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 21:30:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xfffffff0}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 473.491813] isofs_fill_super: root inode is not a directory. Corrupted media? [ 473.514265] FAULT_INJECTION: forcing a failure. [ 473.514265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.526109] CPU: 1 PID: 20437 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 21:30:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xffffff9e}}]}, 0x2c}}, 0x0) [ 473.534609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.534617] Call Trace: [ 473.534656] dump_stack+0x244/0x39d [ 473.534683] ? dump_stack_print_info.cold.1+0x20/0x20 [ 473.534704] ? find_get_entries_tag+0x1400/0x1400 [ 473.534727] ? print_usage_bug+0xc0/0xc0 [ 473.555458] ? print_usage_bug+0xc0/0xc0 [ 473.555481] should_fail.cold.4+0xa/0x17 [ 473.555505] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 473.555534] ? mark_held_locks+0x130/0x130 [ 473.555547] ? zap_class+0x640/0x640 [ 473.555566] ? zap_class+0x640/0x640 [ 473.555582] ? print_usage_bug+0xc0/0xc0 [ 473.555601] ? is_bpf_text_address+0xac/0x170 [ 473.555638] ? find_held_lock+0x36/0x1c0 [ 473.581981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.581996] ? should_fail+0x22d/0xd01 [ 473.582021] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 473.607561] __alloc_pages_nodemask+0x34b/0xdd0 [ 473.607581] ? rcu_softirq_qs+0x20/0x20 [ 473.607602] ? __alloc_pages_slowpath+0x2dd0/0x2dd0 [ 473.630239] ? find_held_lock+0x36/0x1c0 [ 473.634338] ? trace_hardirqs_off+0xb8/0x310 21:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 473.638767] cache_grow_begin+0xa5/0x8c0 [ 473.642842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.648400] ? check_preemption_disabled+0x48/0x280 [ 473.653437] kmem_cache_alloc+0x66b/0x730 [ 473.657605] ? find_held_lock+0x36/0x1c0 [ 473.661701] getname_flags+0xd0/0x590 [ 473.665519] user_path_at_empty+0x2d/0x50 [ 473.665543] do_mount+0x180/0x1d90 [ 473.665563] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 473.665583] ? rcu_pm_notify+0xc0/0xc0 [ 473.678798] ? copy_mount_string+0x40/0x40 [ 473.678823] ? copy_mount_options+0x5f/0x430 [ 473.678843] ? rcu_read_lock_sched_held+0x14f/0x180 [ 473.696365] ? kmem_cache_alloc_trace+0x353/0x750 [ 473.701222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.706771] ? _copy_from_user+0xdf/0x150 [ 473.706793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.706819] ? copy_mount_options+0x315/0x430 [ 473.720996] ksys_mount+0x12d/0x140 [ 473.724655] __x64_sys_mount+0xbe/0x150 [ 473.728654] do_syscall_64+0x1b9/0x820 [ 473.728672] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 473.728693] ? syscall_return_slowpath+0x5e0/0x5e0 21:30:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x9effffff}}]}, 0x2c}}, 0x0) 21:30:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0x40b}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) [ 473.742854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.747714] ? trace_hardirqs_on_caller+0x310/0x310 [ 473.752746] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 473.757782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.757799] ? prepare_exit_to_usermode+0x291/0x3b0 [ 473.757820] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.773210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.778407] RIP: 0033:0x459fda [ 473.781610] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 473.800528] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 473.800544] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 473.800554] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 473.800564] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 473.800573] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 473.800583] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 [ 473.858173] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 473.876239] EXT4-fs (sda1): re-mounted. Opts: delalloc,grpjquota=,,errors=continue [ 473.884442] isofs_fill_super: root inode is not a directory. Corrupted media? [ 473.912010] ISOFS: Logical zone size(0) < hardware blocksize(1024) 21:30:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x600, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45", 0x5b, 0x9000}], 0x0, &(0x7f0000000000)) 21:30:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf0ffffff}}]}, 0x2c}}, 0x0) 21:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 21:30:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0x2}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:51 executing program 1 (fault-call:3 fault-nth:30): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x2001001, &(0x7f0000000140)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x100020, &(0x7f00000001c0)={[{@delalloc='delalloc'}, {@grpjquota='grpjquota='}]}) 21:30:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000002c0)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bb000000000000bb252f45050000000000000000000000000000000000031000000000000000000001000001010000010008", 0x82, 0x9000}], 0x0, &(0x7f0000000000)={[{@nocompress='nocompress'}]}) 21:30:51 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x26, 0x501, 0x0, 0x0, {0x0, 0x0, {0xb04000000000000}}, [@TCA_RATE={0x8}]}, 0x2c}}, 0x0) 21:30:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xfcffffff}, 0x0) 21:30:51 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0xf0}}]}, 0x2c}}, 0x0) [ 474.077239] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 474.097206] FAULT_INJECTION: forcing a failure. [ 474.097206] name failslab, interval 1, probability 0, space 0, times 0 [ 474.134319] isofs_fill_super: root inode is not a directory. Corrupted media? [ 474.134969] CPU: 1 PID: 20471 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 474.150148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.159506] Call Trace: [ 474.162111] dump_stack+0x244/0x39d [ 474.165765] ? dump_stack_print_info.cold.1+0x20/0x20 [ 474.170970] ? filename_lookup+0x39a/0x520 [ 474.175215] ? user_path_at_empty+0x40/0x50 [ 474.179547] ? do_mount+0x180/0x1d90 [ 474.183265] ? ksys_mount+0x12d/0x140 [ 474.187078] ? do_syscall_64+0x1b9/0x820 [ 474.191165] should_fail.cold.4+0xa/0x17 [ 474.195247] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 474.200361] ? mntput+0x74/0xa0 [ 474.203673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.209224] ? check_preemption_disabled+0x48/0x280 [ 474.214260] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 474.219813] ? find_held_lock+0x36/0x1c0 [ 474.219851] ? filename_lookup+0x39f/0x520 [ 474.219868] ? perf_trace_sched_process_exec+0x860/0x860 [ 474.219889] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 474.228187] __should_failslab+0x124/0x180 [ 474.228210] should_failslab+0x9/0x14 [ 474.228228] kmem_cache_alloc_trace+0x2d7/0x750 [ 474.228249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.228272] vfs_new_fs_context+0x5e/0x77c [ 474.239239] ? ns_capable_common+0x13f/0x170 [ 474.239265] do_mount+0xb70/0x1d90 [ 474.239290] ? copy_mount_string+0x40/0x40 [ 474.239310] ? retint_kernel+0x2d/0x2d [ 474.239336] ? copy_mount_options+0x1e3/0x430 [ 474.247350] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 474.247370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.247388] ? copy_mount_options+0x315/0x430 [ 474.247408] ksys_mount+0x12d/0x140 [ 474.247428] __x64_sys_mount+0xbe/0x150 [ 474.304794] do_syscall_64+0x1b9/0x820 [ 474.308694] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 474.314073] ? syscall_return_slowpath+0x5e0/0x5e0 [ 474.319015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.323873] ? trace_hardirqs_on_caller+0x310/0x310 [ 474.328900] ? prepare_exit_to_usermode+0x3b0/0x3b0 21:30:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 21:30:52 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={&(0x7f0000000000), 0xc, &(0x7f0000000700)={&(0x7f00000004c0)=@delqdisc={0x2c, 0x25, 0x501, 0x0, 0x0, {}, [@TCA_RATE={0x8, 0x5, {0x304}}]}, 0x2c}}, 0x0) [ 474.333930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.339478] ? prepare_exit_to_usermode+0x291/0x3b0 [ 474.344516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.349376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.354578] RIP: 0033:0x459fda [ 474.357782] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 474.376715] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 474.384433] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 474.391710] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 474.398991] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 474.406274] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 474.413554] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 [ 474.433374] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 474.440493] PGD 926d067 P4D 926d067 PUD 926f067 PMD 0 [ 474.445790] Oops: 0000 [#1] PREEMPT SMP KASAN [ 474.450291] CPU: 0 PID: 20471 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181018+ #97 [ 474.458776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.468146] RIP: 0010:do_mount+0xb98/0x1d90 [ 474.472473] Code: 06 00 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8a 11 00 00 48 b8 00 00 00 00 00 fc ff df <4c> 8b 33 49 8d 7e 18 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 5e 11 [ 474.491379] RSP: 0018:ffff880188b67c28 EFLAGS: 00010246 [ 474.496745] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90003e7a000 [ 474.504019] RDX: 1ffffffffffffffe RSI: ffffffff81e0147c RDI: 0000000000000282 [ 474.511289] RBP: ffff880188b67db0 R08: ffff8801c8552180 R09: ffffed003b5c5b4f [ 474.518563] R10: ffffed003b5c5b4f R11: ffff8801dae2da7b R12: ffff8801d1f97630 [ 474.525835] R13: ffff8801c9facb00 R14: ffff8801c9facb00 R15: ffff880181e9ce00 [ 474.533109] FS: 00007fb6b2c00700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 474.541335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.547221] CR2: fffffffffffffff4 CR3: 00000001babf3000 CR4: 00000000001406f0 [ 474.554494] DR0: 0000000020000180 DR1: 0000000020000000 DR2: 0000000020000000 [ 474.561765] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 474.569030] Call Trace: [ 474.571651] ? copy_mount_string+0x40/0x40 [ 474.575900] ? retint_kernel+0x2d/0x2d [ 474.579801] ? copy_mount_options+0x1e3/0x430 [ 474.584303] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 474.589154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.594702] ? copy_mount_options+0x315/0x430 [ 474.599208] ksys_mount+0x12d/0x140 [ 474.602840] __x64_sys_mount+0xbe/0x150 [ 474.606827] do_syscall_64+0x1b9/0x820 [ 474.610719] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 474.616091] ? syscall_return_slowpath+0x5e0/0x5e0 [ 474.621024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.625880] ? trace_hardirqs_on_caller+0x310/0x310 [ 474.630900] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 474.635925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.641471] ? prepare_exit_to_usermode+0x291/0x3b0 [ 474.646495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.651346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.656550] RIP: 0033:0x459fda [ 474.659747] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 474.678658] RSP: 002b:00007fb6b2bffa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 474.686374] RAX: ffffffffffffffda RBX: 00007fb6b2bffb30 RCX: 0000000000459fda [ 474.693655] RDX: 00007fb6b2bffad0 RSI: 0000000020000080 RDI: 00007fb6b2bffaf0 [ 474.700935] RBP: 0000000020000080 R08: 00007fb6b2bffb30 R09: 00007fb6b2bffad0 [ 474.708209] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 474.715479] R13: 0000000000100020 R14: 00000000004d7d88 R15: 0000000000000003 [ 474.722777] Modules linked in: [ 474.725976] CR2: fffffffffffffff4 [ 474.729438] ---[ end trace 45ed8dcac8440cbc ]--- [ 474.734206] RIP: 0010:do_mount+0xb98/0x1d90 [ 474.738533] Code: 06 00 48 89 c2 48 89 c3 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8a 11 00 00 48 b8 00 00 00 00 00 fc ff df <4c> 8b 33 49 8d 7e 18 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 5e 11 [ 474.757438] RSP: 0018:ffff880188b67c28 EFLAGS: 00010246 [ 474.762807] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc90003e7a000 [ 474.770078] RDX: 1ffffffffffffffe RSI: ffffffff81e0147c RDI: 0000000000000282 [ 474.777349] RBP: ffff880188b67db0 R08: ffff8801c8552180 R09: ffffed003b5c5b4f [ 474.784639] R10: ffffed003b5c5b4f R11: ffff8801dae2da7b R12: ffff8801d1f97630 [ 474.791912] R13: ffff8801c9facb00 R14: ffff8801c9facb00 R15: ffff880181e9ce00 [ 474.799185] FS: 00007fb6b2c00700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 474.807434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.813316] CR2: fffffffffffffff4 CR3: 00000001babf3000 CR4: 00000000001406f0 [ 474.820590] DR0: 0000000020000180 DR1: 0000000020000000 DR2: 0000000020000000 [ 474.827875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 474.835148] Kernel panic - not syncing: Fatal exception [ 474.841371] Kernel Offset: disabled [ 474.845010] Rebooting in 86400 seconds..