00380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x604000000000000}}, {@dmode}]}) 19:41:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 14) 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xa000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e0f7569653000"], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="086cae6e7eb14c82788e22d895ee1d3fe0a4c71ad7591290178b"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x2068050, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000e40)=""/247, 0xf7}], 0x4, 0xd00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000d40)='./file0/file0\x00', 0x40, 0x14) r2 = syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x1000, 0x0, &(0x7f0000000b00), 0x40009, &(0x7f0000000b40)={[{@shortname_lower}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@fat=@check_strict}, {@numtail}], [{@smackfsroot}, {@fsname={'fsname', 0x3d, '!*@:)@\x05'}}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@smackfsroot={'smackfsroot', 0x3d, '+[.[%\x81\''}}, {@hash}, {@measure}, {@euid_eq}]}) sendmsg$nl_route(r0, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@ipv4_getnexthop={0x38, 0x6a, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x8014) mknodat(r2, &(0x7f0000000c40)='./file0\x00', 0x400, 0x8001) write(r2, &(0x7f0000000d80)="88d6aa3b8b8c165dd423f4efc3727ba1eaddba63b895e5275dfd59f6d9d297a3692da0af55e1c0e9adcbc22d05ec25bc6f0a036a0d52e7607f376a7fde793f711e466d85c05d024fed6de33e62918af901c6e6ef31227d1e8c73ea942cfe7c8ce5baa4d7a39871b90214b8fed85c736eecdfbc707fd292013a50c29a504500112d9581c1bee763f4578a1a8c5bd5", 0x8e) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000feffffffffffffff00"], 0x14}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000a40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x1, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000814) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa4, 0x4, &(0x7f00000006c0)=[{&(0x7f00000004c0)="2b964911f33225dd2cbb44188499cbb9c7b86113b63b2572d2b3ab8c9535272bfb5738d3236a200ce547cd26e482e637ec45fadc06345a59113cd63e4848d78616bb9f8fb36914d76ed2a146d1e25033e95fd5dcc9743f078851186c57839e098bc8c3e22983c53a14da46c5994753e00441d43b2f89fba3e8b126700c04af2bef03000021734743e8e137e659f529974334dc3be76de270adcb84b429434e7033497b4ca0f85acc11a8e80307db7f8336dbeced0d23eba30d393821b98ccd315de4fb8e1fe4caf29df9b41953581823a9f209e70ae5a4edf413b5637120e8bec55019ef38f1c5a91412ce49", 0xec, 0xb4}, {&(0x7f00000003c0), 0x0, 0x3}, {&(0x7f00000005c0)="0e094f294389728ff40f893211c3a65fed140296fa8f58b374775b9a99034b01b4dde685ecd989525b0e325a19650457ab68681d826f988de2b5e08e6fffe26611c30974c5e6bcdf72315e96797d1b4e9ce45ccd883c6d9f03911d933f47ef40c48a8f814dfa4782fc9257bec89c992bc66238a0d9a84b272827b024c89991fd424219c20e2231de8b65a764212d24732f6a01c8a683f9963afdd5f529e07a05bd24cbc50f0179c6941ac43bc49502dfa99fe1df117d59254ef2637919efc0cf09f9395c3d25d19f2811f5120ab8816347d1728baeb85599a3a564d9fd9f", 0xde, 0x9}, {&(0x7f0000000400)="5632094713237cee", 0x8, 0x5}], 0x200, &(0x7f0000000980)={[{@sysvgroups}, {@i_version}], [{@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}, {@smackfsroot}, {@subj_type={'subj_type', 0x3d, 'ramfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'mountinfo\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 19:41:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x700000000000000}}, {@dmode}]}) 19:41:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xc000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 752.621002][T19437] loop1: detected capacity change from 0 to 8 [ 752.637373][ C0] sd 0:0:1:0: tag#8170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 752.647268][ C0] sd 0:0:1:0: tag#8170 CDB: opcode=0xe5 (vendor) [ 752.653603][ C0] sd 0:0:1:0: tag#8170 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:41:20 executing program 4: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 752.662707][ C0] sd 0:0:1:0: tag#8170 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 752.671772][ C0] sd 0:0:1:0: tag#8170 CDB[20]: ba [ 752.689635][T19448] FAULT_INJECTION: forcing a failure. [ 752.689635][T19448] name failslab, interval 1, probability 0, space 0, times 0 [ 752.702301][T19448] CPU: 0 PID: 19448 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 752.712450][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.722497][T19448] Call Trace: [ 752.725770][T19448] [ 752.728704][T19448] dump_stack_lvl+0xd6/0x122 [ 752.733293][T19448] dump_stack+0x11/0x1b [ 752.737446][T19448] should_fail+0x23c/0x250 [ 752.741962][T19448] ? mempool_alloc_slab+0x16/0x20 [ 752.747017][T19448] __should_failslab+0x81/0x90 [ 752.751821][T19448] should_failslab+0x5/0x20 [ 752.756348][T19448] kmem_cache_alloc+0x4f/0x320 [ 752.761177][T19448] mempool_alloc_slab+0x16/0x20 [ 752.766052][T19448] ? mempool_free+0x130/0x130 [ 752.770795][T19448] mempool_alloc+0x9d/0x310 [ 752.775304][T19448] ? preempt_count_add+0x4e/0x90 [ 752.780290][T19448] ? _raw_read_unlock+0x13/0x30 [ 752.785294][T19448] ? jbd2_transaction_committed+0xad/0xc0 [ 752.791085][T19448] bio_alloc_bioset+0xcc/0x560 [ 752.795984][T19448] ? iov_iter_alignment+0x34b/0x370 [ 752.801299][T19448] iomap_dio_bio_iter+0x5ed/0xc70 [ 752.806336][T19448] ? ext4_alloc_da_blocks+0x100/0x100 [ 752.811720][T19448] __iomap_dio_rw+0x8b5/0x1070 [ 752.816498][T19448] iomap_dio_rw+0x38/0x80 [ 752.820899][T19448] ? ext4_file_write_iter+0x461/0x1200 [ 752.826361][T19448] ext4_file_write_iter+0xac3/0x1200 [ 752.831653][T19448] ? ext4_file_write_iter+0x461/0x1200 [ 752.837121][T19448] do_iter_readv_writev+0x2de/0x380 [ 752.842465][T19448] do_iter_write+0x192/0x5c0 [ 752.847072][T19448] ? splice_from_pipe_next+0x34f/0x3b0 [ 752.852567][T19448] ? kmalloc_array+0x2d/0x40 [ 752.857608][T19448] vfs_iter_write+0x4c/0x70 [ 752.862223][T19448] iter_file_splice_write+0x43a/0x790 [ 752.867604][T19448] ? splice_from_pipe+0xd0/0xd0 [ 752.872588][T19448] direct_splice_actor+0x80/0xa0 [ 752.877565][T19448] splice_direct_to_actor+0x345/0x650 [ 752.882968][T19448] ? do_splice_direct+0x190/0x190 [ 752.888004][T19448] do_splice_direct+0x106/0x190 [ 752.892895][T19448] do_sendfile+0x675/0xc40 [ 752.897343][T19448] __x64_sys_sendfile64+0x102/0x140 [ 752.902590][T19448] do_syscall_64+0x44/0xd0 [ 752.907015][T19448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 752.912984][T19448] RIP: 0033:0x7f34f8a1cae9 [ 752.917568][T19448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 752.937225][T19448] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 752.945724][T19448] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 752.953725][T19448] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 752.961704][T19448] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xf000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x10000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x4a100000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x60000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:20 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 752.969675][T19448] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 752.977643][T19448] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 752.985616][T19448] 19:41:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 15) 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x65580000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x800000000000000}}, {@dmode}]}) 19:41:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000002c0)='afs\x00', 0x1020010, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x22000, &(0x7f0000000400)={[{@release_agent={'release_agent', 0x3d, './file0/../file0'}}, {@xattr}], [{@obj_user={'obj_user', 0x3d, '-#])*,'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read(r0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="e3134d3cf8b4f8936ad8783a237007c2fb94717bde98ca4d1709716778d370f9e6f05b258dfa4051810bf559ecb57d6d"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd00, 0x0) 19:41:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80002800) 19:41:21 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x81000000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 753.295424][T19579] FAULT_INJECTION: forcing a failure. [ 753.295424][T19579] name failslab, interval 1, probability 0, space 0, times 0 [ 753.297308][ C1] sd 0:0:1:0: tag#8138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 753.308138][T19579] CPU: 0 PID: 19579 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 753.317894][ C1] sd 0:0:1:0: tag#8138 CDB: opcode=0xe5 (vendor) [ 753.327983][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.328022][T19579] Call Trace: [ 753.328029][T19579] [ 753.334358][ C1] sd 0:0:1:0: tag#8138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 753.344447][T19579] dump_stack_lvl+0xd6/0x122 [ 753.344471][T19579] dump_stack+0x11/0x1b [ 753.347777][ C1] sd 0:0:1:0: tag#8138 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 753.350687][T19579] should_fail+0x23c/0x250 [ 753.359707][ C1] sd 0:0:1:0: tag#8138 CDB[20]: ba [ 753.364241][T19579] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 753.392162][T19579] __should_failslab+0x81/0x90 [ 753.396935][T19579] should_failslab+0x5/0x20 [ 753.401502][T19579] kmem_cache_alloc+0x4f/0x320 [ 753.406290][T19579] ext4_mb_new_blocks+0x328/0x1ee0 [ 753.411508][T19579] ? bio_will_gap+0xfc/0x4a0 [ 753.416466][T19579] ? ext4_get_branch+0x27d/0x2e0 [ 753.421397][T19579] ext4_ind_map_blocks+0xb1c/0x1740 [ 753.426600][T19579] ext4_map_blocks+0x6e3/0xf00 [ 753.431387][T19579] ext4_iomap_begin+0x4b0/0x630 [ 753.436238][T19579] ? ext4_alloc_da_blocks+0x100/0x100 [ 753.441603][T19579] iomap_iter+0x395/0x4a0 [ 753.446013][T19579] __iomap_dio_rw+0xb78/0x1070 [ 753.450788][T19579] ? _raw_spin_lock_irq+0x41/0x50 [ 753.455852][T19579] iomap_dio_rw+0x38/0x80 [ 753.460184][T19579] ? ext4_file_write_iter+0x461/0x1200 [ 753.465643][T19579] ext4_file_write_iter+0xac3/0x1200 [ 753.470928][T19579] ? ext4_file_write_iter+0x461/0x1200 [ 753.476407][T19579] do_iter_readv_writev+0x2de/0x380 [ 753.481680][T19579] do_iter_write+0x192/0x5c0 [ 753.486304][T19579] ? splice_from_pipe_next+0x34f/0x3b0 [ 753.491792][T19579] ? kmalloc_array+0x2d/0x40 [ 753.496390][T19579] vfs_iter_write+0x4c/0x70 [ 753.500891][T19579] iter_file_splice_write+0x43a/0x790 [ 753.506270][T19579] ? splice_from_pipe+0xd0/0xd0 [ 753.511134][T19579] direct_splice_actor+0x80/0xa0 [ 753.516122][T19579] splice_direct_to_actor+0x345/0x650 [ 753.521488][T19579] ? do_splice_direct+0x190/0x190 [ 753.526512][T19579] do_splice_direct+0x106/0x190 [ 753.531355][T19579] do_sendfile+0x675/0xc40 [ 753.535796][T19579] __x64_sys_sendfile64+0x102/0x140 [ 753.541014][T19579] do_syscall_64+0x44/0xd0 [ 753.545425][T19579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.551332][T19579] RIP: 0033:0x7f34f8a1cae9 [ 753.555752][T19579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 753.575355][T19579] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 753.583765][T19579] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') 19:41:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80002800) 19:41:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 16) [ 753.591734][T19579] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 753.599705][T19579] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.607739][T19579] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 753.615713][T19579] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 753.623676][T19579] 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x88470000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x900000000000000}}, {@dmode}]}) [ 753.701591][ C1] sd 0:0:1:0: tag#8167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 753.711493][ C1] sd 0:0:1:0: tag#8167 CDB: opcode=0xe5 (vendor) [ 753.717849][ C1] sd 0:0:1:0: tag#8167 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 753.726893][ C1] sd 0:0:1:0: tag#8167 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 753.735912][ C1] sd 0:0:1:0: tag#8167 CDB[20]: ba 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x88480000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x88a8ffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80002800) 19:41:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x81200, 0x21) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 753.748044][T19718] FAULT_INJECTION: forcing a failure. [ 753.748044][T19718] name failslab, interval 1, probability 0, space 0, times 0 [ 753.760766][T19718] CPU: 0 PID: 19718 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 753.771037][T19718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.781096][T19718] Call Trace: [ 753.784374][T19718] [ 753.787383][T19718] dump_stack_lvl+0xd6/0x122 [ 753.791975][T19718] dump_stack+0x11/0x1b [ 753.796221][T19718] should_fail+0x23c/0x250 [ 753.800704][T19718] ? mempool_alloc_slab+0x16/0x20 [ 753.805798][T19718] __should_failslab+0x81/0x90 [ 753.810585][T19718] should_failslab+0x5/0x20 [ 753.815124][T19718] kmem_cache_alloc+0x4f/0x320 [ 753.819966][T19718] mempool_alloc_slab+0x16/0x20 [ 753.825244][T19718] ? mempool_free+0x130/0x130 [ 753.829932][T19718] mempool_alloc+0x9d/0x310 [ 753.834439][T19718] ? preempt_count_add+0x4e/0x90 [ 753.839504][T19718] ? _raw_read_unlock+0x13/0x30 [ 753.844375][T19718] ? jbd2_transaction_committed+0xad/0xc0 [ 753.850168][T19718] bio_alloc_bioset+0xcc/0x560 [ 753.854933][T19718] ? iov_iter_alignment+0x34b/0x370 [ 753.860220][T19718] iomap_dio_bio_iter+0x5ed/0xc70 [ 753.865270][T19718] ? ext4_alloc_da_blocks+0x100/0x100 [ 753.870757][T19718] __iomap_dio_rw+0x8b5/0x1070 [ 753.875701][T19718] ? _raw_spin_lock_irq+0x41/0x50 [ 753.880784][T19718] iomap_dio_rw+0x38/0x80 [ 753.885117][T19718] ? ext4_file_write_iter+0x461/0x1200 [ 753.890714][T19718] ext4_file_write_iter+0xac3/0x1200 [ 753.896010][T19718] ? ext4_file_write_iter+0x461/0x1200 [ 753.901562][T19718] do_iter_readv_writev+0x2de/0x380 [ 753.906836][T19718] do_iter_write+0x192/0x5c0 [ 753.911528][T19718] ? splice_from_pipe_next+0x34f/0x3b0 [ 753.917064][T19718] ? kmalloc_array+0x2d/0x40 [ 753.921698][T19718] vfs_iter_write+0x4c/0x70 [ 753.926257][T19718] iter_file_splice_write+0x43a/0x790 [ 753.931699][T19718] ? splice_from_pipe+0xd0/0xd0 [ 753.936555][T19718] direct_splice_actor+0x80/0xa0 [ 753.941500][T19718] splice_direct_to_actor+0x345/0x650 [ 753.946913][T19718] ? do_splice_direct+0x190/0x190 19:41:21 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 753.951945][T19718] do_splice_direct+0x106/0x190 [ 753.956928][T19718] do_sendfile+0x675/0xc40 [ 753.961368][T19718] __x64_sys_sendfile64+0x102/0x140 [ 753.966592][T19718] do_syscall_64+0x44/0xd0 [ 753.971020][T19718] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 753.976938][T19718] RIP: 0033:0x7f34f8a1cae9 [ 753.981368][T19718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.000982][T19718] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.009420][T19718] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 754.017479][T19718] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 754.025512][T19718] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.033501][T19718] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 754.041494][T19718] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 754.049535][T19718] 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xa6ffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 754.080027][ C0] sd 0:0:1:0: tag#8161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 754.089917][ C0] sd 0:0:1:0: tag#8161 CDB: opcode=0xe5 (vendor) [ 754.096293][ C0] sd 0:0:1:0: tag#8161 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 754.105486][ C0] sd 0:0:1:0: tag#8161 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 754.114548][ C0] sd 0:0:1:0: tag#8161 CDB[20]: ba 19:41:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xc00e0000, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xa00000000000000}}, {@dmode}]}) [ 754.159418][ C1] sd 0:0:1:0: tag#8143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 754.169418][ C1] sd 0:0:1:0: tag#8143 CDB: opcode=0xe5 (vendor) [ 754.175776][ C1] sd 0:0:1:0: tag#8143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 754.184848][ C1] sd 0:0:1:0: tag#8143 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 754.193908][ C1] sd 0:0:1:0: tag#8143 CDB[20]: ba 19:41:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 17) 19:41:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd00, 0xfffffffe) 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xc3ffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:22 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xb00000000000000}}, {@dmode}]}) 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xffffa888, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 754.491175][T19930] FAULT_INJECTION: forcing a failure. [ 754.491175][T19930] name failslab, interval 1, probability 0, space 0, times 0 [ 754.503901][T19930] CPU: 1 PID: 19930 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 754.514092][T19930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.524250][T19930] Call Trace: [ 754.527548][T19930] [ 754.530483][T19930] dump_stack_lvl+0xd6/0x122 [ 754.535078][T19930] dump_stack+0x11/0x1b 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xffffffa6, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 754.539254][T19930] should_fail+0x23c/0x250 [ 754.543665][T19930] ? mempool_alloc_slab+0x16/0x20 [ 754.548693][T19930] __should_failslab+0x81/0x90 [ 754.553459][T19930] should_failslab+0x5/0x20 [ 754.557966][T19930] kmem_cache_alloc+0x4f/0x320 [ 754.562803][T19930] mempool_alloc_slab+0x16/0x20 [ 754.567660][T19930] ? mempool_free+0x130/0x130 [ 754.572419][T19930] mempool_alloc+0x9d/0x310 [ 754.576999][T19930] ? preempt_count_add+0x4e/0x90 [ 754.582021][T19930] ? _raw_read_unlock+0x13/0x30 19:41:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1000800, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 754.586880][T19930] ? jbd2_transaction_committed+0xad/0xc0 [ 754.592627][T19930] bio_alloc_bioset+0xcc/0x560 [ 754.597392][T19930] ? iov_iter_alignment+0x34b/0x370 [ 754.602625][T19930] iomap_dio_bio_iter+0x5ed/0xc70 [ 754.607711][T19930] ? ext4_alloc_da_blocks+0x100/0x100 [ 754.613091][T19930] __iomap_dio_rw+0x8b5/0x1070 [ 754.617870][T19930] iomap_dio_rw+0x38/0x80 [ 754.622201][T19930] ? ext4_file_write_iter+0x461/0x1200 [ 754.627661][T19930] ext4_file_write_iter+0xac3/0x1200 [ 754.632940][T19930] ? ext4_file_write_iter+0x461/0x1200 [ 754.638395][T19930] do_iter_readv_writev+0x2de/0x380 [ 754.643650][T19930] do_iter_write+0x192/0x5c0 [ 754.648395][T19930] ? splice_from_pipe_next+0x34f/0x3b0 [ 754.653854][T19930] ? kmalloc_array+0x2d/0x40 [ 754.658446][T19930] vfs_iter_write+0x4c/0x70 [ 754.663003][T19930] iter_file_splice_write+0x43a/0x790 [ 754.668383][T19930] ? splice_from_pipe+0xd0/0xd0 [ 754.673232][T19930] direct_splice_actor+0x80/0xa0 [ 754.678323][T19930] splice_direct_to_actor+0x345/0x650 [ 754.683808][T19930] ? do_splice_direct+0x190/0x190 [ 754.688910][T19930] do_splice_direct+0x106/0x190 [ 754.693817][T19930] do_sendfile+0x675/0xc40 [ 754.698309][T19930] __x64_sys_sendfile64+0x102/0x140 [ 754.703689][T19930] do_syscall_64+0x44/0xd0 [ 754.708128][T19930] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 754.714025][T19930] RIP: 0033:0x7f34f8a1cae9 [ 754.718492][T19930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 754.738244][T19930] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.746740][T19930] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 754.754724][T19930] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 754.762718][T19930] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.770863][T19930] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 754.778835][T19930] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 754.786806][T19930] 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xffffffc3, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xc00000000000000}}, {@dmode}]}) 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x14}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 755.041790][ C1] sd 0:0:1:0: tag#8166 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 755.051654][ C1] sd 0:0:1:0: tag#8166 CDB: opcode=0xe5 (vendor) [ 755.058144][ C1] sd 0:0:1:0: tag#8166 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 755.067229][ C1] sd 0:0:1:0: tag#8166 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 755.076319][ C1] sd 0:0:1:0: tag#8166 CDB[20]: ba 19:41:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 18) 19:41:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="9c3f311ae84feef364f4445e224f057b36c7ce23c24c2a9a9768088572cb"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="a2d3dd0469e21fe53a69145f61ddece401b9328bb0792a683423123432a94a168196fc72c702e4d9299f3d0fcc6e88e2388fb77b39ae00005ce9d54d01e993e008c2fb31a098a18671ba93c0ee3299560353"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0xa00}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:22 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xd00000000000000}}, {@dmode}]}) [ 755.162205][T20159] FAULT_INJECTION: forcing a failure. [ 755.162205][T20159] name failslab, interval 1, probability 0, space 0, times 0 [ 755.174902][T20159] CPU: 0 PID: 20159 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 755.185117][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.195172][T20159] Call Trace: [ 755.198454][T20159] [ 755.201381][T20159] dump_stack_lvl+0xd6/0x122 [ 755.205988][T20159] dump_stack+0x11/0x1b [ 755.210169][T20159] should_fail+0x23c/0x250 [ 755.214656][T20159] ? jbd2__journal_start+0xf7/0x3f0 [ 755.219869][T20159] __should_failslab+0x81/0x90 [ 755.224641][T20159] should_failslab+0x5/0x20 [ 755.229241][T20159] kmem_cache_alloc+0x4f/0x320 [ 755.234050][T20159] jbd2__journal_start+0xf7/0x3f0 [ 755.239103][T20159] __ext4_journal_start_sb+0x159/0x310 [ 755.244566][T20159] ext4_iomap_begin+0x408/0x630 [ 755.249426][T20159] ? ext4_alloc_da_blocks+0x100/0x100 [ 755.254811][T20159] iomap_iter+0x395/0x4a0 [ 755.259166][T20159] __iomap_dio_rw+0xb78/0x1070 [ 755.264020][T20159] iomap_dio_rw+0x38/0x80 [ 755.268375][T20159] ? ext4_file_write_iter+0x461/0x1200 [ 755.273877][T20159] ext4_file_write_iter+0xac3/0x1200 [ 755.279281][T20159] ? ext4_file_write_iter+0x461/0x1200 [ 755.284747][T20159] do_iter_readv_writev+0x2de/0x380 [ 755.289946][T20159] do_iter_write+0x192/0x5c0 [ 755.294539][T20159] ? splice_from_pipe_next+0x34f/0x3b0 [ 755.300004][T20159] ? kmalloc_array+0x2d/0x40 [ 755.304617][T20159] vfs_iter_write+0x4c/0x70 [ 755.309213][T20159] iter_file_splice_write+0x43a/0x790 [ 755.314648][T20159] ? splice_from_pipe+0xd0/0xd0 [ 755.319501][T20159] direct_splice_actor+0x80/0xa0 [ 755.324555][T20159] splice_direct_to_actor+0x345/0x650 [ 755.329931][T20159] ? do_splice_direct+0x190/0x190 [ 755.334956][T20159] do_splice_direct+0x106/0x190 [ 755.339893][T20159] do_sendfile+0x675/0xc40 [ 755.344328][T20159] __x64_sys_sendfile64+0x102/0x140 [ 755.349544][T20159] do_syscall_64+0x44/0xd0 [ 755.354033][T20159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 755.359926][T20159] RIP: 0033:0x7f34f8a1cae9 [ 755.364333][T20159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 755.384028][T20159] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.392474][T20159] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 755.400444][T20159] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 19:41:22 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="471c6eb3004270544b4c5cdc"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1002}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 19) [ 755.408417][T20159] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.416401][T20159] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 755.424386][T20159] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 755.432374][T20159] [ 755.479782][T20262] FAULT_INJECTION: forcing a failure. [ 755.479782][T20262] name failslab, interval 1, probability 0, space 0, times 0 [ 755.492477][T20262] CPU: 0 PID: 20262 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 755.502689][T20262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.512809][T20262] Call Trace: [ 755.516104][T20262] [ 755.519020][T20262] dump_stack_lvl+0xd6/0x122 [ 755.523628][T20262] dump_stack+0x11/0x1b [ 755.527769][T20262] should_fail+0x23c/0x250 [ 755.532172][T20262] ? mempool_alloc_slab+0x16/0x20 [ 755.537257][T20262] __should_failslab+0x81/0x90 [ 755.542163][T20262] should_failslab+0x5/0x20 [ 755.546741][T20262] kmem_cache_alloc+0x4f/0x320 [ 755.551505][T20262] mempool_alloc_slab+0x16/0x20 [ 755.556383][T20262] ? mempool_free+0x130/0x130 [ 755.561049][T20262] mempool_alloc+0x9d/0x310 [ 755.565575][T20262] bio_alloc_bioset+0xcc/0x560 [ 755.570577][T20262] ? iomap_dio_bio_iter+0x3c8/0xc70 [ 755.575786][T20262] iomap_dio_bio_iter+0x5ed/0xc70 [ 755.580808][T20262] ? ext4_alloc_da_blocks+0x100/0x100 [ 755.586284][T20262] __iomap_dio_rw+0x8b5/0x1070 [ 755.591220][T20262] iomap_dio_rw+0x38/0x80 [ 755.595549][T20262] ? ext4_file_write_iter+0x461/0x1200 [ 755.601121][T20262] ext4_file_write_iter+0xac3/0x1200 [ 755.606445][T20262] ? ext4_file_write_iter+0x461/0x1200 [ 755.611917][T20262] do_iter_readv_writev+0x2de/0x380 [ 755.617105][T20262] do_iter_write+0x192/0x5c0 [ 755.621753][T20262] ? splice_from_pipe_next+0x34f/0x3b0 [ 755.627203][T20262] ? kmalloc_array+0x2d/0x40 [ 755.631800][T20262] vfs_iter_write+0x4c/0x70 [ 755.636371][T20262] iter_file_splice_write+0x43a/0x790 [ 755.641748][T20262] ? splice_from_pipe+0xd0/0xd0 [ 755.646615][T20262] direct_splice_actor+0x80/0xa0 [ 755.651597][T20262] splice_direct_to_actor+0x345/0x650 [ 755.656985][T20262] ? do_splice_direct+0x190/0x190 [ 755.662095][T20262] do_splice_direct+0x106/0x190 [ 755.666942][T20262] do_sendfile+0x675/0xc40 [ 755.671352][T20262] __x64_sys_sendfile64+0x102/0x140 [ 755.676581][T20262] do_syscall_64+0x44/0xd0 [ 755.681081][T20262] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 755.686979][T20262] RIP: 0033:0x7f34f8a1cae9 [ 755.691419][T20262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 755.711112][T20262] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 755.719617][T20262] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1003}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 755.727600][T20262] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 755.735555][T20262] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.743570][T20262] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 755.751527][T20262] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 755.759487][T20262] 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1004}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xe00000000000000}}, {@dmode}]}) 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1005}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1006}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1007}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x1) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 755.940650][ C1] sd 0:0:1:0: tag#8163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 755.950546][ C1] sd 0:0:1:0: tag#8163 CDB: opcode=0xe5 (vendor) [ 755.956939][ C1] sd 0:0:1:0: tag#8163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 755.965971][ C1] sd 0:0:1:0: tag#8163 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 755.975061][ C1] sd 0:0:1:0: tag#8163 CDB[20]: ba 19:41:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xf00000000000000}}, {@dmode}]}) 19:41:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 20) 19:41:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1008}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfffffffffffffff}}, {@dmode}]}) [ 756.231132][T20604] FAULT_INJECTION: forcing a failure. [ 756.231132][T20604] name failslab, interval 1, probability 0, space 0, times 0 [ 756.243910][T20604] CPU: 1 PID: 20604 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 756.254111][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.264233][T20604] Call Trace: [ 756.267508][T20604] [ 756.270430][T20604] dump_stack_lvl+0xd6/0x122 [ 756.275119][T20604] dump_stack+0x11/0x1b [ 756.279307][T20604] should_fail+0x23c/0x250 [ 756.283714][T20604] ? mempool_alloc_slab+0x16/0x20 [ 756.288822][T20604] __should_failslab+0x81/0x90 [ 756.293575][T20604] should_failslab+0x5/0x20 [ 756.298065][T20604] kmem_cache_alloc+0x4f/0x320 [ 756.302964][T20604] mempool_alloc_slab+0x16/0x20 [ 756.307813][T20604] ? mempool_free+0x130/0x130 [ 756.312492][T20604] mempool_alloc+0x9d/0x310 [ 756.316984][T20604] ? preempt_count_add+0x4e/0x90 [ 756.321913][T20604] ? _raw_read_unlock+0x13/0x30 [ 756.326856][T20604] ? jbd2_transaction_committed+0xad/0xc0 [ 756.332634][T20604] bio_alloc_bioset+0xcc/0x560 [ 756.337396][T20604] ? iov_iter_alignment+0x34b/0x370 [ 756.342581][T20604] iomap_dio_bio_iter+0x5ed/0xc70 [ 756.347616][T20604] ? ext4_alloc_da_blocks+0x100/0x100 [ 756.353036][T20604] __iomap_dio_rw+0x8b5/0x1070 [ 756.357892][T20604] iomap_dio_rw+0x38/0x80 [ 756.362280][T20604] ? ext4_file_write_iter+0x461/0x1200 [ 756.367729][T20604] ext4_file_write_iter+0xac3/0x1200 [ 756.373003][T20604] ? ext4_file_write_iter+0x461/0x1200 [ 756.378460][T20604] do_iter_readv_writev+0x2de/0x380 [ 756.383645][T20604] do_iter_write+0x192/0x5c0 [ 756.388304][T20604] ? splice_from_pipe_next+0x34f/0x3b0 [ 756.393938][T20604] ? kmalloc_array+0x2d/0x40 [ 756.398553][T20604] vfs_iter_write+0x4c/0x70 [ 756.403188][T20604] iter_file_splice_write+0x43a/0x790 [ 756.408656][T20604] ? splice_from_pipe+0xd0/0xd0 [ 756.413527][T20604] direct_splice_actor+0x80/0xa0 [ 756.418545][T20604] splice_direct_to_actor+0x345/0x650 [ 756.423917][T20604] ? do_splice_direct+0x190/0x190 [ 756.428931][T20604] do_splice_direct+0x106/0x190 [ 756.433773][T20604] do_sendfile+0x675/0xc40 [ 756.438176][T20604] __x64_sys_sendfile64+0x102/0x140 [ 756.443362][T20604] do_syscall_64+0x44/0xd0 [ 756.447817][T20604] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 756.453765][T20604] RIP: 0033:0x7f34f8a1cae9 [ 756.458165][T20604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.477775][T20604] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.486244][T20604] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 756.494226][T20604] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 756.502188][T20604] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.510179][T20604] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 756.518143][T20604] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 756.526104][T20604] 19:41:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x100a}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2757993dceec38fe, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x10000c0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="d589d09cc94f11f0a84ba6bdb20666eb563fb97950bc1e1309785e4b5ef0c0a5f511700ca39c406d0d261a4d932aaf9ee9200cbfd2390e28b2e816fd14408f3fea5ce1eca63c330764e6adbda64c4de3c7978f8097d8f0e02dc4ec"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setxattr$incfs_size(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1000000000000000}}, {@dmode}]}) 19:41:24 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 21) 19:41:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x100c}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 756.838952][T20750] FAULT_INJECTION: forcing a failure. [ 756.838952][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 756.851697][T20750] CPU: 0 PID: 20750 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 756.861874][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.871931][T20750] Call Trace: [ 756.875204][T20750] [ 756.878199][T20750] dump_stack_lvl+0xd6/0x122 [ 756.882807][T20750] dump_stack+0x11/0x1b [ 756.886957][T20750] should_fail+0x23c/0x250 [ 756.891368][T20750] ? jbd2__journal_start+0xf7/0x3f0 [ 756.896587][T20750] __should_failslab+0x81/0x90 [ 756.901381][T20750] should_failslab+0x5/0x20 [ 756.905892][T20750] kmem_cache_alloc+0x4f/0x320 [ 756.910938][T20750] jbd2__journal_start+0xf7/0x3f0 [ 756.915962][T20750] __ext4_journal_start_sb+0x159/0x310 [ 756.921447][T20750] ext4_iomap_begin+0x408/0x630 [ 756.926310][T20750] ? ext4_alloc_da_blocks+0x100/0x100 [ 756.931719][T20750] iomap_iter+0x395/0x4a0 [ 756.936104][T20750] __iomap_dio_rw+0xb78/0x1070 [ 756.941056][T20750] ? _raw_spin_lock_irq+0x41/0x50 [ 756.946152][T20750] iomap_dio_rw+0x38/0x80 [ 756.950498][T20750] ? ext4_file_write_iter+0x461/0x1200 [ 756.956027][T20750] ext4_file_write_iter+0xac3/0x1200 [ 756.961314][T20750] ? ext4_file_write_iter+0x461/0x1200 [ 756.966779][T20750] do_iter_readv_writev+0x2de/0x380 [ 756.972117][T20750] do_iter_write+0x192/0x5c0 [ 756.976745][T20750] ? splice_from_pipe_next+0x34f/0x3b0 [ 756.982323][T20750] ? kmalloc_array+0x2d/0x40 [ 756.986914][T20750] vfs_iter_write+0x4c/0x70 [ 756.991636][T20750] iter_file_splice_write+0x43a/0x790 [ 756.997011][T20750] ? splice_from_pipe+0xd0/0xd0 [ 757.001865][T20750] direct_splice_actor+0x80/0xa0 [ 757.006838][T20750] splice_direct_to_actor+0x345/0x650 [ 757.012262][T20750] ? do_splice_direct+0x190/0x190 [ 757.017288][T20750] do_splice_direct+0x106/0x190 [ 757.022139][T20750] do_sendfile+0x675/0xc40 [ 757.026612][T20750] __x64_sys_sendfile64+0x102/0x140 [ 757.031810][T20750] do_syscall_64+0x44/0xd0 [ 757.036262][T20750] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.042163][T20750] RIP: 0033:0x7f34f8a1cae9 [ 757.046575][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.066443][T20750] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.074853][T20750] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 757.082820][T20750] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 757.090850][T20750] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.098937][T20750] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 757.106915][T20750] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 757.114899][T20750] [ 757.127957][ C1] sd 0:0:1:0: tag#8152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 19:41:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 22) 19:41:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x100f}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1100000000000000}}, {@dmode}]}) [ 757.137850][ C1] sd 0:0:1:0: tag#8152 CDB: opcode=0xe5 (vendor) [ 757.144233][ C1] sd 0:0:1:0: tag#8152 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 757.153348][ C1] sd 0:0:1:0: tag#8152 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 757.162403][ C1] sd 0:0:1:0: tag#8152 CDB[20]: ba 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1010}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1060}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1200000000000000}}, {@dmode}]}) 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x200014c0}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 757.460197][T20833] FAULT_INJECTION: forcing a failure. [ 757.460197][T20833] name failslab, interval 1, probability 0, space 0, times 0 [ 757.473173][T20833] CPU: 1 PID: 20833 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 757.483408][T20833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.493541][T20833] Call Trace: [ 757.496851][T20833] [ 757.499800][T20833] dump_stack_lvl+0xd6/0x122 [ 757.504415][T20833] dump_stack+0x11/0x1b [ 757.508567][T20833] should_fail+0x23c/0x250 [ 757.513107][T20833] ? mempool_alloc_slab+0x16/0x20 [ 757.518208][T20833] __should_failslab+0x81/0x90 [ 757.522036][ C0] sd 0:0:1:0: tag#8157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 757.522980][T20833] should_failslab+0x5/0x20 [ 757.532862][ C0] sd 0:0:1:0: tag#8157 CDB: opcode=0xe5 (vendor) [ 757.537285][T20833] kmem_cache_alloc+0x4f/0x320 [ 757.537313][T20833] mempool_alloc_slab+0x16/0x20 [ 757.543655][ C0] sd 0:0:1:0: tag#8157 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 757.548394][T20833] ? mempool_free+0x130/0x130 [ 757.548419][T20833] mempool_alloc+0x9d/0x310 [ 757.553264][ C0] sd 0:0:1:0: tag#8157 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 757.562348][T20833] ? preempt_count_add+0x4e/0x90 [ 757.567070][ C0] sd 0:0:1:0: tag#8157 CDB[20]: ba [ 757.571520][T20833] ? _raw_read_unlock+0x13/0x30 [ 757.595455][T20833] ? jbd2_transaction_committed+0xad/0xc0 [ 757.601181][T20833] bio_alloc_bioset+0xcc/0x560 [ 757.606043][T20833] ? iov_iter_alignment+0x34b/0x370 [ 757.611243][T20833] iomap_dio_bio_iter+0x5ed/0xc70 [ 757.616286][T20833] ? ext4_alloc_da_blocks+0x100/0x100 [ 757.621739][T20833] __iomap_dio_rw+0x8b5/0x1070 [ 757.626577][T20833] ? _raw_spin_lock_irq+0x41/0x50 [ 757.631610][T20833] iomap_dio_rw+0x38/0x80 [ 757.636084][T20833] ? ext4_file_write_iter+0x461/0x1200 [ 757.641616][T20833] ext4_file_write_iter+0xac3/0x1200 [ 757.646905][T20833] ? ext4_file_write_iter+0x461/0x1200 [ 757.652411][T20833] do_iter_readv_writev+0x2de/0x380 [ 757.657629][T20833] do_iter_write+0x192/0x5c0 [ 757.662221][T20833] ? splice_from_pipe_next+0x34f/0x3b0 [ 757.667676][T20833] ? kmalloc_array+0x2d/0x40 [ 757.672261][T20833] vfs_iter_write+0x4c/0x70 [ 757.676830][T20833] iter_file_splice_write+0x43a/0x790 [ 757.682201][T20833] ? splice_from_pipe+0xd0/0xd0 [ 757.687058][T20833] direct_splice_actor+0x80/0xa0 [ 757.692014][T20833] splice_direct_to_actor+0x345/0x650 [ 757.697442][T20833] ? do_splice_direct+0x190/0x190 [ 757.702623][T20833] do_splice_direct+0x106/0x190 [ 757.707473][T20833] do_sendfile+0x675/0xc40 [ 757.711949][T20833] __x64_sys_sendfile64+0x102/0x140 [ 757.717143][T20833] do_syscall_64+0x44/0xd0 [ 757.721556][T20833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.727524][T20833] RIP: 0033:0x7f34f8a1cae9 [ 757.731928][T20833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.751634][T20833] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000780)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f000000dc80)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = inotify_init1(0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000480)='./file1\x00', &(0x7f0000000700)='bfs\x00', 0x200000, &(0x7f0000000740)='\'\x00') fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r5, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ddc0)=[{{&(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000380)="1e3705b8233fdcd15fc42ebf82f9614d95857bbfb552ae734bb99f5276c17e64f303062b12d4db6a8daf9b4f8aab18d7aa840a22a24de74feb1b9e9d335b58275a395a8ac044fd25d16c665a4b326964954bfae545d4628aa19469adbc7c71c5850841cbee0473a28d7f11bb07aa6a53115d8b8678fbf9d64e4f18a784486a4effc0e900ac85524bca2f2dae70f04d5111bdd1979c60d643717a17f390cd005708f47090bf0a02afb68ffd6651a7b791461866fb08f479f74424dfd779e9ffd4b6dea4b8bbba", 0xc6}, {&(0x7f0000000240)="13798962665383db7c06fd0cfdc57ab9bd99e760f069da1027b48cea2daf1285b86126967c65575ab0ea041a4c8732f8a544d70515ce037244", 0x39}], 0x2, &(0x7f0000001180)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x120}}, {{&(0x7f00000012c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000001340)="b01e687a5ab9ac93aacd11ea4774c7416a4b18b7fd058d91f8419b65b8", 0x1d}, {&(0x7f0000002480)="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", 0x1000}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000001000000010002002bababccba27c16ad80b4fb9790c55033d70d257ff39cd2e010782b3a192a047c203b29359e77ce00dce28457d455a8fb5aeb25b3645715b018957c0308604b8889b5994a5bf4bc1f5ac26e0bd110eb93409d3213ecc7e7fa899466e5cc8802f6341a99932a990022776dfd6180c11cb3defc5d6425e2dc933c6d972c2f07cfb861dfd9b0b8e9b9ae3c9e06c357b", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x48, 0x4014}}, {{&(0x7f0000003600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003680)="82c4c35283aa826ece629b000e02bf33a77e82df43702c312a293395d13d2f7e2b2cca48fd13971baf361ee5cd4c6f3751d879342b2e2c060dc3e225495173c72a0cdfdf9cd5b58ca8d0ab0ac62a136b3f720541fc846890c792290d138e6e89a03c367c5ef920b7dabbf5bfca9746c4", 0x70}, {&(0x7f0000003700)="b976240a404eaace0e10527d37665b23e5e0cc35935294cc05505311a32308a725b3da5ad49e40d8be07a5420d70ae7d47bbfb14fad64ed4dfb32abde3dee700fae729d200cdd3b29e01ced9fea4d4a8112f844f0314cb6dce5bcc42803ada0ed16eb891d9105893c664acc1337a92288bd57a0cfcc0031c0daf507cc9bf782b8cbd4269c9ed06a3941eaa9a", 0x8c}, {&(0x7f00000037c0)="41ec70be59af994edce09bcd8f", 0xd}], 0x3, &(0x7f0000003b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x20040050}}, {{&(0x7f0000003bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003c40)="9f601af13a649c9a438c55878797652c0ab174d44cdcabf98e99b0f6d4a8d80d1a11c1db76f8a3acf641b9fb569e93ddb21ed9e2ea8fae8b2b", 0x39}, {&(0x7f0000003c80)="a8a2999d84491e8b9c98ade5d977aca0661f17ef3f2fbbc0120f7cb5da4a8d9e04502357cd4ce467c5abb7c89c0d5d604cee3bf634105a70211c3f3dce9462b12aa22f18ccb453e3d535296934882bed7798d62b2354b66fdde0eef8bc5af04e7df93c8de9", 0x65}, {&(0x7f0000003d00)="485843ba47e373af7d2611584614aba0c5e38d29d5e2cd5cdd0040ceb5884f60397f1c102e146b54791fa4562893a3333503f79c33835a3d9a18133c5443cbc4d5ef4d75c2138e76c95a789285875b414540735fce6e8c52d7e05664e70ebf0da43daab685b5f22175853f8a74796fec60f3f675ab9b1f1beb345999a79cd9ffa9c6e8a8b992b5bea62524a1cd923c4e99b9626d9afde44e190138e96fc060c652a9e85d24791c", 0xa7}], 0x3, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x24040800}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000003f00)="0b70c9052d4625aea2e2a1e38782f9185dd5cfb0fe6e50f826eb428af870010d72d6cb19907f2ea6bc9bfe61c2b4014e030b85fd70640930ad84047d716cbe15b41bd7b79fc1966428eed36f53f0aa3d0561a55dbfb9a8e210678e1e6fd78959b37efeac6da6aad11f0f164d2680b998b42728df1ec04998a1d6fb8ed308c799de81ff70c05a18f1e67a6bf671bc0592798c4822a7c1da97fad13979ef13ebe34ad2c8278ffe99c84bba20b6c0e293daaee5beefbca4e876400f99e5edf4be4825004b206df7b86fd0881f9f3fdc418aefda086209ed0d8c6ed2f45b11909ebe643807565479bf", 0xe7}, {&(0x7f0000004000)="01ca27fc45f30474a88d8b5218f283c6cc25c5aaa61496330523a48b1a20226a21c542bff96446889ad147934e6f3c4cc4a3caf85fed61e47b161c0815ded6ea779215fe19c563fdd0e6e8de3f5192cb4b1c0ddbe5ac3858835602a7cd1be3e595ec4d90439cb6ea932bc7b85aa75ec1002dde7f43e1f13c738bdd02249306897dcde168a7763beae0c58afdc99c03019b8933c2082f43", 0x97}, {&(0x7f00000040c0)="059225dd47cb5ebb6f3cd0d9797b35c6bcc1fe248a6cfb777880ab3c5cb70808b9fcc3d4d85773fea9aec4ae389bf4c42613996db4ec26eddcb16d3d21599a961b7af7b3712cf37f09c5d62be6b24c151805db98b73a087f68d82c6ca9449117b950e559f4af7a42a76ddf2266548e65583a208503c276638a81ad3008f1ee6bd70fd0e2e78593d34e3840e7cd1a5ec4db688b7a5ee7afb5f9463dd3c615ad151ca0c3e4790caeed1781d60722438104442318026259ee97e948e0595630de35d87c6612e70086752ab5036765b151e2", 0xd0}, {&(0x7f00000041c0)="afed669f9bd304774f0d80f0c072ec66fd8affa488afd897a0b7c0ec72fa2efa4a7e4914753de2751a4c07047045b9a3863802625d3e34110c3bc90c89340fc2d2614c49cf272d5185f45033d488", 0x4e}], 0x4, &(0x7f0000005e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x20000000}}, {{&(0x7f0000005f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006000)=[{&(0x7f0000005fc0)="e06a1ae87cc0c4555d24253d7a35d5505d7eed3be29dec9e278b6c66613e8e61816833b5a1", 0x25}], 0x1, &(0x7f0000007c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x80, 0x44810}}, {{&(0x7f0000007d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007fc0)=[{&(0x7f0000007d80)="79514840d75bfc5bde4a08c8a48dbd87234a3e277836f400dfa2cd07d8834b75bcd6946ca89b3202c53cfdbeaa99afcd9d6fe4a9f1014dccd633ed65a70563447670b464c4abd3cd8e26e011971ac6fc272140ab8af3af77e71eb41d775106f5f957b6c164a5fe44558221bf72ad185587b3efc2c129888635fafc305dd328c0b9972b72cccc35263fa198ba3ea525ee75ad4f1928b7ccbd5f4ac937c6f0972e59134994e79ba923328e4fb29bd67ddce73a45b12f8f2df9862b78ac66e6624dbc7aceb6649cacf507531ee583914f11e9b2d0cfc1cbab5137b8731945", 0xdd}, {&(0x7f0000007e80)="a90cdac34f2bb1039bd68bcca6e1e6e0d7fe5afae6ac3d269b841d021151280b13fffd07aa21877c9b35e63c87f596001d9090460b4cedd0c320be81895156bf7fa8d35ee476ebb321d79de20a9ae6cd7e0fc5e3047f56c97daf73e4a365fde84b9fe7d7975fe8b0f2baf4450907784d253394e022c6934a4f927b7ef37c8217fbbdd03758fab7081eeb89ecae941fd99cd792ca404e86b798715ad7b980e4c34e", 0xa1}, {&(0x7f0000007f40)="8667b173765c9d5f062e2ed5d5705aaeb31d231be5fe73eabb9d75093904048776e80edcd84ee0e2f0ec7bb99020b292fd52d8272cb719fef0e8196fe920ea2e978b453a8590f427c86320f3037c507ca5bbb2dac6f987674a04a9150c880ffb7b2e6b436c190c4dc734ecfb7b1e4fa62e90cf5dc6dde984056a", 0x7a}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000b4c006f3e087a03d6a8d21c20d8db7dfb60e6a57bc20ef018d12bd8b4f93388e5c3c7fc786a06ead2d246c1d66d88beb4047d29e33b8566d05d2", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x40000}}], 0x7, 0x4844) mount(&(0x7f0000000980)=ANY=[@ANYBLOB="966a1057c0c635710cc323288d5691df7672aca0d17cb15d43fafc6c2a81c9782121fa9a747b40605706ed8490b8f145192ff25ff30be52a623df2269df47fac90dbc0cc4515c920eb66aa66b282859b5bd8a460d979b77130de94a28e877a"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 757.760123][T20833] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 757.768130][T20833] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 757.776132][T20833] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.784107][T20833] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 757.792143][T20833] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 757.800126][T20833] 19:41:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x7ffff000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 757.893510][ C1] sd 0:0:1:0: tag#8146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 757.903501][ C1] sd 0:0:1:0: tag#8146 CDB: opcode=0xe5 (vendor) [ 757.910056][ C1] sd 0:0:1:0: tag#8146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 757.919149][ C1] sd 0:0:1:0: tag#8146 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 757.928225][ C1] sd 0:0:1:0: tag#8146 CDB[20]: ba 19:41:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 23) 19:41:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/97, 0x61) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x20000038}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1300000000000000}}, {@dmode}]}) 19:41:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x20005f38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:25 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x7fffe000}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 758.164227][T20962] FAULT_INJECTION: forcing a failure. [ 758.164227][T20962] name failslab, interval 1, probability 0, space 0, times 0 [ 758.177005][T20962] CPU: 1 PID: 20962 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 758.187158][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.197596][T20962] Call Trace: [ 758.200893][T20962] [ 758.203821][T20962] dump_stack_lvl+0xd6/0x122 [ 758.208415][T20962] dump_stack+0x11/0x1b 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x20000112}], 0x3}}], 0x1, 0x0, 0x0) [ 758.212570][T20962] should_fail+0x23c/0x250 [ 758.217016][T20962] ? mempool_alloc_slab+0x16/0x20 [ 758.222241][T20962] __should_failslab+0x81/0x90 [ 758.227009][T20962] should_failslab+0x5/0x20 [ 758.231523][T20962] kmem_cache_alloc+0x4f/0x320 [ 758.236327][T20962] mempool_alloc_slab+0x16/0x20 [ 758.241263][T20962] ? mempool_free+0x130/0x130 [ 758.245953][T20962] mempool_alloc+0x9d/0x310 [ 758.250572][T20962] ? preempt_count_add+0x4e/0x90 [ 758.255559][T20962] ? _raw_read_unlock+0x13/0x30 [ 758.260417][T20962] ? jbd2_transaction_committed+0xad/0xc0 [ 758.266138][T20962] bio_alloc_bioset+0xcc/0x560 [ 758.270953][T20962] ? iov_iter_alignment+0x34b/0x370 [ 758.276155][T20962] iomap_dio_bio_iter+0x5ed/0xc70 [ 758.281235][T20962] ? ext4_alloc_da_blocks+0x100/0x100 [ 758.287524][T20962] __iomap_dio_rw+0x8b5/0x1070 [ 758.292363][T20962] ? _raw_spin_lock_irq+0x41/0x50 [ 758.297529][T20962] iomap_dio_rw+0x38/0x80 [ 758.301866][T20962] ? ext4_file_write_iter+0x461/0x1200 [ 758.307325][T20962] ext4_file_write_iter+0xac3/0x1200 [ 758.312719][T20962] ? ext4_file_write_iter+0x461/0x1200 [ 758.318179][T20962] do_iter_readv_writev+0x2de/0x380 [ 758.323474][T20962] do_iter_write+0x192/0x5c0 [ 758.328100][T20962] ? splice_from_pipe_next+0x34f/0x3b0 [ 758.333605][T20962] ? kmalloc_array+0x2d/0x40 [ 758.338201][T20962] vfs_iter_write+0x4c/0x70 [ 758.342771][T20962] iter_file_splice_write+0x43a/0x790 [ 758.348154][T20962] ? splice_from_pipe+0xd0/0xd0 [ 758.353080][T20962] direct_splice_actor+0x80/0xa0 [ 758.358023][T20962] splice_direct_to_actor+0x345/0x650 [ 758.363487][T20962] ? do_splice_direct+0x190/0x190 [ 758.368518][T20962] do_splice_direct+0x106/0x190 [ 758.373451][T20962] do_sendfile+0x675/0xc40 [ 758.377924][T20962] __x64_sys_sendfile64+0x102/0x140 [ 758.383139][T20962] do_syscall_64+0x44/0xd0 [ 758.387567][T20962] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 758.393475][T20962] RIP: 0033:0x7f34f8a1cae9 [ 758.397945][T20962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.417573][T20962] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 758.425987][T20962] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 758.434040][T20962] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 758.442011][T20962] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.450004][T20962] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x7fffdfc8}], 0x3}}], 0x1, 0x0, 0x0) 19:41:26 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)={'L+', 0x40}, 0x16, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) [ 758.457989][T20962] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 758.465957][T20962] 19:41:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1400000000000000}}, {@dmode}]}) [ 758.550061][ C0] sd 0:0:1:0: tag#8188 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 758.559932][ C0] sd 0:0:1:0: tag#8188 CDB: opcode=0xe5 (vendor) [ 758.566289][ C0] sd 0:0:1:0: tag#8188 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 758.575308][ C0] sd 0:0:1:0: tag#8188 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 758.584364][ C0] sd 0:0:1:0: tag#8188 CDB[20]: ba 19:41:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 24) 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x2}}], 0x1, 0x0, 0x0) 19:41:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x0, 0x835093, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="2f6465762f73673000b4fac2eb2f4fafef26f280210736e5caceb990061f460682d243eb71e13ec6ebe4926662e098ef184ede39ec84b44334ca9a2b894c2cc2b39ae1367ff3f3b0ed69649d871a8a97744cefa9b99785988263819e7dd76dc062c585cdb023b59125c5f5bf0b38d43a53b22f4bf170a639b2b6e05b05fa3cb5c4888d5917219edf824916340283a2cdf89e38e66c32f0810f"], &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='selinuxfs\x00', 0x180811, &(0x7f0000000300)='ramfs\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1500000000000000}}, {@dmode}]}) [ 758.804945][T21195] FAULT_INJECTION: forcing a failure. [ 758.804945][T21195] name failslab, interval 1, probability 0, space 0, times 0 [ 758.817682][T21195] CPU: 0 PID: 21195 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 758.828033][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.838192][T21195] Call Trace: [ 758.841472][T21195] [ 758.844410][T21195] dump_stack_lvl+0xd6/0x122 [ 758.849642][T21195] dump_stack+0x11/0x1b [ 758.853841][T21195] should_fail+0x23c/0x250 [ 758.858261][T21195] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 758.863648][T21195] __should_failslab+0x81/0x90 [ 758.868409][T21195] should_failslab+0x5/0x20 [ 758.872936][T21195] kmem_cache_alloc+0x4f/0x320 [ 758.877750][T21195] ext4_mb_new_blocks+0x328/0x1ee0 [ 758.882880][T21195] ? bio_will_gap+0xfc/0x4a0 [ 758.887827][T21195] ? ext4_get_branch+0x27d/0x2e0 [ 758.892825][T21195] ext4_ind_map_blocks+0xb1c/0x1740 [ 758.898068][T21195] ext4_map_blocks+0x6e3/0xf00 [ 758.902928][T21195] ext4_iomap_begin+0x4b0/0x630 [ 758.907792][T21195] ? ext4_alloc_da_blocks+0x100/0x100 [ 758.913201][T21195] iomap_iter+0x395/0x4a0 [ 758.917610][T21195] __iomap_dio_rw+0xb78/0x1070 [ 758.922370][T21195] ? _raw_spin_lock_irq+0x41/0x50 [ 758.927415][T21195] iomap_dio_rw+0x38/0x80 [ 758.931771][T21195] ? ext4_file_write_iter+0x461/0x1200 [ 758.937228][T21195] ext4_file_write_iter+0xac3/0x1200 [ 758.942523][T21195] ? ext4_file_write_iter+0x461/0x1200 [ 758.947990][T21195] do_iter_readv_writev+0x2de/0x380 [ 758.953205][T21195] do_iter_write+0x192/0x5c0 [ 758.957877][T21195] ? splice_from_pipe_next+0x34f/0x3b0 [ 758.963339][T21195] ? kmalloc_array+0x2d/0x40 [ 758.968046][T21195] vfs_iter_write+0x4c/0x70 [ 758.972558][T21195] iter_file_splice_write+0x43a/0x790 [ 758.977935][T21195] ? splice_from_pipe+0xd0/0xd0 [ 758.982845][T21195] direct_splice_actor+0x80/0xa0 [ 758.987799][T21195] splice_direct_to_actor+0x345/0x650 [ 758.993195][T21195] ? do_splice_direct+0x190/0x190 [ 758.998241][T21195] do_splice_direct+0x106/0x190 [ 759.003099][T21195] do_sendfile+0x675/0xc40 [ 759.007534][T21195] __x64_sys_sendfile64+0x102/0x140 [ 759.012729][T21195] do_syscall_64+0x44/0xd0 [ 759.017224][T21195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.023193][T21195] RIP: 0033:0x7f34f8a1cae9 [ 759.027598][T21195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.047465][T21195] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x8}}], 0x1, 0x0, 0x0) [ 759.055879][T21195] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 759.064078][T21195] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 759.072187][T21195] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.080193][T21195] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 759.088163][T21195] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 759.096201][T21195] 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x2}}], 0x1, 0x0, 0x0) 19:41:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x244040, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="00afc4c690ba7726be268f15e8cd6cb7442b6c856c97e1315b55a9a4f618c7891e724852fe8a5968444e000000001154d39b3c95eac8a4f4f6d638ec3acb65bea205a8213cc32c4cf9ff52ca4bf8ca66cea1d1d94f1a3fee4f5dc5834462669ed54bcccbfec1b0e1abdf35a8c0ec5b0eccb70bf7e235a5a21538ab9a7b1e2cc16886af04a02da7f1e11d06faa74a52dee726612d907e43a0aed2f074883132f43eecabb705299a96b63b14417d17238bbb3fbde6d9b9b31c879e8143cd154f2ee1a8356ba3a5dc38aad4261c374f3804cdb96f288b63130208791bb3942debaa1d10cf70e2a7adaead81aea616eac159"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0xa0) setuid(r2) lchown(&(0x7f0000000140)='./file0\x00', r2, 0xffffffffffffffff) 19:41:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 25) 19:41:26 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x3}}], 0x1, 0x0, 0x0) 19:41:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) [ 759.190332][T21316] FAULT_INJECTION: forcing a failure. [ 759.190332][T21316] name failslab, interval 1, probability 0, space 0, times 0 [ 759.203067][T21316] CPU: 1 PID: 21316 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 759.213276][T21316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.223437][T21316] Call Trace: [ 759.226711][T21316] [ 759.229637][T21316] dump_stack_lvl+0xd6/0x122 [ 759.234283][T21316] dump_stack+0x11/0x1b [ 759.238435][T21316] should_fail+0x23c/0x250 [ 759.242851][T21316] ? mempool_alloc_slab+0x16/0x20 [ 759.247921][T21316] __should_failslab+0x81/0x90 [ 759.252751][T21316] should_failslab+0x5/0x20 [ 759.254059][ C0] sd 0:0:1:0: tag#8157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 759.257301][T21316] kmem_cache_alloc+0x4f/0x320 [ 759.257326][T21316] mempool_alloc_slab+0x16/0x20 [ 759.257351][T21316] ? mempool_free+0x130/0x130 [ 759.267188][ C0] sd 0:0:1:0: tag#8157 CDB: opcode=0xe5 (vendor) [ 759.271886][T21316] mempool_alloc+0x9d/0x310 [ 759.276763][ C0] sd 0:0:1:0: tag#8157 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 759.281378][T21316] bio_alloc_bioset+0xcc/0x560 [ 759.287728][ C0] sd 0:0:1:0: tag#8157 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 759.292172][T21316] ? iov_iter_alignment+0x34b/0x370 [ 759.301208][ C0] sd 0:0:1:0: tag#8157 CDB[20]: ba [ 759.305913][T21316] iomap_dio_bio_iter+0x5ed/0xc70 [ 759.330191][T21316] ? ext4_alloc_da_blocks+0x100/0x100 [ 759.335564][T21316] __iomap_dio_rw+0x8b5/0x1070 [ 759.340335][T21316] iomap_dio_rw+0x38/0x80 [ 759.344724][T21316] ? ext4_file_write_iter+0x461/0x1200 [ 759.350180][T21316] ext4_file_write_iter+0xac3/0x1200 [ 759.355462][T21316] ? ext4_file_write_iter+0x461/0x1200 [ 759.360931][T21316] do_iter_readv_writev+0x2de/0x380 [ 759.366128][T21316] do_iter_write+0x192/0x5c0 [ 759.370744][T21316] ? splice_from_pipe_next+0x34f/0x3b0 [ 759.376199][T21316] ? kmalloc_array+0x2d/0x40 [ 759.380786][T21316] vfs_iter_write+0x4c/0x70 [ 759.385369][T21316] iter_file_splice_write+0x43a/0x790 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4}}], 0x1, 0x0, 0x0) 19:41:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) [ 759.390775][T21316] ? splice_from_pipe+0xd0/0xd0 [ 759.395650][T21316] direct_splice_actor+0x80/0xa0 [ 759.400593][T21316] splice_direct_to_actor+0x345/0x650 [ 759.406036][T21316] ? do_splice_direct+0x190/0x190 [ 759.411111][T21316] do_splice_direct+0x106/0x190 [ 759.416025][T21316] do_sendfile+0x675/0xc40 [ 759.420448][T21316] __x64_sys_sendfile64+0x102/0x140 [ 759.425737][T21316] do_syscall_64+0x44/0xd0 [ 759.430172][T21316] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 759.436067][T21316] RIP: 0033:0x7f34f8a1cae9 [ 759.440475][T21316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 759.460079][T21316] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.468494][T21316] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 759.476555][T21316] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x5}}], 0x1, 0x0, 0x0) 19:41:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1600000000000000}}, {@dmode}]}) [ 759.484563][T21316] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.492674][T21316] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 759.500708][T21316] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 759.508677][T21316] 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6}}], 0x1, 0x0, 0x0) 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x7}}], 0x1, 0x0, 0x0) 19:41:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1700000000000000}}, {@dmode}]}) 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8}}], 0x1, 0x0, 0x0) 19:41:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 26) 19:41:27 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='adfs\x00', 0x400, &(0x7f0000000500)='-9\x00') mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./fIle0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="77a6467fb147b131e2e42b2a14be9a5b0a8eb057d3f3ec938ee8d6405e1b48e411870d1d5cb37167cf905736f3efdcbae5127da6b2cccdc99c167ac13e56090e06c450c116dd1d6a5286b4d45ce1cd1925cb88a6c4f9df15f651464080cafe3eaec50c10dded6cc2a5690549b853ae23393c76969f8d73a6c85b8766da875fe360f92b2b7a786b25104d426fb93310c875f4c2d1006eca37fd117cfd3e24304ecc2211ef846552e67fef45b4bef0cd4f79"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0), 0x58c0, 0x0) 19:41:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa}}], 0x1, 0x0, 0x0) 19:41:27 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1800000000000000}}, {@dmode}]}) 19:41:27 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc}}], 0x1, 0x0, 0x0) [ 759.879404][T21557] FAULT_INJECTION: forcing a failure. [ 759.879404][T21557] name failslab, interval 1, probability 0, space 0, times 0 [ 759.892110][T21557] CPU: 0 PID: 21557 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 759.902340][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.912391][T21557] Call Trace: [ 759.915662][T21557] [ 759.918598][T21557] dump_stack_lvl+0xd6/0x122 [ 759.923192][T21557] dump_stack+0x11/0x1b [ 759.927359][T21557] should_fail+0x23c/0x250 [ 759.931778][T21557] ? jbd2__journal_start+0xf7/0x3f0 [ 759.937000][T21557] __should_failslab+0x81/0x90 [ 759.941770][T21557] should_failslab+0x5/0x20 [ 759.946291][T21557] kmem_cache_alloc+0x4f/0x320 [ 759.951157][T21557] jbd2__journal_start+0xf7/0x3f0 [ 759.956245][T21557] __ext4_journal_start_sb+0x159/0x310 [ 759.961708][T21557] ext4_iomap_begin+0x408/0x630 [ 759.966569][T21557] ? ext4_alloc_da_blocks+0x100/0x100 [ 759.971938][T21557] iomap_iter+0x395/0x4a0 [ 759.976281][T21557] __iomap_dio_rw+0xb78/0x1070 [ 759.981051][T21557] ? _raw_spin_lock_irq+0x41/0x50 [ 759.986075][T21557] iomap_dio_rw+0x38/0x80 [ 759.990422][T21557] ? ext4_file_write_iter+0x461/0x1200 [ 759.995985][T21557] ext4_file_write_iter+0xac3/0x1200 [ 760.001339][T21557] ? ext4_file_write_iter+0x461/0x1200 [ 760.006836][T21557] do_iter_readv_writev+0x2de/0x380 [ 760.012105][T21557] do_iter_write+0x192/0x5c0 [ 760.016692][T21557] ? splice_from_pipe_next+0x34f/0x3b0 [ 760.022197][T21557] ? kmalloc_array+0x2d/0x40 [ 760.026781][T21557] vfs_iter_write+0x4c/0x70 [ 760.031302][T21557] iter_file_splice_write+0x43a/0x790 [ 760.036717][T21557] ? splice_from_pipe+0xd0/0xd0 [ 760.041632][T21557] direct_splice_actor+0x80/0xa0 [ 760.046641][T21557] splice_direct_to_actor+0x345/0x650 [ 760.052037][T21557] ? do_splice_direct+0x190/0x190 [ 760.057245][T21557] do_splice_direct+0x106/0x190 [ 760.062186][T21557] do_sendfile+0x675/0xc40 [ 760.066610][T21557] __x64_sys_sendfile64+0x102/0x140 [ 760.071807][T21557] do_syscall_64+0x44/0xd0 [ 760.076235][T21557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.082194][T21557] RIP: 0033:0x7f34f8a1cae9 [ 760.086605][T21557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.106439][T21557] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.115006][T21557] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5018, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="d7812d468f11bad00de04d8c8c5294458c22fd8c973099124366293643696ef8e103c1898fb141b3e70e9eedcad67163d634280c8222794a81a72b0eee592f884d56321d46c24531fb8ea179c8a3b4ad58579a46176d14f28dc47b46038e84ceaea3076ff3d8d003b77b54aab6780333a0af809823f50f86c6f13d868a255a57b1bc6bffc9c9c522536a12de4dab4dda3124b0cc5f8d13437277081e8ad08d65106eda58b23880bc0ae6b705499710bf1074e6dbec55be8d8a460b9cc453a13320c7b8ff1aed36cbbec11ea4b328c2ede487098d4e238f4f058acd8f0968eb4b360a3c2ab81ca3ca679cb7a29526964c"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 760.122976][T21557] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 760.130947][T21557] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.138917][T21557] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 760.146887][T21557] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 760.154949][T21557] 19:41:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80100, 0x50) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x28) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x6000) r2 = syz_open_procfs(r1, &(0x7f0000000300)='comm\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:28 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xf}}], 0x1, 0x0, 0x0) 19:41:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 27) [ 760.183434][ C1] sd 0:0:1:0: tag#8153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 760.193438][ C1] sd 0:0:1:0: tag#8153 CDB: opcode=0xe5 (vendor) [ 760.199802][ C1] sd 0:0:1:0: tag#8153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 760.208972][ C1] sd 0:0:1:0: tag#8153 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 760.218022][ C1] sd 0:0:1:0: tag#8153 CDB[20]: ba [ 760.261498][T21800] FAULT_INJECTION: forcing a failure. [ 760.261498][T21800] name failslab, interval 1, probability 0, space 0, times 0 [ 760.274320][T21800] CPU: 0 PID: 21800 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 760.284525][T21800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.294581][T21800] Call Trace: [ 760.297856][T21800] [ 760.300800][T21800] dump_stack_lvl+0xd6/0x122 [ 760.305441][T21800] dump_stack+0x11/0x1b [ 760.309618][T21800] should_fail+0x23c/0x250 [ 760.314034][T21800] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 760.319326][T21800] __should_failslab+0x81/0x90 [ 760.324201][T21800] should_failslab+0x5/0x20 [ 760.328703][T21800] kmem_cache_alloc+0x4f/0x320 [ 760.333548][T21800] ext4_mb_new_blocks+0x328/0x1ee0 [ 760.338786][T21800] ? ext4_get_branch+0x27d/0x2e0 [ 760.343764][T21800] ? blk_mq_get_tag+0x50b/0x5f0 [ 760.348610][T21800] ? ktime_get+0x1b0/0x1e0 [ 760.353024][T21800] ext4_ind_map_blocks+0xb1c/0x1740 [ 760.358311][T21800] ext4_map_blocks+0x6e3/0xf00 [ 760.363128][T21800] ext4_iomap_begin+0x4b0/0x630 [ 760.368125][T21800] ? ext4_alloc_da_blocks+0x100/0x100 [ 760.373536][T21800] iomap_iter+0x395/0x4a0 [ 760.377870][T21800] __iomap_dio_rw+0xb78/0x1070 [ 760.382708][T21800] iomap_dio_rw+0x38/0x80 [ 760.387034][T21800] ? ext4_file_write_iter+0x461/0x1200 [ 760.392491][T21800] ext4_file_write_iter+0xac3/0x1200 [ 760.397840][T21800] ? ext4_file_write_iter+0x461/0x1200 [ 760.403292][T21800] do_iter_readv_writev+0x2de/0x380 [ 760.408491][T21800] do_iter_write+0x192/0x5c0 [ 760.413151][T21800] ? tsan.module_ctor+0x10/0x10 [ 760.418006][T21800] vfs_iter_write+0x4c/0x70 [ 760.422555][T21800] iter_file_splice_write+0x43a/0x790 [ 760.427928][T21800] ? splice_from_pipe+0xd0/0xd0 [ 760.432776][T21800] direct_splice_actor+0x80/0xa0 [ 760.437789][T21800] splice_direct_to_actor+0x345/0x650 [ 760.443162][T21800] ? do_splice_direct+0x190/0x190 [ 760.448198][T21800] do_splice_direct+0x106/0x190 [ 760.453046][T21800] do_sendfile+0x675/0xc40 [ 760.457457][T21800] __x64_sys_sendfile64+0x102/0x140 [ 760.462731][T21800] do_syscall_64+0x44/0xd0 [ 760.467215][T21800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 760.473112][T21800] RIP: 0033:0x7f34f8a1cae9 [ 760.477523][T21800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 760.497125][T21800] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x3, 0x35, &(0x7f00000002c0), 0x908000, &(0x7f0000000140)={[], [{@dont_measure}, {@obj_user={'obj_user', 0x3d, '&'}}, {@euid_eq={'euid', 0x3d, r1}}]}) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1900000000000000}}, {@dmode}]}) [ 760.505594][T21800] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 760.513623][T21800] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 760.521599][T21800] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.529565][T21800] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 760.537531][T21800] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 760.545504][T21800] 19:41:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 28) 19:41:28 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x10}}], 0x1, 0x0, 0x0) 19:41:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/sco\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1a00000000000000}}, {@dmode}]}) 19:41:28 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 760.824503][ C0] sd 0:0:1:0: tag#8164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 760.834388][ C0] sd 0:0:1:0: tag#8164 CDB: opcode=0xe5 (vendor) [ 760.840769][ C0] sd 0:0:1:0: tag#8164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 760.849845][ C0] sd 0:0:1:0: tag#8164 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 760.858931][ C0] sd 0:0:1:0: tag#8164 CDB[20]: ba [ 760.866151][T21993] FAULT_INJECTION: forcing a failure. 19:41:28 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x60}}], 0x1, 0x0, 0x0) [ 760.866151][T21993] name failslab, interval 1, probability 0, space 0, times 0 [ 760.878873][T21993] CPU: 1 PID: 21993 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 760.889026][T21993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.899095][T21993] Call Trace: [ 760.902402][T21993] [ 760.905325][T21993] dump_stack_lvl+0xd6/0x122 [ 760.909921][T21993] dump_stack+0x11/0x1b [ 760.914074][T21993] should_fail+0x23c/0x250 [ 760.918564][T21993] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 760.923896][T21993] __should_failslab+0x81/0x90 [ 760.928746][T21993] should_failslab+0x5/0x20 [ 760.933347][T21993] kmem_cache_alloc+0x4f/0x320 [ 760.938184][T21993] ext4_mb_new_blocks+0x328/0x1ee0 [ 760.943422][T21993] ? bio_will_gap+0xfc/0x4a0 [ 760.948154][T21993] ? ext4_get_branch+0x27d/0x2e0 [ 760.953153][T21993] ext4_ind_map_blocks+0xb1c/0x1740 [ 760.958366][T21993] ext4_map_blocks+0x6e3/0xf00 [ 760.963323][T21993] ext4_iomap_begin+0x4b0/0x630 [ 760.968274][T21993] ? ext4_alloc_da_blocks+0x100/0x100 19:41:28 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 760.973674][T21993] iomap_iter+0x395/0x4a0 [ 760.978099][T21993] __iomap_dio_rw+0xb78/0x1070 [ 760.982909][T21993] ? _raw_spin_lock_irq+0x41/0x50 [ 760.987936][T21993] iomap_dio_rw+0x38/0x80 [ 760.992268][T21993] ? ext4_file_write_iter+0x461/0x1200 [ 760.997757][T21993] ext4_file_write_iter+0xac3/0x1200 [ 761.003055][T21993] ? ext4_file_write_iter+0x461/0x1200 [ 761.008519][T21993] do_iter_readv_writev+0x2de/0x380 [ 761.013724][T21993] do_iter_write+0x192/0x5c0 [ 761.018443][T21993] ? splice_from_pipe_next+0x34f/0x3b0 19:41:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=@v2={0x5, 0x2, 0x0, 0x7fff, 0xa6, "41bfe0d59685060b6184504f3cbf74089af42d91aaf72a0c6065d5b063ee9d9c82326631853ca41e3341f9adeeb9d049b48a3d9e40921226591ed7da41aa82f5519eb9a0adddfbe77925ba7051676650f8be8048e1d79cdef42aceafe7e878e604485ac01d6816b3e674be2eb2109c630ba9cc14a2de98af030e8efe2d613808653b9367e251c23016d7f52eda06b8c5bfa87870acc58ef1cde102b48d5458f087061fb43e03"}, 0xaf, 0x3) [ 761.024024][T21993] ? kmalloc_array+0x2d/0x40 [ 761.028682][T21993] vfs_iter_write+0x4c/0x70 [ 761.033200][T21993] iter_file_splice_write+0x43a/0x790 [ 761.038580][T21993] ? splice_from_pipe+0xd0/0xd0 [ 761.043474][T21993] direct_splice_actor+0x80/0xa0 [ 761.048482][T21993] splice_direct_to_actor+0x345/0x650 [ 761.053945][T21993] ? do_splice_direct+0x190/0x190 [ 761.058984][T21993] do_splice_direct+0x106/0x190 [ 761.063864][T21993] do_sendfile+0x675/0xc40 [ 761.068291][T21993] __x64_sys_sendfile64+0x102/0x140 [ 761.073501][T21993] do_syscall_64+0x44/0xd0 [ 761.077994][T21993] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.083883][T21993] RIP: 0033:0x7f34f8a1cae9 [ 761.088409][T21993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.108140][T21993] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.116637][T21993] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 29) 19:41:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1b00000000000000}}, {@dmode}]}) [ 761.124608][T21993] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 761.132656][T21993] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.140832][T21993] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 761.148937][T21993] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 761.156990][T21993] 19:41:28 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x300}}], 0x1, 0x0, 0x0) 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x500}}], 0x1, 0x0, 0x0) [ 761.241633][T22230] FAULT_INJECTION: forcing a failure. [ 761.241633][T22230] name failslab, interval 1, probability 0, space 0, times 0 [ 761.254333][T22230] CPU: 0 PID: 22230 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 761.264490][T22230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.274567][T22230] Call Trace: [ 761.277844][T22230] [ 761.280782][T22230] dump_stack_lvl+0xd6/0x122 [ 761.285438][T22230] dump_stack+0x11/0x1b [ 761.289605][T22230] should_fail+0x23c/0x250 [ 761.294020][T22230] ? mempool_alloc_slab+0x16/0x20 [ 761.299050][T22230] __should_failslab+0x81/0x90 [ 761.303816][T22230] should_failslab+0x5/0x20 [ 761.308318][T22230] kmem_cache_alloc+0x4f/0x320 [ 761.313152][T22230] mempool_alloc_slab+0x16/0x20 [ 761.318140][T22230] ? mempool_free+0x130/0x130 [ 761.322816][T22230] mempool_alloc+0x9d/0x310 [ 761.327344][T22230] ? preempt_count_add+0x4e/0x90 [ 761.332283][T22230] ? _raw_read_unlock+0x13/0x30 [ 761.337150][T22230] ? jbd2_transaction_committed+0xad/0xc0 [ 761.342879][T22230] bio_alloc_bioset+0xcc/0x560 [ 761.347639][T22230] ? iov_iter_alignment+0x34b/0x370 [ 761.352844][T22230] iomap_dio_bio_iter+0x5ed/0xc70 [ 761.357873][T22230] ? ext4_alloc_da_blocks+0x100/0x100 [ 761.363301][T22230] __iomap_dio_rw+0x8b5/0x1070 [ 761.368068][T22230] iomap_dio_rw+0x38/0x80 [ 761.372452][T22230] ? ext4_file_write_iter+0x461/0x1200 [ 761.377939][T22230] ext4_file_write_iter+0xac3/0x1200 [ 761.383222][T22230] ? ext4_file_write_iter+0x461/0x1200 [ 761.388707][T22230] ? save_fpregs_to_fpstate+0xf5/0x140 [ 761.394184][T22230] do_iter_readv_writev+0x2de/0x380 [ 761.399434][T22230] do_iter_write+0x192/0x5c0 [ 761.404053][T22230] vfs_iter_write+0x4c/0x70 [ 761.408564][T22230] iter_file_splice_write+0x43a/0x790 [ 761.414037][T22230] ? splice_from_pipe+0xd0/0xd0 [ 761.419077][T22230] direct_splice_actor+0x80/0xa0 [ 761.424019][T22230] splice_direct_to_actor+0x345/0x650 [ 761.429462][T22230] ? do_splice_direct+0x190/0x190 [ 761.434512][T22230] do_splice_direct+0x106/0x190 [ 761.439397][T22230] do_sendfile+0x675/0xc40 [ 761.443813][T22230] __x64_sys_sendfile64+0x102/0x140 [ 761.449018][T22230] do_syscall_64+0x44/0xd0 [ 761.453435][T22230] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 761.459345][T22230] RIP: 0033:0x7f34f8a1cae9 [ 761.463755][T22230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.483407][T22230] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x600}}], 0x1, 0x0, 0x0) [ 761.491819][T22230] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 761.499837][T22230] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 761.507825][T22230] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.515880][T22230] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 761.523914][T22230] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 761.531880][T22230] 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x700}}], 0x1, 0x0, 0x0) 19:41:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1c00000000000000}}, {@dmode}]}) 19:41:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd20, 0x0) 19:41:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa00}}], 0x1, 0x0, 0x0) 19:41:29 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1d00000000000000}}, {@dmode}]}) [ 761.745125][ C1] sd 0:0:1:0: tag#8177 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 761.755015][ C1] sd 0:0:1:0: tag#8177 CDB: opcode=0xe5 (vendor) [ 761.761388][ C1] sd 0:0:1:0: tag#8177 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 761.770459][ C1] sd 0:0:1:0: tag#8177 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 761.779505][ C1] sd 0:0:1:0: tag#8177 CDB[20]: ba 19:41:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 30) 19:41:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mknod$loop(&(0x7f0000000540)='./file0\x00', 0x800, 0x1) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000380)=@v1={0x2, "76341e49fadc9209b66da992cd0e0bc73d"}, 0x12, 0x1) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x101000, 0x64) bind$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000400)=@sg0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='configfs\x00', 0x1800886, &(0x7f0000000500)='!\x00') open(&(0x7f00000003c0)='./file0\x00', 0x105802, 0x14) 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc00}}], 0x1, 0x0, 0x0) 19:41:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1e00000000000000}}, {@dmode}]}) 19:41:29 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:29 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xec0}}], 0x1, 0x0, 0x0) [ 762.009910][T22475] FAULT_INJECTION: forcing a failure. [ 762.009910][T22475] name failslab, interval 1, probability 0, space 0, times 0 [ 762.022624][T22475] CPU: 1 PID: 22475 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 762.032908][T22475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.042966][T22475] Call Trace: [ 762.046299][T22475] [ 762.049302][T22475] dump_stack_lvl+0xd6/0x122 [ 762.053934][T22475] dump_stack+0x11/0x1b [ 762.058104][T22475] should_fail+0x23c/0x250 [ 762.062507][T22475] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 762.067918][T22475] __should_failslab+0x81/0x90 [ 762.072748][T22475] should_failslab+0x5/0x20 [ 762.077239][T22475] kmem_cache_alloc+0x4f/0x320 [ 762.081987][T22475] ext4_mb_new_blocks+0x328/0x1ee0 [ 762.087157][T22475] ? bio_will_gap+0xfc/0x4a0 [ 762.091759][T22475] ? ext4_get_branch+0x27d/0x2e0 [ 762.096758][T22475] ext4_ind_map_blocks+0xb1c/0x1740 [ 762.102040][T22475] ext4_map_blocks+0x6e3/0xf00 [ 762.106801][T22475] ext4_iomap_begin+0x4b0/0x630 [ 762.111715][T22475] ? ext4_alloc_da_blocks+0x100/0x100 [ 762.117087][T22475] iomap_iter+0x395/0x4a0 [ 762.121449][T22475] __iomap_dio_rw+0xb78/0x1070 [ 762.126279][T22475] iomap_dio_rw+0x38/0x80 [ 762.130678][T22475] ? ext4_file_write_iter+0x461/0x1200 [ 762.136121][T22475] ext4_file_write_iter+0xac3/0x1200 [ 762.141426][T22475] ? ext4_file_write_iter+0x461/0x1200 [ 762.146886][T22475] do_iter_readv_writev+0x2de/0x380 [ 762.152163][T22475] do_iter_write+0x192/0x5c0 [ 762.156811][T22475] ? splice_from_pipe_next+0x34f/0x3b0 [ 762.162329][T22475] ? kmalloc_array+0x2d/0x40 [ 762.167004][T22475] vfs_iter_write+0x4c/0x70 [ 762.171519][T22475] iter_file_splice_write+0x43a/0x790 [ 762.176962][T22475] ? splice_from_pipe+0xd0/0xd0 [ 762.181910][T22475] direct_splice_actor+0x80/0xa0 [ 762.186837][T22475] splice_direct_to_actor+0x345/0x650 [ 762.192273][T22475] ? do_splice_direct+0x190/0x190 [ 762.197359][T22475] do_splice_direct+0x106/0x190 [ 762.202205][T22475] do_sendfile+0x675/0xc40 [ 762.206608][T22475] __x64_sys_sendfile64+0x102/0x140 [ 762.211805][T22475] do_syscall_64+0x44/0xd0 [ 762.216278][T22475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 762.222200][T22475] RIP: 0033:0x7f34f8a1cae9 [ 762.226600][T22475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 762.246214][T22475] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xf00}}], 0x1, 0x0, 0x0) [ 762.254616][T22475] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 762.262572][T22475] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 762.270553][T22475] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.278520][T22475] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 762.286529][T22475] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 762.294487][T22475] 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x104a}}], 0x1, 0x0, 0x0) 19:41:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:30 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x1f00000000000000}}, {@dmode}]}) 19:41:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x291041a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x100000001, 0x8, 0x8}) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, &(0x7f00000002c0)={0x70, 0x100003, 0x160000, {r1}}, 0x20) mount(&(0x7f0000001480)=ANY=[@ANYRESHEX, @ANYBLOB="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"], &(0x7f0000000240)='.', 0x0, 0x15110, 0x0) fallocate(r0, 0x8, 0x7fffffff, 0x200) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 31) 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4788}}], 0x1, 0x0, 0x0) 19:41:30 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80002800) 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4888}}], 0x1, 0x0, 0x0) [ 762.602196][T22591] FAULT_INJECTION: forcing a failure. [ 762.602196][T22591] name failslab, interval 1, probability 0, space 0, times 0 [ 762.615028][T22591] CPU: 1 PID: 22591 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 762.625184][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.635292][T22591] Call Trace: [ 762.638590][T22591] [ 762.641518][T22591] dump_stack_lvl+0xd6/0x122 [ 762.646164][T22591] dump_stack+0x11/0x1b 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4a10}}], 0x1, 0x0, 0x0) [ 762.650361][T22591] should_fail+0x23c/0x250 [ 762.654795][T22591] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 762.660106][T22591] __should_failslab+0x81/0x90 [ 762.664880][T22591] should_failslab+0x5/0x20 [ 762.669445][T22591] kmem_cache_alloc+0x4f/0x320 [ 762.674213][T22591] ext4_mb_new_blocks+0x328/0x1ee0 [ 762.679331][T22591] ? bio_will_gap+0xfc/0x4a0 [ 762.683928][T22591] ? ext4_get_branch+0x27d/0x2e0 [ 762.688915][T22591] ext4_ind_map_blocks+0xb1c/0x1740 [ 762.694181][T22591] ext4_map_blocks+0x6e3/0xf00 19:41:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="3c7d1b1a04423ad8a3edb23452a39dc438ae40c8a13b741d3223b568d680d6e51ff818eee047353998aed717f3bc10eab3cc8d88feac7ecee4779b8459d2607087e218ea22e43a238e36f0be0810b7ac2ee364981732b03b96e47213f5ed37e22b3dcdf9249dbe08bab882ef3746541890c52b1ea0ae2ca8c94d7e930a79114477fd3f8c0563b57e258c98dcf2fe8110889cfa7df7026f42773136b7fedacd8ce3432562146db4f0ebc3b89d3e94fff4f4531b35986ef459e5f70c088b999724d3ca5eb2908fd964e09cc78c826ca7587ac57790a57d90d03b"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 762.699003][T22591] ext4_iomap_begin+0x4b0/0x630 [ 762.703942][T22591] ? ext4_alloc_da_blocks+0x100/0x100 [ 762.709335][T22591] iomap_iter+0x395/0x4a0 [ 762.713700][T22591] __iomap_dio_rw+0xb78/0x1070 [ 762.718478][T22591] ? _raw_spin_lock_irq+0x41/0x50 [ 762.723581][T22591] iomap_dio_rw+0x38/0x80 [ 762.727916][T22591] ? ext4_file_write_iter+0x461/0x1200 [ 762.733395][T22591] ext4_file_write_iter+0xac3/0x1200 [ 762.738780][T22591] ? ext4_file_write_iter+0x461/0x1200 [ 762.744266][T22591] do_iter_readv_writev+0x2de/0x380 [ 762.749477][T22591] do_iter_write+0x192/0x5c0 [ 762.754168][T22591] ? splice_from_pipe_next+0x34f/0x3b0 [ 762.759676][T22591] ? kmalloc_array+0x2d/0x40 [ 762.764293][T22591] vfs_iter_write+0x4c/0x70 [ 762.768891][T22591] iter_file_splice_write+0x43a/0x790 [ 762.774324][T22591] ? splice_from_pipe+0xd0/0xd0 [ 762.779182][T22591] direct_splice_actor+0x80/0xa0 [ 762.784192][T22591] splice_direct_to_actor+0x345/0x650 [ 762.789603][T22591] ? do_splice_direct+0x190/0x190 [ 762.794641][T22591] do_splice_direct+0x106/0x190 [ 762.799494][T22591] do_sendfile+0x675/0xc40 [ 762.803949][T22591] __x64_sys_sendfile64+0x102/0x140 [ 762.809146][T22591] do_syscall_64+0x44/0xd0 [ 762.813616][T22591] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 762.819570][T22591] RIP: 0033:0x7f34f8a1cae9 [ 762.823978][T22591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 762.843639][T22591] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 762.852168][T22591] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 762.860136][T22591] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 762.868157][T22591] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 762.876193][T22591] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 762.884484][T22591] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 762.892486][T22591] 19:41:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 32) 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x5865}}], 0x1, 0x0, 0x0) [ 762.914630][ C0] sd 0:0:1:0: tag#8163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 762.924554][ C0] sd 0:0:1:0: tag#8163 CDB: opcode=0xe5 (vendor) [ 762.931024][ C0] sd 0:0:1:0: tag#8163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 762.940116][ C0] sd 0:0:1:0: tag#8163 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 762.949187][ C0] sd 0:0:1:0: tag#8163 CDB[20]: ba 19:41:30 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6000}}], 0x1, 0x0, 0x0) [ 762.969729][T22706] FAULT_INJECTION: forcing a failure. [ 762.969729][T22706] name failslab, interval 1, probability 0, space 0, times 0 [ 762.982433][T22706] CPU: 1 PID: 22706 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 762.992707][T22706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.002903][T22706] Call Trace: [ 763.006188][T22706] [ 763.009192][T22706] dump_stack_lvl+0xd6/0x122 [ 763.013787][T22706] dump_stack+0x11/0x1b [ 763.017953][T22706] should_fail+0x23c/0x250 [ 763.022422][T22706] ? jbd2__journal_start+0xf7/0x3f0 [ 763.027623][T22706] __should_failslab+0x81/0x90 [ 763.032458][T22706] should_failslab+0x5/0x20 [ 763.036966][T22706] kmem_cache_alloc+0x4f/0x320 [ 763.041748][T22706] jbd2__journal_start+0xf7/0x3f0 [ 763.046775][T22706] __ext4_journal_start_sb+0x159/0x310 [ 763.052239][T22706] ext4_iomap_begin+0x408/0x630 [ 763.057095][T22706] ? ext4_alloc_da_blocks+0x100/0x100 [ 763.062485][T22706] iomap_iter+0x395/0x4a0 [ 763.066901][T22706] __iomap_dio_rw+0xb78/0x1070 [ 763.071710][T22706] ? _raw_spin_lock_irq+0x41/0x50 [ 763.076751][T22706] iomap_dio_rw+0x38/0x80 [ 763.081084][T22706] ? ext4_file_write_iter+0x461/0x1200 [ 763.086628][T22706] ext4_file_write_iter+0xac3/0x1200 [ 763.091935][T22706] ? ext4_file_write_iter+0x461/0x1200 [ 763.097440][T22706] do_iter_readv_writev+0x2de/0x380 [ 763.102641][T22706] do_iter_write+0x192/0x5c0 [ 763.107237][T22706] ? splice_from_pipe_next+0x34f/0x3b0 [ 763.112768][T22706] ? kmalloc_array+0x2d/0x40 [ 763.117355][T22706] vfs_iter_write+0x4c/0x70 [ 763.121865][T22706] iter_file_splice_write+0x43a/0x790 [ 763.127341][T22706] ? splice_from_pipe+0xd0/0xd0 [ 763.132196][T22706] direct_splice_actor+0x80/0xa0 [ 763.137145][T22706] splice_direct_to_actor+0x345/0x650 [ 763.142519][T22706] ? do_splice_direct+0x190/0x190 [ 763.147704][T22706] do_splice_direct+0x106/0x190 [ 763.152564][T22706] do_sendfile+0x675/0xc40 [ 763.156983][T22706] __x64_sys_sendfile64+0x102/0x140 [ 763.162231][T22706] do_syscall_64+0x44/0xd0 [ 763.166649][T22706] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 763.172569][T22706] RIP: 0033:0x7f34f8a1cae9 [ 763.176977][T22706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 763.196711][T22706] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 763.205123][T22706] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 763.213095][T22706] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 763.221058][T22706] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 763.229023][T22706] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 763.237004][T22706] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 763.244978][T22706] 19:41:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940), 0x0, 0xd00, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='btrfs\x00', 0x102000, 0x0) 19:41:31 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6558}}], 0x1, 0x0, 0x0) 19:41:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2000000000000000}}, {@dmode}]}) 19:41:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 33) 19:41:31 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80002800) 19:41:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x101, 0x8) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f00000000c0)='.', 0x0, 0x20b30c0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="641b0fa9afa5dfd8c60749838e3398916f0a53dd642a6fa14a06d3b1c85496fe66b08082b9fc80a1be137e7b16b0f546f212dfaf0c701f96738da9e23cca4ec4d778c38e42d40a32492b69a99b1ca32be8635f12dc8efcc01e2e8ebb3b4dd7566bdbce6d214026ab8c2647d5942ac6af7086bf3c2f0bd5e7dffd48ac232f4b4126a5e7e1589be7879653af4f8d8641400d6ac03ab68f3a31380364ee6770eb"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x1000080, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 763.742694][T22819] FAULT_INJECTION: forcing a failure. [ 763.742694][T22819] name failslab, interval 1, probability 0, space 0, times 0 [ 763.755397][T22819] CPU: 0 PID: 22819 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 763.765639][T22819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.775721][T22819] Call Trace: [ 763.779000][T22819] [ 763.781961][T22819] dump_stack_lvl+0xd6/0x122 [ 763.786551][T22819] dump_stack+0x11/0x1b [ 763.790709][T22819] should_fail+0x23c/0x250 [ 763.793151][ C1] sd 0:0:1:0: tag#8133 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 763.795120][T22819] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 763.804982][ C1] sd 0:0:1:0: tag#8133 CDB: opcode=0xe5 (vendor) [ 763.810207][T22819] __should_failslab+0x81/0x90 [ 763.816571][ C1] sd 0:0:1:0: tag#8133 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 763.821282][T22819] should_failslab+0x5/0x20 [ 763.830303][ C1] sd 0:0:1:0: tag#8133 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 763.834761][T22819] kmem_cache_alloc+0x4f/0x320 [ 763.843791][ C1] sd 0:0:1:0: tag#8133 CDB[20]: ba [ 763.848496][T22819] ext4_mb_new_blocks+0x328/0x1ee0 [ 763.858719][T22819] ? bio_will_gap+0xfc/0x4a0 [ 763.863336][T22819] ? ext4_get_branch+0x27d/0x2e0 [ 763.868277][T22819] ext4_ind_map_blocks+0xb1c/0x1740 [ 763.873479][T22819] ext4_map_blocks+0x6e3/0xf00 [ 763.878294][T22819] ext4_iomap_begin+0x4b0/0x630 [ 763.883150][T22819] ? ext4_alloc_da_blocks+0x100/0x100 [ 763.888605][T22819] iomap_iter+0x395/0x4a0 [ 763.892965][T22819] __iomap_dio_rw+0xb78/0x1070 [ 763.897732][T22819] ? _raw_spin_lock_irq+0x41/0x50 [ 763.902889][T22819] iomap_dio_rw+0x38/0x80 [ 763.907218][T22819] ? ext4_file_write_iter+0x461/0x1200 [ 763.912675][T22819] ext4_file_write_iter+0xac3/0x1200 [ 763.917958][T22819] ? ext4_file_write_iter+0x461/0x1200 [ 763.923491][T22819] do_iter_readv_writev+0x2de/0x380 [ 763.928684][T22819] do_iter_write+0x192/0x5c0 [ 763.933277][T22819] ? splice_from_pipe_next+0x34f/0x3b0 [ 763.938747][T22819] ? kmalloc_array+0x2d/0x40 [ 763.943333][T22819] vfs_iter_write+0x4c/0x70 [ 763.947845][T22819] iter_file_splice_write+0x43a/0x790 [ 763.953288][T22819] ? splice_from_pipe+0xd0/0xd0 [ 763.958163][T22819] direct_splice_actor+0x80/0xa0 [ 763.963259][T22819] splice_direct_to_actor+0x345/0x650 [ 763.968640][T22819] ? do_splice_direct+0x190/0x190 [ 763.973667][T22819] do_splice_direct+0x106/0x190 [ 763.978730][T22819] do_sendfile+0x675/0xc40 [ 763.983210][T22819] __x64_sys_sendfile64+0x102/0x140 [ 763.988405][T22819] do_syscall_64+0x44/0xd0 [ 763.992876][T22819] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 763.998774][T22819] RIP: 0033:0x7f34f8a1cae9 [ 764.003214][T22819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.022823][T22819] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 764.031267][T22819] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:31 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8100}}], 0x1, 0x0, 0x0) 19:41:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 34) [ 764.039290][T22819] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 764.047299][T22819] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.055268][T22819] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 764.063283][T22819] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 764.071252][T22819] 19:41:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2010000000000000}}, {@dmode}]}) [ 764.144499][ C0] sd 0:0:1:0: tag#8174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 764.154392][ C0] sd 0:0:1:0: tag#8174 CDB: opcode=0xe5 (vendor) [ 764.158663][T22961] FAULT_INJECTION: forcing a failure. [ 764.158663][T22961] name failslab, interval 1, probability 0, space 0, times 0 [ 764.160758][ C0] sd 0:0:1:0: tag#8174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 764.160795][ C0] sd 0:0:1:0: tag#8174 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 764.173411][T22961] CPU: 1 PID: 22961 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 764.182486][ C0] sd 0:0:1:0: tag#8174 CDB[20]: ba [ 764.191478][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.216855][T22961] Call Trace: [ 764.220124][T22961] [ 764.223123][T22961] dump_stack_lvl+0xd6/0x122 [ 764.227724][T22961] dump_stack+0x11/0x1b [ 764.232034][T22961] should_fail+0x23c/0x250 [ 764.236437][T22961] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 764.241845][T22961] __should_failslab+0x81/0x90 [ 764.246709][T22961] should_failslab+0x5/0x20 [ 764.251199][T22961] kmem_cache_alloc+0x4f/0x320 [ 764.255952][T22961] ext4_mb_new_blocks+0x328/0x1ee0 [ 764.261066][T22961] ? bio_will_gap+0xfc/0x4a0 [ 764.265709][T22961] ? ext4_get_branch+0x27d/0x2e0 [ 764.270635][T22961] ext4_ind_map_blocks+0xb1c/0x1740 [ 764.275868][T22961] ext4_map_blocks+0x6e3/0xf00 [ 764.280723][T22961] ext4_iomap_begin+0x4b0/0x630 [ 764.285573][T22961] ? ext4_alloc_da_blocks+0x100/0x100 [ 764.291056][T22961] iomap_iter+0x395/0x4a0 [ 764.295374][T22961] __iomap_dio_rw+0xb78/0x1070 [ 764.300160][T22961] ? _raw_spin_lock_irq+0x41/0x50 [ 764.305284][T22961] iomap_dio_rw+0x38/0x80 [ 764.309631][T22961] ? ext4_file_write_iter+0x461/0x1200 [ 764.315087][T22961] ext4_file_write_iter+0xac3/0x1200 [ 764.320401][T22961] ? ext4_file_write_iter+0x461/0x1200 [ 764.326029][T22961] do_iter_readv_writev+0x2de/0x380 [ 764.331215][T22961] do_iter_write+0x192/0x5c0 [ 764.335794][T22961] vfs_iter_write+0x4c/0x70 [ 764.340284][T22961] iter_file_splice_write+0x43a/0x790 [ 764.345659][T22961] ? splice_from_pipe+0xd0/0xd0 [ 764.350570][T22961] direct_splice_actor+0x80/0xa0 [ 764.355494][T22961] splice_direct_to_actor+0x345/0x650 [ 764.360897][T22961] ? do_splice_direct+0x190/0x190 [ 764.365924][T22961] do_splice_direct+0x106/0x190 [ 764.370780][T22961] do_sendfile+0x675/0xc40 [ 764.375194][T22961] __x64_sys_sendfile64+0x102/0x140 [ 764.380390][T22961] do_syscall_64+0x44/0xd0 [ 764.384793][T22961] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.390724][T22961] RIP: 0033:0x7f34f8a1cae9 [ 764.395125][T22961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.414714][T22961] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 764.423185][T22961] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 764.431153][T22961] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8847}}], 0x1, 0x0, 0x0) 19:41:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 35) [ 764.439120][T22961] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.447081][T22961] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 764.455036][T22961] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 764.463014][T22961] 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8848}}], 0x1, 0x0, 0x0) 19:41:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='.', 0x0, 0x28330c0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='exofs\x00', 0x82000, &(0x7f0000000340)=')\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd00, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc00e}}], 0x1, 0x0, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) [ 764.556143][T23053] FAULT_INJECTION: forcing a failure. [ 764.556143][T23053] name failslab, interval 1, probability 0, space 0, times 0 [ 764.568842][T23053] CPU: 1 PID: 23053 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 764.579000][T23053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.589075][T23053] Call Trace: [ 764.592367][T23053] [ 764.595303][T23053] dump_stack_lvl+0xd6/0x122 [ 764.600119][T23053] dump_stack+0x11/0x1b [ 764.604336][T23053] should_fail+0x23c/0x250 [ 764.608770][T23053] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 764.614150][T23053] __should_failslab+0x81/0x90 [ 764.618919][T23053] should_failslab+0x5/0x20 [ 764.623484][T23053] kmem_cache_alloc+0x4f/0x320 [ 764.628275][T23053] ext4_mb_new_blocks+0x328/0x1ee0 [ 764.633430][T23053] ? bio_will_gap+0xfc/0x4a0 [ 764.638060][T23053] ? ext4_get_branch+0x27d/0x2e0 [ 764.643004][T23053] ext4_ind_map_blocks+0xb1c/0x1740 [ 764.648270][T23053] ext4_map_blocks+0x6e3/0xf00 [ 764.653035][T23053] ext4_iomap_begin+0x4b0/0x630 [ 764.657897][T23053] ? ext4_alloc_da_blocks+0x100/0x100 [ 764.663339][T23053] iomap_iter+0x395/0x4a0 [ 764.667670][T23053] __iomap_dio_rw+0xb78/0x1070 [ 764.672444][T23053] iomap_dio_rw+0x38/0x80 [ 764.676814][T23053] ? ext4_file_write_iter+0x461/0x1200 [ 764.682277][T23053] ext4_file_write_iter+0xac3/0x1200 [ 764.687569][T23053] ? ext4_file_write_iter+0x461/0x1200 [ 764.693127][T23053] do_iter_readv_writev+0x2de/0x380 [ 764.698329][T23053] do_iter_write+0x192/0x5c0 [ 764.702922][T23053] ? splice_from_pipe_next+0x34f/0x3b0 [ 764.708381][T23053] ? kmalloc_array+0x2d/0x40 [ 764.712985][T23053] vfs_iter_write+0x4c/0x70 [ 764.717563][T23053] iter_file_splice_write+0x43a/0x790 [ 764.722989][T23053] ? splice_from_pipe+0xd0/0xd0 [ 764.727839][T23053] direct_splice_actor+0x80/0xa0 [ 764.732855][T23053] splice_direct_to_actor+0x345/0x650 [ 764.738298][T23053] ? do_splice_direct+0x190/0x190 [ 764.743321][T23053] do_splice_direct+0x106/0x190 [ 764.748232][T23053] do_sendfile+0x675/0xc40 [ 764.752667][T23053] __x64_sys_sendfile64+0x102/0x140 [ 764.758003][T23053] do_syscall_64+0x44/0xd0 [ 764.762463][T23053] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 764.768391][T23053] RIP: 0033:0x7f34f8a1cae9 [ 764.772971][T23053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 764.792627][T23053] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:32 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80002800) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) [ 764.801210][T23053] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 764.809177][T23053] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 764.817148][T23053] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 764.825115][T23053] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 764.833076][T23053] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 764.841140][T23053] 19:41:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2100000000000000}}, {@dmode}]}) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x3000000}}], 0x1, 0x0, 0x0) 19:41:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 36) [ 765.009608][T23175] FAULT_INJECTION: forcing a failure. [ 765.009608][T23175] name failslab, interval 1, probability 0, space 0, times 0 [ 765.022334][T23175] CPU: 0 PID: 23175 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 765.032648][T23175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.042806][T23175] Call Trace: [ 765.046242][T23175] [ 765.049167][T23175] dump_stack_lvl+0xd6/0x122 [ 765.053836][T23175] dump_stack+0x11/0x1b [ 765.058002][T23175] should_fail+0x23c/0x250 [ 765.062590][T23175] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 765.067898][T23175] __should_failslab+0x81/0x90 [ 765.072715][T23175] should_failslab+0x5/0x20 [ 765.077258][T23175] kmem_cache_alloc+0x4f/0x320 [ 765.082069][T23175] ext4_mb_new_blocks+0x328/0x1ee0 [ 765.087203][T23175] ? bio_will_gap+0xfc/0x4a0 [ 765.091852][T23175] ? ext4_get_branch+0x27d/0x2e0 [ 765.096795][T23175] ext4_ind_map_blocks+0xb1c/0x1740 [ 765.102034][T23175] ext4_map_blocks+0x6e3/0xf00 [ 765.106809][T23175] ext4_iomap_begin+0x4b0/0x630 [ 765.111721][T23175] ? ext4_alloc_da_blocks+0x100/0x100 [ 765.117206][T23175] iomap_iter+0x395/0x4a0 [ 765.121543][T23175] __iomap_dio_rw+0xb78/0x1070 [ 765.126492][T23175] ? _raw_spin_lock_irq+0x41/0x50 [ 765.131582][T23175] iomap_dio_rw+0x38/0x80 [ 765.135981][T23175] ? ext4_file_write_iter+0x461/0x1200 [ 765.141549][T23175] ext4_file_write_iter+0xac3/0x1200 [ 765.146835][T23175] ? ext4_file_write_iter+0x461/0x1200 [ 765.152343][T23175] do_iter_readv_writev+0x2de/0x380 [ 765.157545][T23175] do_iter_write+0x192/0x5c0 [ 765.162211][T23175] ? splice_from_pipe_next+0x34f/0x3b0 [ 765.167751][T23175] ? kmalloc_array+0x2d/0x40 [ 765.172414][T23175] vfs_iter_write+0x4c/0x70 [ 765.177035][T23175] iter_file_splice_write+0x43a/0x790 [ 765.182421][T23175] ? splice_from_pipe+0xd0/0xd0 [ 765.187309][T23175] direct_splice_actor+0x80/0xa0 [ 765.192397][T23175] splice_direct_to_actor+0x345/0x650 [ 765.197772][T23175] ? do_splice_direct+0x190/0x190 [ 765.202815][T23175] do_splice_direct+0x106/0x190 [ 765.207751][T23175] do_sendfile+0x675/0xc40 [ 765.212258][T23175] __x64_sys_sendfile64+0x102/0x140 [ 765.217458][T23175] do_syscall_64+0x44/0xd0 [ 765.221876][T23175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 765.227839][T23175] RIP: 0033:0x7f34f8a1cae9 [ 765.232326][T23175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.251927][T23175] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4000000}}], 0x1, 0x0, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x5000000}}], 0x1, 0x0, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6000000}}], 0x1, 0x0, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x7000000}}], 0x1, 0x0, 0x0) 19:41:32 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8000000}}], 0x1, 0x0, 0x0) [ 765.260338][T23175] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 765.268385][T23175] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 765.276350][T23175] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.284345][T23175] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 765.292310][T23175] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 765.300283][T23175] [ 765.349796][ C1] sd 0:0:1:0: tag#8135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 765.359714][ C1] sd 0:0:1:0: tag#8135 CDB: opcode=0xe5 (vendor) [ 765.366052][ C1] sd 0:0:1:0: tag#8135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 765.375090][ C1] sd 0:0:1:0: tag#8135 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 765.384141][ C1] sd 0:0:1:0: tag#8135 CDB[20]: ba 19:41:33 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:33 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa000000}}], 0x1, 0x0, 0x0) 19:41:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) name_to_handle_at(r0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@orangefs={0x14, 0x1, {"a54427f39baba63380482557e91decf6", 0x5}}, &(0x7f0000000380), 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5090, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') chdir(&(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x10001, 0x140) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 37) 19:41:33 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2200000000000000}}, {@dmode}]}) 19:41:33 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc000000}}], 0x1, 0x0, 0x0) 19:41:33 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="6c29a141a5b6fdd449790c4e8e93605a7a1d3a2a4b4a1e78a4829dbfa49316f8"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000140)=""/50, 0x32}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000001380)=""/239, 0xef}], 0x0, 0xd00, 0x0) [ 765.950878][T23311] FAULT_INJECTION: forcing a failure. [ 765.950878][T23311] name failslab, interval 1, probability 0, space 0, times 0 [ 765.963604][T23311] CPU: 1 PID: 23311 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 765.973843][T23311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.983905][T23311] Call Trace: [ 765.987177][T23311] [ 765.990105][T23311] dump_stack_lvl+0xd6/0x122 [ 765.994692][T23311] dump_stack+0x11/0x1b [ 765.998900][T23311] should_fail+0x23c/0x250 [ 766.003317][T23311] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 766.008633][T23311] __should_failslab+0x81/0x90 [ 766.013402][T23311] should_failslab+0x5/0x20 [ 766.017913][T23311] kmem_cache_alloc+0x4f/0x320 [ 766.022694][T23311] ext4_mb_new_blocks+0x328/0x1ee0 [ 766.027842][T23311] ? bio_will_gap+0xfc/0x4a0 [ 766.032465][T23311] ? ext4_get_branch+0x27d/0x2e0 [ 766.037404][T23311] ext4_ind_map_blocks+0xb1c/0x1740 [ 766.042665][T23311] ext4_map_blocks+0x6e3/0xf00 19:41:33 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xf000000}}], 0x1, 0x0, 0x0) [ 766.047447][T23311] ext4_iomap_begin+0x4b0/0x630 [ 766.052380][T23311] ? ext4_alloc_da_blocks+0x100/0x100 [ 766.057866][T23311] iomap_iter+0x395/0x4a0 [ 766.062206][T23311] __iomap_dio_rw+0xb78/0x1070 [ 766.066966][T23311] ? _raw_spin_lock_irq+0x41/0x50 [ 766.072001][T23311] iomap_dio_rw+0x38/0x80 [ 766.076336][T23311] ? ext4_file_write_iter+0x461/0x1200 [ 766.081830][T23311] ext4_file_write_iter+0xac3/0x1200 [ 766.087206][T23311] ? ext4_file_write_iter+0x461/0x1200 [ 766.092671][T23311] do_iter_readv_writev+0x2de/0x380 [ 766.097884][T23311] do_iter_write+0x192/0x5c0 [ 766.102543][T23311] vfs_iter_write+0x4c/0x70 [ 766.107057][T23311] iter_file_splice_write+0x43a/0x790 [ 766.112444][T23311] ? xfrm_policy_inexact_alloc_bin+0x252/0xb10 [ 766.118691][T23311] ? splice_from_pipe+0xd0/0xd0 [ 766.123555][T23311] direct_splice_actor+0x80/0xa0 [ 766.128495][T23311] splice_direct_to_actor+0x345/0x650 [ 766.133934][T23311] ? do_splice_direct+0x190/0x190 [ 766.139045][T23311] do_splice_direct+0x106/0x190 [ 766.143902][T23311] do_sendfile+0x675/0xc40 [ 766.148326][T23311] __x64_sys_sendfile64+0x102/0x140 [ 766.153537][T23311] do_syscall_64+0x44/0xd0 [ 766.157971][T23311] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.163866][T23311] RIP: 0033:0x7f34f8a1cae9 [ 766.168280][T23311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.187907][T23311] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 766.196315][T23311] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 766.204372][T23311] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 766.212348][T23311] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.220322][T23311] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 766.228293][T23311] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 766.236281][T23311] 19:41:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 38) 19:41:34 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x10000000}}], 0x1, 0x0, 0x0) 19:41:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2e2f467a63e22e1942b266696cbe61c8"], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x3412c1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x7fff}}, './file0/file0\x00'}) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="e384330787985115669f8055226fb0186d6ab6dcdd07f37286e1c7fb5d49245783a3daf1"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') chdir(&(0x7f0000000380)='./file1\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x98) preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2300000000000000}}, {@dmode}]}) [ 766.254819][ C0] sd 0:0:1:0: tag#8141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 766.264693][ C0] sd 0:0:1:0: tag#8141 CDB: opcode=0xe5 (vendor) [ 766.271063][ C0] sd 0:0:1:0: tag#8141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 766.280142][ C0] sd 0:0:1:0: tag#8141 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 766.289273][ C0] sd 0:0:1:0: tag#8141 CDB[20]: ba [ 766.335106][T23525] FAULT_INJECTION: forcing a failure. [ 766.335106][T23525] name failslab, interval 1, probability 0, space 0, times 0 [ 766.347783][T23525] CPU: 0 PID: 23525 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 766.357938][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.367999][T23525] Call Trace: [ 766.371271][T23525] [ 766.374243][T23525] dump_stack_lvl+0xd6/0x122 [ 766.378846][T23525] dump_stack+0x11/0x1b [ 766.382995][T23525] should_fail+0x23c/0x250 [ 766.387413][T23525] ? jbd2__journal_start+0xf7/0x3f0 [ 766.392774][T23525] __should_failslab+0x81/0x90 [ 766.397539][T23525] should_failslab+0x5/0x20 [ 766.402039][T23525] kmem_cache_alloc+0x4f/0x320 [ 766.406935][T23525] jbd2__journal_start+0xf7/0x3f0 [ 766.412094][T23525] __ext4_journal_start_sb+0x159/0x310 [ 766.417572][T23525] ext4_iomap_begin+0x408/0x630 [ 766.422451][T23525] ? ext4_alloc_da_blocks+0x100/0x100 [ 766.427883][T23525] iomap_iter+0x395/0x4a0 [ 766.432319][T23525] __iomap_dio_rw+0xb78/0x1070 [ 766.437112][T23525] ? _raw_spin_lock_irq+0x41/0x50 [ 766.442132][T23525] iomap_dio_rw+0x38/0x80 [ 766.446471][T23525] ? ext4_file_write_iter+0x461/0x1200 [ 766.452070][T23525] ext4_file_write_iter+0xac3/0x1200 [ 766.457395][T23525] ? ext4_file_write_iter+0x461/0x1200 [ 766.463000][T23525] do_iter_readv_writev+0x2de/0x380 [ 766.468248][T23525] do_iter_write+0x192/0x5c0 [ 766.472892][T23525] ? splice_from_pipe_next+0x34f/0x3b0 [ 766.478411][T23525] ? kmalloc_array+0x2d/0x40 [ 766.482994][T23525] vfs_iter_write+0x4c/0x70 [ 766.487565][T23525] iter_file_splice_write+0x43a/0x790 [ 766.493143][T23525] ? splice_from_pipe+0xd0/0xd0 [ 766.498069][T23525] direct_splice_actor+0x80/0xa0 [ 766.503006][T23525] splice_direct_to_actor+0x345/0x650 [ 766.508381][T23525] ? do_splice_direct+0x190/0x190 [ 766.513445][T23525] do_splice_direct+0x106/0x190 [ 766.518307][T23525] do_sendfile+0x675/0xc40 [ 766.522721][T23525] __x64_sys_sendfile64+0x102/0x140 [ 766.527919][T23525] do_syscall_64+0x44/0xd0 [ 766.532550][T23525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 766.538448][T23525] RIP: 0033:0x7f34f8a1cae9 [ 766.542859][T23525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 766.562486][T23525] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 766.570984][T23525] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 766.578990][T23525] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 766.587035][T23525] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 766.595000][T23525] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 766.602993][T23525] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 766.610960][T23525] 19:41:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 39) 19:41:34 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:34 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4a100000}}], 0x1, 0x0, 0x0) 19:41:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, 'mountinfo\x00'}}, {@access_user}, {@msize={'msize', 0x3d, 0x6}}, {@access_user}, {@cache_loose}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '.^(-%(,}^./^\xe7}'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'mountinfo\x00'}}]}}) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:34 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2400000000000000}}, {@dmode}]}) [ 767.045767][T23636] FAULT_INJECTION: forcing a failure. [ 767.045767][T23636] name failslab, interval 1, probability 0, space 0, times 0 [ 767.058463][T23636] CPU: 1 PID: 23636 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 767.068682][T23636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.078741][T23636] Call Trace: [ 767.082010][T23636] [ 767.084926][T23636] dump_stack_lvl+0xd6/0x122 [ 767.089554][T23636] dump_stack+0x11/0x1b [ 767.093693][T23636] should_fail+0x23c/0x250 [ 767.098155][T23636] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 767.103431][T23636] __should_failslab+0x81/0x90 [ 767.108269][T23636] should_failslab+0x5/0x20 [ 767.112831][T23636] kmem_cache_alloc+0x4f/0x320 [ 767.117622][T23636] ext4_mb_new_blocks+0x328/0x1ee0 [ 767.122812][T23636] ? bio_will_gap+0xfc/0x4a0 [ 767.127398][T23636] ? ext4_get_branch+0x27d/0x2e0 [ 767.132420][T23636] ext4_ind_map_blocks+0xb1c/0x1740 [ 767.137635][T23636] ext4_map_blocks+0x6e3/0xf00 [ 767.142436][T23636] ext4_iomap_begin+0x4b0/0x630 [ 767.147273][T23636] ? ext4_alloc_da_blocks+0x100/0x100 [ 767.152633][T23636] iomap_iter+0x395/0x4a0 [ 767.157004][T23636] __iomap_dio_rw+0xb78/0x1070 [ 767.161870][T23636] ? _raw_spin_lock_irq+0x41/0x50 [ 767.166909][T23636] iomap_dio_rw+0x38/0x80 [ 767.171293][T23636] ? ext4_file_write_iter+0x461/0x1200 [ 767.176822][T23636] ext4_file_write_iter+0xac3/0x1200 [ 767.182123][T23636] ? ext4_file_write_iter+0x461/0x1200 [ 767.187572][T23636] do_iter_readv_writev+0x2de/0x380 [ 767.192855][T23636] do_iter_write+0x192/0x5c0 [ 767.197438][T23636] ? splice_from_pipe_next+0x34f/0x3b0 [ 767.203006][T23636] ? kmalloc_array+0x2d/0x40 [ 767.207594][T23636] vfs_iter_write+0x4c/0x70 [ 767.212124][T23636] iter_file_splice_write+0x43a/0x790 [ 767.217557][T23636] ? splice_from_pipe+0xd0/0xd0 [ 767.222403][T23636] direct_splice_actor+0x80/0xa0 [ 767.227345][T23636] splice_direct_to_actor+0x345/0x650 [ 767.232713][T23636] ? do_splice_direct+0x190/0x190 [ 767.237730][T23636] do_splice_direct+0x106/0x190 [ 767.242593][T23636] do_sendfile+0x675/0xc40 [ 767.246998][T23636] __x64_sys_sendfile64+0x102/0x140 [ 767.252222][T23636] do_syscall_64+0x44/0xd0 [ 767.256636][T23636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.262555][T23636] RIP: 0033:0x7f34f8a1cae9 [ 767.266978][T23636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.286588][T23636] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:35 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x60000000}}], 0x1, 0x0, 0x0) [ 767.294984][T23636] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 767.302937][T23636] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 767.310896][T23636] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.318853][T23636] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 767.326828][T23636] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 767.334790][T23636] [ 767.349967][T23646] 9pnet: p9_fd_create_tcp (23646): problem connecting socket to 127.0.0.1 [ 767.375409][ C1] sd 0:0:1:0: tag#8144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 767.385264][ C1] sd 0:0:1:0: tag#8144 CDB: opcode=0xe5 (vendor) 19:41:35 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x65580000}}], 0x1, 0x0, 0x0) 19:41:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 40) 19:41:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="989af23242893cfc4a05a7128d9aae2e1df968cb75caa37d81d343a79c8c34c5e91bbc87ef7c7f94053870cf91a85e38bf2b95393ddb0600000000000000588a4638058798821f866838786bae1a096a315df3edd9186668f60ba9175d8151c9dafa73f60c4938067e6a4c5ef7527cca486b0782c08c28a9f494fbb098f9eda38dc4cbc727182e55dc658d7bf840205088"], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='selinuxfs\x00', 0x40000, &(0x7f0000000380)='ramfs\x00') open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd00, 0x0) 19:41:35 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x81000000}}], 0x1, 0x0, 0x0) [ 767.391659][ C1] sd 0:0:1:0: tag#8144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 767.400704][ C1] sd 0:0:1:0: tag#8144 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 767.409814][ C1] sd 0:0:1:0: tag#8144 CDB[20]: ba [ 767.485100][T23755] FAULT_INJECTION: forcing a failure. [ 767.485100][T23755] name failslab, interval 1, probability 0, space 0, times 0 [ 767.497935][T23755] CPU: 1 PID: 23755 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 767.508142][T23755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.518197][T23755] Call Trace: [ 767.521470][T23755] [ 767.524395][T23755] dump_stack_lvl+0xd6/0x122 [ 767.529059][T23755] dump_stack+0x11/0x1b [ 767.533253][T23755] should_fail+0x23c/0x250 [ 767.537668][T23755] ? jbd2__journal_start+0xf7/0x3f0 [ 767.543061][T23755] __should_failslab+0x81/0x90 [ 767.547896][T23755] should_failslab+0x5/0x20 [ 767.552395][T23755] kmem_cache_alloc+0x4f/0x320 [ 767.557163][T23755] jbd2__journal_start+0xf7/0x3f0 [ 767.562183][T23755] __ext4_journal_start_sb+0x159/0x310 [ 767.567645][T23755] ext4_iomap_begin+0x408/0x630 [ 767.572503][T23755] ? ext4_alloc_da_blocks+0x100/0x100 [ 767.577881][T23755] iomap_iter+0x395/0x4a0 19:41:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="2e2f66696c6530a3d7b9265387f0f5ca2dd8470f252ca576b41f59f2acbff6d36b494b401042c6945094c1097c634ac68a7b51a865e2e7e856cea12430bc84b501146048e5c43845fe18e9b60d6ffc5be09f62a039a3af83c463a351d59fda05fe96dde2b1dca40d12995f80f7"], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)=[&(0x7f0000000240)=')\x00', &(0x7f0000000340)='-[.---\x00', &(0x7f0000000380)='/$^-(:\"%\xbe\x00', &(0x7f00000003c0)='ramfs\x00', &(0x7f0000000400)='^,+#{\x00', &(0x7f0000000440)='ramfs\x00', &(0x7f00000004c0)='ramfs\x00', &(0x7f0000000500)='\xb0\xfb\xb5+\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='+/*/{(\x00'], &(0x7f0000000780)=[&(0x7f0000000640)='mountinfo\x00', &(0x7f0000000680)='/.\x00', &(0x7f00000006c0)='^\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)=':\x00']) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 767.582241][T23755] __iomap_dio_rw+0xb78/0x1070 [ 767.587014][T23755] iomap_dio_rw+0x38/0x80 [ 767.591344][T23755] ? ext4_file_write_iter+0x461/0x1200 [ 767.596866][T23755] ext4_file_write_iter+0xac3/0x1200 [ 767.602150][T23755] ? ext4_file_write_iter+0x461/0x1200 [ 767.607636][T23755] do_iter_readv_writev+0x2de/0x380 [ 767.612927][T23755] do_iter_write+0x192/0x5c0 [ 767.617589][T23755] ? splice_from_pipe_next+0x34f/0x3b0 [ 767.623051][T23755] ? kmalloc_array+0x2d/0x40 [ 767.627639][T23755] vfs_iter_write+0x4c/0x70 [ 767.632147][T23755] iter_file_splice_write+0x43a/0x790 [ 767.637526][T23755] ? splice_from_pipe+0xd0/0xd0 [ 767.642380][T23755] direct_splice_actor+0x80/0xa0 [ 767.647322][T23755] splice_direct_to_actor+0x345/0x650 [ 767.652695][T23755] ? do_splice_direct+0x190/0x190 [ 767.657721][T23755] do_splice_direct+0x106/0x190 [ 767.662647][T23755] do_sendfile+0x675/0xc40 [ 767.667112][T23755] __x64_sys_sendfile64+0x102/0x140 [ 767.672307][T23755] do_syscall_64+0x44/0xd0 [ 767.676722][T23755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 767.682628][T23755] RIP: 0033:0x7f34f8a1cae9 [ 767.687038][T23755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.706663][T23755] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 767.715123][T23755] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 767.723177][T23755] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 767.731290][T23755] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.739258][T23755] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 767.747228][T23755] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 767.755220][T23755] 19:41:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 41) 19:41:35 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x88470000}}], 0x1, 0x0, 0x0) 19:41:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2500000000000000}}, {@dmode}]}) 19:41:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) preadv(r0, &(0x7f0000000140), 0xc7, 0xd02, 0x7ffc) 19:41:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:35 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 767.930079][T23972] FAULT_INJECTION: forcing a failure. [ 767.930079][T23972] name failslab, interval 1, probability 0, space 0, times 0 [ 767.942856][T23972] CPU: 0 PID: 23972 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 767.953085][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.963247][T23972] Call Trace: [ 767.966519][T23972] [ 767.969443][T23972] dump_stack_lvl+0xd6/0x122 [ 767.974109][T23972] dump_stack+0x11/0x1b [ 767.978348][T23972] should_fail+0x23c/0x250 [ 767.982839][T23972] ? mempool_alloc_slab+0x16/0x20 [ 767.987878][T23972] __should_failslab+0x81/0x90 [ 767.992665][T23972] should_failslab+0x5/0x20 [ 767.997182][T23972] kmem_cache_alloc+0x4f/0x320 [ 768.002011][T23972] mempool_alloc_slab+0x16/0x20 [ 768.006885][T23972] ? mempool_free+0x130/0x130 [ 768.011660][T23972] mempool_alloc+0x9d/0x310 [ 768.016271][T23972] ? preempt_count_add+0x4e/0x90 [ 768.021228][T23972] ? _raw_read_unlock+0x13/0x30 [ 768.026150][T23972] ? jbd2_transaction_committed+0xad/0xc0 [ 768.032041][T23972] bio_alloc_bioset+0xcc/0x560 [ 768.036927][T23972] ? iov_iter_alignment+0x34b/0x370 [ 768.042148][T23972] iomap_dio_bio_iter+0x5ed/0xc70 [ 768.047202][T23972] ? ext4_alloc_da_blocks+0x100/0x100 [ 768.052619][T23972] __iomap_dio_rw+0x8b5/0x1070 [ 768.057573][T23972] iomap_dio_rw+0x38/0x80 [ 768.061964][T23972] ? ext4_file_write_iter+0x461/0x1200 [ 768.067442][T23972] ext4_file_write_iter+0xac3/0x1200 [ 768.072726][T23972] ? ext4_file_write_iter+0x461/0x1200 [ 768.078232][T23972] do_iter_readv_writev+0x2de/0x380 [ 768.083501][T23972] do_iter_write+0x192/0x5c0 [ 768.088150][T23972] ? splice_from_pipe_next+0x34f/0x3b0 [ 768.093672][T23972] ? kmalloc_array+0x2d/0x40 [ 768.098465][T23972] vfs_iter_write+0x4c/0x70 [ 768.102971][T23972] iter_file_splice_write+0x43a/0x790 [ 768.108406][T23972] ? splice_from_pipe+0xd0/0xd0 [ 768.113286][T23972] direct_splice_actor+0x80/0xa0 [ 768.118327][T23972] splice_direct_to_actor+0x345/0x650 [ 768.123702][T23972] ? do_splice_direct+0x190/0x190 [ 768.128745][T23972] do_splice_direct+0x106/0x190 [ 768.133649][T23972] do_sendfile+0x675/0xc40 [ 768.138129][T23972] __x64_sys_sendfile64+0x102/0x140 [ 768.143329][T23972] do_syscall_64+0x44/0xd0 [ 768.147767][T23972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.153675][T23972] RIP: 0033:0x7f34f8a1cae9 [ 768.158092][T23972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x88480000}}], 0x1, 0x0, 0x0) 19:41:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000000140)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='binfmt_misc\x00', 0x10000, &(0x7f0000000300)='ramfs\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 768.177710][T23972] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 768.186123][T23972] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 768.194108][T23972] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 768.202142][T23972] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 768.210119][T23972] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 768.218091][T23972] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 768.226108][T23972] 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x88a8ffff}}], 0x1, 0x0, 0x0) [ 768.268192][ C1] sd 0:0:1:0: tag#8169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 768.278077][ C1] sd 0:0:1:0: tag#8169 CDB: opcode=0xe5 (vendor) [ 768.284407][ C1] sd 0:0:1:0: tag#8169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 768.293454][ C1] sd 0:0:1:0: tag#8169 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 768.302503][ C1] sd 0:0:1:0: tag#8169 CDB[20]: ba 19:41:36 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2600000000000000}}, {@dmode}]}) 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa6ffffff}}], 0x1, 0x0, 0x0) [ 768.332275][T24084] binfmt_misc: Unknown parameter 'ramfs' 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc00e0000}}], 0x1, 0x0, 0x0) 19:41:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 42) 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc3ffffff}}], 0x1, 0x0, 0x0) 19:41:36 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2700000000000000}}, {@dmode}]}) 19:41:36 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 768.774402][T24204] FAULT_INJECTION: forcing a failure. [ 768.774402][T24204] name failslab, interval 1, probability 0, space 0, times 0 [ 768.787233][T24204] CPU: 1 PID: 24204 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 768.797421][T24204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.807492][T24204] Call Trace: [ 768.810814][T24204] [ 768.813745][T24204] dump_stack_lvl+0xd6/0x122 [ 768.818339][T24204] dump_stack+0x11/0x1b [ 768.822535][T24204] should_fail+0x23c/0x250 [ 768.826974][T24204] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 768.832869][T24204] __should_failslab+0x81/0x90 [ 768.837752][T24204] should_failslab+0x5/0x20 [ 768.842345][T24204] kmem_cache_alloc+0x4f/0x320 [ 768.847192][T24204] ext4_mb_new_blocks+0x328/0x1ee0 [ 768.852338][T24204] ? bio_will_gap+0xfc/0x4a0 [ 768.856926][T24204] ? ext4_get_branch+0x27d/0x2e0 [ 768.861877][T24204] ext4_ind_map_blocks+0xb1c/0x1740 [ 768.867137][T24204] ext4_map_blocks+0x6e3/0xf00 [ 768.871903][T24204] ext4_iomap_begin+0x4b0/0x630 [ 768.876762][T24204] ? ext4_alloc_da_blocks+0x100/0x100 [ 768.882158][T24204] iomap_iter+0x395/0x4a0 [ 768.886492][T24204] __iomap_dio_rw+0xb78/0x1070 [ 768.891322][T24204] iomap_dio_rw+0x38/0x80 [ 768.895816][T24204] ? ext4_file_write_iter+0x461/0x1200 [ 768.901274][T24204] ext4_file_write_iter+0xac3/0x1200 [ 768.906558][T24204] ? ext4_file_write_iter+0x461/0x1200 [ 768.912048][T24204] do_iter_readv_writev+0x2de/0x380 [ 768.917281][T24204] do_iter_write+0x192/0x5c0 [ 768.921942][T24204] ? splice_from_pipe_next+0x34f/0x3b0 [ 768.927438][T24204] ? kmalloc_array+0x2d/0x40 [ 768.932220][T24204] vfs_iter_write+0x4c/0x70 [ 768.936752][T24204] iter_file_splice_write+0x43a/0x790 [ 768.942211][T24204] ? splice_from_pipe+0xd0/0xd0 [ 768.947065][T24204] direct_splice_actor+0x80/0xa0 [ 768.952092][T24204] splice_direct_to_actor+0x345/0x650 [ 768.957549][T24204] ? do_splice_direct+0x190/0x190 [ 768.962714][T24204] do_splice_direct+0x106/0x190 [ 768.967583][T24204] do_sendfile+0x675/0xc40 [ 768.972014][T24204] __x64_sys_sendfile64+0x102/0x140 [ 768.977274][T24204] do_syscall_64+0x44/0xd0 [ 768.981690][T24204] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 768.987662][T24204] RIP: 0033:0x7f34f8a1cae9 [ 768.992084][T24204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.011772][T24204] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 769.020185][T24204] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 769.028156][T24204] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 769.036123][T24204] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.044100][T24204] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 769.052116][T24204] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 769.060174][T24204] 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xffffa888}}], 0x1, 0x0, 0x0) 19:41:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) finit_module(r0, &(0x7f0000000640)='hugetlbfs\x00', 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x2020030, &(0x7f0000000300)='mountinfo\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='system.advise\x00', &(0x7f00000004c0)=""/221, 0xdd) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)='esdfs\x00', 0x40000, &(0x7f0000000600)='hugetlbfs\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140f00000008010200"/20], 0x14}}, 0x0) pipe2$9p(&(0x7f0000007400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000075c0)=[{{&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000980)="57e5d46ea1347789c1d0490e3a15f281044ac9f4ef945492db761c1603b8556feb02615bc34ff921a6874dfa00e7f3b54e99ac924d156d1e20066b8e31893ea2b25cfaa09d39dae3a32460194f454f1d798f2ca6f1da90b385622c8090c56ca3731f7248f776037ffaec0ca1755d2525b12a540c66f84d2ca2f048e51e70ef6c72e10d87caa13d6928014c24f7c9e96dbff664115ba490873e8682e7aa91c50934cac087dfb9b403741b1b104f96c2263e8e9fcb47911c3216fc29b992c4966bfe926465edcbc1c69f748373e1f8972c42004a767f49e49243dcc89115fa46aa102e9674195855da55b7fd6e7a579cee", 0xf0}, {&(0x7f0000000a80)="6193e4fd415f966910b3a5e3f253f6a4517c8df32a6fcfd30a0c46c75441af8b3fcc98ffa48929991118745c60c41bc7fdfdfbed0e88a2c07ce5fb60a74ebbcd27ef48e0fb2fe10250a17f2b0da8cd4449add99bbf367e263c3fabd8c37078c3afdee769adcf0f9672c9122264b519eadd0995697ce636a5895fd4ec313fc486f600e6b27c52aa810d822734d741a09b4b1ec48408f271b44b5b7b00e5c0de427fa86edad52d55478c9b2309705479370b777c87b118a276434b4315a32030e9426bb484eca8dd19a9d92095345430028aa89d3fc617d88477a3bf365315cb53ea", 0xe1}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000000b80)="16e2c2b22671b4bb18433a11fe2576acf94513eded51d7418d803b34c555c5e8ce911f46ffc7faddc520ba865c9dab372b32ef54ffd321ff7eff530767ea4afc5eff877039bd9b3483ed082ceacdc86b49c0794fa8fbaa6d8cadc0b6e67dc178699f7e800a916881d5d2f5eb4a2abcbef961f6124bf151a033259c64ea0201890647923598fa9d98fa7d3aab7ff1db9cd83f186834005c5296a149bd88b9ed99c473b80eff74f335d8f160804ffab710a51a6efe0b1d9cf6f12123adcdf1a4c0373334e78fd9902670cd4742d6f8f53a6d28dd5208804c42792bd2fe94", 0xdd}], 0x5, 0x0, 0x0, 0x4044800}}, {{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d00)="5b538a4cda29a91c06ade189ac74421010e2b147188d220349d81820116bebc95f0242acc36a08682da41c8574246c2d0d3e096ef0154aaa10417f58ef76551af5a5c629ba9a16250c95e4e54f90c829f9348ecc1e1ec0b80ad51e7f9ad62615f1df6aab387e54659c6ae827b68ba33639ef60ccc1865a34bf33574a6e60b37374dd08cd39415f469045a038a9d616b678f00a9f842f6ee936cfe626861909a3ae22dc62c441b2b9", 0xa8}, {&(0x7f0000000dc0)="5ab7d1d0e7b0af0f134cfe8e26c82da8bc78ba3921b3eaee5c21949dfb06fe8af7680e53ca7935130c229b63126aa54e98757ccf57132f79dc5a9233a255e28acff9dcaa190658f862c47bea8b60831c5ffaac39b3ac470788005442748f5d22a96339af2525072d42ccad612ae99f98c5e0fffa5f43c3ffa544233505a8e10df2ec5075835a653294e9e40543d44ede5e55fcdb19add15af48b8fc43b38fcb08fb075c62e2423fc6041956e1675eaabc7a702b63addb54cd206301de52eb6ce649387c378ec326debe76d43aa2a85397a47fc8b6a3016b5818748e3f7e0f75e8939c3608695735b082141a84a908da4a0c01910d351ad74", 0xf8}, {&(0x7f0000000ec0)="193cb1a119a79fd6c2044e1caf8a227b28307ab3f998d938db624f3185e2083849b9e287270ab28b062b73531e14f9867ea0fd8f04d18a9ea64d6811309146cd1a54ed077d8db0deb0cfb366c61b26181aec90efa7fd8707dc1e0d3c31e9c344cbe442712837cef9b85750a33828abae223318509556de4bc989b64b78fb890f845a1f230cc0a233087bab863d2a7743b79a7a9a9797f1a3a3bc6f7b214b2b4d5a72d1a9f6fe90e12a90cfd778c9c4a1", 0xb0}, {&(0x7f0000000f80)="e7d63442ef1e2182ae70d78aebb174c45673573cea13c61c8ffc655f293366bd46d6dfcf7e51227a2fdf3055efd5704f460aae9fb32998a93a85a596d1f2f3385f4f4e008ede552b5b9c16a33866", 0x4e}, {&(0x7f0000001000)="72f43189430a07e079921668682311d021b37dc6ecb3e4b9c8e70877e0c59a63dab0237c6e1451affe4668626d09ed3ad1966b65ff7b097c21585658cd0fe69ec8ada8a0541e3d72b1b4c1b5b75024d42e04a7b9825ff28fc88b5dd9d2557d89495ece58ee8ccd1c4f7de7516b9312ea2da1f1081b", 0x75}], 0x5, 0x0, 0x0, 0x8001}}, {{&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000001180)="98bcaae50c7c046990739cbcaa1567dee5c715d9baf5ed09f1abc994d7d8d75f781d0615dfb37091396ef2154329aff13d85eb169b135c1b54573749578a1c344088942edb48cb39c3304502ac88adc3c8155b32a9bf2ea460aa7bcdd76a032e11355b", 0x63}, {&(0x7f0000001200)="e9eeffc4c6bd027928bcdeab114fdb9e8a3c1af7e7c321bf54b27fc2334e96dae034b43a403ed9e651a4af554b220a4ad3de22acaee79e2b0631858e4b5a4d004cc30a59cbec95ee64854399fea25d9c8a3f89c7b974a6cbb26a5a64dbf169f23d7bcdda69bed17ca119eb0785094d0877212397aaba3ebe52fe57b6310b4d1a39f5df2cf8338ec06053f9e13ce9a7b83574d29c0a7f7e54ef5b9e69b0410ef67dfc6c61ee413e82714189b0d79776fb2402f19750bacae64650a12a92fa1b2b1e25d7ea6421e57a11000a2740392e2f49c67084387bcb8ea1ab7b4c094635bf201dbe885fb2f5ddc846ac83402ea9", 0xef}, {&(0x7f0000001300)="2b66d4017127a9f8ef166fcd0353b62c3541d40c9caee3ccf2b285b15a12c51e31efe2e73fb1e9ff46ca5d85133212e279040aaee0b0bbba12a8f6990bddb0c004338c63b808c581f99e2abc725155827dd5d64790d8b0acc756813f92ac509bc499", 0x62}, {&(0x7f0000000780)="f08b7a287bffb382d30f7e70120ac37c87444480c3ccfe03", 0x18}, {&(0x7f0000003480)="f994c71da28a44892163e84aa4b1e32745a005be0cedbc9967ba233af987eccf60452c733c0ae2b8a952ae4ccf4681e31c72f029bdf106a31c53200165e32481a325e34d33cd4bfd9e62822c15ff4582d14a86dc88e735c438f395260c0659bf16df05d163247a6cbd53d1696bd177472aa29a7a3a95e63d41686df845a47ba35a2f127b5d1a40600356694cabaee06fd5c7237e16d9058ebf04ef2ac3f15ca7d8ffd5abe4740d5beaf9c86564cba3ff8c24042610efa2278432e0f899704e663ab04d6139fce5fc42a6d7d2e2d61774f1493538eb65cb8e9654d1d47ba0f5b52cf8a2adb29307c1e22363ac2e7b9b50", 0xf0}, {&(0x7f0000003580)="399940ad6a2639cadb520d10297557d62b83d03ac407b41163d9e46dc82b3ad2a003f42ef3df6d86f295778f06d4f487a4ea131e4128b314713b464bf7292b31c162a18f2551a8f50ce959850aaad5e697f46f5b6008f7", 0x57}], 0x6, &(0x7f0000006840)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0, 0x4040000}}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000006900)="6dccd2760b4363999e6c75b8e0754d4577262424222fcc1f36d3e81459d4732795179a181b5fdb12cd0eb0652e95a9edf89ccc80dbdb9048e51a62d334a65efc07a576d74bb639b65a2fb63f41e76bb96a7de0798884c72fc5650d84c54c9bc886d6", 0x62}, {&(0x7f0000006980)="883ce1f2822be4f43f58f05e88ec4a66503780bcb054567ff3ced8d9a169fbd988cefca03c24cf82d29389307bd52c2a83e99aab932fd59b5935368c0c8c1da01c05a007cb6a80b0a8b9177b3fad274ad30285793e3ad4940e49075fe410ce99160497fa4f1e5112218627dcd7f9", 0x6e}, {&(0x7f0000006a00)="cd802ca0eba0169489b02b0eab6b0efd234171b52e97bf271215d5e5e06500366bd21c7a5d99792646307fa142afe9cc37f0b57d09517e6691e6fe12619ffd46df0a8ed529515c10a5ed820ecd55e5524203f2ef19b97693fb8fa5504589b9507f", 0x61}, {&(0x7f0000006a80)="2206a210b48a238744b55062b584264e784b739e55f140bbc59a880af7f6008e8d3aea04e23cbc62010ab9210d12291be6841d9c84740fd1cf98718d78e12452e0c4aff26751715d2ed6854b965f47bf1f1c3582a9e7e06d87aeb438d3abf8cd5301623c7066cbb13f227ae277c0222d34b9216282e77d221d82d0ebe73e5c140a4301c6c696815afe1dbeeb9ca089d94cfd8191c4a9071d16b9f1dfe06ef66e7feab241a5ab510427193b45c04e95d61e7a153d01f474e1e2a7d2828c932cc75ce0f3d4a69a951daf0fbeaca7cc8ac5b1afac05b3b4", 0xd6}, {&(0x7f0000006b80)="1b77cce6269830cc80d97cae12668036ebdc2ae99ad3a5a3d42c3d7745a99588a8a5296e456e832e9f7b1f8e73ca626bf4779662ca89889969f4d281830e19dc0732d207de475d9cbe81c900c3bd1332d0ddeba4956376466eaf384a5a62e186233a854044e511303f5890c41a8baae9ebf84ca046f0d5b80e5a59e060ee3ede0ab115937b7aa99253c2937fb18c5644d365eeef2ddaae0d94e9cdf5dbe3ac2b", 0xa0}], 0x5, &(0x7f0000006e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x80, 0x8010}}, {{&(0x7f0000006e80)=@abs={0x2, 0x0, 0x4e20}, 0x6e, &(0x7f0000007140)=[{&(0x7f0000006f00)="d3ffa64eacdbffe2012fdde16ba6de39fb68dd6b9af610b4c50fd3d73483e652d590c3a708a818881bd9389c2f64c7f686f2134c2f9a44c5ed49efb88b3598eb1d1b3c4cb8236d2edd99b71363cc48c5c2bf575b7ce28e6626ee", 0x5a}, {&(0x7f0000006f80)}, {&(0x7f0000006fc0)="23f580c0c8d521c76d9e19dac2411717f294a569ff4c8eb349178387901afea67ad789a12017832e5db67ce730a0bd1cd511918822f2086fe66503d5090259d4956b938d68b3cf8d9b1a2dfff9f64ae03a5a897fd12eccfe5b907ecf7d7744cb38eadeeb9408ebc16b2828c2767ee4eb134386141fecca7cf46aa5b93ce29ae60e61e5572131db2eb53e6a62bbd085686bcbd5d741f43f2d7bc64db2efcee61b0c33ecb25236548c83404c22aad2d36b20", 0xb1}, {&(0x7f0000007080)="8bd7a829350dba0842847d4b70e67ed63419740d89733fb80cb7466f627da482b4247d", 0x23}, {&(0x7f00000070c0)="03b4a3e1be3efe8c6e5d226e0fa54f6d881d77e21f3822999d56848151f9eb2d37e4800ebfb5b665251feb39d1470c063bf1a34c87c3f1c60da4f6a039230aec91a25c55ac48f4704bc7648b8328a99832d18d3b55586c0dc07c035d88b570f776a7f06e9255e0b6ef", 0x69}], 0x5, &(0x7f00000071c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb0, 0x800}}, {{&(0x7f0000007280)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000007340)=[{&(0x7f0000007300)="6f43ac9a57e5ead2708a7865936f0465650347", 0x13}], 0x1, &(0x7f0000007440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r0, r2, r0]}}], 0x158, 0x20000024}}], 0x6, 0x24044080) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r3, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:36 executing program 2: ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 43) 19:41:36 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2800000000000000}}, {@dmode}]}) 19:41:36 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xffffffa6}}], 0x1, 0x0, 0x0) [ 769.164278][T24228] FAULT_INJECTION: forcing a failure. [ 769.164278][T24228] name failslab, interval 1, probability 0, space 0, times 0 [ 769.177113][T24228] CPU: 0 PID: 24228 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 769.187273][T24228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.197346][T24228] Call Trace: [ 769.200624][T24228] [ 769.203554][T24228] dump_stack_lvl+0xd6/0x122 [ 769.208196][T24228] dump_stack+0x11/0x1b [ 769.212356][T24228] should_fail+0x23c/0x250 [ 769.216765][T24228] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 769.222064][T24228] __should_failslab+0x81/0x90 [ 769.226849][T24228] should_failslab+0x5/0x20 [ 769.231381][T24228] kmem_cache_alloc+0x4f/0x320 [ 769.236158][T24228] ext4_mb_new_blocks+0x328/0x1ee0 [ 769.241314][T24228] ? bio_will_gap+0xfc/0x4a0 [ 769.245908][T24228] ? ext4_get_branch+0x27d/0x2e0 [ 769.250842][T24228] ext4_ind_map_blocks+0xb1c/0x1740 [ 769.256050][T24228] ext4_map_blocks+0x6e3/0xf00 [ 769.260986][T24228] ext4_iomap_begin+0x4b0/0x630 [ 769.265842][T24228] ? ext4_alloc_da_blocks+0x100/0x100 [ 769.271227][T24228] iomap_iter+0x395/0x4a0 [ 769.275603][T24228] __iomap_dio_rw+0xb78/0x1070 [ 769.280391][T24228] ? _raw_spin_lock_irq+0x41/0x50 [ 769.285452][T24228] iomap_dio_rw+0x38/0x80 [ 769.289843][T24228] ? ext4_file_write_iter+0x461/0x1200 [ 769.295335][T24228] ext4_file_write_iter+0xac3/0x1200 [ 769.300611][T24228] ? ext4_file_write_iter+0x461/0x1200 [ 769.306074][T24228] do_iter_readv_writev+0x2de/0x380 [ 769.311270][T24228] do_iter_write+0x192/0x5c0 [ 769.315915][T24228] ? splice_from_pipe_next+0x34f/0x3b0 [ 769.321401][T24228] ? kmalloc_array+0x2d/0x40 [ 769.325993][T24228] vfs_iter_write+0x4c/0x70 [ 769.330527][T24228] iter_file_splice_write+0x43a/0x790 [ 769.336011][T24228] ? splice_from_pipe+0xd0/0xd0 [ 769.340863][T24228] direct_splice_actor+0x80/0xa0 [ 769.345795][T24228] splice_direct_to_actor+0x345/0x650 [ 769.351268][T24228] ? do_splice_direct+0x190/0x190 [ 769.356321][T24228] do_splice_direct+0x106/0x190 [ 769.361193][T24228] do_sendfile+0x675/0xc40 [ 769.365609][T24228] __x64_sys_sendfile64+0x102/0x140 [ 769.370838][T24228] do_syscall_64+0x44/0xd0 [ 769.375254][T24228] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.381175][T24228] RIP: 0033:0x7f34f8a1cae9 [ 769.385631][T24228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.405234][T24228] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000380)=@llc={0x1a, 0x311, 0xff, 0xf1, 0x3f, 0x20, @multicast}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x800000, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:37 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xffffffc3}}], 0x1, 0x0, 0x0) [ 769.413656][T24228] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 769.421624][T24228] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 769.429686][T24228] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.437653][T24228] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 769.445629][T24228] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 769.453598][T24228] 19:41:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='hfs\x00', 0x400, 0x0) 19:41:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 44) 19:41:37 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) [ 769.489977][ C1] sd 0:0:1:0: tag#8191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 769.499855][ C1] sd 0:0:1:0: tag#8191 CDB: opcode=0xe5 (vendor) [ 769.506179][ C1] sd 0:0:1:0: tag#8191 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 769.515334][ C1] sd 0:0:1:0: tag#8191 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 769.524376][ C1] sd 0:0:1:0: tag#8191 CDB[20]: ba [ 769.559309][T24425] FAULT_INJECTION: forcing a failure. [ 769.559309][T24425] name failslab, interval 1, probability 0, space 0, times 0 [ 769.571977][T24425] CPU: 0 PID: 24425 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 769.582142][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.592381][T24425] Call Trace: [ 769.595665][T24425] [ 769.598592][T24425] dump_stack_lvl+0xd6/0x122 [ 769.603188][T24425] dump_stack+0x11/0x1b [ 769.607365][T24425] should_fail+0x23c/0x250 [ 769.611810][T24425] ? jbd2__journal_start+0xf7/0x3f0 [ 769.617004][T24425] __should_failslab+0x81/0x90 [ 769.621779][T24425] should_failslab+0x5/0x20 [ 769.626279][T24425] kmem_cache_alloc+0x4f/0x320 [ 769.631123][T24425] jbd2__journal_start+0xf7/0x3f0 [ 769.636144][T24425] __ext4_journal_start_sb+0x159/0x310 [ 769.641661][T24425] ext4_iomap_begin+0x408/0x630 [ 769.646581][T24425] ? ext4_alloc_da_blocks+0x100/0x100 [ 769.651995][T24425] iomap_iter+0x395/0x4a0 [ 769.656334][T24425] __iomap_dio_rw+0xb78/0x1070 [ 769.661107][T24425] ? _raw_spin_lock_irq+0x41/0x50 [ 769.666216][T24425] iomap_dio_rw+0x38/0x80 [ 769.670545][T24425] ? ext4_file_write_iter+0x461/0x1200 [ 769.675998][T24425] ext4_file_write_iter+0xac3/0x1200 [ 769.681348][T24425] ? ext4_file_write_iter+0x461/0x1200 [ 769.686869][T24425] do_iter_readv_writev+0x2de/0x380 [ 769.692326][T24425] do_iter_write+0x192/0x5c0 [ 769.696987][T24425] ? splice_from_pipe_next+0x34f/0x3b0 [ 769.702453][T24425] ? kmalloc_array+0x2d/0x40 [ 769.707079][T24425] vfs_iter_write+0x4c/0x70 [ 769.711641][T24425] iter_file_splice_write+0x43a/0x790 [ 769.717062][T24425] ? splice_from_pipe+0xd0/0xd0 [ 769.722020][T24425] direct_splice_actor+0x80/0xa0 [ 769.726982][T24425] splice_direct_to_actor+0x345/0x650 [ 769.732376][T24425] ? do_splice_direct+0x190/0x190 [ 769.737401][T24425] do_splice_direct+0x106/0x190 [ 769.742251][T24425] do_sendfile+0x675/0xc40 [ 769.746720][T24425] __x64_sys_sendfile64+0x102/0x140 [ 769.751917][T24425] do_syscall_64+0x44/0xd0 [ 769.756333][T24425] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 769.762300][T24425] RIP: 0033:0x7f34f8a1cae9 [ 769.766708][T24425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 769.786304][T24425] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 769.794781][T24425] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:37 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:37 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x200000000000000}}], 0x1, 0x0, 0x0) 19:41:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) chroot(&(0x7f0000000b40)='./file0\x00') mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000140)="4476bdf6b6a2de33a8c37adbd11506f018f6f8415b13ad4061955bdd48f348a28a66", 0x22}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000380)="013fdc50ec057430c02d741ca37bc57eb01aa5dc457c8c21c7f413b69c8b1e77088b1b755bf729be719bcf81da70083c533c56289355e439821dd946344f33791892438ca3c3498b8c469d14f0fef440d1763a9d0926cb9c4c6b0b3c492c772bbe3f54b00fd3d7180cec25611f754de0066b62b039ddbee10b3086f808e9bafdc7f960c94cbd81da98e72ea24a7a434cad86a59adc2b809b1aa3f1ec7edae7493226fa4d857695c2c78d850c979b0c9b5b0e99ee414a16ea17676621565012b35a430e6ab1cc9428", 0xc8}, {&(0x7f00000004c0)="a7015109fefceb28e065681d6fd3eeb9c58a7f34b1d976fb4fbc3bdeed99ff046bd7329473bcfe910d5cf313521e7a2af5c79756e66be51c1b5bec5054aacbd9a0e3c343953179716606027a7be075943f98d0006c6da4871cc012750f1f1fad7bd935137acbbcc986abcda996c73be20ef86dc0bb409f9aa825e37e9498a776b6b613b5960e8aa99ea11604d2783d92865e207a3e522a0ae489d994c5d4d7c2460f94a48c54428f8281e36961150001f61df027e1c50032e483e090cf6928e36d2d5c455805ba0e573f503fbbf5bbc472cea202d28bc5660b711e1c6a93b9a7a6ab5eb318c04501", 0xe8}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f00000002c0)="31511c2679b78a12b2ffdc757399c47c858044e17454dbc4a66f63a352db4f7d7677b2380dd0a7c6de77c43f8a8ea7f868a8d463262be5eb674d5627fbc975209150", 0x42}, {&(0x7f00000005c0)="b16d9ec7c17b9351d173e68d2fb28b89d6661cc50132434162c44092d0907346550aa2e8179103f5ab40ee3bd9b528897b3d0f703b647e59ef18330066b9c8ea937b296e01f97f66de0373b3fc2adc6b2feae393a5cb39fdca973136dd2e62b3e43d6581692575f9ea71bf23f65378a7baa49533c6ed810f6f4ca3cacc8fde1c1ab78acaf1b19c93d792d6e7b2c7ee43ef9a8e00b474c50381e3fd339b20df5201c5894e6db612c023819b6b8e8ac2309b20", 0xb2}, {&(0x7f0000000680)="f6c742a7ef68159cad7cf95d92613a6d0df0e95535b460b7ac6e00a71ef48b4ad27ac99cbe61a3bc22b7b4a0fd9c75e0d3ec9b2d5c228ff4adac7479dc840dfe336bc34962aa468979411d5947422f990f747c03b82fdab4f7ccac1db21a3e1fff05b08b7610d4c2d4b7184f05fc3cc03ece079a2aa932289128fcf5d567e2e9b835b4e4378f8a93d1a742107987c7c73f9d7b45075b", 0x96}], 0x8, &(0x7f0000000980)=[{0x10, 0x105, 0xa427}, {0xb0, 0x119, 0x4212c625, "30c9fdc5fe89c18a0a2b88ad6160e8b6ee93d9c8e04996abd6ea2547d0c0cc221ffe2778971ee6dbd444d52c9b7069f67e5c504fcbe4c6d464c11dc98709a0b070e3c1912f47397c248483b168c100ee52e20a7a8c0c2d9a1813e0a74c2173bc1aa223e5ecb1206d66a5fbe0a6e15a366ea6c66cf63195999e858872188053b3d06d81d04681a7b4d7762a30b23f01cc06bc99bdc4392e66216a7259"}, {0xe0, 0x11f, 0x46c, "46e980f6da7184363064191a95739f7408fb9018a4480cf314ac6ca06491a95617a121e4609ff8a4bbb3dfa72843c45cdda0385ef6f7d328fce1d41def3a67f06599abe86c348b0178ba853c8197a6e850d52f9654257c36a27beeb3b9170a72352f015a700c5494637322bc8ca20ca1d7f1c84902515b86a61b114fa3a1bfd9002385b7ef632a9a0f49d53d55927a73ddaa7a872cbafbceaa68098c56c651a0d1e74e11244513859efd8da9f8aa5332c0114935832247b0c3cdde0061b6bb6e1786e63102020768ab3758"}], 0x1a0}}], 0x1, 0x4000080) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 769.802746][T24425] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 769.810713][T24425] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 769.818680][T24425] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 769.826733][T24425] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 769.834725][T24425] 19:41:38 executing program 2: ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 45) 19:41:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2900000000000000}}, {@dmode}]}) 19:41:38 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x300000000000000}}], 0x1, 0x0, 0x0) 19:41:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='.>file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:38 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:38 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x400000000000000}}], 0x1, 0x0, 0x0) 19:41:38 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:38 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x500000000000000}}], 0x1, 0x0, 0x0) [ 770.370637][ C0] sd 0:0:1:0: tag#8129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 770.380507][ C0] sd 0:0:1:0: tag#8129 CDB: opcode=0xe5 (vendor) [ 770.386912][ C0] sd 0:0:1:0: tag#8129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 770.395937][ C0] sd 0:0:1:0: tag#8129 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 770.405028][ C0] sd 0:0:1:0: tag#8129 CDB[20]: ba 19:41:38 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(0x0, 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:38 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x600000000000000}}], 0x1, 0x0, 0x0) 19:41:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x100000, 0x0) [ 770.421112][T24755] FAULT_INJECTION: forcing a failure. [ 770.421112][T24755] name failslab, interval 1, probability 0, space 0, times 0 [ 770.433941][T24755] CPU: 1 PID: 24755 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 770.444169][T24755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.454243][T24755] Call Trace: [ 770.457640][T24755] [ 770.460560][T24755] dump_stack_lvl+0xd6/0x122 [ 770.465168][T24755] dump_stack+0x11/0x1b [ 770.469335][T24755] should_fail+0x23c/0x250 [ 770.473746][T24755] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 770.479065][T24755] __should_failslab+0x81/0x90 [ 770.483890][T24755] should_failslab+0x5/0x20 [ 770.488397][T24755] kmem_cache_alloc+0x4f/0x320 [ 770.493167][T24755] ext4_mb_new_blocks+0x328/0x1ee0 [ 770.498286][T24755] ? ext4_mark_iloc_dirty+0x855/0x890 [ 770.503663][T24755] ext4_new_meta_blocks+0x84/0x180 [ 770.509049][T24755] ext4_ind_map_blocks+0xb68/0x1740 [ 770.514335][T24755] ext4_map_blocks+0x6e3/0xf00 [ 770.519147][T24755] ext4_iomap_begin+0x4b0/0x630 [ 770.524028][T24755] ? ext4_alloc_da_blocks+0x100/0x100 [ 770.529401][T24755] iomap_iter+0x395/0x4a0 [ 770.533727][T24755] __iomap_dio_rw+0xb78/0x1070 [ 770.538495][T24755] ? _raw_spin_lock_irq+0x41/0x50 [ 770.543692][T24755] iomap_dio_rw+0x38/0x80 [ 770.548146][T24755] ? ext4_file_write_iter+0x461/0x1200 [ 770.553609][T24755] ext4_file_write_iter+0xac3/0x1200 [ 770.558891][T24755] ? ext4_file_write_iter+0x461/0x1200 [ 770.564352][T24755] do_iter_readv_writev+0x2de/0x380 [ 770.569596][T24755] do_iter_write+0x192/0x5c0 [ 770.574191][T24755] ? splice_from_pipe_next+0x34f/0x3b0 [ 770.579699][T24755] ? kmalloc_array+0x2d/0x40 [ 770.584287][T24755] vfs_iter_write+0x4c/0x70 [ 770.588795][T24755] iter_file_splice_write+0x43a/0x790 [ 770.594203][T24755] ? splice_from_pipe+0xd0/0xd0 [ 770.599159][T24755] direct_splice_actor+0x80/0xa0 [ 770.604100][T24755] splice_direct_to_actor+0x345/0x650 [ 770.609508][T24755] ? do_splice_direct+0x190/0x190 [ 770.614708][T24755] do_splice_direct+0x106/0x190 [ 770.619574][T24755] do_sendfile+0x675/0xc40 [ 770.623988][T24755] __x64_sys_sendfile64+0x102/0x140 [ 770.629180][T24755] do_syscall_64+0x44/0xd0 [ 770.633590][T24755] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 770.639556][T24755] RIP: 0033:0x7f34f8a1cae9 [ 770.643958][T24755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 770.663635][T24755] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 770.672055][T24755] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 770.680022][T24755] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 770.687985][T24755] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 770.695999][T24755] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 770.703968][T24755] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 770.711995][T24755] 19:41:38 executing program 2: ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:41:38 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2a00000000000000}}, {@dmode}]}) 19:41:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 46) 19:41:38 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x700000000000000}}], 0x1, 0x0, 0x0) 19:41:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x420040, 0x8) [ 771.205371][T24980] FAULT_INJECTION: forcing a failure. [ 771.205371][T24980] name failslab, interval 1, probability 0, space 0, times 0 [ 771.218238][T24980] CPU: 0 PID: 24980 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 771.228399][T24980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.238553][T24980] Call Trace: [ 771.241856][T24980] [ 771.244778][T24980] dump_stack_lvl+0xd6/0x122 [ 771.249426][T24980] dump_stack+0x11/0x1b [ 771.253597][T24980] should_fail+0x23c/0x250 [ 771.258010][T24980] ? ext4_mb_new_blocks+0x73e/0x1ee0 [ 771.263293][T24980] __should_failslab+0x81/0x90 [ 771.268072][T24980] should_failslab+0x5/0x20 [ 771.268195][ C1] sd 0:0:1:0: tag#8139 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 771.272578][T24980] kmem_cache_alloc+0x4f/0x320 [ 771.272602][T24980] ext4_mb_new_blocks+0x73e/0x1ee0 [ 771.282426][ C1] sd 0:0:1:0: tag#8139 CDB: opcode=0xe5 (vendor) [ 771.287117][T24980] ? ext4_mark_iloc_dirty+0x855/0x890 [ 771.292233][ C1] sd 0:0:1:0: tag#8139 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 771.298522][T24980] ext4_new_meta_blocks+0x84/0x180 [ 771.303909][ C1] sd 0:0:1:0: tag#8139 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 771.312891][T24980] ext4_ind_map_blocks+0xb68/0x1740 [ 771.312921][T24980] ext4_map_blocks+0x6e3/0xf00 [ 771.318025][ C1] sd 0:0:1:0: tag#8139 CDB[20]: ba [ 771.342063][T24980] ext4_iomap_begin+0x4b0/0x630 [ 771.347121][T24980] ? ext4_alloc_da_blocks+0x100/0x100 [ 771.352491][T24980] iomap_iter+0x395/0x4a0 [ 771.356830][T24980] __iomap_dio_rw+0xb78/0x1070 [ 771.361604][T24980] iomap_dio_rw+0x38/0x80 [ 771.365959][T24980] ? ext4_file_write_iter+0x461/0x1200 [ 771.371409][T24980] ext4_file_write_iter+0xac3/0x1200 [ 771.376695][T24980] ? ext4_file_write_iter+0x461/0x1200 [ 771.382180][T24980] do_iter_readv_writev+0x2de/0x380 [ 771.387372][T24980] do_iter_write+0x192/0x5c0 [ 771.392042][T24980] ? splice_from_pipe_next+0x34f/0x3b0 [ 771.397496][T24980] ? kmalloc_array+0x2d/0x40 [ 771.402081][T24980] vfs_iter_write+0x4c/0x70 [ 771.406602][T24980] iter_file_splice_write+0x43a/0x790 [ 771.411979][T24980] ? splice_from_pipe+0xd0/0xd0 [ 771.416912][T24980] direct_splice_actor+0x80/0xa0 [ 771.421843][T24980] splice_direct_to_actor+0x345/0x650 [ 771.427280][T24980] ? do_splice_direct+0x190/0x190 [ 771.432301][T24980] do_splice_direct+0x106/0x190 [ 771.437202][T24980] do_sendfile+0x675/0xc40 [ 771.441693][T24980] __x64_sys_sendfile64+0x102/0x140 [ 771.446890][T24980] do_syscall_64+0x44/0xd0 [ 771.451426][T24980] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.457416][T24980] RIP: 0033:0x7f34f8a1cae9 [ 771.461856][T24980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.481710][T24980] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 771.490184][T24980] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 771.498154][T24980] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 19:41:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:39 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x800000000000000}}], 0x1, 0x0, 0x0) 19:41:39 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa00000000000000}}], 0x1, 0x0, 0x0) 19:41:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='ext4\x00', 0x0, &(0x7f0000000300)='mountinfo\x00') mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x8) mount(&(0x7f0000000bc0)=@sg0, &(0x7f0000187ff8)='.', 0x0, 0x2005010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) mount(&(0x7f0000000c40)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000c80)='./file0/file0\x00', &(0x7f0000000cc0)='msdos\x00', 0x4201, &(0x7f0000000d00)='\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) creat(&(0x7f0000000c00)='./file0/file0\x00', 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x1f, 0x7, &(0x7f0000000a40)=[{&(0x7f00000004c0)="b1351c675892826d0129fb465cdbf240864430628599f14462d50e6de350ed1fe6c7347d1f0890833e1d5dd1371b13cafcc273c173162dfc40b2bc2cdedf3405bceed19be4130fad069e90ca863b0a5993092054eb1115cdb8f286aef326d02283de8d15ad5fc820e9e23cf00d84f309dd75f18d6e703a9977ba30e6b71d8157154ad534a8fdbda85cc36bb586f595fff1c4137f4310d4681cfa7216275fad5b0fb33d973431b35c4e6c82ea74a7ad4b1c0228256d0e239671b140b043210416", 0xc0, 0x4}, {&(0x7f0000000580)="51019de106b4bdf1cc018b0c35405392ca037ef6933b0c61457888d520525e522af88f7463a6535c15378409a0362914394f82a235d270f7e2a72b18893c3c4b5960882e9f7fa0bd2b16c9d63d4cb9317b11bcdddaed851eb69c63e569c07b90c46c5fb6e38bd28b540f4c61e0668b3d1c84b7d8e20db9b2b9b34c97a257c83caa32e22daae098f63e77f11ed3f5551f63426a11b28713dd17fa6afbe89dee6371535e0d98fd97c890fb830113cc9dc3f3baf92c122d63176d7dbb1f6c159b2b3667212239720ee4d3f8e7312446cd42d12dfbc1f85f7fa0e832b1d55db4c6321b19e0c85116881569c9263924c83634bbc4f9a3da410d1b", 0xf8, 0xe}, {&(0x7f0000000440)="61964c94aa91979e", 0x8, 0x20}, {&(0x7f0000000680)="32a02632f1aec78d9ec3a17c9c41f22507c6adf575a858686d9921e7fd8c51463d073b69101528cfb62cabcd9b042cdb7a3d512167cf07407ed7d13c0c953463f012bbde0ba07c318f706c0bdd8e49503a8490ed0072abdda3870e1b6190e1dfd78b31c81e3fca742f8daf831ca48f599f6eb26750ecd5d7ac712fa6a435b02c64c16ad76259a7739359766578c3208d3eb16e8e7954645c", 0x98, 0xfff}, {&(0x7f0000000740)="ccf1e8eab6ae583001201c5d20021118ca632e412d1430f07d938342976be8234e0118a713a0c2ca821637567b496fbdc548346ad933f25305c16eca93eb0da08ebc77e7ab9948573be68491571d9d01eab15f3516f9a0b0db8fbacebb36c3927c04", 0x62, 0xe8}, {&(0x7f0000000980)="9136090403e7261cc8f19f8ba11d06b250055eed971ded0da3d0b70ca504cd529b59dabdc8277ce2165b322bf7dc99b9f03175de1c2b8073267e83cb6ec2045a345d96d145f6c679d0d8a1073dc5b0bf9ea891c846cebf9c4f46eb34b2c3da6d6e8c8870533a32842433764f7ecfc3d89755f411fcd541235f339300f036ae6cf2fe95395b03400a958d6f714ad1a62f97f3d4dc6b189e", 0x97, 0x800}, {&(0x7f0000001480)="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", 0x1000, 0x40}], 0xb060, &(0x7f0000000b00)=ANY=[@ANYBLOB='check=relaxed,nodots,dots,nodots,nodots,func=KEXEC_KERNEL_CHECK,mask=^MAY_WRITE,uid<', @ANYRESDEC=r2, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) 19:41:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 47) [ 771.506209][T24980] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.514167][T24980] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 771.522159][T24980] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 771.530179][T24980] 19:41:39 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) [ 771.582420][ C0] sd 0:0:1:0: tag#8141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 771.592299][ C0] sd 0:0:1:0: tag#8141 CDB: opcode=0xe5 (vendor) [ 771.598688][ C0] sd 0:0:1:0: tag#8141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 771.607739][ C0] sd 0:0:1:0: tag#8141 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 771.610077][T25175] FAULT_INJECTION: forcing a failure. [ 771.610077][T25175] name failslab, interval 1, probability 0, space 0, times 0 [ 771.616789][ C0] sd 0:0:1:0: tag#8141 CDB[20]: ba [ 771.634628][T25175] CPU: 1 PID: 25175 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 771.644820][T25175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.654873][T25175] Call Trace: [ 771.658212][T25175] [ 771.661177][T25175] dump_stack_lvl+0xd6/0x122 [ 771.665793][T25175] dump_stack+0x11/0x1b [ 771.669947][T25175] should_fail+0x23c/0x250 [ 771.674383][T25175] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 771.679692][T25175] __should_failslab+0x81/0x90 [ 771.684465][T25175] should_failslab+0x5/0x20 [ 771.688962][T25175] kmem_cache_alloc+0x4f/0x320 [ 771.693784][T25175] ext4_mb_new_blocks+0x328/0x1ee0 [ 771.698916][T25175] ? ext4_new_meta_blocks+0x14a/0x180 [ 771.704284][T25175] ext4_ind_map_blocks+0xb1c/0x1740 [ 771.709488][T25175] ext4_map_blocks+0x6e3/0xf00 [ 771.714252][T25175] ext4_iomap_begin+0x4b0/0x630 [ 771.719100][T25175] ? ext4_alloc_da_blocks+0x100/0x100 [ 771.724492][T25175] iomap_iter+0x395/0x4a0 [ 771.728816][T25175] __iomap_dio_rw+0xb78/0x1070 [ 771.733980][T25175] ? _raw_spin_lock_irq+0x41/0x50 [ 771.739130][T25175] iomap_dio_rw+0x38/0x80 [ 771.743475][T25175] ? ext4_file_write_iter+0x461/0x1200 [ 771.748975][T25175] ext4_file_write_iter+0xac3/0x1200 [ 771.754259][T25175] ? ext4_file_write_iter+0x461/0x1200 [ 771.759717][T25175] do_iter_readv_writev+0x2de/0x380 [ 771.764955][T25175] do_iter_write+0x192/0x5c0 [ 771.769565][T25175] vfs_iter_write+0x4c/0x70 [ 771.774145][T25175] iter_file_splice_write+0x43a/0x790 [ 771.779521][T25175] ? splice_from_pipe+0xd0/0xd0 [ 771.784465][T25175] direct_splice_actor+0x80/0xa0 [ 771.789400][T25175] splice_direct_to_actor+0x345/0x650 [ 771.794781][T25175] ? do_splice_direct+0x190/0x190 [ 771.799860][T25175] do_splice_direct+0x106/0x190 [ 771.804715][T25175] do_sendfile+0x675/0xc40 [ 771.809195][T25175] __x64_sys_sendfile64+0x102/0x140 [ 771.814385][T25175] do_syscall_64+0x44/0xd0 [ 771.818793][T25175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.824813][T25175] RIP: 0033:0x7f34f8a1cae9 [ 771.829219][T25175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.848885][T25175] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 771.857300][T25175] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 771.865444][T25175] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 771.874020][T25175] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 19:41:39 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc00000000000000}}], 0x1, 0x0, 0x0) 19:41:39 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="d058fb22cfd2085e37c121070b77d8518a9c32086f2b1369c65a3205559f1ad73e17ac0e8731a982fe98467b817dde70794a3c"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 771.882011][T25175] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 771.889982][T25175] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 771.898089][T25175] 19:41:39 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x3d00000000000000}}, {@dmode}]}) 19:41:39 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:39 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xf00000000000000}}], 0x1, 0x0, 0x0) 19:41:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 48) [ 771.989086][T25322] FAULT_INJECTION: forcing a failure. [ 771.989086][T25322] name failslab, interval 1, probability 0, space 0, times 0 [ 772.001833][T25322] CPU: 1 PID: 25322 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 772.011990][T25322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.022055][T25322] Call Trace: [ 772.025324][T25322] [ 772.028239][T25322] dump_stack_lvl+0xd6/0x122 [ 772.032855][T25322] dump_stack+0x11/0x1b [ 772.037039][T25322] should_fail+0x23c/0x250 [ 772.041523][T25322] ? ext4_mb_new_blocks+0x73e/0x1ee0 [ 772.046922][T25322] __should_failslab+0x81/0x90 [ 772.051678][T25322] should_failslab+0x5/0x20 [ 772.056171][T25322] kmem_cache_alloc+0x4f/0x320 [ 772.060981][T25322] ext4_mb_new_blocks+0x73e/0x1ee0 [ 772.066238][T25322] ? ext4_mark_iloc_dirty+0x855/0x890 [ 772.071600][T25322] ext4_new_meta_blocks+0x84/0x180 [ 772.076744][T25322] ext4_ind_map_blocks+0xb68/0x1740 [ 772.081951][T25322] ext4_map_blocks+0x6e3/0xf00 [ 772.086717][T25322] ext4_iomap_begin+0x4b0/0x630 [ 772.091555][T25322] ? ext4_alloc_da_blocks+0x100/0x100 [ 772.096921][T25322] iomap_iter+0x395/0x4a0 [ 772.101246][T25322] __iomap_dio_rw+0xb78/0x1070 [ 772.106031][T25322] ? _raw_spin_lock_irq+0x41/0x50 [ 772.111044][T25322] iomap_dio_rw+0x38/0x80 [ 772.115385][T25322] ? ext4_file_write_iter+0x461/0x1200 [ 772.120923][T25322] ext4_file_write_iter+0xac3/0x1200 [ 772.126193][T25322] ? ext4_file_write_iter+0x461/0x1200 [ 772.131662][T25322] do_iter_readv_writev+0x2de/0x380 [ 772.136849][T25322] do_iter_write+0x192/0x5c0 [ 772.141432][T25322] ? splice_from_pipe_next+0x34f/0x3b0 [ 772.146883][T25322] ? kmalloc_array+0x2d/0x40 [ 772.151461][T25322] vfs_iter_write+0x4c/0x70 [ 772.156138][T25322] iter_file_splice_write+0x43a/0x790 [ 772.161556][T25322] ? splice_from_pipe+0xd0/0xd0 [ 772.166393][T25322] direct_splice_actor+0x80/0xa0 [ 772.171400][T25322] splice_direct_to_actor+0x345/0x650 [ 772.176760][T25322] ? do_splice_direct+0x190/0x190 [ 772.181804][T25322] do_splice_direct+0x106/0x190 [ 772.186657][T25322] do_sendfile+0x675/0xc40 [ 772.191061][T25322] __x64_sys_sendfile64+0x102/0x140 [ 772.196296][T25322] do_syscall_64+0x44/0xd0 [ 772.200701][T25322] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.206745][T25322] RIP: 0033:0x7f34f8a1cae9 [ 772.211209][T25322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.230838][T25322] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 772.239280][T25322] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 772.247234][T25322] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 772.255186][T25322] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.263139][T25322] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 772.271092][T25322] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 772.279050][T25322] 19:41:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:40 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x1000000000000000}}], 0x1, 0x0, 0x0) 19:41:40 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2040, 0x108) setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='ns\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 49) 19:41:40 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x3f00000000000000}}, {@dmode}]}) 19:41:40 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x4a10000000000000}}], 0x1, 0x0, 0x0) 19:41:40 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:40 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6000000000000000}}], 0x1, 0x0, 0x0) 19:41:40 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:40 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80002800) 19:41:40 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='nsfs\x00', 0x100000, &(0x7f0000000580)='ramfs\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x8, 0x3, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x3, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000006d0000012cbd7000dddbdf2500000000", @ANYRES32=r1, @ANYBLOB="0400000000110000140014007465616d5f736c6176655f3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 772.484985][ C1] sd 0:0:1:0: tag#8131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 772.494863][ C1] sd 0:0:1:0: tag#8131 CDB: opcode=0xe5 (vendor) [ 772.501225][ C1] sd 0:0:1:0: tag#8131 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 772.510268][ C1] sd 0:0:1:0: tag#8131 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 772.519336][ C1] sd 0:0:1:0: tag#8131 CDB[20]: ba [ 772.565643][T25545] FAULT_INJECTION: forcing a failure. [ 772.565643][T25545] name failslab, interval 1, probability 0, space 0, times 0 [ 772.578355][T25545] CPU: 0 PID: 25545 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 772.588510][T25545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.598574][T25545] Call Trace: [ 772.601851][T25545] [ 772.604772][T25545] dump_stack_lvl+0xd6/0x122 [ 772.609375][T25545] dump_stack+0x11/0x1b [ 772.613527][T25545] should_fail+0x23c/0x250 [ 772.617941][T25545] ? mempool_alloc_slab+0x16/0x20 [ 772.623009][T25545] __should_failslab+0x81/0x90 [ 772.627781][T25545] should_failslab+0x5/0x20 [ 772.632297][T25545] kmem_cache_alloc+0x4f/0x320 [ 772.637183][T25545] mempool_alloc_slab+0x16/0x20 [ 772.642183][T25545] ? mempool_free+0x130/0x130 [ 772.646866][T25545] mempool_alloc+0x9d/0x310 [ 772.651374][T25545] ? preempt_count_add+0x4e/0x90 [ 772.656316][T25545] ? _raw_read_unlock+0x13/0x30 [ 772.661287][T25545] ? jbd2_transaction_committed+0xad/0xc0 [ 772.667097][T25545] bio_alloc_bioset+0xcc/0x560 [ 772.671985][T25545] ? iov_iter_alignment+0x34b/0x370 [ 772.677183][T25545] iomap_dio_bio_iter+0x5ed/0xc70 [ 772.682226][T25545] ? ext4_alloc_da_blocks+0x100/0x100 [ 772.687704][T25545] __iomap_dio_rw+0x8b5/0x1070 [ 772.692478][T25545] ? _raw_spin_lock_irq+0x41/0x50 [ 772.697515][T25545] iomap_dio_rw+0x38/0x80 [ 772.701864][T25545] ? ext4_file_write_iter+0x461/0x1200 [ 772.707317][T25545] ext4_file_write_iter+0xac3/0x1200 [ 772.712747][T25545] ? ext4_file_write_iter+0x461/0x1200 [ 772.718215][T25545] do_iter_readv_writev+0x2de/0x380 [ 772.723411][T25545] do_iter_write+0x192/0x5c0 [ 772.728014][T25545] ? splice_from_pipe_next+0x34f/0x3b0 [ 772.733484][T25545] ? kmalloc_array+0x2d/0x40 [ 772.738196][T25545] vfs_iter_write+0x4c/0x70 [ 772.742736][T25545] iter_file_splice_write+0x43a/0x790 [ 772.748147][T25545] ? splice_from_pipe+0xd0/0xd0 [ 772.752995][T25545] direct_splice_actor+0x80/0xa0 [ 772.757949][T25545] splice_direct_to_actor+0x345/0x650 [ 772.763318][T25545] ? do_splice_direct+0x190/0x190 [ 772.768343][T25545] do_splice_direct+0x106/0x190 [ 772.773273][T25545] do_sendfile+0x675/0xc40 [ 772.777689][T25545] __x64_sys_sendfile64+0x102/0x140 [ 772.782894][T25545] do_syscall_64+0x44/0xd0 [ 772.787347][T25545] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 772.793241][T25545] RIP: 0033:0x7f34f8a1cae9 [ 772.797660][T25545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.817371][T25545] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 772.825781][T25545] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 772.833852][T25545] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 772.841834][T25545] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.849863][T25545] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 772.857840][T25545] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 772.865891][T25545] 19:41:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:41 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x6558000000000000}}], 0x1, 0x0, 0x0) 19:41:41 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80002800) 19:41:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) recvfrom$unix(r0, &(0x7f0000000140)=""/22, 0x16, 0x40000141, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0xd00, 0x0) 19:41:41 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x4000000000000000}}, {@dmode}]}) 19:41:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 50) [ 773.331656][T25651] FAULT_INJECTION: forcing a failure. [ 773.331656][T25651] name failslab, interval 1, probability 0, space 0, times 0 [ 773.331785][T25649] netem: change failed [ 773.344642][T25651] CPU: 1 PID: 25651 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 773.358601][T25651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.368650][T25651] Call Trace: [ 773.371923][T25651] [ 773.374847][T25651] dump_stack_lvl+0xd6/0x122 19:41:41 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x80002800) [ 773.379440][T25651] dump_stack+0x11/0x1b [ 773.383596][T25651] should_fail+0x23c/0x250 [ 773.388012][T25651] ? mempool_alloc_slab+0x16/0x20 [ 773.393098][T25651] __should_failslab+0x81/0x90 [ 773.397898][T25651] should_failslab+0x5/0x20 [ 773.402482][T25651] kmem_cache_alloc+0x4f/0x320 [ 773.407296][T25651] mempool_alloc_slab+0x16/0x20 [ 773.412205][T25651] ? mempool_free+0x130/0x130 [ 773.416913][T25651] mempool_alloc+0x9d/0x310 [ 773.421449][T25651] sg_pool_alloc+0x74/0x90 [ 773.425869][T25651] __sg_alloc_table+0xce/0x290 [ 773.430636][T25651] sg_alloc_table_chained+0xaf/0x140 [ 773.436005][T25651] ? sg_alloc_table_chained+0x140/0x140 [ 773.441695][T25651] scsi_alloc_sgtables+0x18a/0x510 [ 773.446804][T25651] sd_init_command+0x944/0x1610 [ 773.451653][T25651] scsi_queue_rq+0x1026/0x1460 [ 773.456461][T25651] blk_mq_dispatch_rq_list+0x534/0x11e0 [ 773.462006][T25651] ? __sbitmap_queue_get+0x11/0x20 [ 773.467168][T25651] blk_mq_do_dispatch_sched+0x446/0x6d0 [ 773.472769][T25651] __blk_mq_sched_dispatch_requests+0x1ca/0x270 [ 773.479007][T25651] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 773.484972][T25651] __blk_mq_run_hw_queue+0xc1/0x140 [ 773.490174][T25651] __blk_mq_delay_run_hw_queue+0x199/0x360 [ 773.496177][T25651] ? __rcu_read_unlock+0x5c/0x290 [ 773.501213][T25651] blk_mq_run_hw_queue+0x231/0x260 [ 773.506589][T25651] blk_mq_sched_insert_requests+0x130/0x200 [ 773.512557][T25651] blk_mq_flush_plug_list+0x372/0x460 [ 773.517999][T25651] blk_flush_plug+0x25a/0x2b0 [ 773.522743][T25651] ? ext4_iomap_end+0x33/0x50 [ 773.527408][T25651] blk_finish_plug+0x44/0x60 [ 773.531990][T25651] __iomap_dio_rw+0xcad/0x1070 [ 773.536742][T25651] ? _raw_spin_lock_irq+0x41/0x50 [ 773.541790][T25651] iomap_dio_rw+0x38/0x80 [ 773.546104][T25651] ? ext4_file_write_iter+0x461/0x1200 [ 773.551548][T25651] ext4_file_write_iter+0xac3/0x1200 [ 773.556814][T25651] ? ext4_file_write_iter+0x461/0x1200 [ 773.562265][T25651] do_iter_readv_writev+0x2de/0x380 [ 773.567448][T25651] do_iter_write+0x192/0x5c0 [ 773.572132][T25651] ? splice_from_pipe_next+0x34f/0x3b0 [ 773.577621][T25651] ? kmalloc_array+0x2d/0x40 [ 773.582200][T25651] vfs_iter_write+0x4c/0x70 [ 773.586705][T25651] iter_file_splice_write+0x43a/0x790 [ 773.592078][T25651] ? splice_from_pipe+0xd0/0xd0 [ 773.596917][T25651] direct_splice_actor+0x80/0xa0 [ 773.601847][T25651] splice_direct_to_actor+0x345/0x650 [ 773.607218][T25651] ? do_splice_direct+0x190/0x190 [ 773.612309][T25651] do_splice_direct+0x106/0x190 [ 773.617155][T25651] do_sendfile+0x675/0xc40 [ 773.621558][T25651] __x64_sys_sendfile64+0x102/0x140 [ 773.626914][T25651] do_syscall_64+0x44/0xd0 [ 773.631442][T25651] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 773.637325][T25651] RIP: 0033:0x7f34f8a1cae9 [ 773.641817][T25651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 773.661516][T25651] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 773.670222][T25651] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 19:41:41 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80002800) 19:41:41 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8000000000000000}}], 0x1, 0x0, 0x0) [ 773.678176][T25651] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 773.686220][T25651] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 773.694181][T25651] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 773.702137][T25651] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 773.710190][T25651] 19:41:41 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80002800) 19:41:41 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8100000000000000}}], 0x1, 0x0, 0x0) [ 773.742787][ C0] sd 0:0:1:0: tag#8128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 773.752684][ C0] sd 0:0:1:0: tag#8128 CDB: opcode=0xe5 (vendor) [ 773.759050][ C0] sd 0:0:1:0: tag#8128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 773.768127][ C0] sd 0:0:1:0: tag#8128 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 773.777182][ C0] sd 0:0:1:0: tag#8128 CDB[20]: ba 19:41:41 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x2280, 0x30}, 0x18) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000740)='qnx6\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) unlink(&(0x7f0000000140)='./file0\x00') r1 = accept4$inet(r0, &(0x7f0000000300)={0x2, 0x0, @initdev}, &(0x7f0000000380)=0x10, 0x800) recvmsg(r1, &(0x7f0000000700)={&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/68, 0x44}], 0x2, &(0x7f0000000600)=""/246, 0xf6}, 0x2000) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:42 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80002800) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8847000000000000}}], 0x1, 0x0, 0x0) 19:41:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x4000080000000000}}, {@dmode}]}) 19:41:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2e5466816c6530"], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="0213ca6b70b492a514d546aeaf2727b1dc9dd203172e6850cebd4d6837aade27d57d32c633b595259d45cab91c094a053f1dd6f1b83113611c5d0629351bb74c36dd3bb368f91658a5bab49da072"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000440)='ubifs\x00', 0x2080001, &(0x7f00000004c0)='\')(\'\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) faccessat(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r1}, 0x10) 19:41:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 51) 19:41:42 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x8848000000000000}}], 0x1, 0x0, 0x0) 19:41:42 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x88a8ffff00000000}}], 0x1, 0x0, 0x0) [ 774.420778][T25882] FAULT_INJECTION: forcing a failure. [ 774.420778][T25882] name failslab, interval 1, probability 0, space 0, times 0 [ 774.433440][T25882] CPU: 1 PID: 25882 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 774.443623][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.453733][T25882] Call Trace: [ 774.457011][T25882] [ 774.459935][T25882] dump_stack_lvl+0xd6/0x122 [ 774.464620][T25882] dump_stack+0x11/0x1b [ 774.468787][T25882] should_fail+0x23c/0x250 [ 774.473232][T25882] ? jbd2__journal_start+0xf7/0x3f0 [ 774.478431][T25882] __should_failslab+0x81/0x90 [ 774.483302][T25882] should_failslab+0x5/0x20 [ 774.487886][T25882] kmem_cache_alloc+0x4f/0x320 [ 774.492722][T25882] jbd2__journal_start+0xf7/0x3f0 [ 774.497110][ C0] sd 0:0:1:0: tag#8142 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 774.497753][T25882] __ext4_journal_start_sb+0x159/0x310 [ 774.507851][ C0] sd 0:0:1:0: tag#8142 CDB: opcode=0xe5 (vendor) 19:41:42 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xa6ffffff00000000}}], 0x1, 0x0, 0x0) [ 774.513211][T25882] ext4_file_write_iter+0xbe6/0x1200 [ 774.519612][ C0] sd 0:0:1:0: tag#8142 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 774.524830][T25882] do_iter_readv_writev+0x2de/0x380 [ 774.533881][ C0] sd 0:0:1:0: tag#8142 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 774.539019][T25882] do_iter_write+0x192/0x5c0 [ 774.548087][ C0] sd 0:0:1:0: tag#8142 CDB[20]: ba [ 774.552597][T25882] ? splice_from_pipe_next+0x34f/0x3b0 [ 774.563124][T25882] ? kmalloc_array+0x2d/0x40 19:41:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x6e) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0xc0040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x1008000, &(0x7f0000000300)='\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000004c0)=""/240, 0xf0}], 0x4, 0xd00, 0x0) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc00e000000000000}}], 0x1, 0x0, 0x0) [ 774.567719][T25882] vfs_iter_write+0x4c/0x70 [ 774.572592][T25882] iter_file_splice_write+0x43a/0x790 [ 774.577975][T25882] ? splice_from_pipe+0xd0/0xd0 [ 774.582905][T25882] direct_splice_actor+0x80/0xa0 [ 774.587883][T25882] splice_direct_to_actor+0x345/0x650 [ 774.593263][T25882] ? do_splice_direct+0x190/0x190 [ 774.598291][T25882] do_splice_direct+0x106/0x190 [ 774.603151][T25882] do_sendfile+0x675/0xc40 [ 774.607619][T25882] __x64_sys_sendfile64+0x102/0x140 [ 774.612824][T25882] do_syscall_64+0x44/0xd0 [ 774.617248][T25882] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 774.623146][T25882] RIP: 0033:0x7f34f8a1cae9 [ 774.627558][T25882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.647249][T25882] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 774.655831][T25882] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 774.663836][T25882] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 774.671809][T25882] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 774.679864][T25882] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 774.687891][T25882] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 774.695862][T25882] 19:41:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x4800000000000000}}, {@dmode}]}) 19:41:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='hfs\x00', 0x400, 0x0) 19:41:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xc3ffffff00000000}}], 0x1, 0x0, 0x0) 19:41:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 52) 19:41:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x1, 0x2, &(0x7f0000000440)=[{&(0x7f0000001480)="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", 0x1000, 0x20}, {&(0x7f0000000300)="07fb052f287eb08454148f85c52ea15b0cf5", 0x12}], 0x800, &(0x7f00000004c0)={[{@dioread_nolock}, {@errors_continue}, {@test_dummy_encryption}, {@data_err_abort}, {@barrier}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ramfs\x00'}}, {@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@permit_directio}, {@euid_lt}]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/166, 0xa6) 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0xffffffff00000000}}], 0x1, 0x0, 0x0) 19:41:42 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2000000000000000}}, {@dmode}]}) [ 774.789524][ C0] sd 0:0:1:0: tag#8143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 774.799421][ C0] sd 0:0:1:0: tag#8143 CDB: opcode=0xe5 (vendor) [ 774.805769][ C0] sd 0:0:1:0: tag#8143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 774.814877][ C0] sd 0:0:1:0: tag#8143 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 774.823961][ C0] sd 0:0:1:0: tag#8143 CDB[20]: ba 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 774.859637][T26120] loop1: detected capacity change from 0 to 8 [ 774.868380][T26116] FAULT_INJECTION: forcing a failure. [ 774.868380][T26116] name failslab, interval 1, probability 0, space 0, times 0 [ 774.881084][T26120] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 774.881087][T26116] CPU: 0 PID: 26116 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 774.897814][T26116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.907864][T26116] Call Trace: [ 774.911151][T26116] [ 774.914081][T26116] dump_stack_lvl+0xd6/0x122 [ 774.918676][T26116] dump_stack+0x11/0x1b [ 774.922842][T26116] should_fail+0x23c/0x250 [ 774.927345][T26116] ? jbd2__journal_start+0xf7/0x3f0 [ 774.932554][T26116] __should_failslab+0x81/0x90 [ 774.937432][T26116] should_failslab+0x5/0x20 [ 774.941992][T26116] kmem_cache_alloc+0x4f/0x320 [ 774.946761][T26116] jbd2__journal_start+0xf7/0x3f0 [ 774.951791][T26116] __ext4_journal_start_sb+0x159/0x310 [ 774.957345][T26116] ext4_file_write_iter+0xbe6/0x1200 [ 774.962745][T26116] do_iter_readv_writev+0x2de/0x380 [ 774.967946][T26116] do_iter_write+0x192/0x5c0 [ 774.972545][T26116] ? splice_from_pipe_next+0x34f/0x3b0 [ 774.978022][T26116] ? kmalloc_array+0x2d/0x40 [ 774.982623][T26116] vfs_iter_write+0x4c/0x70 [ 774.987164][T26116] iter_file_splice_write+0x43a/0x790 [ 774.992618][T26116] ? splice_from_pipe+0xd0/0xd0 [ 774.997468][T26116] direct_splice_actor+0x80/0xa0 [ 775.002431][T26116] splice_direct_to_actor+0x345/0x650 [ 775.007807][T26116] ? do_splice_direct+0x190/0x190 [ 775.012850][T26116] do_splice_direct+0x106/0x190 [ 775.017707][T26116] do_sendfile+0x675/0xc40 [ 775.022124][T26116] __x64_sys_sendfile64+0x102/0x140 [ 775.027515][T26116] do_syscall_64+0x44/0xd0 [ 775.032003][T26116] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.037969][T26116] RIP: 0033:0x7f34f8a1cae9 [ 775.042476][T26116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.062320][T26116] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 775.070792][T26116] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 775.078768][T26116] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 775.086742][T26116] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.094706][T26116] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 775.102674][T26116] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 19:41:42 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) 19:41:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 53) [ 775.110650][T26116] 19:41:42 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80000, 0x80) 19:41:42 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x4c00000000000000}}, {@dmode}]}) 19:41:42 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x2000000000000000}}, {@dmode}]}) [ 775.201207][T26242] FAULT_INJECTION: forcing a failure. [ 775.201207][T26242] name failslab, interval 1, probability 0, space 0, times 0 [ 775.214073][T26242] CPU: 1 PID: 26242 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 775.224274][T26242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.234335][T26242] Call Trace: [ 775.237713][T26242] [ 775.240714][T26242] dump_stack_lvl+0xd6/0x122 [ 775.245314][T26242] dump_stack+0x11/0x1b [ 775.249510][T26242] should_fail+0x23c/0x250 [ 775.254117][T26242] ? mempool_alloc_slab+0x16/0x20 [ 775.259198][T26242] __should_failslab+0x81/0x90 [ 775.263971][T26242] should_failslab+0x5/0x20 [ 775.268543][T26242] kmem_cache_alloc+0x4f/0x320 [ 775.273449][T26242] mempool_alloc_slab+0x16/0x20 [ 775.278343][T26242] ? mempool_free+0x130/0x130 [ 775.283004][T26242] mempool_alloc+0x9d/0x310 [ 775.287556][T26242] ? __crc32c_le_base+0x19c/0x350 [ 775.292581][T26242] sg_pool_alloc+0x74/0x90 [ 775.297010][T26242] __sg_alloc_table+0xce/0x290 [ 775.301872][T26242] sg_alloc_table_chained+0xaf/0x140 [ 775.307142][T26242] ? sg_alloc_table_chained+0x140/0x140 [ 775.312823][T26242] scsi_alloc_sgtables+0x18a/0x510 [ 775.317984][T26242] sd_init_command+0x944/0x1610 [ 775.322972][T26242] scsi_queue_rq+0x1026/0x1460 [ 775.327727][T26242] blk_mq_dispatch_rq_list+0x534/0x11e0 [ 775.333385][T26242] ? __sbitmap_queue_get+0x11/0x20 [ 775.338577][T26242] blk_mq_do_dispatch_sched+0x446/0x6d0 [ 775.344109][T26242] __blk_mq_sched_dispatch_requests+0x1ca/0x270 [ 775.350403][T26242] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 775.356376][T26242] __blk_mq_run_hw_queue+0xc1/0x140 [ 775.361574][T26242] __blk_mq_delay_run_hw_queue+0x199/0x360 [ 775.367419][T26242] ? __rcu_read_unlock+0x5c/0x290 [ 775.372552][T26242] blk_mq_run_hw_queue+0x231/0x260 [ 775.377686][T26242] blk_mq_sched_insert_requests+0x130/0x200 [ 775.383559][T26242] blk_mq_flush_plug_list+0x1af/0x460 [ 775.388995][T26242] blk_flush_plug+0x25a/0x2b0 [ 775.393724][T26242] ? ext4_iomap_end+0x33/0x50 [ 775.398488][T26242] blk_finish_plug+0x44/0x60 [ 775.403072][T26242] __iomap_dio_rw+0xcad/0x1070 [ 775.407928][T26242] ? _raw_spin_lock_irq+0x41/0x50 [ 775.413011][T26242] iomap_dio_rw+0x38/0x80 [ 775.417355][T26242] ? ext4_file_write_iter+0x461/0x1200 [ 775.423009][T26242] ext4_file_write_iter+0xac3/0x1200 [ 775.428378][T26242] ? ext4_file_write_iter+0x461/0x1200 [ 775.433826][T26242] do_iter_readv_writev+0x2de/0x380 [ 775.439076][T26242] do_iter_write+0x192/0x5c0 [ 775.443729][T26242] ? splice_from_pipe_next+0x34f/0x3b0 [ 775.449173][T26242] ? kmalloc_array+0x2d/0x40 [ 775.453938][T26242] vfs_iter_write+0x4c/0x70 [ 775.458437][T26242] iter_file_splice_write+0x43a/0x790 [ 775.463808][T26242] ? splice_from_pipe+0xd0/0xd0 [ 775.468728][T26242] direct_splice_actor+0x80/0xa0 [ 775.473732][T26242] splice_direct_to_actor+0x345/0x650 [ 775.479167][T26242] ? do_splice_direct+0x190/0x190 [ 775.484188][T26242] do_splice_direct+0x106/0x190 [ 775.489022][T26242] do_sendfile+0x675/0xc40 [ 775.493453][T26242] __x64_sys_sendfile64+0x102/0x140 [ 775.498655][T26242] do_syscall_64+0x44/0xd0 [ 775.503077][T26242] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 775.509032][T26242] RIP: 0033:0x7f34f8a1cae9 [ 775.513456][T26242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.533058][T26242] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 775.541476][T26242] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 775.549444][T26242] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 775.557422][T26242] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.565388][T26242] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 775.573387][T26242] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 775.581428][T26242] 19:41:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:43 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x3}}], 0x1, 0x0, 0x0) 19:41:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0xd0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x7, 0x0) move_mount(r0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x32) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xaa, 0x200) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:43 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x6000000000000000}}, {@dmode}]}) 19:41:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:43 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) 19:41:43 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x5}}], 0x1, 0x0, 0x0) [ 775.652436][ C1] sd 0:0:1:0: tag#8169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 775.662428][ C1] sd 0:0:1:0: tag#8169 CDB: opcode=0xe5 (vendor) [ 775.668892][ C1] sd 0:0:1:0: tag#8169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 775.677945][ C1] sd 0:0:1:0: tag#8169 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 775.687045][ C1] sd 0:0:1:0: tag#8169 CDB[20]: ba 19:41:43 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x6}}], 0x1, 0x0, 0x0) [ 775.711934][ C0] sd 0:0:1:0: tag#8176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 775.721914][ C0] sd 0:0:1:0: tag#8176 CDB: opcode=0xe5 (vendor) [ 775.728308][ C0] sd 0:0:1:0: tag#8176 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 775.737365][ C0] sd 0:0:1:0: tag#8176 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 775.746427][ C0] sd 0:0:1:0: tag#8176 CDB[20]: ba 19:41:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 54) 19:41:43 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x7}}], 0x1, 0x0, 0x0) 19:41:43 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000240)=@md0, &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:43 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x6800000000000000}}, {@dmode}]}) [ 776.080472][T26499] FAULT_INJECTION: forcing a failure. [ 776.080472][T26499] name failslab, interval 1, probability 0, space 0, times 0 [ 776.093212][T26499] CPU: 0 PID: 26499 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 776.103366][T26499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.113412][T26499] Call Trace: [ 776.116680][T26499] [ 776.119610][T26499] dump_stack_lvl+0xd6/0x122 [ 776.124213][T26499] dump_stack+0x11/0x1b [ 776.128363][T26499] should_fail+0x23c/0x250 [ 776.132773][T26499] ? jbd2__journal_start+0xf7/0x3f0 [ 776.138047][T26499] __should_failslab+0x81/0x90 [ 776.142934][T26499] should_failslab+0x5/0x20 [ 776.147496][T26499] kmem_cache_alloc+0x4f/0x320 [ 776.152516][T26499] jbd2__journal_start+0xf7/0x3f0 [ 776.157544][T26499] __ext4_journal_start_sb+0x159/0x310 [ 776.163009][T26499] ? ext4_file_write_iter+0x461/0x1200 [ 776.168562][T26499] ext4_file_write_iter+0x992/0x1200 [ 776.174069][T26499] ? ext4_file_write_iter+0x461/0x1200 [ 776.179527][T26499] do_iter_readv_writev+0x2de/0x380 [ 776.184763][T26499] do_iter_write+0x192/0x5c0 [ 776.189369][T26499] ? splice_from_pipe_next+0x34f/0x3b0 [ 776.194845][T26499] ? kmalloc_array+0x2d/0x40 [ 776.199533][T26499] vfs_iter_write+0x4c/0x70 [ 776.204126][T26499] iter_file_splice_write+0x43a/0x790 [ 776.209498][T26499] ? splice_from_pipe+0xd0/0xd0 [ 776.214391][T26499] direct_splice_actor+0x80/0xa0 [ 776.219336][T26499] splice_direct_to_actor+0x345/0x650 [ 776.224746][T26499] ? do_splice_direct+0x190/0x190 [ 776.229900][T26499] do_splice_direct+0x106/0x190 [ 776.234864][T26499] do_sendfile+0x675/0xc40 [ 776.239361][T26499] __x64_sys_sendfile64+0x102/0x140 [ 776.244630][T26499] do_syscall_64+0x44/0xd0 [ 776.249055][T26499] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.254947][T26499] RIP: 0033:0x7f34f8a1cae9 [ 776.259402][T26499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 776.279012][T26499] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 776.287424][T26499] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 776.295384][T26499] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 776.303374][T26499] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.311341][T26499] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 776.319321][T26499] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 776.327304][T26499] 19:41:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) 19:41:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="604154f36ece20aafda5d5e0779d522e0fe4ba4a6c550b38e584d6ff9b9eea87531a4e845e4474f1cc"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 55) 19:41:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x6c00000000000000}}, {@dmode}]}) 19:41:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xa}}], 0x1, 0x0, 0x0) [ 776.573804][T26590] FAULT_INJECTION: forcing a failure. [ 776.573804][T26590] name failslab, interval 1, probability 0, space 0, times 0 [ 776.586582][T26590] CPU: 1 PID: 26590 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 776.596763][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.606857][T26590] Call Trace: [ 776.610207][T26590] [ 776.613132][T26590] dump_stack_lvl+0xd6/0x122 [ 776.617728][T26590] dump_stack+0x11/0x1b 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc}}], 0x1, 0x0, 0x0) 19:41:44 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)={{r8, 0x3, 0x1ff, 0x7, 0x3, 0xffffffffffffff01, 0x3, 0x3, 0x1, 0xfffffffb, 0x3, 0x42f, 0x67, 0x4, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240), 0x4) preadv(r10, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 776.621880][T26590] should_fail+0x23c/0x250 [ 776.626291][T26590] ? __iomap_dio_rw+0x143/0x1070 [ 776.631312][T26590] __should_failslab+0x81/0x90 [ 776.636081][T26590] should_failslab+0x5/0x20 [ 776.640595][T26590] kmem_cache_alloc_trace+0x52/0x350 [ 776.645941][T26590] __iomap_dio_rw+0x143/0x1070 [ 776.650709][T26590] ? preempt_count_add+0x4e/0x90 [ 776.655654][T26590] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 776.659735][ C0] sd 0:0:1:0: tag#8130 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xf}}], 0x1, 0x0, 0x0) [ 776.661457][T26590] ? ___cache_free+0x46/0x300 [ 776.671308][ C0] sd 0:0:1:0: tag#8130 CDB: opcode=0xe5 (vendor) [ 776.675922][T26590] iomap_dio_rw+0x38/0x80 [ 776.682282][ C0] sd 0:0:1:0: tag#8130 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 776.686695][T26590] ? ext4_file_write_iter+0x461/0x1200 [ 776.686719][T26590] ext4_file_write_iter+0xac3/0x1200 [ 776.695742][ C0] sd 0:0:1:0: tag#8130 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 776.701182][T26590] ? ext4_file_write_iter+0x461/0x1200 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x10}}], 0x1, 0x0, 0x0) [ 776.701207][T26590] do_iter_readv_writev+0x2de/0x380 [ 776.706577][ C0] sd 0:0:1:0: tag#8130 CDB[20]: ba [ 776.715546][T26590] do_iter_write+0x192/0x5c0 [ 776.715571][T26590] ? splice_from_pipe_next+0x34f/0x3b0 [ 776.741331][T26590] ? kmalloc_array+0x2d/0x40 [ 776.745931][T26590] vfs_iter_write+0x4c/0x70 [ 776.750449][T26590] iter_file_splice_write+0x43a/0x790 [ 776.755860][T26590] ? splice_from_pipe+0xd0/0xd0 [ 776.760717][T26590] direct_splice_actor+0x80/0xa0 [ 776.765739][T26590] splice_direct_to_actor+0x345/0x650 19:41:44 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x60}}], 0x1, 0x0, 0x0) [ 776.771118][T26590] ? do_splice_direct+0x190/0x190 [ 776.776218][T26590] do_splice_direct+0x106/0x190 [ 776.781166][T26590] do_sendfile+0x675/0xc40 [ 776.785614][T26590] __x64_sys_sendfile64+0x102/0x140 [ 776.790879][T26590] do_syscall_64+0x44/0xd0 [ 776.795347][T26590] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 776.801262][T26590] RIP: 0033:0x7f34f8a1cae9 [ 776.805675][T26590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 776.825404][T26590] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 776.833840][T26590] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 776.841811][T26590] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 776.849812][T26590] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.857789][T26590] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 776.865893][T26590] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 776.873860][T26590] [ 776.883941][ C1] sd 0:0:1:0: tag#8131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 776.893798][ C1] sd 0:0:1:0: tag#8131 CDB: opcode=0xe5 (vendor) [ 776.900246][ C1] sd 0:0:1:0: tag#8131 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 776.909293][ C1] sd 0:0:1:0: tag#8131 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 776.918466][ C1] sd 0:0:1:0: tag#8131 CDB[20]: ba [ 776.935796][ C1] sd 0:0:1:0: tag#8133 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 776.945686][ C1] sd 0:0:1:0: tag#8133 CDB: opcode=0xe5 (vendor) [ 776.952054][ C1] sd 0:0:1:0: tag#8133 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 776.961125][ C1] sd 0:0:1:0: tag#8133 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 776.970205][ C1] sd 0:0:1:0: tag#8133 CDB[20]: ba 19:41:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:45 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x300}}], 0x1, 0x0, 0x0) 19:41:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 56) 19:41:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x980000, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="456a12150bce0b438be3f38f0a6065885a1924fcba6b3d7da2a1f01ac4c49a6844d2095d7a943eb02d049d0d126cb352e00610305c78f0308730d495224e157060f530c7ba6a09c1dc257b3fa1abd3c56136"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f00000004c0)=ANY=[@ANYBLOB="641c1acdaac4d095e04a21976d9fa97148bae8e605f20c5f0e0a11e3a268aee6e0eb9f0f1a0943230f2cf4d967994db41904703499aa856999b0fcc7377c39cc80228f66882d3bfa7140bdcf6833092ee5f77b43db5be837b5c3636251a00dbb6dee7905cf8dfd0cbd974e4a38542dc06fd52163199fef2dba419003ffc291c418dc4762d6af70fe00"/151], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:45 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x7400000000000000}}, {@dmode}]}) [ 777.489181][ C0] sd 0:0:1:0: tag#8153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 777.495948][ C1] sd 0:0:1:0: tag#8158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 777.499058][ C0] sd 0:0:1:0: tag#8153 CDB: opcode=0xe5 (vendor) [ 777.508845][ C1] sd 0:0:1:0: tag#8158 CDB: opcode=0xe5 (vendor) [ 777.515155][ C0] sd 0:0:1:0: tag#8153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 777.521471][ C1] sd 0:0:1:0: tag#8158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 777.530481][ C0] sd 0:0:1:0: tag#8153 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 777.530499][ C0] sd 0:0:1:0: tag#8153 CDB[20]: ba [ 777.539517][ C1] sd 0:0:1:0: tag#8158 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 777.549322][T26921] FAULT_INJECTION: forcing a failure. [ 777.549322][T26921] name failslab, interval 1, probability 0, space 0, times 0 [ 777.553626][ C1] sd 0:0:1:0: tag#8158 CDB[20]: ba [ 777.580393][T26921] CPU: 0 PID: 26921 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 777.590536][T26921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.600604][T26921] Call Trace: [ 777.603880][T26921] [ 777.606796][T26921] dump_stack_lvl+0xd6/0x122 [ 777.611383][T26921] dump_stack+0x11/0x1b [ 777.615556][T26921] should_fail+0x23c/0x250 [ 777.619954][T26921] ? __iomap_dio_rw+0x143/0x1070 [ 777.624879][T26921] __should_failslab+0x81/0x90 [ 777.629818][T26921] should_failslab+0x5/0x20 [ 777.634341][T26921] kmem_cache_alloc_trace+0x52/0x350 [ 777.639673][T26921] __iomap_dio_rw+0x143/0x1070 [ 777.644437][T26921] ? preempt_count_add+0x4e/0x90 [ 777.649420][T26921] ? _raw_spin_unlock_irqrestore+0x3d/0x60 [ 777.655212][T26921] ? ___cache_free+0x46/0x300 [ 777.659917][T26921] iomap_dio_rw+0x38/0x80 [ 777.664231][T26921] ? ext4_file_write_iter+0x461/0x1200 [ 777.669741][T26921] ext4_file_write_iter+0xac3/0x1200 [ 777.675009][T26921] ? ext4_file_write_iter+0x461/0x1200 [ 777.680461][T26921] do_iter_readv_writev+0x2de/0x380 [ 777.685646][T26921] do_iter_write+0x192/0x5c0 [ 777.690263][T26921] ? splice_from_pipe_next+0x34f/0x3b0 [ 777.695706][T26921] ? kmalloc_array+0x2d/0x40 [ 777.700354][T26921] vfs_iter_write+0x4c/0x70 [ 777.704846][T26921] iter_file_splice_write+0x43a/0x790 [ 777.710206][T26921] ? splice_from_pipe+0xd0/0xd0 [ 777.715042][T26921] direct_splice_actor+0x80/0xa0 [ 777.719975][T26921] splice_direct_to_actor+0x345/0x650 [ 777.725544][T26921] ? do_splice_direct+0x190/0x190 [ 777.730558][T26921] do_splice_direct+0x106/0x190 [ 777.735414][T26921] do_sendfile+0x675/0xc40 [ 777.739859][T26921] __x64_sys_sendfile64+0x102/0x140 [ 777.745134][T26921] do_syscall_64+0x44/0xd0 [ 777.749546][T26921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 777.755425][T26921] RIP: 0033:0x7f34f8a1cae9 [ 777.759821][T26921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 777.779415][T26921] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:45 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x500}}], 0x1, 0x0, 0x0) 19:41:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000046c0)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x85, 0xfffffffd, 0xa, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x17, 0xebc4, 0x7fff}}) umount2(&(0x7f0000000400)='./file0\x00', 0x4) sendmmsg$sock(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000240)="e98e0f97811e98ea18cdbbc1f47b9ea4af86a09bbeda3e10fa80b9759c4fddaadcbdad54752910bb4bb17a044c233e0134d8392baf55b4344e", 0x39}, {&(0x7f00000002c0)="8e080f996494da4c80fd", 0xa}], 0x3, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="d79c4340714bcd01bc73d67307485f5c5d32f088cb0af5c2a2d86df64510651c4a2e088b8fbaa5e60a4d35b6d5cc668b9fdbf59b8a5a929f15b396cb0a238c74c1f06935fc23f4fe34c8ec4e9c81b66ebb339ebdda545cbd0187077c38f70690ef362ee7b4d7d5d3830228375465ff3016ce62879746b098e41ed19f1c21502f4a5380062d555ece065aa729fecf1cf43415d98104c0fb71e097fd4cca57a81fd36e18a35dc72df76f2be242a3d6319e740d6dec30358990cf537456adac0d8da919c83debdba3da26046073233fcabc2d", 0xd1}, {&(0x7f0000000440)}, {&(0x7f00000005c0)="2cd3e29c5cc036a787b5829dfcd5f5afafd0a47525684e940200a0e66be203203a69a034968ae7a00bd8a2bc22278ed83c0ea0972a59bdd42d03d0eb521c4aad2d3e3af3bbaf7d6d40080988dc4fe5fe61c3e65c1f42d54e92b51857e213cb2f5b5c6ae2548c86f82256980e7714a8b1566a89cfffcc500dfc8adc80e705239ab2a1042da2ea8e9d091cdf6561788bd6dae57e03738fded69d0d1c366312f19815984257a6c345d76225970c6892ff085992ebf0804537e39b02d1aeff405e4379bdd782c43e06728e36ae3d57564cd8ada73c1b0a04a0740f034cc56151ed4081ffd1654768ab7995632a2816f97d021db5d9846f5023a09307a46dffe4", 0xfe}, {&(0x7f00000006c0)="7be683fdf6392fe67b3b721f67cf0f91604ce9b56c83cbd1b475a903fe420c23a7f0f6ae0ff75e2b841e39d183b0bee12fe43fd94611873ccab2e0cc1ca7474dd85e7e4106176b28a32de0a79ecdc5b17a6278f4f087b698f05ebebd2ab43a08f0ccf5f684d7b09b13b2c917355d158069c6bdaee7d4753f48276e84a8c6b87cf53becf410ec22e499cd1cf232d2255725777835", 0x94}], 0x5, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}, {{&(0x7f0000000a00)=@generic={0x2d, "0d29b6fba4d1aca48c6b06aa22345c7742a9261e46f5742ec2d56b17acb20ad935aeb953020a3163463133793926c1c3832708baac67dc8f63c6b1bf5da916e73b8679a091a152eae788ab9a54422953ee220f81cd132e64fc54bc76e06340f0285d99b30d15a29f40cd1806cb2c397b4f89329a844096d239f10b69070d"}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a80)="ed85549f315592f0cba8c0816e5139d1a281d1d3994ed9a869c59cf9999317be392a970f6b1b8e5b94b2d9640bac65f15e4518dab03bfa1eac1a", 0x3a}, {&(0x7f0000000ac0)="219d5d489588e04de1044995128103c61d8c6546b2e41a26b48420383de0006391183327b25789f404c5e9b7176acf11601072b81ed287af3923f8bb914c13340c442284b46a4c270f4d92483f737b09a7dc28824cb2ce37800d530ccdbde7fd7c704c10ade3ff900d2836e4a2838cef5839224832d8a73f7f7d95466bd1", 0x7e}, {&(0x7f0000000b40)="dbceccff84", 0x5}, {&(0x7f0000000b80)="702e44bf6602a8d22c07bfd8743d55bc9587ebf898bce62a71e64e873fa2641239ac13c3b810e8", 0x27}, {&(0x7f0000000bc0)="9d548125a6eb062e69f40bad394db4d09a45fed6fafd610804e7092bf668b9138b1025e7a7d6c292d426f554fd54d537c8dcb1b84ed4c0f81038d52e5ae67ccc2bbcf669c4e1c49259d6bffd0cfba3140056a3445ecf74cba25dd938c7626077a4591dc4aaffc2d1", 0x68}, {&(0x7f0000000c40)="cfdb259cce6c5d1d0cbe53952cbe0603917bc60a0d24af69f07a53c282146c5173bfdd5606f78fcf6d9b62023a2e18a6cd7cfacaf3095929aa944e7ed23b0ef7f0714494d1386f6f9667049d0086dff2140c75f4a6365999dd3b", 0x5a}, {&(0x7f0000000cc0)="a351effd4043ce82a53d2df873542743b2fe43739e27fd0841f7d0fb091d5b06f1695e830fd28928ab918419c9c0c33faa205510ff90508f2d43fc6d65397e5058c5cd924696e5986aa785e56bd71f806790b5ce3060556e7d02", 0x5a}, {&(0x7f0000000d40)="c0af2065aefdf0677de15aa52c6210ce2f815de7174f48431f645604dc0a15b4a39136d97379c557b87f30da405f96a991facb5d85103a4c952d", 0x3a}], 0x8, &(0x7f0000000e00)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xd8}}, {{&(0x7f0000000fc0)=@xdp={0x2c, 0x1, r1, 0x38}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000001040)="43f70b57afa34665e5672aecfa0b745e60bb99d714cf0d6707538c70dc613d10428d7b8d7062f2dc52bdeb7fb92eca424fc464e96c66eb38cc0ed40b2f226e02cd24b4aaeff3dfcbb0a6c39484a1321969b7cd64b76d557fd33672b406b2de437f6f27ed4fa5fa918361f29b211c845b660582b0bf64bf693249870166c8839718e673de57dfc4dcdb95d0267f285e22e09f25ddcfc4b36e7bbc1df64cc01a01f57e8b1b8f0c37c6895a83a2", 0xac}, {&(0x7f0000002480)="2f2482b6d09a082df4ebdd58c339cf0bf054c74f1d61240c2ebc78884e91fc6ba656e4764e6afe513f8bede3aacc1537a12a48e9e118e4dc40f85b1cb133cdcac27e5de1a4849b9ac380e0deb357ad1570e5613f34d17bfb7ccc8f724ad653dce556d8468929eab13d5556acbebd337be4f4c7c036d79bae007c14c8801613bbd6ee7e2bf1e714b3e2d99200ba015e6cf83bc3198b2c1f652eac6b36d21470193efed64110b1e05d3e4fc0784cbc3032b732337890a3618daa8fd3c6c34433f5dab1e4a9a63da86ac824caf8d8348bc40941d1dda23027f5753863aadd70e4caa52452a622ffbd8dc1cd4312b2812454c032afcfa73ab6db03b6bfdc814c509c2516aa211d51687fb18ce01302d239f060c5ce13b19bf88e3d2e38738600d210f766d1172afa34d4ab962ae3259c8ef564f5702166dce3251008ac02dae91c53675885dfe6df0a3fdcdd1deea1f66c8988978a658ffbb98a6b20a005ad68a3bd7ff08ef6c1e427ffaca1baa9ca5c5fe5165ce272de9e0ea7c3fb635455994151057a40b4e60d15018e562339729b6fa19e64d07fb21f5921d4e336e3b640a3d632d56d5a666e021d77a52c4e8054d11c5d36092ef1b3f74543a57aac7357318e9273cc0a8d5fb0c994fe1b43a325814438672d721a083085bd851049b106fece14cea6bb49081b60c2830c6fd900dee698c9d9fd9516df893e6890d79753b33ebe78ff1387148f35af392974e3332b941c943e9771c24cfa03137e7c341e56955666487ed3155b61c186b639da4e836929dddab06e0abf11b0416651634efab0d6041b4ef02a9052a0cd25a24e9b031e49e6e4a06ff317d1c93760bf4e50f79bae0b4e5a009828ad754978633f7c739312463fab58e5f155bc242a093bc7c8063cfbd231dcddef4d32b1df0d206bd0e37b4e6421cdcae956f9ea73d46d4066311ffc4675034eb91da2b4c2ea3a645613bc9315a22ce2697fea06187725d330b772367c9357db65359a9951396aa7d315835a3403e1280db046a8c79b5ab6e05832b6921f5a2ebc135e5086ca4b1073f60ad7e731e8686d4a0c2dbade8349191de46f0be9ae76741dd8ffe0dc93c8866a70f1f18fb7e8a23ac582ffedb816290546003ee4d51a2d141fcd0b56b0c0e360d72843eaaffa0bd09a243094a9be19298e7b84fdaf2c9881def35318d287a3bbe286d4c388a60593095fa9a6ef9f372934f30801f1d872c85da94a6392884058607c1ffff6f82666dcadbdfe64118d6af9e45e69a58db99debe7084fa5c9bd2cfcad1c380dc0020055dfb3baf73dbf383b002d4a01d70ac63317d815cad9c9efc8aa62d670bdd8253d42ba6f52dd21d6044a8ad68653e11620a4b0e2d485b9471355a85b3165832830feeea7d2abf8d98fc40f1a10f62a9b0769e23937c9587fbd0235453eb45091f794333d0befe7a5cc78324ea0ea86e5f0397c3a3354657753ee9dfc9da6bbb7c353ab5334c45718de3dfb7fef67b23638e0c6a3123a5a616d737358ed069fea9a2f17bd5daf8ff72e7de38df2cb5acd54a693099488a5b1f267781a138eb5d6e96ecaeb6c86c56134e29a5bd818dcb4cc33d38cda1a3354be738b7ac43ed376dbdb267f82e81e96bea8fbf2155159e7ec93e7974de87bb648d494cc74649e6ade51386b9e9f79943118fb0d639d13a3ce7b820255fb5b081e1fa09d3d18a9d3fd94d72765c27477fa1704626e996a4e6fb6a6f9ecc670341d43f5e2bc78a99e3b4aadebaa9c8bf542e587853921b3b5da100c0e12a28e7327f3e5dce5fa4c24857b3d4f799dfa777b03773993f8d1f246b97f6da16202a339e11a5e300a6970ec08b0a10e640bd8add082f4d802db5651148c16fa07d9da731240dda7fc18f8dfff7c205af3928d17ff92cd86aa1afd3a21fa63ced1a699cf16afcbf5601567fa0e851753aea58a21fe51279088ac8ed6c94b5eb3f2f13653257251437a53a137cc208ca303207955fc586094f152f244e732d63f6549f5be0193aaec2022f30b1d27905666110932ccd144f80ce67c5d316a0bf3415a5c1a05db83b469311c02782271a18d2490fc26219275b0e0067d48f869afa61ad5f41916fa5b940047fb2cb50a0b7a306a187bad9b6f76159586449a52b567c987a35f1e94453b2208958dca034cd1daca74543de6b4f0c0803b5e900829438dc322ded9e8f66c1d0f350129d14bc33807eec3b7a1b212208a159ceb8526c7ab1f2e562cb3595b2b0c543fbc5fc2f3e0699e822d51d4d1981f61c139b4eab272508f4d44d181d63c11926e5e0552b676721101654fb67c4606a07648b96bb825f979befaeece4b3f6fe1811d7f230a0acf734fa561b9f6b18b82fd7033c6fe658dedc854466734dbed225ca59085ce5c7772a18e857547ed769a9f27bc19fc180471abe7e5d3aee3cfeb281dd691b9a38f3fb560b49c911efd4fd604fc8cd5e1e20387a0e5d04927bce2a3c77a52cd3cd87ef00b2c4cb57beddae3c303f28631793fac4821ff0de0f3e7beb039f22ffbfaa09e6c823258def08417901ffea8daf9ea15f27bff5dc4be151285f6ca9ebb87da2640488161ba8cc6dbfa1598bcf7554ae3a574195bb15cd5c2889522b2bdee04b5db65d50d11051c604ecf025066085c845f134b21f51e9b9f11b352e42aed530687d8c953c982ca12dc0067555aaf532c60955a1fed320f5118561d7791d3cafbb3d2f1aaa290846e971887fde57ee2b42c4c5ed1ee908bfe1eca26598b7d8d8096dbf08132160e1dbf73612c682c8e216d84e68bafe78420b67a6abe863902c3d3776e7f3cb9993686d1c882eff6b5b107a42eef3255ca7063a800ac4e36de5be835d7233b6ba4147a07df9bc3fbda119af84c6ea8870a02731a6a0390634611f0412de68a3d2551c9a37a4d8b16007b2221eb6375e168a68932ac2238d61f0ca7672bdf6341070d7c359ce573afa1f1219cdc81a8b6b97ce60690c9260fd0f77e15ea2ff137a070153dfceb3a604d234a21a1f716a693e7649aa1dd1bdb5d996a13030ca2317c2ba83bf6dfa84ccc2def7d45e762fe83f4e327c3a05c48730bcd13a87aaa02cffad63f1ec996bf29f6ae0d2d1cb6f6cf40cd590b686684000f05011ef6f15052c5b3087c98a91bcad25118b22d93c4846c221229d89e792df37123012c914f5ecdd922338fb7fff8fcb1a1c3adee1e3bb7b5a9dbd35163455a13c19ae07bb5533aa329a766393cff33a15069b2105ec849a400d63c13359d6997104039e4432632bf8c168207020f2df7c4ef10b5756542285b5c1edccbcc602fbeb20961c5b86da315078e053b5ec0f278b0529c45e5cf87ce03d9bdf29fad1d6d51586e83997c7fd88cc14266bc18197e23ca22d8f650a9086cf8e6daffb9a67c7a80e89abe230662427bd606f04f156971c7cbb844022272d9b16783730c7570dfff7428da7e097ce3bbf5a72c197fe76f59d67fc55790f9f1dbb79b75045c841a3e22d3571d0fcfaa7270c2086022512314148def647805eda786fd2252aa1b6b7bb05dd7606c8a678387f1a58e89cb43ee5fa1a17724f79ac56281faabcfa34b653e728cd3cf3da7c151331872a77193897007b47104ca8332e3c6bc950f92d19bc91e7c88bc052c3e68a1570aed7e9cef216964ddac294b9cbc0ac5e2a565432cca4fabec13f0dd4c15917cd3055eade55f2b351b16a3c256c4e49747f5c99cecbe405a60d76769c6d498043aa66adcf9e079860d96e9dc1d248877ad594664ad084729c0f32355f80fe65622db91dfef6151404755b3857a52f61297b74049d509d2c5c038be574d61087494a852f287b62da4c08499450acbc59eaa2e6916609177efdb958ce42c3c04bfbf26fd7c30e5b6babbb8b0acc64ecd5c7373265ec54591b8989f6fe495f3522a11cfef02cd7a3352ba88302ac4ccfbfd73a13146edf12e9b78b642c131848c78a9b8fcc0025c0eb25a2cdba50d4552431e74c56784dac3cc677981632d4dae980dadc1bf64604d8b9e9ae6ddcab89695c82eeeaa2d3f80373e00e0b9039cb40777846813324a05066196efc42fb05bec8f949f3e299ab266d945bd09fc92c31739975f7bac4b868afe60ada37dfc72019c4be7a4c13d06ab459aad6ce42033b66e7149571a236d8a511b504232c3db4786e08d9b41b41abfe35d5d418bb6b1b604106893e61befa24d8e3c97154001b69202f9aa610b4faa2398115b877087deb8295134393887c798e30285cb063cbe653ba07d64caa3d9c11efa2c83cc3e1c71dce5ee2a7d8994db0a79214b18665fa082aeef76f654b25b376bec206bf8147c5b108b1d6db6862b71a81e79ccfa91d42dd23be2d5b32bc22ad74e15cf4db2667097da7c12ca27456c6628ea2a6f004329183d6fc237aef829026a65bc5e241e9471dd09cfe1f75b359aa51c859760d61acfcd51a4d7d8d69f3db11563c9cd93012729af304e236aa4c8f0ecc34e5927cb69fa45cbc70e46048ceb0c1e547dee1ae7d6c62aa1e4586fe54928eee5165bd4b5752169cf5a9e42f89d57c440ae4ce48e72fa6cea35d5871fb3066f4ef8accdac545227754f79b4f8026cad443c5cfcdef38adb915d410d742f7f10e83538fe8eff3c816147bbbc39fa94b25d5e9af71b90deb60bea2f75a4757f79dfd6d3b226baf7fd434acd9962c683538dfb08f27436a5a39b1436f57c76b7e60aa242e672701d945d911bb856d45b7e8cb9b7d1aa022098906fe473d79e9ce22cc0268ccf5c200eca62c7b450fc1c3c5581d0332be6b7a314f2362854c73660b9d1c650da5ece386a59ae9ef7cb2aa9fd4118d3dbd22a5f573105b1444af668a6e7425968ac0373fcb59dec07f53d9b5c5c06e88bcd5b925666a92de257a4a2b31cabddc515164662dfe43828e8e6ddf55d9ac4e7e7bf266f30f08e06284eb2b0d043ec23b80dadd2c37a92911b45ca87878f0b4959a0d9b174af265875ffdfafe18743a0a0319186d7f7ee79594fb3c657a68156a822aa0bb3630bff6cbe6ffae33f27925c44f975ef478db72f2c302fe3e63b450dd5e79f91d809317806840a20fd029dd641f54ebead485003e63fc4c2cc941aaba8a45bf5751d3e22db983df2f5584f0ecdc372528edf9f5a6bdaff9d9d0c7af9daaaa2a66d40d69b15829cf5037e23a2dd0b567029a21574322e75352dd6dbf7cc85be96cb56bd7098243ad26feb0ebda8dd8b1a5cdd005a1a441b0c57d933e5becd9a42220414f11fad9b9f851f25fb9093414e90ab97471402c7d2b11cbbcee4f73ebe157edd456d7e3dcc786a91398c97ff46cf2d3f1c8b178044d16b15d3e85bd03d6743827ede9423ae52f8068e2468e8f8783c126494535c9dfb6f1a66cad376df46dc38a14734c9222b5bf77812f104a9f55ca95730ff1e46c8ce9a8dc92e2e4a776740bd9e7a29dcb1939098344b361946d10c9e264bc1661cdcf627b1d3528fcc2277d013cf74fdc15a93562c0aec16b2ae18d2d438f6d7e910e82ec4d8aea2c732541fd44ab1d34fc4c672f61ef46f3fcf0659efa37ea5e878b5c94678208d66a518cd5b3dd1b71b9f47f88b2917d94f222a19ee24def1a319ed2f56384d6f8d337b9c3c46054199263653f3892f62f67201312e752e6bd3b105dd9fa5857877e572cea8cdd48d228b7b8a074f51ec5d0d4a08ee6bbf569f533cbc99e3c904f71477358432fec29d3a181946e5116e296f38c0193af02996dec661217acf91255b94b7074870077bc08430ad2db35a176fc51e7f3d9264e61342b79f8222f438fc84f70ae1d0", 0x1000}, {&(0x7f0000001100)="86a73a9cf2a9dd088286872502b9e7faec3171e5bfe53f9e470b7dd52c49a9bd7c27b938aa497d457bc684da261b7f1703b50038be4f22b21ad742ce1b36fe7c6d2c273ac7f62f7f61814f032d970e95d19c5996afcd7971480ddef9c37ba7854ef7be9436ced5b7a9ff0c1f009d4c364bf09de71f8cf78d4406b12c16d34af227baf3c98bdb4e2d8ee6773ce3a24d142011fe952f9ca2cd0e16b3cb6b32eaf653e3e9f516af1a8c5aa5fc1d030164fe83470fc5e61d421a7de22c293d2e41ae11e49924fe25e1f86e917a9f3f569cd11fd7e6e12733733e60586eb4da7649bcd957f462c95f3dbda2a8b9", 0xeb}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f0000001200)="e2da72e0323c366d5b5c66844efd4a403270f1a693ed3c34b446da75982f38baa768934c4abc77697092b2aa75b63519a4bdaec416ebb270e33dc5f2e068b4f4ac6ac6b225f6449e5dc19bd93209a5ca5ee46f9b78f3e700e12c45b62c8f3bce82e3ce4b6776486d70c27aebcc2ae98a5d357e0fc2d52cf02d2029f828218b83113938e1edd37f1385125409ee0fef14d2555323035f9be83d3fd6af1d0813805f243e1c8cfb12755de65be79cf9734c647701b14a00b054182f52dcc5cb77f33bcc", 0xc2}, {&(0x7f0000001300)="afe2f573c0db356198e74c242215a813e9f292b02222bf283c36941559aebf2beb9a1b5e4c1c1e12e68dedb3f17bec2f7f58d0cff827f2dafa5e9d436d0066b64bea", 0x42}, {&(0x7f0000004480)="ee606b52fe2c7e6b543e38c8fda2eb88a7f75aa7f5e0621b557e8e79", 0x1c}], 0x7, &(0x7f0000004540)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}], 0x60}}], 0x4, 0x1000c000) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) openat(r2, &(0x7f0000004700)='./file0\x00', 0x420000, 0x0) 19:41:45 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x600}}], 0x1, 0x0, 0x0) [ 777.787883][T26921] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 777.795836][T26921] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 777.803829][T26921] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.811779][T26921] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 777.819745][T26921] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 777.827710][T26921] 19:41:45 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x7a00000000000000}}, {@dmode}]}) 19:41:45 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x500}}], 0x1, 0x0, 0x0) 19:41:45 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x700}}], 0x1, 0x0, 0x0) 19:41:45 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x400) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000080)) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') preadv(r1, &(0x7f0000000040), 0x0, 0xd00, 0x0) unshare(0x10000200) 19:41:45 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xa00}}], 0x1, 0x0, 0x0) 19:41:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 57) 19:41:45 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)={{r8, 0x3, 0x1ff, 0x7, 0x3, 0xffffffffffffff01, 0x3, 0x3, 0x1, 0xfffffffb, 0x3, 0x42f, 0x67, 0x4, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240), 0x4) preadv(r10, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 777.965002][ C1] sd 0:0:1:0: tag#8175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 777.975057][ C1] sd 0:0:1:0: tag#8175 CDB: opcode=0xe5 (vendor) [ 777.981584][ C1] sd 0:0:1:0: tag#8175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 777.990613][ C1] sd 0:0:1:0: tag#8175 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 777.999763][ C1] sd 0:0:1:0: tag#8175 CDB[20]: ba [ 778.013735][T27267] FAULT_INJECTION: forcing a failure. [ 778.013735][T27267] name failslab, interval 1, probability 0, space 0, times 0 [ 778.026426][T27267] CPU: 0 PID: 27267 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 778.036575][T27267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.046707][T27267] Call Trace: [ 778.050046][T27267] [ 778.053000][T27267] dump_stack_lvl+0xd6/0x122 [ 778.057596][T27267] dump_stack+0x11/0x1b [ 778.061770][T27267] should_fail+0x23c/0x250 [ 778.066184][T27267] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 778.071470][T27267] __should_failslab+0x81/0x90 [ 778.076241][T27267] should_failslab+0x5/0x20 [ 778.080798][T27267] kmem_cache_alloc+0x4f/0x320 [ 778.085613][T27267] ext4_mb_new_blocks+0x328/0x1ee0 [ 778.090777][T27267] ? bpf_trace_printk+0xe0/0x1c0 [ 778.095709][T27267] ? ext4_get_branch+0x28e/0x2e0 [ 778.100764][T27267] ext4_ind_map_blocks+0xb1c/0x1740 [ 778.106045][T27267] ext4_map_blocks+0x6e3/0xf00 [ 778.110846][T27267] ext4_iomap_begin+0x4b0/0x630 [ 778.115700][T27267] ? ext4_alloc_da_blocks+0x100/0x100 [ 778.121260][T27267] iomap_iter+0x395/0x4a0 [ 778.125593][T27267] __iomap_dio_rw+0x695/0x1070 [ 778.130359][T27267] ? _raw_spin_lock_irq+0x41/0x50 [ 778.135387][T27267] iomap_dio_rw+0x38/0x80 [ 778.139847][T27267] ? ext4_file_write_iter+0x461/0x1200 [ 778.145366][T27267] ext4_file_write_iter+0xac3/0x1200 [ 778.150706][T27267] ? ext4_file_write_iter+0x461/0x1200 [ 778.156285][T27267] do_iter_readv_writev+0x2de/0x380 [ 778.161479][T27267] do_iter_write+0x192/0x5c0 [ 778.166251][T27267] ? splice_from_pipe_next+0x34f/0x3b0 [ 778.171721][T27267] ? kmalloc_array+0x2d/0x40 [ 778.176379][T27267] vfs_iter_write+0x4c/0x70 [ 778.180880][T27267] iter_file_splice_write+0x43a/0x790 [ 778.186255][T27267] ? splice_from_pipe+0xd0/0xd0 [ 778.191162][T27267] direct_splice_actor+0x80/0xa0 [ 778.196105][T27267] splice_direct_to_actor+0x345/0x650 [ 778.201662][T27267] ? do_splice_direct+0x190/0x190 [ 778.206730][T27267] do_splice_direct+0x106/0x190 [ 778.211599][T27267] do_sendfile+0x675/0xc40 [ 778.216015][T27267] __x64_sys_sendfile64+0x102/0x140 [ 778.221294][T27267] do_syscall_64+0x44/0xd0 [ 778.225799][T27267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.231717][T27267] RIP: 0033:0x7f34f8a1cae9 [ 778.236121][T27267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.255888][T27267] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 778.264355][T27267] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 778.272329][T27267] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 778.280342][T27267] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.288324][T27267] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 778.296308][T27267] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 778.304281][T27267] 19:41:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:46 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc00}}], 0x1, 0x0, 0x0) 19:41:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="bcb56cd787555ec00bd3201f7d00bbfaa2768688d8bab3ca09d3a675b2d179d12051494d621a079340a697624841b1eee2f0ecc70532000000000000000000"], &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:46 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)={{r8, 0x3, 0x1ff, 0x7, 0x3, 0xffffffffffffff01, 0x3, 0x3, 0x1, 0xfffffffb, 0x3, 0x42f, 0x67, 0x4, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240), 0x4) preadv(r10, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:46 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x7fffffffffffffff}}, {@dmode}]}) 19:41:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 58) 19:41:46 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xec0}}], 0x1, 0x0, 0x0) [ 778.363437][ C0] sd 0:0:1:0: tag#8191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 778.373320][ C0] sd 0:0:1:0: tag#8191 CDB: opcode=0xe5 (vendor) [ 778.379701][ C0] sd 0:0:1:0: tag#8191 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 778.388756][ C0] sd 0:0:1:0: tag#8191 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 778.397902][ C0] sd 0:0:1:0: tag#8191 CDB[20]: ba 19:41:46 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {r3, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x1, "2156816c73038c"}) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)={{r8, 0x3, 0x1ff, 0x7, 0x3, 0xffffffffffffff01, 0x3, 0x3, 0x1, 0xfffffffb, 0x3, 0x42f, 0x67, 0x4, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000240), 0x4) preadv(r10, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:46 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xf00}}], 0x1, 0x0, 0x0) 19:41:46 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) [ 778.409458][ C1] sd 0:0:1:0: tag#8128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 778.419313][ C1] sd 0:0:1:0: tag#8128 CDB: opcode=0xe5 (vendor) [ 778.425645][ C1] sd 0:0:1:0: tag#8128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 778.434723][ C1] sd 0:0:1:0: tag#8128 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 778.443793][ C1] sd 0:0:1:0: tag#8128 CDB[20]: ba 19:41:46 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x104a}}], 0x1, 0x0, 0x0) 19:41:46 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4788}}], 0x1, 0x0, 0x0) [ 778.551795][T27359] FAULT_INJECTION: forcing a failure. [ 778.551795][T27359] name failslab, interval 1, probability 0, space 0, times 0 [ 778.564494][T27359] CPU: 1 PID: 27359 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 778.574645][T27359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.584696][T27359] Call Trace: [ 778.587969][T27359] [ 778.590888][T27359] dump_stack_lvl+0xd6/0x122 [ 778.595559][T27359] dump_stack+0x11/0x1b [ 778.599711][T27359] should_fail+0x23c/0x250 [ 778.604144][T27359] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 778.609491][T27359] __should_failslab+0x81/0x90 [ 778.614356][T27359] should_failslab+0x5/0x20 [ 778.618925][T27359] kmem_cache_alloc+0x4f/0x320 [ 778.623692][T27359] ext4_mb_new_blocks+0x328/0x1ee0 [ 778.628836][T27359] ? bpf_trace_printk+0xe0/0x1c0 [ 778.633782][T27359] ? ext4_get_branch+0x28e/0x2e0 [ 778.638753][T27359] ext4_ind_map_blocks+0xb1c/0x1740 [ 778.643960][T27359] ext4_map_blocks+0x6e3/0xf00 [ 778.648727][T27359] ext4_iomap_begin+0x4b0/0x630 [ 778.653668][T27359] ? ext4_alloc_da_blocks+0x100/0x100 [ 778.659042][T27359] iomap_iter+0x395/0x4a0 [ 778.663381][T27359] __iomap_dio_rw+0x695/0x1070 [ 778.668282][T27359] iomap_dio_rw+0x38/0x80 [ 778.672640][T27359] ? ext4_file_write_iter+0x461/0x1200 [ 778.678100][T27359] ext4_file_write_iter+0xac3/0x1200 [ 778.683464][T27359] ? ext4_file_write_iter+0x461/0x1200 [ 778.688931][T27359] do_iter_readv_writev+0x2de/0x380 [ 778.694154][T27359] do_iter_write+0x192/0x5c0 [ 778.698802][T27359] ? splice_from_pipe_next+0x34f/0x3b0 [ 778.704410][T27359] ? kmalloc_array+0x2d/0x40 [ 778.708996][T27359] vfs_iter_write+0x4c/0x70 [ 778.713568][T27359] iter_file_splice_write+0x43a/0x790 [ 778.718974][T27359] ? splice_from_pipe+0xd0/0xd0 [ 778.723936][T27359] direct_splice_actor+0x80/0xa0 [ 778.728934][T27359] splice_direct_to_actor+0x345/0x650 [ 778.734302][T27359] ? do_splice_direct+0x190/0x190 [ 778.739324][T27359] do_splice_direct+0x106/0x190 [ 778.744180][T27359] do_sendfile+0x675/0xc40 [ 778.748694][T27359] __x64_sys_sendfile64+0x102/0x140 [ 778.753982][T27359] do_syscall_64+0x44/0xd0 [ 778.758469][T27359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 778.764374][T27359] RIP: 0033:0x7f34f8a1cae9 [ 778.768777][T27359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 778.788660][T27359] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 778.797172][T27359] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 778.805902][T27359] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 778.813894][T27359] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 778.821862][T27359] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 778.829833][T27359] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 778.837824][T27359] 19:41:47 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xb00801, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f00000004c0)=""/150, 0x96}], 0x2, 0x4a, 0x401) 19:41:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x8a, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0xd0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x7, 0x0) move_mount(r0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x32) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='./file0'], &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xb80430, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xaa, 0x200) mount(&(0x7f0000000080), &(0x7f00000001c0)='.', 0x0, 0x5110, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0xd00, 0x0) 19:41:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 59) 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4888}}], 0x1, 0x0, 0x0) 19:41:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x8051010000000000}}, {@dmode}]}) 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4a10}}], 0x1, 0x0, 0x0) [ 779.250271][T27592] FAULT_INJECTION: forcing a failure. [ 779.250271][T27592] name failslab, interval 1, probability 0, space 0, times 0 [ 779.262989][T27592] CPU: 1 PID: 27592 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 779.273247][T27592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.283294][T27592] Call Trace: [ 779.286571][T27592] [ 779.289505][T27592] dump_stack_lvl+0xd6/0x122 [ 779.294104][T27592] dump_stack+0x11/0x1b [ 779.298291][T27592] should_fail+0x23c/0x250 [ 779.302714][T27592] ? ext4_mb_new_blocks+0x73e/0x1ee0 [ 779.308067][T27592] __should_failslab+0x81/0x90 [ 779.312835][T27592] should_failslab+0x5/0x20 [ 779.317412][T27592] kmem_cache_alloc+0x4f/0x320 [ 779.322246][T27592] ext4_mb_new_blocks+0x73e/0x1ee0 [ 779.327373][T27592] ? bpf_trace_printk+0xe0/0x1c0 [ 779.332299][T27592] ? ext4_get_branch+0x28e/0x2e0 [ 779.337231][T27592] ext4_ind_map_blocks+0xb1c/0x1740 [ 779.342522][T27592] ext4_map_blocks+0x6e3/0xf00 [ 779.347279][T27592] ext4_iomap_begin+0x4b0/0x630 [ 779.352180][T27592] ? ext4_alloc_da_blocks+0x100/0x100 [ 779.357539][T27592] iomap_iter+0x395/0x4a0 [ 779.361866][T27592] __iomap_dio_rw+0x695/0x1070 [ 779.366664][T27592] ? _raw_spin_lock_irq+0x41/0x50 [ 779.371694][T27592] iomap_dio_rw+0x38/0x80 [ 779.376146][T27592] ? ext4_file_write_iter+0x461/0x1200 [ 779.381620][T27592] ext4_file_write_iter+0xac3/0x1200 [ 779.386934][T27592] ? ext4_file_write_iter+0x461/0x1200 [ 779.392776][T27592] do_iter_readv_writev+0x2de/0x380 [ 779.398021][T27592] do_iter_write+0x192/0x5c0 [ 779.402600][T27592] ? splice_from_pipe_next+0x34f/0x3b0 [ 779.408046][T27592] vfs_iter_write+0x4c/0x70 [ 779.412703][T27592] iter_file_splice_write+0x43a/0x790 [ 779.418072][T27592] ? splice_from_pipe+0xd0/0xd0 [ 779.422914][T27592] direct_splice_actor+0x80/0xa0 [ 779.427879][T27592] splice_direct_to_actor+0x345/0x650 [ 779.433241][T27592] ? do_splice_direct+0x190/0x190 [ 779.438268][T27592] do_splice_direct+0x106/0x190 [ 779.443113][T27592] do_sendfile+0x675/0xc40 [ 779.447515][T27592] __x64_sys_sendfile64+0x102/0x140 [ 779.452767][T27592] do_syscall_64+0x44/0xd0 [ 779.457282][T27592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 779.463218][T27592] RIP: 0033:0x7f34f8a1cae9 [ 779.467618][T27592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 779.487207][T27592] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:47 executing program 4: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x8847, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x5865}}], 0x1, 0x0, 0x0) 19:41:47 executing program 1: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x700, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x6000}}], 0x1, 0x0, 0x0) [ 779.495614][T27592] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 779.503583][T27592] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 779.511539][T27592] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.519495][T27592] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 779.527620][T27592] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 779.535659][T27592] 19:41:47 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 1) 19:41:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 1) 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x6558}}], 0x1, 0x0, 0x0) [ 779.617693][T27710] FAULT_INJECTION: forcing a failure. [ 779.617693][T27710] name failslab, interval 1, probability 0, space 0, times 0 [ 779.630417][T27710] CPU: 1 PID: 27710 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 779.640564][T27710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.650609][T27710] Call Trace: [ 779.653881][T27710] [ 779.656835][T27710] dump_stack_lvl+0xd6/0x122 [ 779.661426][T27710] dump_stack+0x11/0x1b [ 779.665574][T27710] should_fail+0x23c/0x250 [ 779.669989][T27710] ? alloc_pipe_info+0xac/0x350 [ 779.674840][T27710] __should_failslab+0x81/0x90 [ 779.679608][T27710] should_failslab+0x5/0x20 [ 779.684178][T27710] kmem_cache_alloc_trace+0x52/0x350 [ 779.689528][T27710] alloc_pipe_info+0xac/0x350 [ 779.694278][T27710] splice_direct_to_actor+0x5f7/0x650 [ 779.699696][T27710] ? security_file_permission+0x7c/0xa0 [ 779.705245][T27710] ? do_splice_direct+0x190/0x190 [ 779.710270][T27710] ? security_file_permission+0x87/0xa0 19:41:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 60) [ 779.715815][T27710] do_splice_direct+0x106/0x190 [ 779.720795][T27710] do_sendfile+0x675/0xc40 [ 779.725226][T27710] __x64_sys_sendfile64+0x102/0x140 [ 779.730446][T27710] do_syscall_64+0x44/0xd0 [ 779.734954][T27710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 779.740851][T27710] RIP: 0033:0x7fca50b35ae9 [ 779.745269][T27710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:41:47 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x8100}}], 0x1, 0x0, 0x0) [ 779.764939][T27710] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 779.773480][T27710] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 779.781527][T27710] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 779.789679][T27710] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 779.797726][T27710] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 779.805688][T27710] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 779.813655][T27710] [ 779.834598][T27716] FAULT_INJECTION: forcing a failure. [ 779.834598][T27716] name failslab, interval 1, probability 0, space 0, times 0 [ 779.847322][T27716] CPU: 0 PID: 27716 Comm: syz-executor.0 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 779.857634][T27716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.867696][T27716] Call Trace: [ 779.870972][T27716] [ 779.873917][T27716] dump_stack_lvl+0xd6/0x122 [ 779.878525][T27716] dump_stack+0x11/0x1b [ 779.882768][T27716] should_fail+0x23c/0x250 [ 779.887179][T27716] ? mempool_alloc_slab+0x16/0x20 [ 779.892214][T27716] __should_failslab+0x81/0x90 [ 779.896982][T27716] should_failslab+0x5/0x20 [ 779.901487][T27716] kmem_cache_alloc+0x4f/0x320 [ 779.906287][T27716] mempool_alloc_slab+0x16/0x20 [ 779.911161][T27716] ? mempool_free+0x130/0x130 [ 779.915832][T27716] mempool_alloc+0x9d/0x310 [ 779.920335][T27716] ? preempt_count_add+0x4e/0x90 [ 779.925271][T27716] ? _raw_read_unlock+0x13/0x30 [ 779.930115][T27716] ? jbd2_transaction_committed+0xad/0xc0 [ 779.935835][T27716] bio_alloc_bioset+0xcc/0x560 [ 779.940644][T27716] ? iov_iter_alignment+0x34b/0x370 [ 779.945843][T27716] iomap_dio_bio_iter+0x5ed/0xc70 [ 779.950864][T27716] ? ext4_alloc_da_blocks+0x100/0x100 [ 779.956304][T27716] __iomap_dio_rw+0x8b5/0x1070 [ 779.961135][T27716] iomap_dio_rw+0x38/0x80 [ 779.965496][T27716] ? ext4_file_write_iter+0x461/0x1200 [ 779.970958][T27716] ext4_file_write_iter+0xac3/0x1200 [ 779.976242][T27716] ? ext4_file_write_iter+0x461/0x1200 [ 779.981758][T27716] do_iter_readv_writev+0x2de/0x380 [ 779.987041][T27716] do_iter_write+0x192/0x5c0 [ 779.991667][T27716] ? splice_from_pipe_next+0x34f/0x3b0 [ 779.997297][T27716] ? kmalloc_array+0x2d/0x40 [ 780.001957][T27716] vfs_iter_write+0x4c/0x70 [ 780.006462][T27716] iter_file_splice_write+0x43a/0x790 [ 780.011845][T27716] ? splice_from_pipe+0xd0/0xd0 [ 780.016699][T27716] direct_splice_actor+0x80/0xa0 [ 780.021797][T27716] splice_direct_to_actor+0x345/0x650 [ 780.027170][T27716] ? do_splice_direct+0x190/0x190 [ 780.032194][T27716] do_splice_direct+0x106/0x190 [ 780.037089][T27716] do_sendfile+0x675/0xc40 [ 780.041505][T27716] __x64_sys_sendfile64+0x102/0x140 [ 780.046699][T27716] do_syscall_64+0x44/0xd0 [ 780.051126][T27716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.057039][T27716] RIP: 0033:0x7f34f8a1cae9 [ 780.061449][T27716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.081136][T27716] RSP: 002b:00007f34f8193188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 780.089549][T27716] RAX: ffffffffffffffda RBX: 00007f34f8b2ff60 RCX: 00007f34f8a1cae9 [ 780.097572][T27716] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 780.105538][T27716] RBP: 00007f34f81931d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.113579][T27716] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 780.121548][T27716] R13: 00007ffeb2e3e92f R14: 00007f34f8193300 R15: 0000000000022000 [ 780.129569][T27716] 19:41:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:48 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 2) 19:41:48 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:41:48 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x8847}}], 0x1, 0x0, 0x0) 19:41:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x85ffffff00000000}}, {@dmode}]}) 19:41:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) (fail_nth: 61) 19:41:48 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x8848}}], 0x1, 0x0, 0x0) [ 780.424482][T27823] FAULT_INJECTION: forcing a failure. [ 780.424482][T27823] name failslab, interval 1, probability 0, space 0, times 0 [ 780.437267][T27823] CPU: 1 PID: 27823 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 780.447419][T27823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.457475][T27823] Call Trace: [ 780.460879][T27823] [ 780.463803][T27823] dump_stack_lvl+0xd6/0x122 [ 780.468488][T27823] dump_stack+0x11/0x1b [ 780.472645][T27823] should_fail+0x23c/0x250 [ 780.477091][T27823] ? kcalloc+0x32/0x40 [ 780.481173][T27823] __should_failslab+0x81/0x90 [ 780.485963][T27823] should_failslab+0x5/0x20 [ 780.490521][T27823] __kmalloc+0x6f/0x370 [ 780.494674][T27823] ? kmem_cache_alloc_trace+0x32c/0x350 [ 780.500224][T27823] kcalloc+0x32/0x40 [ 780.504215][T27823] alloc_pipe_info+0x1be/0x350 [ 780.509031][T27823] splice_direct_to_actor+0x5f7/0x650 [ 780.514409][T27823] ? security_file_permission+0x7c/0xa0 [ 780.519974][T27823] ? do_splice_direct+0x190/0x190 [ 780.524998][T27823] ? security_file_permission+0x87/0xa0 [ 780.530619][T27823] do_splice_direct+0x106/0x190 [ 780.535498][T27823] do_sendfile+0x675/0xc40 [ 780.540064][T27823] __x64_sys_sendfile64+0x102/0x140 [ 780.545265][T27823] do_syscall_64+0x44/0xd0 [ 780.549708][T27823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.555611][T27823] RIP: 0033:0x7fca50b35ae9 19:41:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002800) [ 780.560019][T27823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.579701][T27823] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 780.588196][T27823] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 780.596172][T27823] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 780.604138][T27823] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 780.612207][T27823] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 19:41:48 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 3) [ 780.620217][T27823] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 780.628202][T27823] [ 780.667274][T27940] FAULT_INJECTION: forcing a failure. [ 780.667274][T27940] name failslab, interval 1, probability 0, space 0, times 0 [ 780.680021][T27940] CPU: 1 PID: 27940 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 780.690168][T27940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.700229][T27940] Call Trace: [ 780.703607][T27940] [ 780.706556][T27940] dump_stack_lvl+0xd6/0x122 [ 780.711226][T27940] dump_stack+0x11/0x1b [ 780.715465][T27940] should_fail+0x23c/0x250 [ 780.719940][T27940] ? kmalloc_array+0x2d/0x40 [ 780.724608][T27940] __should_failslab+0x81/0x90 [ 780.729385][T27940] should_failslab+0x5/0x20 [ 780.733950][T27940] __kmalloc+0x6f/0x370 [ 780.738106][T27940] kmalloc_array+0x2d/0x40 [ 780.742516][T27940] iter_file_splice_write+0xd5/0x790 [ 780.747797][T27940] ? atime_needs_update+0x2ba/0x390 [ 780.753006][T27940] ? touch_atime+0x11f/0x2e0 [ 780.757597][T27940] ? generic_file_splice_read+0x2a9/0x330 [ 780.763323][T27940] ? splice_from_pipe+0xd0/0xd0 [ 780.768206][T27940] direct_splice_actor+0x80/0xa0 [ 780.773146][T27940] splice_direct_to_actor+0x345/0x650 [ 780.778550][T27940] ? do_splice_direct+0x190/0x190 [ 780.783589][T27940] do_splice_direct+0x106/0x190 [ 780.788437][T27940] do_sendfile+0x675/0xc40 [ 780.792860][T27940] __x64_sys_sendfile64+0x102/0x140 [ 780.798109][T27940] do_syscall_64+0x44/0xd0 [ 780.802613][T27940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 780.808522][T27940] RIP: 0033:0x7fca50b35ae9 [ 780.812929][T27940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 780.832645][T27940] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 780.841058][T27940] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 780.849027][T27940] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 780.856997][T27940] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:41:48 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc00e}}], 0x1, 0x0, 0x0) 19:41:48 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x8cffffff00000000}}, {@dmode}]}) 19:41:48 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 4) [ 780.865031][T27940] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 780.873125][T27940] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 780.881163][T27940] [ 780.961420][T27947] FAULT_INJECTION: forcing a failure. [ 780.961420][T27947] name failslab, interval 1, probability 0, space 0, times 0 [ 780.974188][T27947] CPU: 0 PID: 27947 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 780.984520][T27947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.994571][T27947] Call Trace: [ 780.997898][T27947] [ 781.000823][T27947] dump_stack_lvl+0xd6/0x122 [ 781.005498][T27947] dump_stack+0x11/0x1b [ 781.009708][T27947] should_fail+0x23c/0x250 [ 781.014119][T27947] ? jbd2__journal_start+0xf7/0x3f0 [ 781.019332][T27947] __should_failslab+0x81/0x90 [ 781.024144][T27947] should_failslab+0x5/0x20 [ 781.028645][T27947] kmem_cache_alloc+0x4f/0x320 [ 781.033411][T27947] ? trace_event_raw_event_bpf_trace_printk+0xe0/0x180 [ 781.040276][T27947] jbd2__journal_start+0xf7/0x3f0 [ 781.045355][T27947] __ext4_journal_start_sb+0x159/0x310 [ 781.050899][T27947] ? ext4_expand_extra_isize+0x560/0x560 [ 781.056618][T27947] ext4_dirty_inode+0x58/0xa0 [ 781.061302][T27947] __mark_inode_dirty+0x72/0x6c0 [ 781.066239][T27947] ? ktime_get_coarse_real_ts64+0x10d/0x120 [ 781.072134][T27947] inode_update_time+0x1b4/0x1d0 [ 781.077072][T27947] file_update_time+0x1f3/0x230 [ 781.082067][T27947] file_modified+0x62/0x80 [ 781.086568][T27947] ext4_file_write_iter+0x795/0x1200 [ 781.091854][T27947] ? ext4_file_write_iter+0x461/0x1200 [ 781.097315][T27947] ? save_fpregs_to_fpstate+0xf5/0x140 [ 781.102812][T27947] do_iter_readv_writev+0x2de/0x380 [ 781.108110][T27947] do_iter_write+0x192/0x5c0 [ 781.112705][T27947] ? splice_from_pipe_next+0x34f/0x3b0 [ 781.118168][T27947] ? kmalloc_array+0x2d/0x40 [ 781.122776][T27947] vfs_iter_write+0x4c/0x70 [ 781.127365][T27947] iter_file_splice_write+0x43a/0x790 [ 781.132831][T27947] ? splice_from_pipe+0xd0/0xd0 [ 781.137673][T27947] direct_splice_actor+0x80/0xa0 [ 781.142612][T27947] splice_direct_to_actor+0x345/0x650 [ 781.148058][T27947] ? do_splice_direct+0x190/0x190 [ 781.153150][T27947] do_splice_direct+0x106/0x190 [ 781.158029][T27947] do_sendfile+0x675/0xc40 [ 781.162440][T27947] __x64_sys_sendfile64+0x102/0x140 [ 781.167642][T27947] do_syscall_64+0x44/0xd0 [ 781.172058][T27947] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.177983][T27947] RIP: 0033:0x7fca50b35ae9 [ 781.182466][T27947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.202069][T27947] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) [ 781.210573][T27947] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 781.218582][T27947] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 781.226554][T27947] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.234517][T27947] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 781.242489][T27947] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 781.250572][T27947] 19:41:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) 19:41:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x9214000000000000}}, {@dmode}]}) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x3000000}}], 0x1, 0x0, 0x0) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4000000}}], 0x1, 0x0, 0x0) [ 781.348927][ C1] scsi_io_completion_action: 3 callbacks suppressed [ 781.348977][ C1] sd 0:0:1:0: tag#8175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 781.365484][ C1] sd 0:0:1:0: tag#8175 CDB: opcode=0xe5 (vendor) [ 781.371839][ C1] sd 0:0:1:0: tag#8175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 781.380894][ C1] sd 0:0:1:0: tag#8175 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 781.389962][ C1] sd 0:0:1:0: tag#8175 CDB[20]: ba 19:41:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x5000000}}], 0x1, 0x0, 0x0) 19:41:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x97ffffff00000000}}, {@dmode}]}) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x6000000}}], 0x1, 0x0, 0x0) 19:41:49 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 5) [ 781.753726][T27977] FAULT_INJECTION: forcing a failure. [ 781.753726][T27977] name failslab, interval 1, probability 0, space 0, times 0 [ 781.766461][T27977] CPU: 0 PID: 27977 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 781.776619][T27977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.786665][T27977] Call Trace: [ 781.790011][T27977] [ 781.792934][T27977] dump_stack_lvl+0xd6/0x122 [ 781.797563][T27977] dump_stack+0x11/0x1b [ 781.801720][T27977] should_fail+0x23c/0x250 [ 781.806179][T27977] ? jbd2__journal_start+0xf7/0x3f0 [ 781.811376][T27977] __should_failslab+0x81/0x90 [ 781.816174][T27977] should_failslab+0x5/0x20 [ 781.820696][T27977] kmem_cache_alloc+0x4f/0x320 [ 781.825458][T27977] jbd2__journal_start+0xf7/0x3f0 [ 781.830483][T27977] __ext4_journal_start_sb+0x159/0x310 [ 781.836029][T27977] ? ext4_file_write_iter+0x461/0x1200 [ 781.841485][T27977] ext4_file_write_iter+0x992/0x1200 [ 781.846783][T27977] ? ext4_file_write_iter+0x461/0x1200 [ 781.852246][T27977] do_iter_readv_writev+0x2de/0x380 [ 781.857443][T27977] do_iter_write+0x192/0x5c0 [ 781.862045][T27977] ? splice_from_pipe_next+0x34f/0x3b0 [ 781.867503][T27977] ? kmalloc_array+0x2d/0x40 [ 781.872107][T27977] vfs_iter_write+0x4c/0x70 [ 781.876611][T27977] iter_file_splice_write+0x43a/0x790 [ 781.881997][T27977] ? splice_from_pipe+0xd0/0xd0 [ 781.886840][T27977] direct_splice_actor+0x80/0xa0 [ 781.891819][T27977] splice_direct_to_actor+0x345/0x650 [ 781.897199][T27977] ? do_splice_direct+0x190/0x190 [ 781.902294][T27977] do_splice_direct+0x106/0x190 [ 781.907147][T27977] do_sendfile+0x675/0xc40 [ 781.911580][T27977] __x64_sys_sendfile64+0x102/0x140 [ 781.916793][T27977] do_syscall_64+0x44/0xd0 [ 781.921246][T27977] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 781.927154][T27977] RIP: 0033:0x7fca50b35ae9 [ 781.931563][T27977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 781.951266][T27977] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 781.959683][T27977] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 781.967651][T27977] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 781.975643][T27977] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 781.983697][T27977] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 781.991664][T27977] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 781.999668][T27977] 19:41:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:49 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x7000000}}], 0x1, 0x0, 0x0) 19:41:49 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0x9d05000000000000}}, {@dmode}]}) 19:41:49 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 6) 19:41:49 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80000002) 19:41:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000002) [ 782.193674][T28187] FAULT_INJECTION: forcing a failure. [ 782.193674][T28187] name failslab, interval 1, probability 0, space 0, times 0 [ 782.206479][T28187] CPU: 1 PID: 28187 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 782.216706][T28187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.226755][T28187] Call Trace: [ 782.230031][T28187] [ 782.231272][ C0] sd 0:0:1:0: tag#8144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 782.232954][T28187] dump_stack_lvl+0xd6/0x122 [ 782.242814][ C0] sd 0:0:1:0: tag#8144 CDB: opcode=0xe5 (vendor) [ 782.247333][T28187] dump_stack+0x11/0x1b [ 782.247358][T28187] should_fail+0x23c/0x250 [ 782.247375][T28187] ? jbd2__journal_start+0xf7/0x3f0 [ 782.253685][ C0] sd 0:0:1:0: tag#8144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 782.257810][T28187] __should_failslab+0x81/0x90 [ 782.257839][T28187] should_failslab+0x5/0x20 19:41:50 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x8000000}}], 0x1, 0x0, 0x0) [ 782.262246][ C0] sd 0:0:1:0: tag#8144 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 782.262263][ C0] sd 0:0:1:0: tag#8144 CDB[20]: ba [ 782.299907][T28187] kmem_cache_alloc+0x4f/0x320 [ 782.304713][T28187] jbd2__journal_start+0xf7/0x3f0 [ 782.309732][T28187] __ext4_journal_start_sb+0x159/0x310 [ 782.315276][T28187] ext4_iomap_begin+0x408/0x630 [ 782.320200][T28187] ? ext4_alloc_da_blocks+0x100/0x100 [ 782.325685][T28187] iomap_iter+0x395/0x4a0 [ 782.330069][T28187] __iomap_dio_rw+0x695/0x1070 [ 782.334832][T28187] ? _raw_spin_lock_irq+0x41/0x50 [ 782.339858][T28187] iomap_dio_rw+0x38/0x80 [ 782.344255][T28187] ? ext4_file_write_iter+0x461/0x1200 [ 782.349713][T28187] ext4_file_write_iter+0xac3/0x1200 [ 782.355057][T28187] ? ext4_file_write_iter+0x461/0x1200 [ 782.360553][T28187] do_iter_readv_writev+0x2de/0x380 [ 782.365747][T28187] do_iter_write+0x192/0x5c0 [ 782.370414][T28187] ? splice_from_pipe_next+0x34f/0x3b0 [ 782.375868][T28187] ? kmalloc_array+0x2d/0x40 [ 782.380461][T28187] vfs_iter_write+0x4c/0x70 [ 782.385017][T28187] iter_file_splice_write+0x43a/0x790 [ 782.390390][T28187] ? splice_from_pipe+0xd0/0xd0 [ 782.395287][T28187] direct_splice_actor+0x80/0xa0 [ 782.400287][T28187] splice_direct_to_actor+0x345/0x650 [ 782.405656][T28187] ? do_splice_direct+0x190/0x190 [ 782.410759][T28187] do_splice_direct+0x106/0x190 [ 782.415681][T28187] do_sendfile+0x675/0xc40 [ 782.420092][T28187] __x64_sys_sendfile64+0x102/0x140 [ 782.425366][T28187] do_syscall_64+0x44/0xd0 [ 782.429809][T28187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.435702][T28187] RIP: 0033:0x7fca50b35ae9 [ 782.440181][T28187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.460011][T28187] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 782.468485][T28187] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 782.476457][T28187] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 782.484525][T28187] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:41:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000004) 19:41:50 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xa000000}}], 0x1, 0x0, 0x0) [ 782.492592][T28187] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 782.500562][T28187] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 782.508532][T28187] 19:41:50 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc000000}}], 0x1, 0x0, 0x0) 19:41:50 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 7) 19:41:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xb803000000000000}}, {@dmode}]}) [ 782.612668][T28303] FAULT_INJECTION: forcing a failure. [ 782.612668][T28303] name failslab, interval 1, probability 0, space 0, times 0 [ 782.625440][T28303] CPU: 1 PID: 28303 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 782.635595][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.645649][T28303] Call Trace: [ 782.648958][T28303] [ 782.651875][T28303] dump_stack_lvl+0xd6/0x122 [ 782.656552][T28303] dump_stack+0x11/0x1b [ 782.660699][T28303] should_fail+0x23c/0x250 [ 782.665179][T28303] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 782.670514][T28303] __should_failslab+0x81/0x90 [ 782.675331][T28303] should_failslab+0x5/0x20 [ 782.680001][T28303] kmem_cache_alloc+0x4f/0x320 [ 782.684756][T28303] ext4_mb_new_blocks+0x328/0x1ee0 [ 782.689863][T28303] ? bpf_bprintf_cleanup+0x44/0x60 [ 782.694993][T28303] ? bpf_trace_printk+0xe0/0x1c0 [ 782.699970][T28303] ? ext4_get_branch+0x27d/0x2e0 [ 782.704934][T28303] ? ext4_inode_to_goal_block+0x1bd/0x1d0 [ 782.710648][T28303] ext4_ind_map_blocks+0xb1c/0x1740 [ 782.715918][T28303] ext4_map_blocks+0x6e3/0xf00 [ 782.720735][T28303] ext4_iomap_begin+0x4b0/0x630 [ 782.725577][T28303] ? ext4_alloc_da_blocks+0x100/0x100 [ 782.730938][T28303] iomap_iter+0x395/0x4a0 [ 782.735256][T28303] __iomap_dio_rw+0x695/0x1070 [ 782.740013][T28303] iomap_dio_rw+0x38/0x80 [ 782.744329][T28303] ? ext4_file_write_iter+0x461/0x1200 [ 782.749789][T28303] ext4_file_write_iter+0xac3/0x1200 [ 782.755101][T28303] ? ext4_file_write_iter+0x461/0x1200 [ 782.760548][T28303] do_iter_readv_writev+0x2de/0x380 [ 782.765733][T28303] do_iter_write+0x192/0x5c0 [ 782.770329][T28303] ? splice_from_pipe_next+0x34f/0x3b0 [ 782.775780][T28303] ? kmalloc_array+0x2d/0x40 [ 782.780379][T28303] vfs_iter_write+0x4c/0x70 [ 782.784872][T28303] iter_file_splice_write+0x43a/0x790 [ 782.790348][T28303] ? splice_from_pipe+0xd0/0xd0 [ 782.795181][T28303] direct_splice_actor+0x80/0xa0 [ 782.800120][T28303] splice_direct_to_actor+0x345/0x650 [ 782.805541][T28303] ? do_splice_direct+0x190/0x190 [ 782.810551][T28303] do_splice_direct+0x106/0x190 [ 782.815387][T28303] do_sendfile+0x675/0xc40 [ 782.819822][T28303] __x64_sys_sendfile64+0x102/0x140 [ 782.825095][T28303] do_syscall_64+0x44/0xd0 [ 782.829497][T28303] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 782.835384][T28303] RIP: 0033:0x7fca50b35ae9 [ 782.839858][T28303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 782.859450][T28303] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 782.867846][T28303] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 782.875881][T28303] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 782.883871][T28303] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 782.891922][T28303] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 782.899876][T28303] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 782.907844][T28303] 19:41:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:50 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xf000000}}], 0x1, 0x0, 0x0) 19:41:50 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 8) 19:41:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xb903000000000000}}, {@dmode}]}) [ 783.104595][T28376] FAULT_INJECTION: forcing a failure. [ 783.104595][T28376] name failslab, interval 1, probability 0, space 0, times 0 [ 783.117448][T28376] CPU: 0 PID: 28376 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 783.127614][T28376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.137680][T28376] Call Trace: [ 783.140954][T28376] [ 783.143893][T28376] dump_stack_lvl+0xd6/0x122 [ 783.148485][T28376] dump_stack+0x11/0x1b [ 783.152645][T28376] should_fail+0x23c/0x250 [ 783.157134][T28376] ? __es_insert_extent+0x546/0xe80 [ 783.162334][T28376] __should_failslab+0x81/0x90 [ 783.167112][T28376] should_failslab+0x5/0x20 [ 783.171715][T28376] kmem_cache_alloc+0x4f/0x320 [ 783.176481][T28376] __es_insert_extent+0x546/0xe80 [ 783.181506][T28376] ext4_es_insert_extent+0x1cb/0x19c0 [ 783.186885][T28376] ext4_map_blocks+0xa5d/0xf00 [ 783.191656][T28376] ext4_iomap_begin+0x4b0/0x630 [ 783.196568][T28376] ? ext4_alloc_da_blocks+0x100/0x100 [ 783.201973][T28376] iomap_iter+0x395/0x4a0 [ 783.206298][T28376] __iomap_dio_rw+0x695/0x1070 [ 783.211071][T28376] iomap_dio_rw+0x38/0x80 [ 783.215443][T28376] ? ext4_file_write_iter+0x461/0x1200 [ 783.220988][T28376] ext4_file_write_iter+0xac3/0x1200 [ 783.226273][T28376] ? ext4_file_write_iter+0x461/0x1200 [ 783.231743][T28376] do_iter_readv_writev+0x2de/0x380 [ 783.237028][T28376] do_iter_write+0x192/0x5c0 [ 783.241622][T28376] ? splice_from_pipe_next+0x34f/0x3b0 [ 783.247119][T28376] ? kmalloc_array+0x2d/0x40 [ 783.251738][T28376] vfs_iter_write+0x4c/0x70 [ 783.256265][T28376] iter_file_splice_write+0x43a/0x790 [ 783.261643][T28376] ? splice_from_pipe+0xd0/0xd0 [ 783.266505][T28376] direct_splice_actor+0x80/0xa0 [ 783.271486][T28376] splice_direct_to_actor+0x345/0x650 [ 783.276952][T28376] ? do_splice_direct+0x190/0x190 [ 783.282009][T28376] do_splice_direct+0x106/0x190 [ 783.286859][T28376] do_sendfile+0x675/0xc40 [ 783.291289][T28376] __x64_sys_sendfile64+0x102/0x140 [ 783.296486][T28376] do_syscall_64+0x44/0xd0 [ 783.300966][T28376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 783.306912][T28376] RIP: 0033:0x7fca50b35ae9 [ 783.311321][T28376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 783.330930][T28376] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.339344][T28376] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 783.347349][T28376] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 783.355344][T28376] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 783.363392][T28376] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 783.371376][T28376] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 783.380082][T28376] 19:41:51 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x10000000}}], 0x1, 0x0, 0x0) 19:41:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80000004) [ 783.433484][ C0] sd 0:0:1:0: tag#8180 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 783.443366][ C0] sd 0:0:1:0: tag#8180 CDB: opcode=0xe5 (vendor) [ 783.449732][ C0] sd 0:0:1:0: tag#8180 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 783.458798][ C0] sd 0:0:1:0: tag#8180 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 783.467869][ C0] sd 0:0:1:0: tag#8180 CDB[20]: ba 19:41:51 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x4a100000}}], 0x1, 0x0, 0x0) 19:41:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000c00) 19:41:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xc305000000000000}}, {@dmode}]}) 19:41:51 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x60000000}}], 0x1, 0x0, 0x0) 19:41:51 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x65580000}}], 0x1, 0x0, 0x0) 19:41:51 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x81000000}}], 0x1, 0x0, 0x0) 19:41:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xdaffffff00000000}}, {@dmode}]}) 19:41:52 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x88470000}}], 0x1, 0x0, 0x0) 19:41:52 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 9) 19:41:52 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80000c00) 19:41:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000f00) [ 784.243467][T28743] FAULT_INJECTION: forcing a failure. [ 784.243467][T28743] name failslab, interval 1, probability 0, space 0, times 0 [ 784.256346][T28743] CPU: 0 PID: 28743 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 784.266500][T28743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.276554][T28743] Call Trace: [ 784.279930][T28743] [ 784.282883][T28743] dump_stack_lvl+0xd6/0x122 [ 784.287536][T28743] dump_stack+0x11/0x1b [ 784.291845][T28743] should_fail+0x23c/0x250 [ 784.296328][T28743] ? __es_insert_extent+0x546/0xe80 [ 784.301600][T28743] __should_failslab+0x81/0x90 [ 784.306412][T28743] should_failslab+0x5/0x20 [ 784.310928][T28743] kmem_cache_alloc+0x4f/0x320 [ 784.315687][T28743] ? __es_insert_extent+0x34/0xe80 [ 784.320848][T28743] __es_insert_extent+0x546/0xe80 [ 784.325941][T28743] ext4_es_insert_extent+0x1cb/0x19c0 [ 784.331312][T28743] ext4_map_blocks+0xa5d/0xf00 [ 784.336079][T28743] ext4_iomap_begin+0x4b0/0x630 [ 784.341001][T28743] ? ext4_alloc_da_blocks+0x100/0x100 [ 784.346373][T28743] iomap_iter+0x395/0x4a0 [ 784.350863][T28743] __iomap_dio_rw+0x695/0x1070 [ 784.355718][T28743] iomap_dio_rw+0x38/0x80 [ 784.360047][T28743] ? ext4_file_write_iter+0x461/0x1200 [ 784.365508][T28743] ext4_file_write_iter+0xac3/0x1200 [ 784.370841][T28743] ? ext4_file_write_iter+0x461/0x1200 [ 784.376313][T28743] do_iter_readv_writev+0x2de/0x380 [ 784.381532][T28743] do_iter_write+0x192/0x5c0 [ 784.386198][T28743] ? splice_from_pipe_next+0x34f/0x3b0 [ 784.391748][T28743] ? kmalloc_array+0x2d/0x40 [ 784.396335][T28743] vfs_iter_write+0x4c/0x70 [ 784.400961][T28743] iter_file_splice_write+0x43a/0x790 [ 784.406332][T28743] ? splice_from_pipe+0xd0/0xd0 [ 784.411185][T28743] direct_splice_actor+0x80/0xa0 [ 784.416163][T28743] splice_direct_to_actor+0x345/0x650 [ 784.421568][T28743] ? do_splice_direct+0x190/0x190 [ 784.426604][T28743] do_splice_direct+0x106/0x190 [ 784.431563][T28743] do_sendfile+0x675/0xc40 [ 784.435983][T28743] __x64_sys_sendfile64+0x102/0x140 [ 784.441176][T28743] do_syscall_64+0x44/0xd0 [ 784.445606][T28743] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 784.451496][T28743] RIP: 0033:0x7fca50b35ae9 [ 784.455932][T28743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.475538][T28743] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 784.484034][T28743] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:41:52 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x88480000}}], 0x1, 0x0, 0x0) [ 784.492013][T28743] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 784.500014][T28743] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.508060][T28743] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000001 [ 784.516037][T28743] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 784.524009][T28743] 19:41:52 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0x88a8ffff}}], 0x1, 0x0, 0x0) 19:41:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xf6ffffff00000000}}, {@dmode}]}) [ 784.578817][ C1] sd 0:0:1:0: tag#8132 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 784.588719][ C1] sd 0:0:1:0: tag#8132 CDB: opcode=0xe5 (vendor) [ 784.595084][ C1] sd 0:0:1:0: tag#8132 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 784.604288][ C1] sd 0:0:1:0: tag#8132 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 784.613364][ C1] sd 0:0:1:0: tag#8132 CDB[20]: ba 19:41:52 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xa6ffffff}}], 0x1, 0x0, 0x0) 19:41:52 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc00e0000}}], 0x1, 0x0, 0x0) 19:41:52 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xf9fdffff00000000}}, {@dmode}]}) 19:41:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:53 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xc3ffffff}}], 0x1, 0x0, 0x0) 19:41:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfdfdffff00000000}}, {@dmode}]}) 19:41:53 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 10) 19:41:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80001f00) 19:41:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002000) [ 785.317978][T28972] FAULT_INJECTION: forcing a failure. [ 785.317978][T28972] name failslab, interval 1, probability 0, space 0, times 0 [ 785.330672][T28972] CPU: 0 PID: 28972 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 785.340875][T28972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.350950][T28972] Call Trace: [ 785.354229][T28972] [ 785.357157][T28972] dump_stack_lvl+0xd6/0x122 [ 785.361750][T28972] dump_stack+0x11/0x1b [ 785.365910][T28972] should_fail+0x23c/0x250 [ 785.370344][T28972] ? mempool_alloc_slab+0x16/0x20 [ 785.375411][T28972] __should_failslab+0x81/0x90 [ 785.380227][T28972] should_failslab+0x5/0x20 [ 785.384731][T28972] kmem_cache_alloc+0x4f/0x320 [ 785.389532][T28972] mempool_alloc_slab+0x16/0x20 [ 785.394464][T28972] ? mempool_free+0x130/0x130 [ 785.399160][T28972] mempool_alloc+0x9d/0x310 [ 785.403666][T28972] ? preempt_count_add+0x4e/0x90 [ 785.408609][T28972] ? _raw_read_unlock+0x13/0x30 [ 785.413518][T28972] ? jbd2_transaction_committed+0xad/0xc0 [ 785.419282][T28972] bio_alloc_bioset+0xcc/0x560 [ 785.424054][T28972] ? iov_iter_alignment+0x34b/0x370 [ 785.429264][T28972] iomap_dio_bio_iter+0x5ed/0xc70 [ 785.434289][T28972] ? ext4_alloc_da_blocks+0x100/0x100 [ 785.439714][T28972] __iomap_dio_rw+0x8b5/0x1070 [ 785.444491][T28972] iomap_dio_rw+0x38/0x80 [ 785.448890][T28972] ? ext4_file_write_iter+0x461/0x1200 [ 785.454393][T28972] ext4_file_write_iter+0xac3/0x1200 [ 785.459689][T28972] ? ext4_file_write_iter+0x461/0x1200 [ 785.465187][T28972] do_iter_readv_writev+0x2de/0x380 [ 785.470429][T28972] do_iter_write+0x192/0x5c0 [ 785.475069][T28972] vfs_iter_write+0x4c/0x70 [ 785.479574][T28972] iter_file_splice_write+0x43a/0x790 [ 785.484960][T28972] ? splice_from_pipe+0xd0/0xd0 [ 785.489897][T28972] direct_splice_actor+0x80/0xa0 [ 785.495903][T28972] splice_direct_to_actor+0x345/0x650 [ 785.501282][T28972] ? do_splice_direct+0x190/0x190 [ 785.506314][T28972] do_splice_direct+0x106/0x190 [ 785.511190][T28972] do_sendfile+0x675/0xc40 [ 785.515607][T28972] __x64_sys_sendfile64+0x102/0x140 [ 785.520802][T28972] do_syscall_64+0x44/0xd0 [ 785.525267][T28972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 785.531203][T28972] RIP: 0033:0x7fca50b35ae9 [ 785.535614][T28972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 785.555222][T28972] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002700) 19:41:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002000) 19:41:53 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xffffa888}}], 0x1, 0x0, 0x0) [ 785.563665][T28972] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 785.571632][T28972] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 785.579598][T28972] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.587568][T28972] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 785.595541][T28972] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 785.603547][T28972] 19:41:53 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xffffffa6}}], 0x1, 0x0, 0x0) [ 785.637125][ C1] sd 0:0:1:0: tag#8134 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 785.647017][ C1] sd 0:0:1:0: tag#8134 CDB: opcode=0xe5 (vendor) [ 785.653341][ C1] sd 0:0:1:0: tag#8134 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 785.662392][ C1] sd 0:0:1:0: tag#8134 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 785.671439][ C1] sd 0:0:1:0: tag#8134 CDB[20]: ba 19:41:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfdffffff00000000}}, {@dmode}]}) 19:41:53 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3, 0x0, 0x0, 0xffffffc3}}], 0x1, 0x0, 0x0) 19:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:41:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfeffffff00000000}}, {@dmode}]}) 19:41:54 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 11) 19:41:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002802) 19:41:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002700) [ 786.413004][T29398] FAULT_INJECTION: forcing a failure. [ 786.413004][T29398] name failslab, interval 1, probability 0, space 0, times 0 [ 786.425722][T29398] CPU: 1 PID: 29398 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 786.436049][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.446152][T29398] Call Trace: [ 786.449473][T29398] [ 786.452467][T29398] dump_stack_lvl+0xd6/0x122 [ 786.457063][T29398] dump_stack+0x11/0x1b [ 786.461217][T29398] should_fail+0x23c/0x250 [ 786.465629][T29398] __should_failslab+0x81/0x90 [ 786.470396][T29398] should_failslab+0x5/0x20 [ 786.474901][T29398] kmem_cache_alloc_node+0x61/0x2d0 [ 786.478331][ C0] sd 0:0:1:0: tag#8145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 786.480099][T29398] ? create_task_io_context+0x36/0x1e0 [ 786.489978][ C0] sd 0:0:1:0: tag#8145 CDB: opcode=0xe5 (vendor) [ 786.495364][T29398] ? __blk_queue_split+0xb2f/0xc60 [ 786.501704][ C0] sd 0:0:1:0: tag#8145 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 786.506745][T29398] create_task_io_context+0x36/0x1e0 [ 786.506775][T29398] submit_bio_checks+0x828/0x8e0 [ 786.515780][ C0] sd 0:0:1:0: tag#8145 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 786.521019][T29398] ? __rcu_read_unlock+0x5c/0x290 [ 786.521041][T29398] blk_mq_submit_bio+0x2e1/0x1470 [ 786.525966][ C0] sd 0:0:1:0: tag#8145 CDB[20]: ba [ 786.534945][T29398] ? iov_iter_advance+0x6b6/0x750 [ 786.534969][T29398] ? mempool_alloc_slab+0x16/0x20 [ 786.560193][T29398] __submit_bio+0x131/0x340 [ 786.564713][T29398] ? mempool_alloc+0xaa/0x310 [ 786.569401][T29398] submit_bio_noacct+0x418/0x4e0 [ 786.574380][T29398] submit_bio+0x10c/0x180 [ 786.578877][T29398] iomap_dio_bio_iter+0x9ed/0xc70 [ 786.583981][T29398] __iomap_dio_rw+0x8b5/0x1070 [ 786.588756][T29398] iomap_dio_rw+0x38/0x80 [ 786.593108][T29398] ? ext4_file_write_iter+0x461/0x1200 [ 786.598564][T29398] ext4_file_write_iter+0xac3/0x1200 [ 786.603928][T29398] ? ext4_file_write_iter+0x461/0x1200 [ 786.609467][T29398] do_iter_readv_writev+0x2de/0x380 [ 786.614700][T29398] do_iter_write+0x192/0x5c0 [ 786.619300][T29398] vfs_iter_write+0x4c/0x70 [ 786.623815][T29398] iter_file_splice_write+0x43a/0x790 [ 786.629451][T29398] ? splice_from_pipe+0xd0/0xd0 [ 786.634386][T29398] direct_splice_actor+0x80/0xa0 [ 786.639355][T29398] splice_direct_to_actor+0x345/0x650 [ 786.644810][T29398] ? do_splice_direct+0x190/0x190 [ 786.649832][T29398] do_splice_direct+0x106/0x190 [ 786.654753][T29398] do_sendfile+0x675/0xc40 [ 786.659244][T29398] __x64_sys_sendfile64+0x102/0x140 [ 786.664498][T29398] do_syscall_64+0x44/0xd0 [ 786.668919][T29398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.674810][T29398] RIP: 0033:0x7fca50b35ae9 [ 786.679217][T29398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.698864][T29398] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x2}], 0x1, 0x0, 0x0) 19:41:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 786.707285][T29398] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 786.715273][T29398] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 786.723249][T29398] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.731312][T29398] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 786.739278][T29398] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 786.747244][T29398] 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 19:41:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfeffffffffffffff}}, {@dmode}]}) 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4}], 0x1, 0x0, 0x0) 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x5}], 0x1, 0x0, 0x0) [ 786.839529][ C0] sd 0:0:1:0: tag#8153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 786.849445][ C0] sd 0:0:1:0: tag#8153 CDB: opcode=0xe5 (vendor) [ 786.855776][ C0] sd 0:0:1:0: tag#8153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 786.864845][ C0] sd 0:0:1:0: tag#8153 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 786.873903][ C0] sd 0:0:1:0: tag#8153 CDB[20]: ba 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x6}], 0x1, 0x0, 0x0) 19:41:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xff0f000000000000}}, {@dmode}]}) 19:41:54 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x7}], 0x1, 0x0, 0x0) 19:41:54 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 12) [ 787.120339][T29433] FAULT_INJECTION: forcing a failure. [ 787.120339][T29433] name failslab, interval 1, probability 0, space 0, times 0 [ 787.133136][T29433] CPU: 0 PID: 29433 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 787.143314][T29433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.153366][T29433] Call Trace: [ 787.156665][T29433] [ 787.159589][T29433] dump_stack_lvl+0xd6/0x122 [ 787.164372][T29433] dump_stack+0x11/0x1b [ 787.168574][T29433] should_fail+0x23c/0x250 [ 787.173014][T29433] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 787.178325][T29433] __should_failslab+0x81/0x90 [ 787.183227][T29433] should_failslab+0x5/0x20 [ 787.187800][T29433] kmem_cache_alloc+0x4f/0x320 [ 787.192753][T29433] ext4_mb_new_blocks+0x328/0x1ee0 [ 787.197936][T29433] ? ext4_get_branch+0x27d/0x2e0 [ 787.202879][T29433] ? blk_mq_get_tag+0x50b/0x5f0 [ 787.207759][T29433] ? ktime_get+0x1b0/0x1e0 [ 787.212181][T29433] ext4_ind_map_blocks+0xb1c/0x1740 [ 787.217402][T29433] ext4_map_blocks+0x6e3/0xf00 [ 787.222175][T29433] ext4_iomap_begin+0x4b0/0x630 [ 787.227024][T29433] ? ext4_alloc_da_blocks+0x100/0x100 [ 787.232396][T29433] iomap_iter+0x395/0x4a0 [ 787.236800][T29433] __iomap_dio_rw+0xb78/0x1070 [ 787.241604][T29433] iomap_dio_rw+0x38/0x80 [ 787.245925][T29433] ? ext4_file_write_iter+0x461/0x1200 [ 787.251379][T29433] ext4_file_write_iter+0xac3/0x1200 [ 787.256693][T29433] ? ext4_file_write_iter+0x461/0x1200 [ 787.262465][T29433] do_iter_readv_writev+0x2de/0x380 [ 787.267661][T29433] do_iter_write+0x192/0x5c0 [ 787.272342][T29433] ? splice_from_pipe_next+0x34f/0x3b0 [ 787.277862][T29433] ? kmalloc_array+0x2d/0x40 [ 787.282508][T29433] vfs_iter_write+0x4c/0x70 [ 787.287136][T29433] iter_file_splice_write+0x43a/0x790 [ 787.292600][T29433] ? splice_from_pipe+0xd0/0xd0 [ 787.297505][T29433] direct_splice_actor+0x80/0xa0 [ 787.302435][T29433] splice_direct_to_actor+0x345/0x650 [ 787.307941][T29433] ? do_splice_direct+0x190/0x190 [ 787.312971][T29433] do_splice_direct+0x106/0x190 [ 787.317842][T29433] do_sendfile+0x675/0xc40 [ 787.322294][T29433] __x64_sys_sendfile64+0x102/0x140 [ 787.327489][T29433] do_syscall_64+0x44/0xd0 [ 787.331912][T29433] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.337808][T29433] RIP: 0033:0x7fca50b35ae9 [ 787.342217][T29433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 787.361915][T29433] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 787.370350][T29433] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 787.378313][T29433] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 787.386291][T29433] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.394258][T29433] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 787.402227][T29433] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 787.410327][T29433] 19:41:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002803) 19:41:55 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x8}], 0x1, 0x0, 0x0) 19:41:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfffbffff00000000}}, {@dmode}]}) 19:41:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:55 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 13) 19:41:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002802) 19:41:55 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xa}], 0x1, 0x0, 0x0) 19:41:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffff7f00000000}}, {@dmode}]}) [ 787.690785][T29649] FAULT_INJECTION: forcing a failure. [ 787.690785][T29649] name failslab, interval 1, probability 0, space 0, times 0 [ 787.703525][T29649] CPU: 1 PID: 29649 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 787.713764][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.723879][T29649] Call Trace: [ 787.727151][T29649] [ 787.730077][T29649] dump_stack_lvl+0xd6/0x122 [ 787.734699][T29649] dump_stack+0x11/0x1b [ 787.738851][T29649] should_fail+0x23c/0x250 [ 787.743258][T29649] ? mempool_alloc_slab+0x16/0x20 [ 787.748535][T29649] __should_failslab+0x81/0x90 [ 787.753297][T29649] should_failslab+0x5/0x20 [ 787.757870][T29649] kmem_cache_alloc+0x4f/0x320 [ 787.762691][T29649] mempool_alloc_slab+0x16/0x20 [ 787.767543][T29649] ? mempool_free+0x130/0x130 [ 787.772341][T29649] mempool_alloc+0x9d/0x310 [ 787.776847][T29649] ? preempt_count_add+0x4e/0x90 [ 787.781790][T29649] ? _raw_read_unlock+0x13/0x30 [ 787.786637][T29649] ? jbd2_transaction_committed+0xad/0xc0 [ 787.792457][T29649] bio_alloc_bioset+0xcc/0x560 [ 787.797229][T29649] ? iov_iter_alignment+0x34b/0x370 [ 787.802423][T29649] iomap_dio_bio_iter+0x5ed/0xc70 [ 787.807466][T29649] ? ext4_alloc_da_blocks+0x100/0x100 [ 787.812842][T29649] __iomap_dio_rw+0x8b5/0x1070 [ 787.817668][T29649] iomap_dio_rw+0x38/0x80 [ 787.822000][T29649] ? ext4_file_write_iter+0x461/0x1200 [ 787.827453][T29649] ext4_file_write_iter+0xac3/0x1200 [ 787.832760][T29649] ? ext4_file_write_iter+0x461/0x1200 [ 787.838319][T29649] do_iter_readv_writev+0x2de/0x380 [ 787.843536][T29649] do_iter_write+0x192/0x5c0 [ 787.848166][T29649] ? splice_from_pipe_next+0x34f/0x3b0 [ 787.853619][T29649] ? kmalloc_array+0x2d/0x40 [ 787.858220][T29649] vfs_iter_write+0x4c/0x70 [ 787.862758][T29649] iter_file_splice_write+0x43a/0x790 [ 787.868133][T29649] ? splice_from_pipe+0xd0/0xd0 [ 787.872984][T29649] direct_splice_actor+0x80/0xa0 [ 787.877919][T29649] splice_direct_to_actor+0x345/0x650 [ 787.883309][T29649] ? do_splice_direct+0x190/0x190 [ 787.888398][T29649] do_splice_direct+0x106/0x190 [ 787.893280][T29649] do_sendfile+0x675/0xc40 [ 787.897912][T29649] __x64_sys_sendfile64+0x102/0x140 [ 787.903104][T29649] do_syscall_64+0x44/0xd0 [ 787.907957][T29649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 787.913848][T29649] RIP: 0033:0x7fca50b35ae9 [ 787.918252][T29649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:41:55 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc}], 0x1, 0x0, 0x0) [ 787.938319][T29649] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 787.946765][T29649] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 787.954736][T29649] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 787.962718][T29649] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 787.970794][T29649] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 787.978763][T29649] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 787.986748][T29649] 19:41:55 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffffff00000000}}, {@dmode}]}) 19:41:55 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xf}], 0x1, 0x0, 0x0) [ 788.042813][ C0] sd 0:0:1:0: tag#8175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 788.052777][ C0] sd 0:0:1:0: tag#8175 CDB: opcode=0xe5 (vendor) [ 788.059164][ C0] sd 0:0:1:0: tag#8175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 788.068342][ C0] sd 0:0:1:0: tag#8175 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 788.077496][ C0] sd 0:0:1:0: tag#8175 CDB[20]: ba 19:41:55 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x10}], 0x1, 0x0, 0x0) 19:41:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002804) 19:41:56 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x60}], 0x1, 0x0, 0x0) 19:41:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffffffffff0700}}, {@dmode}]}) [ 788.297474][T29769] ISOFS: Unable to identify CD-ROM format. [ 788.405885][T29769] ISOFS: Unable to identify CD-ROM format. 19:41:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:56 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x300}], 0x1, 0x0, 0x0) 19:41:56 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 14) 19:41:56 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002803) 19:41:56 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffffffffffff0f}}, {@dmode}]}) 19:41:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002805) [ 788.890775][T29975] FAULT_INJECTION: forcing a failure. [ 788.890775][T29975] name failslab, interval 1, probability 0, space 0, times 0 [ 788.900814][ C1] sd 0:0:1:0: tag#8152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 788.903529][T29975] CPU: 0 PID: 29975 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 788.913277][ C1] sd 0:0:1:0: tag#8152 CDB: opcode=0xe5 (vendor) [ 788.923362][T29975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.923376][T29975] Call Trace: [ 788.923382][T29975] [ 788.923389][T29975] dump_stack_lvl+0xd6/0x122 [ 788.923412][T29975] dump_stack+0x11/0x1b [ 788.923429][T29975] should_fail+0x23c/0x250 [ 788.929776][ C1] sd 0:0:1:0: tag#8152 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 788.939873][T29975] ? mempool_alloc_slab+0x16/0x20 [ 788.939900][T29975] __should_failslab+0x81/0x90 [ 788.939920][T29975] should_failslab+0x5/0x20 [ 788.943190][ C1] sd 0:0:1:0: tag#8152 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 788.946114][T29975] kmem_cache_alloc+0x4f/0x320 [ 788.946136][T29975] mempool_alloc_slab+0x16/0x20 [ 788.950739][ C1] sd 0:0:1:0: tag#8152 CDB[20]: ba [ 788.954831][T29975] ? mempool_free+0x130/0x130 [ 789.011150][T29975] mempool_alloc+0x9d/0x310 [ 789.015685][T29975] ? preempt_count_add+0x4e/0x90 [ 789.020830][T29975] ? _raw_read_unlock+0x13/0x30 [ 789.025744][T29975] ? jbd2_transaction_committed+0xad/0xc0 [ 789.031469][T29975] bio_alloc_bioset+0xcc/0x560 [ 789.036238][T29975] ? iov_iter_alignment+0x34b/0x370 [ 789.041471][T29975] iomap_dio_bio_iter+0x5ed/0xc70 [ 789.046595][T29975] ? ext4_alloc_da_blocks+0x100/0x100 [ 789.051996][T29975] __iomap_dio_rw+0x8b5/0x1070 [ 789.056831][T29975] iomap_dio_rw+0x38/0x80 [ 789.061199][T29975] ? ext4_file_write_iter+0x461/0x1200 [ 789.066649][T29975] ext4_file_write_iter+0xac3/0x1200 [ 789.072002][T29975] ? ext4_file_write_iter+0x461/0x1200 [ 789.077462][T29975] do_iter_readv_writev+0x2de/0x380 [ 789.082743][T29975] do_iter_write+0x192/0x5c0 [ 789.087332][T29975] ? splice_from_pipe_next+0x34f/0x3b0 [ 789.092790][T29975] ? kmalloc_array+0x2d/0x40 [ 789.097387][T29975] vfs_iter_write+0x4c/0x70 [ 789.101899][T29975] iter_file_splice_write+0x43a/0x790 [ 789.107290][T29975] ? splice_from_pipe+0xd0/0xd0 [ 789.112192][T29975] direct_splice_actor+0x80/0xa0 [ 789.117138][T29975] splice_direct_to_actor+0x345/0x650 [ 789.122527][T29975] ? do_splice_direct+0x190/0x190 [ 789.127591][T29975] do_splice_direct+0x106/0x190 [ 789.132514][T29975] do_sendfile+0x675/0xc40 [ 789.136923][T29975] __x64_sys_sendfile64+0x102/0x140 [ 789.142121][T29975] do_syscall_64+0x44/0xd0 [ 789.146601][T29975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.152502][T29975] RIP: 0033:0x7fca50b35ae9 [ 789.156984][T29975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.177014][T29975] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x500}], 0x1, 0x0, 0x0) 19:41:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 789.185429][T29975] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 789.193678][T29975] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 789.201645][T29975] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.209612][T29975] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 789.217579][T29975] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 789.225710][T29975] 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x600}], 0x1, 0x0, 0x0) 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x700}], 0x1, 0x0, 0x0) [ 789.302466][ C0] sd 0:0:1:0: tag#8187 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 789.312342][ C0] sd 0:0:1:0: tag#8187 CDB: opcode=0xe5 (vendor) [ 789.318704][ C0] sd 0:0:1:0: tag#8187 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 789.327779][ C0] sd 0:0:1:0: tag#8187 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 789.336937][ C0] sd 0:0:1:0: tag#8187 CDB[20]: ba 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xa00}], 0x1, 0x0, 0x0) 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc00}], 0x1, 0x0, 0x0) 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xec0}], 0x1, 0x0, 0x0) [ 789.379497][T29976] ISOFS: Unable to identify CD-ROM format. 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xf00}], 0x1, 0x0, 0x0) [ 789.455034][T29976] ISOFS: Unable to identify CD-ROM format. 19:41:57 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 15) [ 789.682735][T30165] FAULT_INJECTION: forcing a failure. [ 789.682735][T30165] name failslab, interval 1, probability 0, space 0, times 0 [ 789.695483][T30165] CPU: 0 PID: 30165 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 789.705674][T30165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.715772][T30165] Call Trace: [ 789.719045][T30165] [ 789.722001][T30165] dump_stack_lvl+0xd6/0x122 [ 789.726621][T30165] dump_stack+0x11/0x1b [ 789.730768][T30165] should_fail+0x23c/0x250 [ 789.735559][T30165] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 789.740863][T30165] __should_failslab+0x81/0x90 [ 789.745763][T30165] should_failslab+0x5/0x20 [ 789.750261][T30165] kmem_cache_alloc+0x4f/0x320 [ 789.755035][T30165] ext4_mb_new_blocks+0x328/0x1ee0 [ 789.760161][T30165] ? bio_will_gap+0xfc/0x4a0 [ 789.764798][T30165] ? ext4_get_branch+0x27d/0x2e0 [ 789.769740][T30165] ext4_ind_map_blocks+0xb1c/0x1740 [ 789.774957][T30165] ext4_map_blocks+0x6e3/0xf00 [ 789.779748][T30165] ext4_iomap_begin+0x4b0/0x630 [ 789.784615][T30165] ? ext4_alloc_da_blocks+0x100/0x100 [ 789.790084][T30165] iomap_iter+0x395/0x4a0 [ 789.794438][T30165] __iomap_dio_rw+0xb78/0x1070 [ 789.799282][T30165] ? _raw_spin_lock_irq+0x41/0x50 [ 789.804497][T30165] iomap_dio_rw+0x38/0x80 [ 789.808933][T30165] ? ext4_file_write_iter+0x461/0x1200 [ 789.814404][T30165] ext4_file_write_iter+0xac3/0x1200 [ 789.819792][T30165] ? ext4_file_write_iter+0x461/0x1200 [ 789.825274][T30165] do_iter_readv_writev+0x2de/0x380 [ 789.830545][T30165] do_iter_write+0x192/0x5c0 [ 789.835195][T30165] ? splice_from_pipe_next+0x34f/0x3b0 [ 789.840662][T30165] ? kmalloc_array+0x2d/0x40 [ 789.845339][T30165] vfs_iter_write+0x4c/0x70 [ 789.849891][T30165] iter_file_splice_write+0x43a/0x790 [ 789.855290][T30165] ? splice_from_pipe+0xd0/0xd0 [ 789.860209][T30165] direct_splice_actor+0x80/0xa0 [ 789.865252][T30165] splice_direct_to_actor+0x345/0x650 [ 789.870629][T30165] ? do_splice_direct+0x190/0x190 [ 789.875653][T30165] do_splice_direct+0x106/0x190 [ 789.880593][T30165] do_sendfile+0x675/0xc40 [ 789.885017][T30165] __x64_sys_sendfile64+0x102/0x140 [ 789.890213][T30165] do_syscall_64+0x44/0xd0 [ 789.894699][T30165] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 789.900612][T30165] RIP: 0033:0x7fca50b35ae9 [ 789.905178][T30165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 789.924969][T30165] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:41:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002804) 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x104a}], 0x1, 0x0, 0x0) 19:41:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffffffffffff7f}}, {@dmode}]}) 19:41:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002806) [ 789.933380][T30165] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 789.941396][T30165] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 789.949385][T30165] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 789.957444][T30165] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 789.965484][T30165] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 789.973453][T30165] [ 790.046677][T30212] ISOFS: Unable to identify CD-ROM format. 19:41:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:57 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 16) 19:41:57 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4788}], 0x1, 0x0, 0x0) [ 790.119700][T30212] ISOFS: Unable to identify CD-ROM format. [ 790.157058][T30223] FAULT_INJECTION: forcing a failure. [ 790.157058][T30223] name failslab, interval 1, probability 0, space 0, times 0 [ 790.167965][ C0] sd 0:0:1:0: tag#8168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 790.169766][T30223] CPU: 1 PID: 30223 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 790.179552][ C0] sd 0:0:1:0: tag#8168 CDB: opcode=0xe5 (vendor) [ 790.189625][T30223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.189638][T30223] Call Trace: [ 790.189645][T30223] [ 790.189651][T30223] dump_stack_lvl+0xd6/0x122 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4888}], 0x1, 0x0, 0x0) 19:41:58 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@dmode}]}) [ 790.195969][ C0] sd 0:0:1:0: tag#8168 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 790.205996][T30223] dump_stack+0x11/0x1b [ 790.206017][T30223] should_fail+0x23c/0x250 [ 790.209347][ C0] sd 0:0:1:0: tag#8168 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 790.212216][T30223] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 790.216806][ C0] sd 0:0:1:0: tag#8168 CDB[20]: ba [ 790.225792][T30223] __should_failslab+0x81/0x90 [ 790.258521][T30223] should_failslab+0x5/0x20 [ 790.263154][T30223] kmem_cache_alloc+0x4f/0x320 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4a10}], 0x1, 0x0, 0x0) 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x5865}], 0x1, 0x0, 0x0) 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x6000}], 0x1, 0x0, 0x0) [ 790.267928][T30223] ext4_mb_new_blocks+0x328/0x1ee0 [ 790.273104][T30223] ? bio_will_gap+0xfc/0x4a0 [ 790.277697][T30223] ? ext4_get_branch+0x27d/0x2e0 [ 790.282879][T30223] ext4_ind_map_blocks+0xb1c/0x1740 [ 790.288149][T30223] ext4_map_blocks+0x6e3/0xf00 [ 790.293014][T30223] ext4_iomap_begin+0x4b0/0x630 [ 790.297872][T30223] ? ext4_alloc_da_blocks+0x100/0x100 [ 790.303251][T30223] iomap_iter+0x395/0x4a0 [ 790.307643][T30223] __iomap_dio_rw+0xb78/0x1070 [ 790.312500][T30223] iomap_dio_rw+0x38/0x80 [ 790.316833][T30223] ? ext4_file_write_iter+0x461/0x1200 [ 790.322299][T30223] ext4_file_write_iter+0xac3/0x1200 [ 790.327675][T30223] ? ext4_file_write_iter+0x461/0x1200 [ 790.333183][T30223] do_iter_readv_writev+0x2de/0x380 [ 790.338415][T30223] do_iter_write+0x192/0x5c0 [ 790.342993][T30223] ? splice_from_pipe_next+0x34f/0x3b0 [ 790.348553][T30223] ? kmalloc_array+0x2d/0x40 [ 790.353351][T30223] vfs_iter_write+0x4c/0x70 [ 790.357933][T30223] iter_file_splice_write+0x43a/0x790 [ 790.363352][T30223] ? splice_from_pipe+0xd0/0xd0 [ 790.368197][T30223] direct_splice_actor+0x80/0xa0 [ 790.373148][T30223] splice_direct_to_actor+0x345/0x650 [ 790.378514][T30223] ? do_splice_direct+0x190/0x190 [ 790.383540][T30223] do_splice_direct+0x106/0x190 [ 790.388533][T30223] do_sendfile+0x675/0xc40 [ 790.393039][T30223] __x64_sys_sendfile64+0x102/0x140 [ 790.398271][T30223] do_syscall_64+0x44/0xd0 [ 790.402699][T30223] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.408618][T30223] RIP: 0033:0x7fca50b35ae9 [ 790.413027][T30223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.432629][T30223] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.441138][T30223] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 790.449119][T30223] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 790.457082][T30223] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 790.465049][T30223] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 790.473015][T30223] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 790.480991][T30223] [ 790.547842][T30239] ISOFS: Unable to identify CD-ROM format. 19:41:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002805) 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x6558}], 0x1, 0x0, 0x0) 19:41:58 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 17) [ 790.632088][T30239] ISOFS: Unable to identify CD-ROM format. [ 790.693990][T30416] FAULT_INJECTION: forcing a failure. [ 790.693990][T30416] name failslab, interval 1, probability 0, space 0, times 0 [ 790.706808][T30416] CPU: 0 PID: 30416 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 790.717079][T30416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.727131][T30416] Call Trace: [ 790.730437][T30416] [ 790.733403][T30416] dump_stack_lvl+0xd6/0x122 [ 790.738005][T30416] dump_stack+0x11/0x1b [ 790.742272][T30416] should_fail+0x23c/0x250 [ 790.746685][T30416] ? jbd2__journal_start+0xf7/0x3f0 [ 790.751890][T30416] __should_failslab+0x81/0x90 [ 790.756813][T30416] should_failslab+0x5/0x20 [ 790.761359][T30416] kmem_cache_alloc+0x4f/0x320 [ 790.766158][T30416] jbd2__journal_start+0xf7/0x3f0 [ 790.771185][T30416] __ext4_journal_start_sb+0x159/0x310 [ 790.776753][T30416] ext4_iomap_begin+0x408/0x630 [ 790.781609][T30416] ? ext4_alloc_da_blocks+0x100/0x100 [ 790.787011][T30416] iomap_iter+0x395/0x4a0 [ 790.791344][T30416] __iomap_dio_rw+0xb78/0x1070 [ 790.796236][T30416] iomap_dio_rw+0x38/0x80 [ 790.800564][T30416] ? ext4_file_write_iter+0x461/0x1200 [ 790.806026][T30416] ext4_file_write_iter+0xac3/0x1200 [ 790.811366][T30416] ? ext4_file_write_iter+0x461/0x1200 [ 790.816833][T30416] do_iter_readv_writev+0x2de/0x380 [ 790.822150][T30416] do_iter_write+0x192/0x5c0 [ 790.826750][T30416] vfs_iter_write+0x4c/0x70 [ 790.831341][T30416] iter_file_splice_write+0x43a/0x790 [ 790.836725][T30416] ? splice_from_pipe+0xd0/0xd0 [ 790.841598][T30416] direct_splice_actor+0x80/0xa0 [ 790.850184][T30416] splice_direct_to_actor+0x345/0x650 [ 790.855583][T30416] ? do_splice_direct+0x190/0x190 [ 790.860669][T30416] do_splice_direct+0x106/0x190 [ 790.865617][T30416] do_sendfile+0x675/0xc40 [ 790.870124][T30416] __x64_sys_sendfile64+0x102/0x140 [ 790.875324][T30416] do_syscall_64+0x44/0xd0 [ 790.879799][T30416] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 790.885714][T30416] RIP: 0033:0x7fca50b35ae9 [ 790.890200][T30416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 790.909874][T30416] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.918296][T30416] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 790.926266][T30416] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 790.934298][T30416] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:41:58 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode={'mode', 0x3d, 0xffffffffffffffff}}, {@dmode}]}) [ 790.942275][T30416] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 790.950244][T30416] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 790.958314][T30416] 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x8100}], 0x1, 0x0, 0x0) 19:41:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002807) 19:41:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:58 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 18) 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x8847}], 0x1, 0x0, 0x0) 19:41:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002806) 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x8848}], 0x1, 0x0, 0x0) [ 791.018408][T30466] ISOFS: Unable to identify CD-ROM format. [ 791.068022][T30557] FAULT_INJECTION: forcing a failure. [ 791.068022][T30557] name failslab, interval 1, probability 0, space 0, times 0 [ 791.080849][T30557] CPU: 1 PID: 30557 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 791.091094][T30557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.101163][T30557] Call Trace: [ 791.104435][T30557] [ 791.107358][T30557] dump_stack_lvl+0xd6/0x122 [ 791.111951][T30557] dump_stack+0x11/0x1b [ 791.116106][T30557] should_fail+0x23c/0x250 [ 791.120516][T30557] ? jbd2__journal_start+0xf7/0x3f0 [ 791.125728][T30557] __should_failslab+0x81/0x90 [ 791.130550][T30557] should_failslab+0x5/0x20 [ 791.135120][T30557] kmem_cache_alloc+0x4f/0x320 [ 791.139888][T30557] jbd2__journal_start+0xf7/0x3f0 [ 791.144990][T30557] __ext4_journal_start_sb+0x159/0x310 [ 791.150477][T30557] ext4_iomap_begin+0x408/0x630 [ 791.155331][T30557] ? ext4_alloc_da_blocks+0x100/0x100 [ 791.160880][T30557] iomap_iter+0x395/0x4a0 19:41:58 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc00e}], 0x1, 0x0, 0x0) 19:41:59 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x1000000}], 0x1, 0x0, 0x0) [ 791.165216][T30557] __iomap_dio_rw+0xb78/0x1070 [ 791.170028][T30557] iomap_dio_rw+0x38/0x80 [ 791.174364][T30557] ? ext4_file_write_iter+0x461/0x1200 [ 791.179827][T30557] ext4_file_write_iter+0xac3/0x1200 [ 791.185117][T30557] ? ext4_file_write_iter+0x461/0x1200 [ 791.190615][T30557] do_iter_readv_writev+0x2de/0x380 [ 791.195822][T30557] do_iter_write+0x192/0x5c0 [ 791.200417][T30557] ? splice_from_pipe_next+0x34f/0x3b0 [ 791.205918][T30557] ? kmalloc_array+0x2d/0x40 [ 791.210509][T30557] vfs_iter_write+0x4c/0x70 19:41:59 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x2000000}], 0x1, 0x0, 0x0) [ 791.215109][T30557] iter_file_splice_write+0x43a/0x790 [ 791.220650][T30557] ? splice_from_pipe+0xd0/0xd0 [ 791.225569][T30557] direct_splice_actor+0x80/0xa0 [ 791.230513][T30557] splice_direct_to_actor+0x345/0x650 [ 791.235895][T30557] ? do_splice_direct+0x190/0x190 [ 791.241053][T30557] do_splice_direct+0x106/0x190 [ 791.245949][T30557] do_sendfile+0x675/0xc40 [ 791.250380][T30557] __x64_sys_sendfile64+0x102/0x140 [ 791.255696][T30557] do_syscall_64+0x44/0xd0 [ 791.260125][T30557] entry_SYSCALL_64_after_hwframe+0x44/0xae 19:41:59 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x3000000}], 0x1, 0x0, 0x0) [ 791.266133][T30557] RIP: 0033:0x7fca50b35ae9 [ 791.270621][T30557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 791.290237][T30557] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 791.298663][T30557] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 791.306637][T30557] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 791.314610][T30557] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 791.322578][T30557] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 791.330674][T30557] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 791.338728][T30557] [ 791.354902][ C1] sd 0:0:1:0: tag#8190 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 791.364807][ C1] sd 0:0:1:0: tag#8190 CDB: opcode=0xe5 (vendor) [ 791.371188][ C1] sd 0:0:1:0: tag#8190 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 791.380232][ C1] sd 0:0:1:0: tag#8190 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 791.389276][ C1] sd 0:0:1:0: tag#8190 CDB[20]: ba [ 791.444902][T30466] ISOFS: Unable to identify CD-ROM format. 19:41:59 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x22}, {@dmode}]}) 19:41:59 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4000000}], 0x1, 0x0, 0x0) 19:41:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002808) 19:41:59 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x5000000}], 0x1, 0x0, 0x0) 19:41:59 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 19) 19:41:59 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x24}, {@dmode}]}) 19:41:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-'}, 0x16, 0x3) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:41:59 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002807) [ 791.922124][T30790] FAULT_INJECTION: forcing a failure. [ 791.922124][T30790] name failslab, interval 1, probability 0, space 0, times 0 [ 791.934893][T30790] CPU: 0 PID: 30790 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 791.945048][T30790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.955103][T30790] Call Trace: [ 791.958410][T30790] [ 791.961336][T30790] dump_stack_lvl+0xd6/0x122 [ 791.966004][T30790] dump_stack+0x11/0x1b [ 791.970172][T30790] should_fail+0x23c/0x250 [ 791.974686][T30790] ? mempool_alloc_slab+0x16/0x20 [ 791.979728][T30790] __should_failslab+0x81/0x90 [ 791.984494][T30790] should_failslab+0x5/0x20 [ 791.989002][T30790] kmem_cache_alloc+0x4f/0x320 [ 791.993950][T30790] mempool_alloc_slab+0x16/0x20 [ 791.998890][T30790] ? mempool_free+0x130/0x130 [ 792.003588][T30790] mempool_alloc+0x9d/0x310 [ 792.008138][T30790] ? preempt_count_add+0x4e/0x90 [ 792.013087][T30790] ? _raw_read_unlock+0x13/0x30 [ 792.017940][T30790] ? jbd2_transaction_committed+0xad/0xc0 [ 792.023716][T30790] bio_alloc_bioset+0xcc/0x560 [ 792.028515][T30790] ? iov_iter_alignment+0x34b/0x370 [ 792.033716][T30790] iomap_dio_bio_iter+0x5ed/0xc70 [ 792.038768][T30790] ? ext4_alloc_da_blocks+0x100/0x100 [ 792.044145][T30790] __iomap_dio_rw+0x8b5/0x1070 [ 792.048945][T30790] ? _raw_spin_lock_irq+0x41/0x50 [ 792.054030][T30790] iomap_dio_rw+0x38/0x80 [ 792.058411][T30790] ? ext4_file_write_iter+0x461/0x1200 [ 792.063872][T30790] ext4_file_write_iter+0xac3/0x1200 [ 792.069181][T30790] ? ext4_file_write_iter+0x461/0x1200 [ 792.074702][T30790] do_iter_readv_writev+0x2de/0x380 [ 792.079897][T30790] do_iter_write+0x192/0x5c0 [ 792.084541][T30790] ? splice_from_pipe_next+0x34f/0x3b0 [ 792.090023][T30790] ? kmalloc_array+0x2d/0x40 [ 792.094627][T30790] vfs_iter_write+0x4c/0x70 [ 792.099136][T30790] iter_file_splice_write+0x43a/0x790 [ 792.104538][T30790] ? splice_from_pipe+0xd0/0xd0 [ 792.109406][T30790] direct_splice_actor+0x80/0xa0 [ 792.114435][T30790] splice_direct_to_actor+0x345/0x650 [ 792.119833][T30790] ? do_splice_direct+0x190/0x190 [ 792.125000][T30790] do_splice_direct+0x106/0x190 [ 792.129899][T30790] do_sendfile+0x675/0xc40 [ 792.134317][T30790] __x64_sys_sendfile64+0x102/0x140 [ 792.139509][T30790] do_syscall_64+0x44/0xd0 [ 792.143939][T30790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 792.149883][T30790] RIP: 0033:0x7fca50b35ae9 [ 792.154292][T30790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.173897][T30790] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.182312][T30790] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 792.190327][T30790] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 792.198301][T30790] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.206342][T30790] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 792.214313][T30790] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 19:42:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002809) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x6000000}], 0x1, 0x0, 0x0) [ 792.222296][T30790] [ 792.231953][ C0] sd 0:0:1:0: tag#8144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 792.241803][ C0] sd 0:0:1:0: tag#8144 CDB: opcode=0xe5 (vendor) [ 792.248172][ C0] sd 0:0:1:0: tag#8144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 792.257222][ C0] sd 0:0:1:0: tag#8144 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 792.266284][ C0] sd 0:0:1:0: tag#8144 CDB[20]: ba 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x7000000}], 0x1, 0x0, 0x0) 19:42:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x26}, {@dmode}]}) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x8000000}], 0x1, 0x0, 0x0) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xa000000}], 0x1, 0x0, 0x0) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc000000}], 0x1, 0x0, 0x0) 19:42:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x28}, {@dmode}]}) 19:42:00 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 20) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xf000000}], 0x1, 0x0, 0x0) [ 792.684145][T30975] FAULT_INJECTION: forcing a failure. [ 792.684145][T30975] name failslab, interval 1, probability 0, space 0, times 0 [ 792.696999][T30975] CPU: 0 PID: 30975 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 792.707163][T30975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.717252][T30975] Call Trace: [ 792.720529][T30975] [ 792.723453][T30975] dump_stack_lvl+0xd6/0x122 [ 792.728122][T30975] dump_stack+0x11/0x1b [ 792.732278][T30975] should_fail+0x23c/0x250 [ 792.736708][T30975] ? jbd2__journal_start+0xf7/0x3f0 [ 792.741906][T30975] __should_failslab+0x81/0x90 [ 792.746673][T30975] should_failslab+0x5/0x20 [ 792.751202][T30975] kmem_cache_alloc+0x4f/0x320 [ 792.755970][T30975] jbd2__journal_start+0xf7/0x3f0 [ 792.761047][T30975] __ext4_journal_start_sb+0x159/0x310 [ 792.766774][T30975] ext4_iomap_begin+0x408/0x630 [ 792.771634][T30975] ? ext4_alloc_da_blocks+0x100/0x100 [ 792.777015][T30975] iomap_iter+0x395/0x4a0 [ 792.781351][T30975] __iomap_dio_rw+0xb78/0x1070 [ 792.786162][T30975] iomap_dio_rw+0x38/0x80 [ 792.790498][T30975] ? ext4_file_write_iter+0x461/0x1200 [ 792.795962][T30975] ext4_file_write_iter+0xac3/0x1200 [ 792.801256][T30975] ? ext4_file_write_iter+0x461/0x1200 [ 792.806748][T30975] do_iter_readv_writev+0x2de/0x380 [ 792.811989][T30975] do_iter_write+0x192/0x5c0 [ 792.816586][T30975] ? splice_from_pipe_next+0x34f/0x3b0 [ 792.822118][T30975] ? kmalloc_array+0x2d/0x40 [ 792.826739][T30975] vfs_iter_write+0x4c/0x70 [ 792.831322][T30975] iter_file_splice_write+0x43a/0x790 [ 792.836710][T30975] ? splice_from_pipe+0xd0/0xd0 [ 792.841653][T30975] direct_splice_actor+0x80/0xa0 [ 792.846677][T30975] splice_direct_to_actor+0x345/0x650 [ 792.852052][T30975] ? do_splice_direct+0x190/0x190 [ 792.857075][T30975] do_splice_direct+0x106/0x190 [ 792.861983][T30975] do_sendfile+0x675/0xc40 [ 792.866436][T30975] __x64_sys_sendfile64+0x102/0x140 [ 792.871630][T30975] do_syscall_64+0x44/0xd0 [ 792.876051][T30975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 792.882015][T30975] RIP: 0033:0x7fca50b35ae9 [ 792.886453][T30975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 792.906137][T30975] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 792.914546][T30975] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 792.922516][T30975] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 792.931748][T30975] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 792.939720][T30975] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 792.947819][T30975] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 792.955855][T30975] 19:42:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x2a}, {@dmode}]}) 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x10000000}], 0x1, 0x0, 0x0) 19:42:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002808) 19:42:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280a) 19:42:00 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 21) [ 793.090245][T31128] FAULT_INJECTION: forcing a failure. [ 793.090245][T31128] name failslab, interval 1, probability 0, space 0, times 0 [ 793.103111][T31128] CPU: 1 PID: 31128 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 793.103953][ C0] sd 0:0:1:0: tag#8161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 793.113290][T31128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.113302][T31128] Call Trace: [ 793.113309][T31128] 19:42:00 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4a100000}], 0x1, 0x0, 0x0) [ 793.113315][T31128] dump_stack_lvl+0xd6/0x122 [ 793.113348][T31128] dump_stack+0x11/0x1b [ 793.123172][ C0] sd 0:0:1:0: tag#8161 CDB: opcode=0xe5 (vendor) [ 793.133177][T31128] should_fail+0x23c/0x250 [ 793.133199][T31128] ? jbd2__journal_start+0xf7/0x3f0 [ 793.133218][T31128] __should_failslab+0x81/0x90 [ 793.136521][ C0] sd 0:0:1:0: tag#8161 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 793.139391][T31128] should_failslab+0x5/0x20 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x60000000}], 0x1, 0x0, 0x0) [ 793.144119][ C0] sd 0:0:1:0: tag#8161 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 793.148226][T31128] kmem_cache_alloc+0x4f/0x320 [ 793.148253][T31128] jbd2__journal_start+0xf7/0x3f0 [ 793.154596][ C0] sd 0:0:1:0: tag#8161 CDB[20]: ba [ 793.158964][T31128] __ext4_journal_start_sb+0x159/0x310 [ 793.158993][T31128] ext4_iomap_begin+0x408/0x630 [ 793.159016][T31128] ? ext4_alloc_da_blocks+0x100/0x100 [ 793.221913][T31128] iomap_iter+0x395/0x4a0 [ 793.226438][T31128] __iomap_dio_rw+0xb78/0x1070 [ 793.231244][T31128] iomap_dio_rw+0x38/0x80 [ 793.235586][T31128] ? ext4_file_write_iter+0x461/0x1200 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x65580000}], 0x1, 0x0, 0x0) [ 793.241092][T31128] ext4_file_write_iter+0xac3/0x1200 [ 793.246462][T31128] ? ext4_file_write_iter+0x461/0x1200 [ 793.251917][T31128] do_iter_readv_writev+0x2de/0x380 [ 793.257169][T31128] do_iter_write+0x192/0x5c0 [ 793.261816][T31128] ? splice_from_pipe_next+0x34f/0x3b0 [ 793.267269][T31128] ? kmalloc_array+0x2d/0x40 [ 793.272047][T31128] vfs_iter_write+0x4c/0x70 [ 793.276564][T31128] iter_file_splice_write+0x43a/0x790 [ 793.281938][T31128] ? splice_from_pipe+0xd0/0xd0 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x81000000}], 0x1, 0x0, 0x0) 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x88470000}], 0x1, 0x0, 0x0) [ 793.286789][T31128] direct_splice_actor+0x80/0xa0 [ 793.291793][T31128] splice_direct_to_actor+0x345/0x650 [ 793.297163][T31128] ? do_splice_direct+0x190/0x190 [ 793.302193][T31128] do_splice_direct+0x106/0x190 [ 793.307102][T31128] do_sendfile+0x675/0xc40 [ 793.311582][T31128] __x64_sys_sendfile64+0x102/0x140 [ 793.317037][T31128] do_syscall_64+0x44/0xd0 [ 793.321456][T31128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 793.327354][T31128] RIP: 0033:0x7fca50b35ae9 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x88480000}], 0x1, 0x0, 0x0) [ 793.331766][T31128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 793.351441][T31128] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 793.359879][T31128] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 793.367871][T31128] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 793.375842][T31128] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 793.383900][T31128] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 793.391948][T31128] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 793.399923][T31128] 19:42:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:01 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x88a8ffff}], 0x1, 0x0, 0x0) 19:42:01 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 22) 19:42:01 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x2b}, {@dmode}]}) 19:42:01 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002809) 19:42:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280b) [ 793.966014][T31356] FAULT_INJECTION: forcing a failure. [ 793.966014][T31356] name failslab, interval 1, probability 0, space 0, times 0 [ 793.978740][T31356] CPU: 0 PID: 31356 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 793.988895][T31356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.998942][T31356] Call Trace: [ 794.002214][T31356] [ 794.005140][T31356] dump_stack_lvl+0xd6/0x122 [ 794.009732][T31356] dump_stack+0x11/0x1b [ 794.013889][T31356] should_fail+0x23c/0x250 [ 794.018321][T31356] ? mempool_alloc_slab+0x16/0x20 [ 794.023345][T31356] __should_failslab+0x81/0x90 [ 794.028184][T31356] should_failslab+0x5/0x20 [ 794.032692][T31356] kmem_cache_alloc+0x4f/0x320 [ 794.037492][T31356] mempool_alloc_slab+0x16/0x20 [ 794.042346][T31356] ? mempool_free+0x130/0x130 [ 794.047018][T31356] mempool_alloc+0x9d/0x310 [ 794.051520][T31356] ? preempt_count_add+0x4e/0x90 [ 794.056454][T31356] ? _raw_read_unlock+0x13/0x30 [ 794.061302][T31356] ? jbd2_transaction_committed+0xad/0xc0 [ 794.067021][T31356] bio_alloc_bioset+0xcc/0x560 [ 794.071814][T31356] ? iov_iter_alignment+0x34b/0x370 [ 794.077102][T31356] iomap_dio_bio_iter+0x5ed/0xc70 [ 794.082127][T31356] ? ext4_alloc_da_blocks+0x100/0x100 [ 794.087556][T31356] __iomap_dio_rw+0x8b5/0x1070 [ 794.092323][T31356] iomap_dio_rw+0x38/0x80 [ 794.096764][T31356] ? ext4_file_write_iter+0x461/0x1200 [ 794.102221][T31356] ext4_file_write_iter+0xac3/0x1200 [ 794.107543][T31356] ? ext4_file_write_iter+0x461/0x1200 [ 794.113021][T31356] do_iter_readv_writev+0x2de/0x380 [ 794.118238][T31356] do_iter_write+0x192/0x5c0 [ 794.122854][T31356] ? splice_from_pipe_next+0x34f/0x3b0 [ 794.128351][T31356] ? kmalloc_array+0x2d/0x40 [ 794.132937][T31356] vfs_iter_write+0x4c/0x70 [ 794.137503][T31356] iter_file_splice_write+0x43a/0x790 [ 794.142957][T31356] ? splice_from_pipe+0xd0/0xd0 [ 794.147805][T31356] direct_splice_actor+0x80/0xa0 [ 794.152749][T31356] splice_direct_to_actor+0x345/0x650 [ 794.158172][T31356] ? do_splice_direct+0x190/0x190 [ 794.163323][T31356] do_splice_direct+0x106/0x190 [ 794.168172][T31356] do_sendfile+0x675/0xc40 [ 794.172636][T31356] __x64_sys_sendfile64+0x102/0x140 [ 794.177830][T31356] do_syscall_64+0x44/0xd0 [ 794.182755][T31356] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 794.188784][T31356] RIP: 0033:0x7fca50b35ae9 [ 794.193253][T31356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:42:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280c) 19:42:02 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xa6ffffff}], 0x1, 0x0, 0x0) [ 794.212864][T31356] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 794.221279][T31356] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 794.229248][T31356] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 794.237240][T31356] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 794.245212][T31356] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 794.253176][T31356] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 794.261139][T31356] [ 794.299809][ C0] sd 0:0:1:0: tag#8170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 794.309690][ C0] sd 0:0:1:0: tag#8170 CDB: opcode=0xe5 (vendor) [ 794.316019][ C0] sd 0:0:1:0: tag#8170 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 794.325103][ C0] sd 0:0:1:0: tag#8170 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 794.334152][ C0] sd 0:0:1:0: tag#8170 CDB[20]: ba 19:42:02 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc00e0000}], 0x1, 0x0, 0x0) 19:42:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x2d}, {@dmode}]}) 19:42:02 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xc3ffffff}], 0x1, 0x0, 0x0) 19:42:02 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xffffa888}], 0x1, 0x0, 0x0) 19:42:02 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xffffffa6}], 0x1, 0x0, 0x0) 19:42:02 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 23) 19:42:02 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x2e}, {@dmode}]}) 19:42:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280a) 19:42:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280d) [ 795.070535][T31687] FAULT_INJECTION: forcing a failure. [ 795.070535][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 795.083266][T31687] CPU: 1 PID: 31687 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 795.093421][T31687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.103471][T31687] Call Trace: [ 795.106745][T31687] [ 795.109663][T31687] dump_stack_lvl+0xd6/0x122 [ 795.114255][T31687] dump_stack+0x11/0x1b [ 795.118476][T31687] should_fail+0x23c/0x250 [ 795.122972][T31687] ? jbd2__journal_start+0xf7/0x3f0 [ 795.128170][T31687] __should_failslab+0x81/0x90 [ 795.132953][T31687] should_failslab+0x5/0x20 [ 795.137871][T31687] kmem_cache_alloc+0x4f/0x320 [ 795.142654][T31687] jbd2__journal_start+0xf7/0x3f0 [ 795.147692][T31687] __ext4_journal_start_sb+0x159/0x310 [ 795.153210][T31687] ext4_iomap_begin+0x408/0x630 [ 795.158099][T31687] ? ext4_alloc_da_blocks+0x100/0x100 [ 795.163465][T31687] iomap_iter+0x395/0x4a0 [ 795.167789][T31687] __iomap_dio_rw+0xb78/0x1070 [ 795.172550][T31687] ? _raw_spin_lock_irq+0x41/0x50 [ 795.177660][T31687] iomap_dio_rw+0x38/0x80 [ 795.181986][T31687] ? ext4_file_write_iter+0x461/0x1200 [ 795.187526][T31687] ext4_file_write_iter+0xac3/0x1200 [ 795.192877][T31687] ? ext4_file_write_iter+0x461/0x1200 [ 795.198341][T31687] do_iter_readv_writev+0x2de/0x380 [ 795.203576][T31687] do_iter_write+0x192/0x5c0 [ 795.208202][T31687] ? splice_from_pipe_next+0x34f/0x3b0 [ 795.213662][T31687] ? kmalloc_array+0x2d/0x40 [ 795.218250][T31687] vfs_iter_write+0x4c/0x70 [ 795.222755][T31687] iter_file_splice_write+0x43a/0x790 [ 795.228137][T31687] ? splice_from_pipe+0xd0/0xd0 [ 795.233032][T31687] direct_splice_actor+0x80/0xa0 [ 795.237973][T31687] splice_direct_to_actor+0x345/0x650 [ 795.243349][T31687] ? do_splice_direct+0x190/0x190 [ 795.248451][T31687] do_splice_direct+0x106/0x190 [ 795.253307][T31687] do_sendfile+0x675/0xc40 [ 795.257725][T31687] __x64_sys_sendfile64+0x102/0x140 [ 795.262918][T31687] do_syscall_64+0x44/0xd0 [ 795.267335][T31687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.273228][T31687] RIP: 0033:0x7fca50b35ae9 [ 795.277637][T31687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.297234][T31687] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.305642][T31687] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:42:03 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0xffffffc3}], 0x1, 0x0, 0x0) [ 795.313632][T31687] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 795.322147][T31687] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.330116][T31687] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 795.338087][T31687] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 795.346052][T31687] 19:42:03 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x2, 0x0, 0x0) 19:42:03 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 24) [ 795.372814][ C1] sd 0:0:1:0: tag#8148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 795.382701][ C1] sd 0:0:1:0: tag#8148 CDB: opcode=0xe5 (vendor) [ 795.389166][ C1] sd 0:0:1:0: tag#8148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 795.398294][ C1] sd 0:0:1:0: tag#8148 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 795.407356][ C1] sd 0:0:1:0: tag#8148 CDB[20]: ba [ 795.438865][T31700] FAULT_INJECTION: forcing a failure. [ 795.438865][T31700] name failslab, interval 1, probability 0, space 0, times 0 [ 795.451676][T31700] CPU: 0 PID: 31700 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 795.461826][T31700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.471887][T31700] Call Trace: [ 795.475174][T31700] [ 795.478479][T31700] dump_stack_lvl+0xd6/0x122 [ 795.483120][T31700] dump_stack+0x11/0x1b [ 795.487273][T31700] should_fail+0x23c/0x250 [ 795.491761][T31700] ? jbd2__journal_start+0xf7/0x3f0 [ 795.496953][T31700] __should_failslab+0x81/0x90 [ 795.501717][T31700] should_failslab+0x5/0x20 [ 795.506250][T31700] kmem_cache_alloc+0x4f/0x320 [ 795.511027][T31700] jbd2__journal_start+0xf7/0x3f0 [ 795.516148][T31700] __ext4_journal_start_sb+0x159/0x310 [ 795.521709][T31700] ext4_iomap_begin+0x408/0x630 [ 795.526668][T31700] ? ext4_alloc_da_blocks+0x100/0x100 [ 795.532042][T31700] iomap_iter+0x395/0x4a0 [ 795.536385][T31700] __iomap_dio_rw+0xb78/0x1070 [ 795.541164][T31700] ? _raw_spin_lock_irq+0x41/0x50 [ 795.546237][T31700] iomap_dio_rw+0x38/0x80 [ 795.550577][T31700] ? ext4_file_write_iter+0x461/0x1200 [ 795.556091][T31700] ext4_file_write_iter+0xac3/0x1200 [ 795.561375][T31700] ? ext4_file_write_iter+0x461/0x1200 [ 795.566854][T31700] do_iter_readv_writev+0x2de/0x380 [ 795.572063][T31700] do_iter_write+0x192/0x5c0 [ 795.576683][T31700] ? splice_from_pipe_next+0x34f/0x3b0 [ 795.582158][T31700] ? kmalloc_array+0x2d/0x40 [ 795.586761][T31700] vfs_iter_write+0x4c/0x70 [ 795.591295][T31700] iter_file_splice_write+0x43a/0x790 [ 795.596686][T31700] ? splice_from_pipe+0xd0/0xd0 [ 795.601595][T31700] direct_splice_actor+0x80/0xa0 [ 795.606612][T31700] splice_direct_to_actor+0x345/0x650 [ 795.612046][T31700] ? do_splice_direct+0x190/0x190 [ 795.617072][T31700] do_splice_direct+0x106/0x190 [ 795.621996][T31700] do_sendfile+0x675/0xc40 [ 795.626444][T31700] __x64_sys_sendfile64+0x102/0x140 [ 795.631638][T31700] do_syscall_64+0x44/0xd0 [ 795.636057][T31700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 795.641969][T31700] RIP: 0033:0x7fca50b35ae9 [ 795.646386][T31700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.665996][T31700] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 795.674455][T31700] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:42:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 795.682508][T31700] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 795.690470][T31700] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.698513][T31700] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 795.706482][T31700] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 795.714450][T31700] 19:42:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0x89}, {@dmode}]}) 19:42:03 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x7, 0x0, 0x0) 19:42:03 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 25) [ 795.735720][ C0] sd 0:0:1:0: tag#8174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 795.745596][ C0] sd 0:0:1:0: tag#8174 CDB: opcode=0xe5 (vendor) [ 795.751961][ C0] sd 0:0:1:0: tag#8174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 795.761019][ C0] sd 0:0:1:0: tag#8174 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 795.770070][ C0] sd 0:0:1:0: tag#8174 CDB[20]: ba [ 795.816103][T31711] FAULT_INJECTION: forcing a failure. [ 795.816103][T31711] name failslab, interval 1, probability 0, space 0, times 0 [ 795.828883][T31711] CPU: 1 PID: 31711 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 795.839074][T31711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.849128][T31711] Call Trace: [ 795.852416][T31711] [ 795.855347][T31711] dump_stack_lvl+0xd6/0x122 [ 795.859943][T31711] dump_stack+0x11/0x1b [ 795.864098][T31711] should_fail+0x23c/0x250 [ 795.868512][T31711] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 795.873844][T31711] __should_failslab+0x81/0x90 [ 795.878638][T31711] should_failslab+0x5/0x20 [ 795.883156][T31711] kmem_cache_alloc+0x4f/0x320 [ 795.887941][T31711] ext4_mb_new_blocks+0x328/0x1ee0 [ 795.893061][T31711] ? bio_will_gap+0xfc/0x4a0 [ 795.897648][T31711] ? ext4_get_branch+0x27d/0x2e0 [ 795.902666][T31711] ext4_ind_map_blocks+0xb1c/0x1740 [ 795.907872][T31711] ext4_map_blocks+0x6e3/0xf00 [ 795.912803][T31711] ext4_iomap_begin+0x4b0/0x630 [ 795.917723][T31711] ? ext4_alloc_da_blocks+0x100/0x100 [ 795.923133][T31711] iomap_iter+0x395/0x4a0 [ 795.927515][T31711] __iomap_dio_rw+0xb78/0x1070 [ 795.932293][T31711] iomap_dio_rw+0x38/0x80 [ 795.936706][T31711] ? ext4_file_write_iter+0x461/0x1200 [ 795.942161][T31711] ext4_file_write_iter+0xac3/0x1200 [ 795.947481][T31711] ? ext4_file_write_iter+0x461/0x1200 [ 795.952945][T31711] do_iter_readv_writev+0x2de/0x380 [ 795.958233][T31711] do_iter_write+0x192/0x5c0 [ 795.962887][T31711] ? splice_from_pipe_next+0x34f/0x3b0 [ 795.968373][T31711] ? kmalloc_array+0x2d/0x40 [ 795.973024][T31711] vfs_iter_write+0x4c/0x70 [ 795.977536][T31711] iter_file_splice_write+0x43a/0x790 [ 795.982936][T31711] ? splice_from_pipe+0xd0/0xd0 [ 795.988139][T31711] direct_splice_actor+0x80/0xa0 [ 795.993229][T31711] splice_direct_to_actor+0x345/0x650 [ 795.998619][T31711] ? do_splice_direct+0x190/0x190 [ 796.003643][T31711] do_splice_direct+0x106/0x190 [ 796.008570][T31711] do_sendfile+0x675/0xc40 [ 796.013007][T31711] __x64_sys_sendfile64+0x102/0x140 [ 796.018209][T31711] do_syscall_64+0x44/0xd0 [ 796.022960][T31711] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.028911][T31711] RIP: 0033:0x7fca50b35ae9 [ 796.033471][T31711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.053075][T31711] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:03 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280b) 19:42:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280e) [ 796.061498][T31711] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 796.069590][T31711] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 796.077560][T31711] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.085550][T31711] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 796.093581][T31711] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 796.101557][T31711] 19:42:03 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 26) 19:42:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xb6}, {@dmode}]}) [ 796.188866][T31919] FAULT_INJECTION: forcing a failure. [ 796.188866][T31919] name failslab, interval 1, probability 0, space 0, times 0 [ 796.201549][T31919] CPU: 1 PID: 31919 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 796.211777][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.221843][T31919] Call Trace: [ 796.225116][T31919] [ 796.228049][T31919] dump_stack_lvl+0xd6/0x122 [ 796.232667][T31919] dump_stack+0x11/0x1b [ 796.236819][T31919] should_fail+0x23c/0x250 [ 796.241267][T31919] ? jbd2__journal_start+0xf7/0x3f0 [ 796.246466][T31919] __should_failslab+0x81/0x90 [ 796.251395][T31919] should_failslab+0x5/0x20 [ 796.255903][T31919] kmem_cache_alloc+0x4f/0x320 [ 796.260677][T31919] jbd2__journal_start+0xf7/0x3f0 [ 796.265701][T31919] __ext4_journal_start_sb+0x159/0x310 [ 796.271167][T31919] ext4_iomap_begin+0x408/0x630 [ 796.276081][T31919] ? ext4_alloc_da_blocks+0x100/0x100 [ 796.281451][T31919] iomap_iter+0x395/0x4a0 [ 796.285782][T31919] __iomap_dio_rw+0xb78/0x1070 [ 796.290550][T31919] iomap_dio_rw+0x38/0x80 [ 796.294992][T31919] ? ext4_file_write_iter+0x461/0x1200 [ 796.300452][T31919] ext4_file_write_iter+0xac3/0x1200 [ 796.305802][T31919] ? ext4_file_write_iter+0x461/0x1200 [ 796.311278][T31919] do_iter_readv_writev+0x2de/0x380 [ 796.316564][T31919] do_iter_write+0x192/0x5c0 [ 796.321155][T31919] ? splice_from_pipe_next+0x34f/0x3b0 [ 796.326699][T31919] ? kmalloc_array+0x2d/0x40 [ 796.331379][T31919] vfs_iter_write+0x4c/0x70 [ 796.335934][T31919] iter_file_splice_write+0x43a/0x790 [ 796.341311][T31919] ? splice_from_pipe+0xd0/0xd0 [ 796.346203][T31919] direct_splice_actor+0x80/0xa0 [ 796.351178][T31919] splice_direct_to_actor+0x345/0x650 [ 796.356550][T31919] ? do_splice_direct+0x190/0x190 [ 796.361583][T31919] do_splice_direct+0x106/0x190 [ 796.366501][T31919] do_sendfile+0x675/0xc40 [ 796.370915][T31919] __x64_sys_sendfile64+0x102/0x140 [ 796.376243][T31919] do_syscall_64+0x44/0xd0 [ 796.380659][T31919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.386628][T31919] RIP: 0033:0x7fca50b35ae9 [ 796.391039][T31919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.410691][T31919] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 796.419137][T31919] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 796.427205][T31919] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 19:42:04 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 27) [ 796.435184][T31919] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.443152][T31919] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 796.451252][T31919] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 796.459313][T31919] [ 796.494996][T31921] FAULT_INJECTION: forcing a failure. [ 796.494996][T31921] name failslab, interval 1, probability 0, space 0, times 0 [ 796.507686][T31921] CPU: 1 PID: 31921 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 796.517849][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.527901][T31921] Call Trace: [ 796.531175][T31921] [ 796.534098][T31921] dump_stack_lvl+0xd6/0x122 [ 796.538717][T31921] dump_stack+0x11/0x1b [ 796.542869][T31921] should_fail+0x23c/0x250 [ 796.547283][T31921] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 796.552623][T31921] __should_failslab+0x81/0x90 [ 796.557387][T31921] should_failslab+0x5/0x20 [ 796.561899][T31921] kmem_cache_alloc+0x4f/0x320 [ 796.566710][T31921] ext4_mb_new_blocks+0x328/0x1ee0 [ 796.571852][T31921] ? bio_will_gap+0xfc/0x4a0 [ 796.576475][T31921] ? ext4_get_branch+0x27d/0x2e0 [ 796.581440][T31921] ext4_ind_map_blocks+0xb1c/0x1740 [ 796.586660][T31921] ext4_map_blocks+0x6e3/0xf00 [ 796.591453][T31921] ext4_iomap_begin+0x4b0/0x630 [ 796.596303][T31921] ? ext4_alloc_da_blocks+0x100/0x100 [ 796.601670][T31921] iomap_iter+0x395/0x4a0 [ 796.606082][T31921] __iomap_dio_rw+0xb78/0x1070 [ 796.610848][T31921] iomap_dio_rw+0x38/0x80 [ 796.615242][T31921] ? ext4_file_write_iter+0x461/0x1200 [ 796.620690][T31921] ext4_file_write_iter+0xac3/0x1200 [ 796.626010][T31921] ? ext4_file_write_iter+0x461/0x1200 [ 796.631464][T31921] do_iter_readv_writev+0x2de/0x380 [ 796.636736][T31921] do_iter_write+0x192/0x5c0 [ 796.641330][T31921] ? splice_from_pipe_next+0x34f/0x3b0 [ 796.646827][T31921] ? kmalloc_array+0x2d/0x40 [ 796.651442][T31921] vfs_iter_write+0x4c/0x70 [ 796.655948][T31921] iter_file_splice_write+0x43a/0x790 [ 796.661326][T31921] ? splice_from_pipe+0xd0/0xd0 [ 796.666184][T31921] direct_splice_actor+0x80/0xa0 [ 796.671241][T31921] splice_direct_to_actor+0x345/0x650 [ 796.676631][T31921] ? do_splice_direct+0x190/0x190 [ 796.681655][T31921] do_splice_direct+0x106/0x190 [ 796.686530][T31921] do_sendfile+0x675/0xc40 [ 796.691022][T31921] __x64_sys_sendfile64+0x102/0x140 [ 796.696254][T31921] do_syscall_64+0x44/0xd0 [ 796.700741][T31921] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 796.706634][T31921] RIP: 0033:0x7fca50b35ae9 [ 796.711039][T31921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.730640][T31921] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:04 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x300, 0x0, 0x0) 19:42:04 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xb8}, {@dmode}]}) 19:42:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 796.739141][T31921] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 796.747157][T31921] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 796.755153][T31921] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.763118][T31921] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 796.771131][T31921] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 796.779136][T31921] 19:42:04 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 28) [ 796.842843][ C0] sd 0:0:1:0: tag#8144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 796.852735][ C0] sd 0:0:1:0: tag#8144 CDB: opcode=0xe5 (vendor) [ 796.859119][ C0] sd 0:0:1:0: tag#8144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 796.868177][ C0] sd 0:0:1:0: tag#8144 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 796.877242][ C0] sd 0:0:1:0: tag#8144 CDB[20]: ba [ 796.894016][T31932] FAULT_INJECTION: forcing a failure. [ 796.894016][T31932] name failslab, interval 1, probability 0, space 0, times 0 [ 796.906729][T31932] CPU: 1 PID: 31932 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 796.917005][T31932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.927053][T31932] Call Trace: [ 796.930402][T31932] [ 796.933407][T31932] dump_stack_lvl+0xd6/0x122 [ 796.938020][T31932] dump_stack+0x11/0x1b [ 796.942173][T31932] should_fail+0x23c/0x250 [ 796.946670][T31932] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 796.951974][T31932] __should_failslab+0x81/0x90 [ 796.956816][T31932] should_failslab+0x5/0x20 [ 796.961405][T31932] kmem_cache_alloc+0x4f/0x320 [ 796.966240][T31932] ext4_mb_new_blocks+0x328/0x1ee0 [ 796.971357][T31932] ? bio_will_gap+0xfc/0x4a0 [ 796.976037][T31932] ? ext4_get_branch+0x27d/0x2e0 [ 796.980985][T31932] ext4_ind_map_blocks+0xb1c/0x1740 [ 796.986327][T31932] ext4_map_blocks+0x6e3/0xf00 [ 796.991099][T31932] ext4_iomap_begin+0x4b0/0x630 [ 796.995954][T31932] ? ext4_alloc_da_blocks+0x100/0x100 [ 797.001367][T31932] iomap_iter+0x395/0x4a0 [ 797.005780][T31932] __iomap_dio_rw+0xb78/0x1070 [ 797.010602][T31932] iomap_dio_rw+0x38/0x80 [ 797.014935][T31932] ? ext4_file_write_iter+0x461/0x1200 [ 797.020475][T31932] ext4_file_write_iter+0xac3/0x1200 [ 797.026302][T31932] ? ext4_file_write_iter+0x461/0x1200 [ 797.031820][T31932] do_iter_readv_writev+0x2de/0x380 [ 797.037016][T31932] do_iter_write+0x192/0x5c0 [ 797.041678][T31932] ? splice_from_pipe_next+0x34f/0x3b0 [ 797.047137][T31932] ? kmalloc_array+0x2d/0x40 [ 797.051729][T31932] vfs_iter_write+0x4c/0x70 [ 797.056233][T31932] iter_file_splice_write+0x43a/0x790 [ 797.061608][T31932] ? splice_from_pipe+0xd0/0xd0 [ 797.066479][T31932] direct_splice_actor+0x80/0xa0 [ 797.071481][T31932] splice_direct_to_actor+0x345/0x650 [ 797.076858][T31932] ? do_splice_direct+0x190/0x190 [ 797.081883][T31932] do_splice_direct+0x106/0x190 [ 797.086745][T31932] do_sendfile+0x675/0xc40 [ 797.091164][T31932] __x64_sys_sendfile64+0x102/0x140 [ 797.096401][T31932] do_syscall_64+0x44/0xd0 [ 797.100815][T31932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.106863][T31932] RIP: 0033:0x7fca50b35ae9 [ 797.111351][T31932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 797.130956][T31932] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:05 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280c) 19:42:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000280f) 19:42:05 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xba}, {@dmode}]}) [ 797.139406][T31932] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 797.147375][T31932] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 797.155342][T31932] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.163310][T31932] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 797.171286][T31932] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 797.179257][T31932] 19:42:05 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 29) [ 797.257843][T32140] FAULT_INJECTION: forcing a failure. [ 797.257843][T32140] name failslab, interval 1, probability 0, space 0, times 0 [ 797.270648][T32140] CPU: 0 PID: 32140 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 797.280854][T32140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.291101][T32140] Call Trace: [ 797.294379][T32140] [ 797.297333][T32140] dump_stack_lvl+0xd6/0x122 [ 797.301927][T32140] dump_stack+0x11/0x1b [ 797.306082][T32140] should_fail+0x23c/0x250 [ 797.310542][T32140] ? jbd2__journal_start+0xf7/0x3f0 [ 797.315756][T32140] __should_failslab+0x81/0x90 [ 797.320567][T32140] should_failslab+0x5/0x20 [ 797.325071][T32140] kmem_cache_alloc+0x4f/0x320 [ 797.329833][T32140] jbd2__journal_start+0xf7/0x3f0 [ 797.334926][T32140] __ext4_journal_start_sb+0x159/0x310 [ 797.340474][T32140] ext4_iomap_begin+0x408/0x630 [ 797.345391][T32140] ? ext4_alloc_da_blocks+0x100/0x100 [ 797.350768][T32140] iomap_iter+0x395/0x4a0 [ 797.355137][T32140] __iomap_dio_rw+0xb78/0x1070 [ 797.359906][T32140] ? _raw_spin_lock_irq+0x41/0x50 [ 797.364951][T32140] iomap_dio_rw+0x38/0x80 [ 797.369346][T32140] ? ext4_file_write_iter+0x461/0x1200 [ 797.374932][T32140] ext4_file_write_iter+0xac3/0x1200 [ 797.380255][T32140] ? ext4_file_write_iter+0x461/0x1200 [ 797.385715][T32140] do_iter_readv_writev+0x2de/0x380 [ 797.390982][T32140] do_iter_write+0x192/0x5c0 [ 797.395637][T32140] ? splice_from_pipe_next+0x34f/0x3b0 [ 797.401092][T32140] ? kmalloc_array+0x2d/0x40 [ 797.405797][T32140] vfs_iter_write+0x4c/0x70 [ 797.410310][T32140] iter_file_splice_write+0x43a/0x790 [ 797.415741][T32140] ? splice_from_pipe+0xd0/0xd0 [ 797.420628][T32140] direct_splice_actor+0x80/0xa0 [ 797.425569][T32140] splice_direct_to_actor+0x345/0x650 [ 797.431024][T32140] ? do_splice_direct+0x190/0x190 [ 797.436118][T32140] do_splice_direct+0x106/0x190 [ 797.440991][T32140] do_sendfile+0x675/0xc40 [ 797.445401][T32140] __x64_sys_sendfile64+0x102/0x140 [ 797.450604][T32140] do_syscall_64+0x44/0xd0 [ 797.455091][T32140] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.461062][T32140] RIP: 0033:0x7fca50b35ae9 [ 797.465473][T32140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 797.485081][T32140] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 797.493566][T32140] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:42:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) [ 797.501533][T32140] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 797.509692][T32140] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.517656][T32140] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 797.525621][T32140] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 797.533597][T32140] 19:42:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002810) 19:42:05 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 30) [ 797.562279][ C0] sd 0:0:1:0: tag#8168 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 797.572143][ C0] sd 0:0:1:0: tag#8168 CDB: opcode=0xe5 (vendor) [ 797.578548][ C0] sd 0:0:1:0: tag#8168 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 797.587622][ C0] sd 0:0:1:0: tag#8168 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 797.596732][ C0] sd 0:0:1:0: tag#8168 CDB[20]: ba [ 797.625578][T32246] FAULT_INJECTION: forcing a failure. [ 797.625578][T32246] name failslab, interval 1, probability 0, space 0, times 0 [ 797.638408][T32246] CPU: 1 PID: 32246 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 797.648560][T32246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.658667][T32246] Call Trace: [ 797.661993][T32246] [ 797.664939][T32246] dump_stack_lvl+0xd6/0x122 [ 797.669554][T32246] dump_stack+0x11/0x1b [ 797.673704][T32246] should_fail+0x23c/0x250 [ 797.678190][T32246] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 797.683501][T32246] __should_failslab+0x81/0x90 [ 797.688263][T32246] should_failslab+0x5/0x20 [ 797.692776][T32246] kmem_cache_alloc+0x4f/0x320 [ 797.697540][T32246] ext4_mb_new_blocks+0x328/0x1ee0 [ 797.702694][T32246] ? bio_will_gap+0xfc/0x4a0 [ 797.707286][T32246] ? ext4_get_branch+0x27d/0x2e0 [ 797.712279][T32246] ext4_ind_map_blocks+0xb1c/0x1740 [ 797.717482][T32246] ext4_map_blocks+0x6e3/0xf00 [ 797.722880][T32246] ext4_iomap_begin+0x4b0/0x630 [ 797.727743][T32246] ? ext4_alloc_da_blocks+0x100/0x100 [ 797.733122][T32246] iomap_iter+0x395/0x4a0 [ 797.737538][T32246] __iomap_dio_rw+0xb78/0x1070 [ 797.742354][T32246] iomap_dio_rw+0x38/0x80 [ 797.746680][T32246] ? ext4_file_write_iter+0x461/0x1200 [ 797.752134][T32246] ext4_file_write_iter+0xac3/0x1200 [ 797.757480][T32246] ? ext4_file_write_iter+0x461/0x1200 [ 797.762951][T32246] do_iter_readv_writev+0x2de/0x380 [ 797.768151][T32246] do_iter_write+0x192/0x5c0 19:42:05 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x2, 0x0) [ 797.772745][T32246] ? splice_from_pipe_next+0x34f/0x3b0 [ 797.778201][T32246] ? kmalloc_array+0x2d/0x40 [ 797.782885][T32246] vfs_iter_write+0x4c/0x70 [ 797.787432][T32246] iter_file_splice_write+0x43a/0x790 [ 797.792801][T32246] ? splice_from_pipe+0xd0/0xd0 [ 797.797645][T32246] direct_splice_actor+0x80/0xa0 [ 797.802599][T32246] splice_direct_to_actor+0x345/0x650 [ 797.807973][T32246] ? do_splice_direct+0x190/0x190 [ 797.812992][T32246] do_splice_direct+0x106/0x190 [ 797.817993][T32246] do_sendfile+0x675/0xc40 [ 797.822521][T32246] __x64_sys_sendfile64+0x102/0x140 [ 797.827765][T32246] do_syscall_64+0x44/0xd0 [ 797.832250][T32246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 797.838208][T32246] RIP: 0033:0x7fca50b35ae9 [ 797.842620][T32246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 797.862253][T32246] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:05 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 31) 19:42:05 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x3, 0x0) 19:42:05 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xbc}, {@dmode}]}) [ 797.870671][T32246] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 797.878737][T32246] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 797.886700][T32246] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 797.894667][T32246] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 797.902730][T32246] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 797.910698][T32246] [ 797.994570][T32256] FAULT_INJECTION: forcing a failure. [ 797.994570][T32256] name failslab, interval 1, probability 0, space 0, times 0 [ 798.007250][T32256] CPU: 0 PID: 32256 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 798.017403][T32256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.027720][T32256] Call Trace: [ 798.030995][T32256] [ 798.033920][T32256] dump_stack_lvl+0xd6/0x122 [ 798.038529][T32256] dump_stack+0x11/0x1b [ 798.042690][T32256] should_fail+0x23c/0x250 [ 798.047106][T32256] ? mempool_alloc_slab+0x16/0x20 [ 798.052137][T32256] __should_failslab+0x81/0x90 [ 798.056909][T32256] should_failslab+0x5/0x20 [ 798.061426][T32256] kmem_cache_alloc+0x4f/0x320 [ 798.066198][T32256] mempool_alloc_slab+0x16/0x20 [ 798.071107][T32256] ? mempool_free+0x130/0x130 [ 798.075792][T32256] mempool_alloc+0x9d/0x310 [ 798.080309][T32256] ? preempt_count_add+0x4e/0x90 [ 798.085253][T32256] ? _raw_read_unlock+0x13/0x30 [ 798.090223][T32256] ? jbd2_transaction_committed+0xad/0xc0 [ 798.095945][T32256] bio_alloc_bioset+0xcc/0x560 [ 798.100712][T32256] ? iov_iter_alignment+0x34b/0x370 [ 798.105912][T32256] iomap_dio_bio_iter+0x5ed/0xc70 [ 798.110940][T32256] ? ext4_alloc_da_blocks+0x100/0x100 [ 798.116325][T32256] __iomap_dio_rw+0x8b5/0x1070 [ 798.121105][T32256] iomap_dio_rw+0x38/0x80 [ 798.125467][T32256] ? ext4_file_write_iter+0x461/0x1200 [ 798.130917][T32256] ext4_file_write_iter+0xac3/0x1200 [ 798.136380][T32256] ? ext4_file_write_iter+0x461/0x1200 [ 798.142015][T32256] do_iter_readv_writev+0x2de/0x380 [ 798.147217][T32256] do_iter_write+0x192/0x5c0 [ 798.151848][T32256] ? splice_from_pipe_next+0x34f/0x3b0 [ 798.157349][T32256] ? kmalloc_array+0x2d/0x40 [ 798.161939][T32256] vfs_iter_write+0x4c/0x70 [ 798.166445][T32256] iter_file_splice_write+0x43a/0x790 [ 798.171850][T32256] ? splice_from_pipe+0xd0/0xd0 [ 798.176707][T32256] direct_splice_actor+0x80/0xa0 [ 798.181660][T32256] splice_direct_to_actor+0x345/0x650 [ 798.187064][T32256] ? do_splice_direct+0x190/0x190 [ 798.192100][T32256] do_splice_direct+0x106/0x190 [ 798.197030][T32256] do_sendfile+0x675/0xc40 [ 798.201455][T32256] __x64_sys_sendfile64+0x102/0x140 [ 798.206651][T32256] do_syscall_64+0x44/0xd0 [ 798.211130][T32256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 798.217025][T32256] RIP: 0033:0x7fca50b35ae9 [ 798.221500][T32256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:42:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002811) [ 798.241123][T32256] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.249590][T32256] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 798.257557][T32256] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 798.265585][T32256] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.273712][T32256] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 798.281703][T32256] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 798.289673][T32256] 19:42:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280d) 19:42:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4, 0x0) 19:42:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xbe}, {@dmode}]}) 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x5, 0x0) 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6, 0x0) [ 798.386928][ C0] sd 0:0:1:0: tag#8155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 798.396922][ C0] sd 0:0:1:0: tag#8155 CDB: opcode=0xe5 (vendor) [ 798.403252][ C0] sd 0:0:1:0: tag#8155 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 798.412334][ C0] sd 0:0:1:0: tag#8155 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 798.421396][ C0] sd 0:0:1:0: tag#8155 CDB[20]: ba 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x7, 0x0) 19:42:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xc0}, {@dmode}]}) 19:42:06 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 32) 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8, 0x0) 19:42:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xc2}, {@dmode}]}) [ 798.728110][T32500] FAULT_INJECTION: forcing a failure. [ 798.728110][T32500] name failslab, interval 1, probability 0, space 0, times 0 [ 798.740897][T32500] CPU: 0 PID: 32500 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 798.751054][T32500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.761144][T32500] Call Trace: [ 798.764437][T32500] [ 798.767358][T32500] dump_stack_lvl+0xd6/0x122 [ 798.771947][T32500] dump_stack+0x11/0x1b [ 798.776097][T32500] should_fail+0x23c/0x250 [ 798.780619][T32500] ? jbd2__journal_start+0xf7/0x3f0 [ 798.785909][T32500] __should_failslab+0x81/0x90 [ 798.790678][T32500] should_failslab+0x5/0x20 [ 798.795200][T32500] kmem_cache_alloc+0x4f/0x320 [ 798.799957][T32500] jbd2__journal_start+0xf7/0x3f0 [ 798.804980][T32500] __ext4_journal_start_sb+0x159/0x310 [ 798.810460][T32500] ext4_iomap_begin+0x408/0x630 [ 798.815394][T32500] ? ext4_alloc_da_blocks+0x100/0x100 [ 798.820769][T32500] iomap_iter+0x395/0x4a0 [ 798.825156][T32500] __iomap_dio_rw+0xb78/0x1070 [ 798.829927][T32500] ? _raw_spin_lock_irq+0x41/0x50 [ 798.834954][T32500] iomap_dio_rw+0x38/0x80 [ 798.839397][T32500] ? ext4_file_write_iter+0x461/0x1200 [ 798.844872][T32500] ext4_file_write_iter+0xac3/0x1200 [ 798.850153][T32500] ? ext4_file_write_iter+0x461/0x1200 [ 798.855617][T32500] do_iter_readv_writev+0x2de/0x380 [ 798.860855][T32500] do_iter_write+0x192/0x5c0 [ 798.865540][T32500] ? splice_from_pipe_next+0x34f/0x3b0 [ 798.871078][T32500] ? kmalloc_array+0x2d/0x40 [ 798.875680][T32500] vfs_iter_write+0x4c/0x70 [ 798.880289][T32500] iter_file_splice_write+0x43a/0x790 [ 798.885836][T32500] ? splice_from_pipe+0xd0/0xd0 [ 798.890688][T32500] direct_splice_actor+0x80/0xa0 [ 798.895698][T32500] splice_direct_to_actor+0x345/0x650 [ 798.901069][T32500] ? do_splice_direct+0x190/0x190 [ 798.906163][T32500] do_splice_direct+0x106/0x190 [ 798.911049][T32500] do_sendfile+0x675/0xc40 [ 798.915527][T32500] __x64_sys_sendfile64+0x102/0x140 [ 798.920816][T32500] do_syscall_64+0x44/0xd0 [ 798.925229][T32500] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 798.931147][T32500] RIP: 0033:0x7fca50b35ae9 [ 798.935552][T32500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 798.955186][T32500] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 798.963591][T32500] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:42:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002812) [ 798.971572][T32500] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 798.979545][T32500] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.987517][T32500] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 798.995479][T32500] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 799.003455][T32500] 19:42:06 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280e) 19:42:06 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa, 0x0) 19:42:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x80002800) 19:42:06 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 33) 19:42:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xc4}, {@dmode}]}) [ 799.089525][ C0] sd 0:0:1:0: tag#8174 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 799.093091][T32698] FAULT_INJECTION: forcing a failure. [ 799.093091][T32698] name failslab, interval 1, probability 0, space 0, times 0 [ 799.099402][ C0] sd 0:0:1:0: tag#8174 CDB: opcode=0xe5 (vendor) [ 799.099421][ C0] sd 0:0:1:0: tag#8174 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 799.112017][T32698] CPU: 1 PID: 32698 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 799.118353][ C0] sd 0:0:1:0: tag#8174 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 799.127313][T32698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.127326][T32698] Call Trace: [ 799.137494][ C0] sd 0:0:1:0: tag#8174 CDB[20]: ba [ 799.146460][T32698] [ 799.146491][T32698] dump_stack_lvl+0xd6/0x122 [ 799.172496][T32698] dump_stack+0x11/0x1b [ 799.176699][T32698] should_fail+0x23c/0x250 [ 799.181389][T32698] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 799.186771][T32698] __should_failslab+0x81/0x90 [ 799.191711][T32698] should_failslab+0x5/0x20 [ 799.196254][T32698] kmem_cache_alloc+0x4f/0x320 [ 799.201042][T32698] ext4_mb_new_blocks+0x328/0x1ee0 [ 799.206341][T32698] ? bio_will_gap+0xfc/0x4a0 [ 799.210966][T32698] ? ext4_get_branch+0x27d/0x2e0 [ 799.215982][T32698] ext4_ind_map_blocks+0xb1c/0x1740 [ 799.221257][T32698] ext4_map_blocks+0x6e3/0xf00 [ 799.226021][T32698] ext4_iomap_begin+0x4b0/0x630 [ 799.230893][T32698] ? ext4_alloc_da_blocks+0x100/0x100 [ 799.236306][T32698] iomap_iter+0x395/0x4a0 [ 799.240644][T32698] __iomap_dio_rw+0xb78/0x1070 [ 799.245471][T32698] iomap_dio_rw+0x38/0x80 [ 799.249845][T32698] ? ext4_file_write_iter+0x461/0x1200 [ 799.255301][T32698] ext4_file_write_iter+0xac3/0x1200 [ 799.260642][T32698] ? ext4_file_write_iter+0x461/0x1200 [ 799.266105][T32698] do_iter_readv_writev+0x2de/0x380 [ 799.271311][T32698] do_iter_write+0x192/0x5c0 [ 799.275975][T32698] ? splice_from_pipe_next+0x34f/0x3b0 [ 799.281512][T32698] ? kmalloc_array+0x2d/0x40 [ 799.286103][T32698] vfs_iter_write+0x4c/0x70 [ 799.290667][T32698] iter_file_splice_write+0x43a/0x790 [ 799.296048][T32698] ? splice_from_pipe+0xd0/0xd0 [ 799.300899][T32698] direct_splice_actor+0x80/0xa0 [ 799.305866][T32698] splice_direct_to_actor+0x345/0x650 [ 799.311335][T32698] ? do_splice_direct+0x190/0x190 [ 799.316388][T32698] do_splice_direct+0x106/0x190 [ 799.321237][T32698] do_sendfile+0x675/0xc40 [ 799.325654][T32698] __x64_sys_sendfile64+0x102/0x140 [ 799.330880][T32698] do_syscall_64+0x44/0xd0 [ 799.335293][T32698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.341268][T32698] RIP: 0033:0x7fca50b35ae9 [ 799.345679][T32698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.365284][T32698] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.373729][T32698] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 799.381756][T32698] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc, 0x0) 19:42:07 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 34) [ 799.389774][T32698] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.397741][T32698] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 799.405802][T32698] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 799.414207][T32698] [ 799.465363][T32707] FAULT_INJECTION: forcing a failure. [ 799.465363][T32707] name failslab, interval 1, probability 0, space 0, times 0 [ 799.478142][T32707] CPU: 1 PID: 32707 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 799.488298][T32707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.498347][T32707] Call Trace: [ 799.501622][T32707] [ 799.504543][T32707] dump_stack_lvl+0xd6/0x122 [ 799.509168][T32707] dump_stack+0x11/0x1b [ 799.513352][T32707] should_fail+0x23c/0x250 [ 799.517767][T32707] ? mempool_alloc_slab+0x16/0x20 [ 799.522956][T32707] __should_failslab+0x81/0x90 [ 799.527967][T32707] should_failslab+0x5/0x20 [ 799.532483][T32707] kmem_cache_alloc+0x4f/0x320 [ 799.537277][T32707] mempool_alloc_slab+0x16/0x20 [ 799.542237][T32707] ? mempool_free+0x130/0x130 [ 799.546960][T32707] mempool_alloc+0x9d/0x310 [ 799.551662][T32707] ? preempt_count_add+0x4e/0x90 [ 799.556630][T32707] ? _raw_read_unlock+0x13/0x30 [ 799.561565][T32707] ? jbd2_transaction_committed+0xad/0xc0 [ 799.567352][T32707] bio_alloc_bioset+0xcc/0x560 [ 799.572170][T32707] ? iov_iter_alignment+0x34b/0x370 [ 799.577448][T32707] iomap_dio_bio_iter+0x5ed/0xc70 [ 799.582477][T32707] ? ext4_alloc_da_blocks+0x100/0x100 [ 799.587968][T32707] __iomap_dio_rw+0x8b5/0x1070 [ 799.592781][T32707] ? _raw_spin_lock_irq+0x41/0x50 [ 799.597813][T32707] iomap_dio_rw+0x38/0x80 [ 799.602205][T32707] ? ext4_file_write_iter+0x461/0x1200 [ 799.607675][T32707] ext4_file_write_iter+0xac3/0x1200 [ 799.612960][T32707] ? ext4_file_write_iter+0x461/0x1200 [ 799.618461][T32707] do_iter_readv_writev+0x2de/0x380 [ 799.623660][T32707] do_iter_write+0x192/0x5c0 [ 799.628282][T32707] ? splice_from_pipe_next+0x34f/0x3b0 [ 799.633774][T32707] ? kmalloc_array+0x2d/0x40 [ 799.638360][T32707] vfs_iter_write+0x4c/0x70 [ 799.642892][T32707] iter_file_splice_write+0x43a/0x790 [ 799.648272][T32707] ? splice_from_pipe+0xd0/0xd0 [ 799.653199][T32707] direct_splice_actor+0x80/0xa0 [ 799.658157][T32707] splice_direct_to_actor+0x345/0x650 [ 799.663613][T32707] ? do_splice_direct+0x190/0x190 [ 799.668638][T32707] do_splice_direct+0x106/0x190 [ 799.673487][T32707] do_sendfile+0x675/0xc40 [ 799.677977][T32707] __x64_sys_sendfile64+0x102/0x140 [ 799.683200][T32707] do_syscall_64+0x44/0xd0 [ 799.687682][T32707] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 799.693585][T32707] RIP: 0033:0x7fca50b35ae9 [ 799.697995][T32707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 799.717767][T32707] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 799.726352][T32707] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 799.734322][T32707] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 799.742375][T32707] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 799.750367][T32707] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 799.758334][T32707] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 799.766307][T32707] 19:42:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xc6}, {@dmode}]}) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xf, 0x0) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x10, 0x0) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x60, 0x0) 19:42:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002813) 19:42:07 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000280f) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x300, 0x0) 19:42:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xd8}, {@dmode}]}) 19:42:07 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 35) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x500, 0x0) 19:42:07 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x600, 0x0) [ 800.142032][ C0] sd 0:0:1:0: tag#8158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 800.151932][ C0] sd 0:0:1:0: tag#8158 CDB: opcode=0xe5 (vendor) [ 800.158302][ C0] sd 0:0:1:0: tag#8158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 800.167389][ C0] sd 0:0:1:0: tag#8158 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 800.176456][ C0] sd 0:0:1:0: tag#8158 CDB[20]: ba [ 800.191672][ T475] FAULT_INJECTION: forcing a failure. [ 800.191672][ T475] name failslab, interval 1, probability 0, space 0, times 0 [ 800.204403][ T475] CPU: 1 PID: 475 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 800.214454][ T475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.224510][ T475] Call Trace: [ 800.227802][ T475] [ 800.230724][ T475] dump_stack_lvl+0xd6/0x122 [ 800.235319][ T475] dump_stack+0x11/0x1b [ 800.239474][ T475] should_fail+0x23c/0x250 [ 800.243896][ T475] ? mempool_alloc_slab+0x16/0x20 [ 800.248997][ T475] __should_failslab+0x81/0x90 [ 800.253841][ T475] should_failslab+0x5/0x20 [ 800.258367][ T475] kmem_cache_alloc+0x4f/0x320 [ 800.263201][ T475] mempool_alloc_slab+0x16/0x20 [ 800.268121][ T475] ? mempool_free+0x130/0x130 [ 800.272906][ T475] mempool_alloc+0x9d/0x310 [ 800.277415][ T475] ? __tsan_read8+0xe/0x180 [ 800.281945][ T475] bio_alloc_bioset+0xcc/0x560 [ 800.286711][ T475] ? iov_iter_alignment+0x34b/0x370 19:42:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002810) [ 800.291908][ T475] iomap_dio_bio_iter+0x5ed/0xc70 [ 800.296941][ T475] ? ext4_alloc_da_blocks+0x100/0x100 [ 800.302328][ T475] __iomap_dio_rw+0x8b5/0x1070 [ 800.307202][ T475] iomap_dio_rw+0x38/0x80 [ 800.311545][ T475] ? ext4_file_write_iter+0x461/0x1200 [ 800.317057][ T475] ext4_file_write_iter+0xac3/0x1200 [ 800.322358][ T475] ? ext4_file_write_iter+0x461/0x1200 [ 800.327856][ T475] ? kcsan_setup_watchpoint+0x94/0x420 [ 800.333615][ T475] do_iter_readv_writev+0x2de/0x380 [ 800.338848][ T475] do_iter_write+0x192/0x5c0 [ 800.343442][ T475] ? splice_from_pipe_next+0x34f/0x3b0 [ 800.348922][ T475] ? kmalloc_array+0x2d/0x40 [ 800.353510][ T475] vfs_iter_write+0x4c/0x70 [ 800.358135][ T475] iter_file_splice_write+0x43a/0x790 [ 800.363511][ T475] ? splice_from_pipe+0xd0/0xd0 [ 800.368381][ T475] direct_splice_actor+0x80/0xa0 [ 800.373319][ T475] splice_direct_to_actor+0x345/0x650 [ 800.378700][ T475] ? do_splice_direct+0x190/0x190 [ 800.383827][ T475] do_splice_direct+0x106/0x190 [ 800.388722][ T475] do_sendfile+0x675/0xc40 [ 800.393137][ T475] __x64_sys_sendfile64+0x102/0x140 [ 800.398330][ T475] do_syscall_64+0x44/0xd0 [ 800.402750][ T475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 800.408695][ T475] RIP: 0033:0x7fca50b35ae9 [ 800.413098][ T475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 800.432822][ T475] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x700, 0x0) [ 800.441252][ T475] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 800.449238][ T475] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 800.457205][ T475] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 800.465220][ T475] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 800.473195][ T475] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 800.481171][ T475] 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa00, 0x0) 19:42:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xd9}, {@dmode}]}) 19:42:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002814) 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc00, 0x0) 19:42:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xdb}, {@dmode}]}) 19:42:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xec0, 0x0) 19:42:08 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 36) 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xf00, 0x0) 19:42:08 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xdc}, {@dmode}]}) [ 800.830517][ C1] sd 0:0:1:0: tag#8143 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 800.840523][ C1] sd 0:0:1:0: tag#8143 CDB: opcode=0xe5 (vendor) [ 800.846977][ C1] sd 0:0:1:0: tag#8143 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 800.856013][ C1] sd 0:0:1:0: tag#8143 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 800.865095][ C1] sd 0:0:1:0: tag#8143 CDB[20]: ba 19:42:08 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002811) 19:42:08 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x104a, 0x0) [ 800.937229][ T810] FAULT_INJECTION: forcing a failure. [ 800.937229][ T810] name failslab, interval 1, probability 0, space 0, times 0 [ 800.950014][ T810] CPU: 1 PID: 810 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 800.959993][ T810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.970245][ T810] Call Trace: [ 800.973525][ T810] [ 800.976469][ T810] dump_stack_lvl+0xd6/0x122 [ 800.981207][ T810] dump_stack+0x11/0x1b [ 800.985463][ T810] should_fail+0x23c/0x250 [ 800.989877][ T810] ? jbd2__journal_start+0xf7/0x3f0 [ 800.995124][ T810] __should_failslab+0x81/0x90 [ 800.999937][ T810] should_failslab+0x5/0x20 [ 801.004555][ T810] kmem_cache_alloc+0x4f/0x320 [ 801.009329][ T810] jbd2__journal_start+0xf7/0x3f0 [ 801.014461][ T810] __ext4_journal_start_sb+0x159/0x310 [ 801.019927][ T810] ext4_iomap_begin+0x408/0x630 [ 801.024849][ T810] ? ext4_alloc_da_blocks+0x100/0x100 [ 801.030229][ T810] iomap_iter+0x395/0x4a0 [ 801.034613][ T810] __iomap_dio_rw+0xb78/0x1070 [ 801.039382][ T810] ? _raw_spin_lock_irq+0x41/0x50 [ 801.044442][ T810] iomap_dio_rw+0x38/0x80 [ 801.048865][ T810] ? ext4_file_write_iter+0x461/0x1200 [ 801.054424][ T810] ext4_file_write_iter+0xac3/0x1200 [ 801.059770][ T810] ? ext4_file_write_iter+0x461/0x1200 [ 801.065371][ T810] do_iter_readv_writev+0x2de/0x380 [ 801.070591][ T810] do_iter_write+0x192/0x5c0 [ 801.075215][ T810] vfs_iter_write+0x4c/0x70 [ 801.079784][ T810] iter_file_splice_write+0x43a/0x790 [ 801.085212][ T810] ? splice_from_pipe+0xd0/0xd0 [ 801.090206][ T810] direct_splice_actor+0x80/0xa0 [ 801.095152][ T810] splice_direct_to_actor+0x345/0x650 [ 801.100540][ T810] ? do_splice_direct+0x190/0x190 [ 801.105567][ T810] do_splice_direct+0x106/0x190 [ 801.110423][ T810] do_sendfile+0x675/0xc40 [ 801.114929][ T810] __x64_sys_sendfile64+0x102/0x140 [ 801.120264][ T810] do_syscall_64+0x44/0xd0 [ 801.124731][ T810] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.130620][ T810] RIP: 0033:0x7fca50b35ae9 [ 801.135031][ T810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.154842][ T810] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 801.163260][ T810] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 801.171233][ T810] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 801.179215][ T810] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:42:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002812) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4788, 0x0) [ 801.187227][ T810] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 801.195211][ T810] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 801.203188][ T810] 19:42:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002815) 19:42:09 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 37) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4888, 0x0) 19:42:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode, 0xff}, {@dmode}]}) 19:42:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 801.504837][ T1027] FAULT_INJECTION: forcing a failure. [ 801.504837][ T1027] name failslab, interval 1, probability 0, space 0, times 0 [ 801.508378][ C0] sd 0:0:1:0: tag#8164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 801.517622][ T1027] CPU: 1 PID: 1027 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 801.527500][ C0] sd 0:0:1:0: tag#8164 CDB: opcode=0xe5 (vendor) [ 801.537565][ T1027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.537578][ T1027] Call Trace: [ 801.537584][ T1027] [ 801.537590][ T1027] dump_stack_lvl+0xd6/0x122 [ 801.537627][ T1027] dump_stack+0x11/0x1b [ 801.543940][ C0] sd 0:0:1:0: tag#8164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 801.553964][ T1027] should_fail+0x23c/0x250 [ 801.554017][ T1027] ? mempool_alloc_slab+0x16/0x20 [ 801.557324][ C0] sd 0:0:1:0: tag#8164 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 801.560206][ T1027] __should_failslab+0x81/0x90 [ 801.560230][ T1027] should_failslab+0x5/0x20 [ 801.564805][ C0] sd 0:0:1:0: tag#8164 CDB[20]: ba [ 801.568929][ T1027] kmem_cache_alloc+0x4f/0x320 [ 801.568957][ T1027] mempool_alloc_slab+0x16/0x20 [ 801.620463][ T1027] ? mempool_free+0x130/0x130 [ 801.625253][ T1027] mempool_alloc+0x9d/0x310 [ 801.629787][ T1027] ? preempt_count_add+0x4e/0x90 [ 801.634732][ T1027] ? _raw_read_unlock+0x13/0x30 [ 801.639662][ T1027] ? jbd2_transaction_committed+0xad/0xc0 [ 801.645438][ T1027] bio_alloc_bioset+0xcc/0x560 [ 801.650201][ T1027] ? iov_iter_alignment+0x34b/0x370 [ 801.655494][ T1027] iomap_dio_bio_iter+0x5ed/0xc70 [ 801.660656][ T1027] ? ext4_alloc_da_blocks+0x100/0x100 [ 801.666166][ T1027] __iomap_dio_rw+0x8b5/0x1070 [ 801.670937][ T1027] ? _raw_spin_lock_irq+0x41/0x50 [ 801.675968][ T1027] iomap_dio_rw+0x38/0x80 [ 801.680351][ T1027] ? ext4_file_write_iter+0x461/0x1200 [ 801.685813][ T1027] ext4_file_write_iter+0xac3/0x1200 [ 801.691100][ T1027] ? ext4_file_write_iter+0x461/0x1200 [ 801.696585][ T1027] do_iter_readv_writev+0x2de/0x380 [ 801.701828][ T1027] do_iter_write+0x192/0x5c0 [ 801.706467][ T1027] ? splice_from_pipe_next+0x34f/0x3b0 [ 801.711944][ T1027] ? kmalloc_array+0x2d/0x40 [ 801.716595][ T1027] vfs_iter_write+0x4c/0x70 [ 801.721143][ T1027] iter_file_splice_write+0x43a/0x790 [ 801.726541][ T1027] ? splice_from_pipe+0xd0/0xd0 [ 801.731440][ T1027] direct_splice_actor+0x80/0xa0 [ 801.736395][ T1027] splice_direct_to_actor+0x345/0x650 [ 801.741768][ T1027] ? do_splice_direct+0x190/0x190 [ 801.746792][ T1027] do_splice_direct+0x106/0x190 [ 801.751666][ T1027] do_sendfile+0x675/0xc40 [ 801.756107][ T1027] __x64_sys_sendfile64+0x102/0x140 [ 801.761356][ T1027] do_syscall_64+0x44/0xd0 [ 801.765789][ T1027] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.771753][ T1027] RIP: 0033:0x7fca50b35ae9 [ 801.776170][ T1027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.795865][ T1027] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4a10, 0x0) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x5865, 0x0) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6000, 0x0) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6558, 0x0) 19:42:09 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8100, 0x0) [ 801.804315][ T1027] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 801.812293][ T1027] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 801.820443][ T1027] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.828404][ T1027] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 801.836373][ T1027] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 801.844341][ T1027] 19:42:09 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002813) 19:42:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 801.990881][ C1] sd 0:0:1:0: tag#8170 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 802.000776][ C1] sd 0:0:1:0: tag#8170 CDB: opcode=0xe5 (vendor) [ 802.007152][ C1] sd 0:0:1:0: tag#8170 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 802.016171][ C1] sd 0:0:1:0: tag#8170 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 802.025503][ C1] sd 0:0:1:0: tag#8170 CDB[20]: ba 19:42:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002816) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8847, 0x0) 19:42:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x22}}]}) 19:42:10 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 38) [ 802.290055][ T1267] FAULT_INJECTION: forcing a failure. [ 802.290055][ T1267] name failslab, interval 1, probability 0, space 0, times 0 [ 802.302823][ T1267] CPU: 1 PID: 1267 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 802.312883][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.322959][ T1267] Call Trace: [ 802.326225][ T1267] [ 802.329162][ T1267] dump_stack_lvl+0xd6/0x122 [ 802.333808][ T1267] dump_stack+0x11/0x1b [ 802.338112][ T1267] should_fail+0x23c/0x250 [ 802.342527][ T1267] ? mempool_alloc_slab+0x16/0x20 [ 802.347608][ T1267] __should_failslab+0x81/0x90 [ 802.352370][ T1267] should_failslab+0x5/0x20 [ 802.356943][ T1267] kmem_cache_alloc+0x4f/0x320 [ 802.361721][ T1267] mempool_alloc_slab+0x16/0x20 [ 802.366561][ T1267] ? mempool_free+0x130/0x130 [ 802.371227][ T1267] mempool_alloc+0x9d/0x310 [ 802.375747][ T1267] ? preempt_count_add+0x4e/0x90 [ 802.380679][ T1267] ? _raw_read_unlock+0x13/0x30 [ 802.385517][ T1267] ? jbd2_transaction_committed+0xad/0xc0 [ 802.391245][ T1267] bio_alloc_bioset+0xcc/0x560 [ 802.396023][ T1267] ? iov_iter_alignment+0x34b/0x370 [ 802.401269][ T1267] iomap_dio_bio_iter+0x5ed/0xc70 [ 802.406284][ T1267] ? ext4_alloc_da_blocks+0x100/0x100 [ 802.411653][ T1267] __iomap_dio_rw+0x8b5/0x1070 [ 802.416409][ T1267] ? _raw_spin_lock_irq+0x41/0x50 [ 802.421439][ T1267] iomap_dio_rw+0x38/0x80 [ 802.425760][ T1267] ? ext4_file_write_iter+0x461/0x1200 [ 802.431205][ T1267] ext4_file_write_iter+0xac3/0x1200 [ 802.436503][ T1267] ? ext4_file_write_iter+0x461/0x1200 [ 802.441943][ T1267] ? save_fpregs_to_fpstate+0xf5/0x140 [ 802.447390][ T1267] do_iter_readv_writev+0x2de/0x380 [ 802.452577][ T1267] do_iter_write+0x192/0x5c0 [ 802.457218][ T1267] ? splice_from_pipe_next+0x34f/0x3b0 [ 802.462665][ T1267] ? kmalloc_array+0x2d/0x40 [ 802.467244][ T1267] vfs_iter_write+0x4c/0x70 [ 802.471738][ T1267] iter_file_splice_write+0x43a/0x790 [ 802.477248][ T1267] ? splice_from_pipe+0xd0/0xd0 [ 802.482082][ T1267] direct_splice_actor+0x80/0xa0 [ 802.487058][ T1267] splice_direct_to_actor+0x345/0x650 [ 802.492467][ T1267] ? do_splice_direct+0x190/0x190 [ 802.497542][ T1267] do_splice_direct+0x106/0x190 [ 802.502388][ T1267] do_sendfile+0x675/0xc40 [ 802.506792][ T1267] __x64_sys_sendfile64+0x102/0x140 [ 802.511979][ T1267] do_syscall_64+0x44/0xd0 [ 802.516383][ T1267] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 802.522277][ T1267] RIP: 0033:0x7fca50b35ae9 [ 802.526680][ T1267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 802.546534][ T1267] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 802.554932][ T1267] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 802.562909][ T1267] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 802.570876][ T1267] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.578837][ T1267] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8848, 0x0) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc00e, 0x0) 19:42:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002817) [ 802.586790][ T1267] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 802.594786][ T1267] 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x1000000, 0x0) 19:42:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x25}}]}) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x2000000, 0x0) 19:42:10 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002814) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x3000000, 0x0) 19:42:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x2c}}]}) 19:42:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4000000, 0x0) [ 802.871559][ C0] sd 0:0:1:0: tag#8181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 802.881471][ C0] sd 0:0:1:0: tag#8181 CDB: opcode=0xe5 (vendor) [ 802.887830][ C0] sd 0:0:1:0: tag#8181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 802.896884][ C0] sd 0:0:1:0: tag#8181 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 802.905945][ C0] sd 0:0:1:0: tag#8181 CDB[20]: ba 19:42:10 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 39) 19:42:10 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x5000000, 0x0) 19:42:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3e}}]}) [ 803.073743][ T1578] FAULT_INJECTION: forcing a failure. [ 803.073743][ T1578] name failslab, interval 1, probability 0, space 0, times 0 [ 803.086420][ T1578] CPU: 1 PID: 1578 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 803.096483][ T1578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.106677][ T1578] Call Trace: [ 803.109951][ T1578] [ 803.112898][ T1578] dump_stack_lvl+0xd6/0x122 [ 803.117540][ T1578] dump_stack+0x11/0x1b [ 803.121776][ T1578] should_fail+0x23c/0x250 [ 803.126282][ T1578] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 803.131653][ T1578] __should_failslab+0x81/0x90 [ 803.136457][ T1578] should_failslab+0x5/0x20 [ 803.140988][ T1578] kmem_cache_alloc+0x4f/0x320 [ 803.145759][ T1578] ext4_mb_new_blocks+0x328/0x1ee0 [ 803.150928][ T1578] ? bio_will_gap+0xfc/0x4a0 [ 803.155583][ T1578] ? ext4_get_branch+0x27d/0x2e0 [ 803.160516][ T1578] ext4_ind_map_blocks+0xb1c/0x1740 [ 803.165787][ T1578] ext4_map_blocks+0x6e3/0xf00 [ 803.170626][ T1578] ext4_iomap_begin+0x4b0/0x630 [ 803.175627][ T1578] ? ext4_alloc_da_blocks+0x100/0x100 [ 803.181025][ T1578] iomap_iter+0x395/0x4a0 [ 803.185361][ T1578] __iomap_dio_rw+0xb78/0x1070 [ 803.190211][ T1578] iomap_dio_rw+0x38/0x80 [ 803.194554][ T1578] ? ext4_file_write_iter+0x461/0x1200 [ 803.200105][ T1578] ext4_file_write_iter+0xac3/0x1200 [ 803.205467][ T1578] ? ext4_file_write_iter+0x461/0x1200 [ 803.210950][ T1578] do_iter_readv_writev+0x2de/0x380 [ 803.216147][ T1578] do_iter_write+0x192/0x5c0 [ 803.220771][ T1578] vfs_iter_write+0x4c/0x70 [ 803.225322][ T1578] iter_file_splice_write+0x43a/0x790 [ 803.230704][ T1578] ? splice_from_pipe+0xd0/0xd0 [ 803.235627][ T1578] direct_splice_actor+0x80/0xa0 [ 803.240570][ T1578] splice_direct_to_actor+0x345/0x650 [ 803.245945][ T1578] ? do_splice_direct+0x190/0x190 [ 803.250969][ T1578] do_splice_direct+0x106/0x190 [ 803.255819][ T1578] do_sendfile+0x675/0xc40 [ 803.260309][ T1578] __x64_sys_sendfile64+0x102/0x140 [ 803.265502][ T1578] do_syscall_64+0x44/0xd0 19:42:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002818) 19:42:11 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6000000, 0x0) [ 803.269941][ T1578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.275894][ T1578] RIP: 0033:0x7fca50b35ae9 [ 803.280388][ T1578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.299995][ T1578] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 803.308475][ T1578] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 803.316440][ T1578] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 19:42:11 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 40) [ 803.324795][ T1578] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.332791][ T1578] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 803.340823][ T1578] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 803.348798][ T1578] 19:42:11 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x7000000, 0x0) 19:42:11 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002815) 19:42:11 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x46}}]}) [ 803.430291][ T1661] FAULT_INJECTION: forcing a failure. [ 803.430291][ T1661] name failslab, interval 1, probability 0, space 0, times 0 [ 803.442941][ T1661] CPU: 1 PID: 1661 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 803.453014][ T1661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.463148][ T1661] Call Trace: [ 803.466519][ T1661] [ 803.469447][ T1661] dump_stack_lvl+0xd6/0x122 [ 803.474055][ T1661] dump_stack+0x11/0x1b [ 803.478212][ T1661] should_fail+0x23c/0x250 [ 803.482659][ T1661] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 803.488116][ T1661] __should_failslab+0x81/0x90 [ 803.492933][ T1661] should_failslab+0x5/0x20 [ 803.497440][ T1661] kmem_cache_alloc+0x4f/0x320 [ 803.502229][ T1661] ext4_mb_new_blocks+0x328/0x1ee0 [ 803.507420][ T1661] ? bio_will_gap+0xfc/0x4a0 [ 803.512077][ T1661] ? ext4_get_branch+0x27d/0x2e0 [ 803.517104][ T1661] ext4_ind_map_blocks+0xb1c/0x1740 [ 803.522314][ T1661] ext4_map_blocks+0x6e3/0xf00 [ 803.527159][ T1661] ext4_iomap_begin+0x4b0/0x630 [ 803.532071][ T1661] ? ext4_alloc_da_blocks+0x100/0x100 [ 803.537466][ T1661] iomap_iter+0x395/0x4a0 [ 803.541792][ T1661] __iomap_dio_rw+0xb78/0x1070 [ 803.546637][ T1661] iomap_dio_rw+0x38/0x80 [ 803.551064][ T1661] ? ext4_file_write_iter+0x461/0x1200 [ 803.556521][ T1661] ext4_file_write_iter+0xac3/0x1200 [ 803.561801][ T1661] ? ext4_file_write_iter+0x461/0x1200 [ 803.567283][ T1661] do_iter_readv_writev+0x2de/0x380 [ 803.572535][ T1661] do_iter_write+0x192/0x5c0 [ 803.577168][ T1661] ? splice_from_pipe_next+0x34f/0x3b0 [ 803.582696][ T1661] ? kmalloc_array+0x2d/0x40 [ 803.587285][ T1661] vfs_iter_write+0x4c/0x70 [ 803.591793][ T1661] iter_file_splice_write+0x43a/0x790 [ 803.597284][ T1661] ? splice_from_pipe+0xd0/0xd0 [ 803.602189][ T1661] direct_splice_actor+0x80/0xa0 [ 803.607121][ T1661] splice_direct_to_actor+0x345/0x650 [ 803.612496][ T1661] ? do_splice_direct+0x190/0x190 [ 803.617576][ T1661] do_splice_direct+0x106/0x190 [ 803.622447][ T1661] do_sendfile+0x675/0xc40 19:42:11 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8000000, 0x0) [ 803.626897][ T1661] __x64_sys_sendfile64+0x102/0x140 [ 803.632202][ T1661] do_syscall_64+0x44/0xd0 [ 803.636617][ T1661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 803.642518][ T1661] RIP: 0033:0x7fca50b35ae9 [ 803.646971][ T1661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.666670][ T1661] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 19:42:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 803.675147][ T1661] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 803.683172][ T1661] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 803.691211][ T1661] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 803.699283][ T1661] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 803.707254][ T1661] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 803.715230][ T1661] 19:42:11 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 41) [ 803.771650][ C0] sd 0:0:1:0: tag#8186 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 803.779392][ T1764] FAULT_INJECTION: forcing a failure. [ 803.779392][ T1764] name failslab, interval 1, probability 0, space 0, times 0 [ 803.781547][ C0] sd 0:0:1:0: tag#8186 CDB: opcode=0xe5 (vendor) [ 803.794116][ T1764] CPU: 1 PID: 1764 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 803.800438][ C0] sd 0:0:1:0: tag#8186 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 803.810516][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.810529][ T1764] Call Trace: [ 803.810535][ T1764] [ 803.810542][ T1764] dump_stack_lvl+0xd6/0x122 [ 803.819574][ C0] sd 0:0:1:0: tag#8186 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 803.829590][ T1764] dump_stack+0x11/0x1b [ 803.829610][ T1764] should_fail+0x23c/0x250 [ 803.829639][ T1764] ? jbd2__journal_start+0xf7/0x3f0 [ 803.832910][ C0] sd 0:0:1:0: tag#8186 CDB[20]: ba [ 803.835818][ T1764] __should_failslab+0x81/0x90 [ 803.872994][ T1764] should_failslab+0x5/0x20 [ 803.877543][ T1764] kmem_cache_alloc+0x4f/0x320 [ 803.882373][ T1764] jbd2__journal_start+0xf7/0x3f0 [ 803.887400][ T1764] __ext4_journal_start_sb+0x159/0x310 [ 803.892943][ T1764] ext4_iomap_begin+0x408/0x630 [ 803.897887][ T1764] ? ext4_alloc_da_blocks+0x100/0x100 [ 803.903351][ T1764] iomap_iter+0x395/0x4a0 [ 803.907688][ T1764] __iomap_dio_rw+0xb78/0x1070 [ 803.912450][ T1764] ? _raw_spin_lock_irq+0x41/0x50 [ 803.917535][ T1764] iomap_dio_rw+0x38/0x80 [ 803.921878][ T1764] ? ext4_file_write_iter+0x461/0x1200 [ 803.927350][ T1764] ext4_file_write_iter+0xac3/0x1200 [ 803.932630][ T1764] ? ext4_file_write_iter+0x461/0x1200 [ 803.938109][ T1764] do_iter_readv_writev+0x2de/0x380 [ 803.943311][ T1764] do_iter_write+0x192/0x5c0 [ 803.947947][ T1764] ? splice_from_pipe_next+0x34f/0x3b0 [ 803.953407][ T1764] ? kmalloc_array+0x2d/0x40 [ 803.957993][ T1764] vfs_iter_write+0x4c/0x70 [ 803.962566][ T1764] iter_file_splice_write+0x43a/0x790 [ 803.968005][ T1764] ? splice_from_pipe+0xd0/0xd0 [ 803.972955][ T1764] direct_splice_actor+0x80/0xa0 [ 803.977979][ T1764] splice_direct_to_actor+0x345/0x650 [ 803.983371][ T1764] ? do_splice_direct+0x190/0x190 [ 803.988392][ T1764] do_splice_direct+0x106/0x190 [ 803.993241][ T1764] do_sendfile+0x675/0xc40 [ 803.997654][ T1764] __x64_sys_sendfile64+0x102/0x140 [ 804.002874][ T1764] do_syscall_64+0x44/0xd0 [ 804.007290][ T1764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.013216][ T1764] RIP: 0033:0x7fca50b35ae9 [ 804.017621][ T1764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.037231][ T1764] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 804.045707][ T1764] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 804.053745][ T1764] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 804.061707][ T1764] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:42:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:11 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 42) [ 804.069665][ T1764] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 804.077629][ T1764] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 804.085807][ T1764] [ 804.123394][ C0] sd 0:0:1:0: tag#8148 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 804.130716][ T1769] FAULT_INJECTION: forcing a failure. [ 804.130716][ T1769] name failslab, interval 1, probability 0, space 0, times 0 [ 804.133299][ C0] sd 0:0:1:0: tag#8148 CDB: opcode=0xe5 (vendor) [ 804.145882][ T1769] CPU: 1 PID: 1769 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 804.145906][ T1769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.152258][ C0] sd 0:0:1:0: tag#8148 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 804.162261][ T1769] Call Trace: [ 804.162271][ T1769] [ 804.162278][ T1769] dump_stack_lvl+0xd6/0x122 [ 804.162313][ T1769] dump_stack+0x11/0x1b [ 804.172386][ C0] sd 0:0:1:0: tag#8148 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 804.181337][ T1769] should_fail+0x23c/0x250 [ 804.181357][ T1769] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 804.181382][ T1769] __should_failslab+0x81/0x90 [ 804.184671][ C0] sd 0:0:1:0: tag#8148 CDB[20]: ba [ 804.187577][ T1769] should_failslab+0x5/0x20 [ 804.187600][ T1769] kmem_cache_alloc+0x4f/0x320 [ 804.234117][ T1769] ext4_mb_new_blocks+0x328/0x1ee0 [ 804.239314][ T1769] ? ext4_get_branch+0x27d/0x2e0 [ 804.244320][ T1769] ? blk_mq_get_tag+0x50b/0x5f0 [ 804.249259][ T1769] ? ktime_get+0x1b0/0x1e0 [ 804.253732][ T1769] ext4_ind_map_blocks+0xb1c/0x1740 [ 804.258935][ T1769] ext4_map_blocks+0x6e3/0xf00 [ 804.263852][ T1769] ext4_iomap_begin+0x4b0/0x630 [ 804.268813][ T1769] ? ext4_alloc_da_blocks+0x100/0x100 [ 804.274188][ T1769] iomap_iter+0x395/0x4a0 [ 804.278579][ T1769] __iomap_dio_rw+0xb78/0x1070 [ 804.283370][ T1769] ? _raw_spin_lock_irq+0x41/0x50 [ 804.288468][ T1769] iomap_dio_rw+0x38/0x80 [ 804.292794][ T1769] ? ext4_file_write_iter+0x461/0x1200 [ 804.298254][ T1769] ext4_file_write_iter+0xac3/0x1200 [ 804.303533][ T1769] ? ext4_file_write_iter+0x461/0x1200 [ 804.308994][ T1769] do_iter_readv_writev+0x2de/0x380 [ 804.314213][ T1769] do_iter_write+0x192/0x5c0 [ 804.318839][ T1769] ? splice_from_pipe_next+0x34f/0x3b0 [ 804.324336][ T1769] ? kmalloc_array+0x2d/0x40 [ 804.328992][ T1769] vfs_iter_write+0x4c/0x70 [ 804.333581][ T1769] iter_file_splice_write+0x43a/0x790 [ 804.339130][ T1769] ? splice_from_pipe+0xd0/0xd0 [ 804.344152][ T1769] direct_splice_actor+0x80/0xa0 [ 804.349095][ T1769] splice_direct_to_actor+0x345/0x650 [ 804.354590][ T1769] ? do_splice_direct+0x190/0x190 [ 804.359617][ T1769] do_splice_direct+0x106/0x190 [ 804.364469][ T1769] do_sendfile+0x675/0xc40 [ 804.368989][ T1769] __x64_sys_sendfile64+0x102/0x140 [ 804.374257][ T1769] do_syscall_64+0x44/0xd0 [ 804.378709][ T1769] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.384606][ T1769] RIP: 0033:0x7fca50b35ae9 [ 804.389006][ T1769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 804.408606][ T1769] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 804.417018][ T1769] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 19:42:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x47}}]}) 19:42:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002819) 19:42:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002816) [ 804.424980][ T1769] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 804.432949][ T1769] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.441008][ T1769] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 804.449024][ T1769] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 804.457003][ T1769] 19:42:12 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 43) 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa000000, 0x0) [ 804.534416][ T2034] FAULT_INJECTION: forcing a failure. [ 804.534416][ T2034] name failslab, interval 1, probability 0, space 0, times 0 [ 804.547140][ T2034] CPU: 0 PID: 2034 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 804.557322][ T2034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.567395][ T2034] Call Trace: [ 804.570683][ T2034] [ 804.573610][ T2034] dump_stack_lvl+0xd6/0x122 [ 804.578201][ T2034] dump_stack+0x11/0x1b [ 804.582352][ T2034] should_fail+0x23c/0x250 [ 804.586831][ T2034] ? mempool_alloc_slab+0x16/0x20 [ 804.591849][ T2034] __should_failslab+0x81/0x90 [ 804.596814][ T2034] should_failslab+0x5/0x20 [ 804.601331][ T2034] kmem_cache_alloc+0x4f/0x320 [ 804.606099][ T2034] mempool_alloc_slab+0x16/0x20 [ 804.610976][ T2034] ? mempool_free+0x130/0x130 [ 804.615664][ T2034] mempool_alloc+0x9d/0x310 [ 804.620255][ T2034] ? preempt_count_add+0x4e/0x90 [ 804.625239][ T2034] ? _raw_read_unlock+0x13/0x30 [ 804.630096][ T2034] ? jbd2_transaction_committed+0xad/0xc0 [ 804.635854][ T2034] bio_alloc_bioset+0xcc/0x560 [ 804.640650][ T2034] ? iov_iter_alignment+0x34b/0x370 [ 804.646052][ T2034] iomap_dio_bio_iter+0x5ed/0xc70 [ 804.651181][ T2034] ? ext4_alloc_da_blocks+0x100/0x100 [ 804.656642][ T2034] __iomap_dio_rw+0x8b5/0x1070 [ 804.661412][ T2034] iomap_dio_rw+0x38/0x80 [ 804.665829][ T2034] ? ext4_file_write_iter+0x461/0x1200 [ 804.671286][ T2034] ext4_file_write_iter+0xac3/0x1200 [ 804.676572][ T2034] ? ext4_file_write_iter+0x461/0x1200 [ 804.682028][ T2034] do_iter_readv_writev+0x2de/0x380 [ 804.687231][ T2034] do_iter_write+0x192/0x5c0 [ 804.691826][ T2034] ? splice_from_pipe_next+0x34f/0x3b0 [ 804.697361][ T2034] ? kmalloc_array+0x2d/0x40 [ 804.701943][ T2034] vfs_iter_write+0x4c/0x70 [ 804.706467][ T2034] iter_file_splice_write+0x43a/0x790 [ 804.711923][ T2034] ? splice_from_pipe+0xd0/0xd0 [ 804.716769][ T2034] direct_splice_actor+0x80/0xa0 [ 804.721759][ T2034] splice_direct_to_actor+0x345/0x650 [ 804.727130][ T2034] ? do_splice_direct+0x190/0x190 [ 804.732147][ T2034] do_splice_direct+0x106/0x190 [ 804.736999][ T2034] do_sendfile+0x675/0xc40 [ 804.741606][ T2034] __x64_sys_sendfile64+0x102/0x140 [ 804.746817][ T2034] do_syscall_64+0x44/0xd0 [ 804.751224][ T2034] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 804.757199][ T2034] RIP: 0033:0x7fca50b35ae9 [ 804.761604][ T2034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:42:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000281a) [ 804.781237][ T2034] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 804.789665][ T2034] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 804.797656][ T2034] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 804.805718][ T2034] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 804.813758][ T2034] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 804.821719][ T2034] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 804.829792][ T2034] 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc000000, 0x0) 19:42:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x48}}]}) 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xf000000, 0x0) 19:42:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x10000000, 0x0) 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4a100000, 0x0) 19:42:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0xff}}]}) [ 805.004416][ C0] sd 0:0:1:0: tag#8164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 805.014672][ C0] sd 0:0:1:0: tag#8164 CDB: opcode=0xe5 (vendor) [ 805.021041][ C0] sd 0:0:1:0: tag#8164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 805.030100][ C0] sd 0:0:1:0: tag#8164 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 805.039159][ C0] sd 0:0:1:0: tag#8164 CDB[20]: ba 19:42:12 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x60000000, 0x0) 19:42:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002817) 19:42:13 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 44) 19:42:13 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x65580000, 0x0) [ 805.327148][ T2348] FAULT_INJECTION: forcing a failure. [ 805.327148][ T2348] name failslab, interval 1, probability 0, space 0, times 0 [ 805.339900][ T2348] CPU: 0 PID: 2348 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 805.350131][ T2348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.360189][ T2348] Call Trace: [ 805.363463][ T2348] [ 805.366389][ T2348] dump_stack_lvl+0xd6/0x122 [ 805.371016][ T2348] dump_stack+0x11/0x1b [ 805.375167][ T2348] should_fail+0x23c/0x250 [ 805.379577][ T2348] ? jbd2__journal_start+0xf7/0x3f0 [ 805.384778][ T2348] __should_failslab+0x81/0x90 [ 805.389618][ T2348] should_failslab+0x5/0x20 [ 805.394143][ T2348] kmem_cache_alloc+0x4f/0x320 [ 805.398904][ T2348] jbd2__journal_start+0xf7/0x3f0 [ 805.404005][ T2348] __ext4_journal_start_sb+0x159/0x310 [ 805.409476][ T2348] ext4_iomap_begin+0x408/0x630 [ 805.414322][ T2348] ? ext4_alloc_da_blocks+0x100/0x100 [ 805.419818][ T2348] iomap_iter+0x395/0x4a0 [ 805.424151][ T2348] __iomap_dio_rw+0xb78/0x1070 [ 805.429831][ T2348] iomap_dio_rw+0x38/0x80 [ 805.434198][ T2348] ? ext4_file_write_iter+0x461/0x1200 [ 805.439650][ T2348] ext4_file_write_iter+0xac3/0x1200 [ 805.444951][ T2348] ? ext4_file_write_iter+0x461/0x1200 [ 805.450541][ T2348] do_iter_readv_writev+0x2de/0x380 [ 805.455762][ T2348] do_iter_write+0x192/0x5c0 [ 805.460447][ T2348] ? splice_from_pipe_next+0x34f/0x3b0 [ 805.465907][ T2348] ? kmalloc_array+0x2d/0x40 [ 805.470492][ T2348] vfs_iter_write+0x4c/0x70 [ 805.474997][ T2348] iter_file_splice_write+0x43a/0x790 [ 805.480411][ T2348] ? splice_from_pipe+0xd0/0xd0 [ 805.485265][ T2348] direct_splice_actor+0x80/0xa0 [ 805.490223][ T2348] splice_direct_to_actor+0x345/0x650 [ 805.495678][ T2348] ? do_splice_direct+0x190/0x190 [ 805.500696][ T2348] do_splice_direct+0x106/0x190 [ 805.505601][ T2348] do_sendfile+0x675/0xc40 [ 805.510021][ T2348] __x64_sys_sendfile64+0x102/0x140 [ 805.515291][ T2348] do_syscall_64+0x44/0xd0 [ 805.519706][ T2348] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.525595][ T2348] RIP: 0033:0x7fca50b35ae9 [ 805.530007][ T2348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.549607][ T2348] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 805.558078][ T2348] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 805.566045][ T2348] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 19:42:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000281b) 19:42:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x2}}]}) 19:42:13 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x81000000, 0x0) 19:42:13 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 45) [ 805.574011][ T2348] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.581983][ T2348] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 805.589947][ T2348] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 805.597929][ T2348] [ 805.670183][ T2399] ISOFS: Unable to identify CD-ROM format. [ 805.682994][ T2404] FAULT_INJECTION: forcing a failure. [ 805.682994][ T2404] name failslab, interval 1, probability 0, space 0, times 0 [ 805.695716][ T2404] CPU: 0 PID: 2404 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 805.705786][ T2404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.716617][ T2404] Call Trace: [ 805.719890][ T2404] [ 805.722876][ T2404] dump_stack_lvl+0xd6/0x122 [ 805.727542][ T2404] dump_stack+0x11/0x1b [ 805.731691][ T2404] should_fail+0x23c/0x250 [ 805.736189][ T2404] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 805.741556][ T2404] __should_failslab+0x81/0x90 [ 805.746333][ T2404] should_failslab+0x5/0x20 [ 805.750831][ T2404] kmem_cache_alloc+0x4f/0x320 [ 805.755594][ T2404] ext4_mb_new_blocks+0x328/0x1ee0 [ 805.760775][ T2404] ? ext4_mark_iloc_dirty+0x855/0x890 [ 805.766199][ T2404] ext4_new_meta_blocks+0x84/0x180 [ 805.771313][ T2404] ext4_ind_map_blocks+0xb68/0x1740 [ 805.776774][ T2404] ext4_map_blocks+0x6e3/0xf00 [ 805.781568][ T2404] ext4_iomap_begin+0x4b0/0x630 [ 805.786437][ T2404] ? ext4_alloc_da_blocks+0x100/0x100 [ 805.791838][ T2404] iomap_iter+0x395/0x4a0 [ 805.796200][ T2404] __iomap_dio_rw+0xb78/0x1070 [ 805.800961][ T2404] ? _raw_spin_lock_irq+0x41/0x50 [ 805.806067][ T2404] iomap_dio_rw+0x38/0x80 [ 805.810406][ T2404] ? ext4_file_write_iter+0x461/0x1200 [ 805.816035][ T2404] ext4_file_write_iter+0xac3/0x1200 [ 805.821396][ T2404] ? ext4_file_write_iter+0x461/0x1200 [ 805.826863][ T2404] do_iter_readv_writev+0x2de/0x380 [ 805.832093][ T2404] do_iter_write+0x192/0x5c0 [ 805.836707][ T2404] ? splice_from_pipe_next+0x34f/0x3b0 [ 805.842167][ T2404] ? kmalloc_array+0x2d/0x40 [ 805.846794][ T2404] vfs_iter_write+0x4c/0x70 [ 805.851421][ T2404] iter_file_splice_write+0x43a/0x790 [ 805.856865][ T2404] ? splice_from_pipe+0xd0/0xd0 [ 805.861722][ T2404] direct_splice_actor+0x80/0xa0 [ 805.866704][ T2404] splice_direct_to_actor+0x345/0x650 [ 805.872160][ T2404] ? do_splice_direct+0x190/0x190 [ 805.877183][ T2404] do_splice_direct+0x106/0x190 [ 805.882030][ T2404] do_sendfile+0x675/0xc40 [ 805.886483][ T2404] __x64_sys_sendfile64+0x102/0x140 [ 805.891678][ T2404] do_syscall_64+0x44/0xd0 [ 805.896097][ T2404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 805.902074][ T2404] RIP: 0033:0x7fca50b35ae9 [ 805.906478][ T2404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.926084][ T2404] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 805.934558][ T2404] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 805.942524][ T2404] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 805.950487][ T2404] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.958522][ T2404] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 19:42:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:13 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x88470000, 0x0) 19:42:13 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 46) [ 805.966613][ T2404] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 805.974584][ T2404] [ 806.054761][ T2411] FAULT_INJECTION: forcing a failure. [ 806.054761][ T2411] name failslab, interval 1, probability 0, space 0, times 0 [ 806.064285][ T2399] ISOFS: Unable to identify CD-ROM format. [ 806.067458][ T2411] CPU: 0 PID: 2411 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 806.083305][ T2411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.093378][ T2411] Call Trace: [ 806.096651][ T2411] [ 806.099569][ T2411] dump_stack_lvl+0xd6/0x122 [ 806.104224][ T2411] dump_stack+0x11/0x1b [ 806.108375][ T2411] should_fail+0x23c/0x250 [ 806.112865][ T2411] ? ext4_mb_new_blocks+0x73e/0x1ee0 [ 806.118190][ T2411] __should_failslab+0x81/0x90 [ 806.122950][ T2411] should_failslab+0x5/0x20 [ 806.127467][ T2411] kmem_cache_alloc+0x4f/0x320 [ 806.132232][ T2411] ext4_mb_new_blocks+0x73e/0x1ee0 [ 806.137431][ T2411] ? ext4_mark_iloc_dirty+0x855/0x890 [ 806.142810][ T2411] ext4_new_meta_blocks+0x84/0x180 [ 806.147927][ T2411] ext4_ind_map_blocks+0xb68/0x1740 [ 806.153128][ T2411] ext4_map_blocks+0x6e3/0xf00 [ 806.157896][ T2411] ext4_iomap_begin+0x4b0/0x630 [ 806.162811][ T2411] ? ext4_alloc_da_blocks+0x100/0x100 [ 806.168215][ T2411] iomap_iter+0x395/0x4a0 [ 806.172606][ T2411] __iomap_dio_rw+0xb78/0x1070 [ 806.177374][ T2411] ? _raw_spin_lock_irq+0x41/0x50 [ 806.182401][ T2411] iomap_dio_rw+0x38/0x80 [ 806.186794][ T2411] ? ext4_file_write_iter+0x461/0x1200 [ 806.192251][ T2411] ext4_file_write_iter+0xac3/0x1200 [ 806.197535][ T2411] ? ext4_file_write_iter+0x461/0x1200 [ 806.202993][ T2411] do_iter_readv_writev+0x2de/0x380 [ 806.208229][ T2411] do_iter_write+0x192/0x5c0 [ 806.212819][ T2411] ? splice_from_pipe_next+0x34f/0x3b0 [ 806.218623][ T2411] ? kmalloc_array+0x2d/0x40 [ 806.223207][ T2411] vfs_iter_write+0x4c/0x70 [ 806.227709][ T2411] iter_file_splice_write+0x43a/0x790 [ 806.233092][ T2411] ? splice_from_pipe+0xd0/0xd0 [ 806.237996][ T2411] direct_splice_actor+0x80/0xa0 [ 806.243046][ T2411] splice_direct_to_actor+0x345/0x650 [ 806.248418][ T2411] ? do_splice_direct+0x190/0x190 [ 806.253534][ T2411] do_splice_direct+0x106/0x190 [ 806.258400][ T2411] do_sendfile+0x675/0xc40 [ 806.262834][ T2411] __x64_sys_sendfile64+0x102/0x140 [ 806.268077][ T2411] do_syscall_64+0x44/0xd0 [ 806.272545][ T2411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.278453][ T2411] RIP: 0033:0x7fca50b35ae9 [ 806.282857][ T2411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:42:13 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x88480000, 0x0) [ 806.302469][ T2411] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.310878][ T2411] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 806.318838][ T2411] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 806.326828][ T2411] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.334792][ T2411] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 806.342804][ T2411] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 806.350780][ T2411] 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x88a8ffff, 0x0) [ 806.368891][ C1] sd 0:0:1:0: tag#8178 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 806.378776][ C1] sd 0:0:1:0: tag#8178 CDB: opcode=0xe5 (vendor) [ 806.385309][ C1] sd 0:0:1:0: tag#8178 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 806.394352][ C1] sd 0:0:1:0: tag#8178 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 806.403387][ C1] sd 0:0:1:0: tag#8178 CDB[20]: ba 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa6ffffff, 0x0) 19:42:14 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002818) 19:42:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x3}}]}) 19:42:14 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 47) 19:42:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000281c) 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc00e0000, 0x0) 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc3ffffff, 0x0) [ 806.505359][ T2523] ISOFS: Unable to identify CD-ROM format. [ 806.583981][ T2638] FAULT_INJECTION: forcing a failure. [ 806.583981][ T2638] name failslab, interval 1, probability 0, space 0, times 0 [ 806.596644][ T2638] CPU: 1 PID: 2638 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 806.606729][ T2638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.616775][ T2638] Call Trace: [ 806.620048][ T2638] [ 806.622973][ T2638] dump_stack_lvl+0xd6/0x122 [ 806.627593][ T2638] dump_stack+0x11/0x1b [ 806.631794][ T2638] should_fail+0x23c/0x250 [ 806.636205][ T2638] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 806.641497][ T2638] __should_failslab+0x81/0x90 [ 806.646263][ T2638] should_failslab+0x5/0x20 [ 806.650773][ T2638] kmem_cache_alloc+0x4f/0x320 [ 806.655601][ T2638] ext4_mb_new_blocks+0x328/0x1ee0 [ 806.660716][ T2638] ? ext4_mark_iloc_dirty+0x855/0x890 [ 806.666088][ T2638] ext4_new_meta_blocks+0x84/0x180 [ 806.671202][ T2638] ext4_ind_map_blocks+0xb68/0x1740 [ 806.676406][ T2638] ext4_map_blocks+0x6e3/0xf00 [ 806.681182][ T2638] ext4_iomap_begin+0x4b0/0x630 [ 806.686042][ T2638] ? ext4_alloc_da_blocks+0x100/0x100 [ 806.691415][ T2638] iomap_iter+0x395/0x4a0 [ 806.695745][ T2638] __iomap_dio_rw+0xb78/0x1070 [ 806.700603][ T2638] ? _raw_spin_lock_irq+0x41/0x50 [ 806.705684][ T2638] iomap_dio_rw+0x38/0x80 [ 806.710026][ T2638] ? ext4_file_write_iter+0x461/0x1200 [ 806.715514][ T2638] ext4_file_write_iter+0xac3/0x1200 [ 806.720810][ T2638] ? ext4_file_write_iter+0x461/0x1200 [ 806.726266][ T2638] ? save_fpregs_to_fpstate+0xf5/0x140 [ 806.731850][ T2638] do_iter_readv_writev+0x2de/0x380 [ 806.737052][ T2638] do_iter_write+0x192/0x5c0 [ 806.741718][ T2638] ? splice_from_pipe_next+0x34f/0x3b0 [ 806.747298][ T2638] ? kmalloc_array+0x2d/0x40 [ 806.751886][ T2638] vfs_iter_write+0x4c/0x70 [ 806.756391][ T2638] iter_file_splice_write+0x43a/0x790 [ 806.761836][ T2638] ? splice_from_pipe+0xd0/0xd0 [ 806.766677][ T2638] direct_splice_actor+0x80/0xa0 [ 806.771607][ T2638] splice_direct_to_actor+0x345/0x650 [ 806.776976][ T2638] ? do_splice_direct+0x190/0x190 [ 806.782039][ T2638] do_splice_direct+0x106/0x190 [ 806.786889][ T2638] do_sendfile+0x675/0xc40 [ 806.791302][ T2638] __x64_sys_sendfile64+0x102/0x140 [ 806.796564][ T2638] do_syscall_64+0x44/0xd0 [ 806.800977][ T2638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 806.806934][ T2638] RIP: 0033:0x7fca50b35ae9 [ 806.811336][ T2638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 19:42:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xffffa888, 0x0) [ 806.831023][ T2638] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 806.839433][ T2638] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 806.847406][ T2638] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 806.855367][ T2638] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.863355][ T2638] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 806.871403][ T2638] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 806.879369][ T2638] 19:42:14 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xffffffa6, 0x0) 19:42:14 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 48) 19:42:14 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x4}}]}) [ 806.907959][ T2523] ISOFS: Unable to identify CD-ROM format. [ 806.944227][ C0] sd 0:0:1:0: tag#8176 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 806.954106][ C0] sd 0:0:1:0: tag#8176 CDB: opcode=0xe5 (vendor) [ 806.960464][ C0] sd 0:0:1:0: tag#8176 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 806.969550][ C0] sd 0:0:1:0: tag#8176 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 806.978602][ C0] sd 0:0:1:0: tag#8176 CDB[20]: ba [ 806.993032][ T2647] FAULT_INJECTION: forcing a failure. [ 806.993032][ T2647] name failslab, interval 1, probability 0, space 0, times 0 [ 807.005792][ T2647] CPU: 1 PID: 2647 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 807.015950][ T2647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.026007][ T2647] Call Trace: [ 807.029281][ T2647] [ 807.032200][ T2647] dump_stack_lvl+0xd6/0x122 [ 807.036914][ T2647] dump_stack+0x11/0x1b [ 807.041108][ T2647] should_fail+0x23c/0x250 [ 807.045520][ T2647] ? ext4_mb_new_blocks+0x328/0x1ee0 [ 807.050904][ T2647] __should_failslab+0x81/0x90 [ 807.055660][ T2647] should_failslab+0x5/0x20 [ 807.060195][ T2647] kmem_cache_alloc+0x4f/0x320 [ 807.065107][ T2647] ext4_mb_new_blocks+0x328/0x1ee0 [ 807.070224][ T2647] ? ext4_new_meta_blocks+0x14a/0x180 [ 807.075606][ T2647] ext4_ind_map_blocks+0xb1c/0x1740 [ 807.080808][ T2647] ext4_map_blocks+0x6e3/0xf00 [ 807.085683][ T2647] ext4_iomap_begin+0x4b0/0x630 [ 807.090531][ T2647] ? ext4_alloc_da_blocks+0x100/0x100 [ 807.096157][ T2647] iomap_iter+0x395/0x4a0 [ 807.100571][ T2647] __iomap_dio_rw+0xb78/0x1070 [ 807.105425][ T2647] iomap_dio_rw+0x38/0x80 [ 807.109752][ T2647] ? ext4_file_write_iter+0x461/0x1200 [ 807.115227][ T2647] ext4_file_write_iter+0xac3/0x1200 [ 807.120514][ T2647] ? ext4_file_write_iter+0x461/0x1200 [ 807.125974][ T2647] do_iter_readv_writev+0x2de/0x380 [ 807.131170][ T2647] do_iter_write+0x192/0x5c0 [ 807.135762][ T2647] ? splice_from_pipe_next+0x34f/0x3b0 [ 807.141213][ T2647] ? kmalloc_array+0x2d/0x40 [ 807.145898][ T2647] vfs_iter_write+0x4c/0x70 [ 807.150492][ T2647] iter_file_splice_write+0x43a/0x790 [ 807.155937][ T2647] ? splice_from_pipe+0xd0/0xd0 [ 807.160840][ T2647] direct_splice_actor+0x80/0xa0 [ 807.165869][ T2647] splice_direct_to_actor+0x345/0x650 [ 807.171320][ T2647] ? do_splice_direct+0x190/0x190 [ 807.176354][ T2647] do_splice_direct+0x106/0x190 [ 807.181205][ T2647] do_sendfile+0x675/0xc40 [ 807.185622][ T2647] __x64_sys_sendfile64+0x102/0x140 [ 807.190818][ T2647] do_syscall_64+0x44/0xd0 [ 807.195246][ T2647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.201144][ T2647] RIP: 0033:0x7fca50b35ae9 [ 807.205589][ T2647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.225290][ T2647] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.233761][ T2647] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 807.241726][ T2647] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 807.249694][ T2647] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xffffffc3, 0x0) [ 807.257653][ T2647] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 807.265733][ T2647] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 807.273702][ T2647] [ 807.356393][ T2653] ISOFS: Unable to identify CD-ROM format. 19:42:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002819) 19:42:15 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 49) 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x100000000000000, 0x0) 19:42:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000281d) 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x200000000000000, 0x0) [ 807.457179][ T2876] FAULT_INJECTION: forcing a failure. [ 807.457179][ T2876] name failslab, interval 1, probability 0, space 0, times 0 [ 807.465597][ T2653] ISOFS: Unable to identify CD-ROM format. [ 807.469962][ T2876] CPU: 1 PID: 2876 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 807.485813][ T2876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.495891][ T2876] Call Trace: [ 807.499254][ T2876] [ 807.502184][ T2876] dump_stack_lvl+0xd6/0x122 [ 807.506817][ T2876] dump_stack+0x11/0x1b [ 807.510968][ T2876] should_fail+0x23c/0x250 [ 807.515383][ T2876] ? mempool_alloc_slab+0x16/0x20 [ 807.520487][ T2876] __should_failslab+0x81/0x90 [ 807.525297][ T2876] should_failslab+0x5/0x20 [ 807.529796][ T2876] kmem_cache_alloc+0x4f/0x320 [ 807.534651][ T2876] mempool_alloc_slab+0x16/0x20 [ 807.539564][ T2876] ? mempool_free+0x130/0x130 [ 807.544248][ T2876] mempool_alloc+0x9d/0x310 [ 807.548752][ T2876] ? preempt_count_add+0x4e/0x90 [ 807.553703][ T2876] ? _raw_read_unlock+0x13/0x30 [ 807.558685][ T2876] ? jbd2_transaction_committed+0xad/0xc0 [ 807.564463][ T2876] bio_alloc_bioset+0xcc/0x560 [ 807.569223][ T2876] ? iov_iter_alignment+0x34b/0x370 [ 807.574439][ T2876] iomap_dio_bio_iter+0x5ed/0xc70 [ 807.579459][ T2876] ? ext4_alloc_da_blocks+0x100/0x100 [ 807.584897][ T2876] __iomap_dio_rw+0x8b5/0x1070 [ 807.589693][ T2876] iomap_dio_rw+0x38/0x80 [ 807.594146][ T2876] ? ext4_file_write_iter+0x461/0x1200 [ 807.599603][ T2876] ext4_file_write_iter+0xac3/0x1200 [ 807.604882][ T2876] ? ext4_file_write_iter+0x461/0x1200 [ 807.610330][ T2876] do_iter_readv_writev+0x2de/0x380 [ 807.615547][ T2876] do_iter_write+0x192/0x5c0 [ 807.620142][ T2876] ? splice_from_pipe_next+0x34f/0x3b0 [ 807.625670][ T2876] ? kmalloc_array+0x2d/0x40 [ 807.630334][ T2876] vfs_iter_write+0x4c/0x70 [ 807.634903][ T2876] iter_file_splice_write+0x43a/0x790 [ 807.640514][ T2876] ? splice_from_pipe+0xd0/0xd0 [ 807.645366][ T2876] direct_splice_actor+0x80/0xa0 [ 807.650302][ T2876] splice_direct_to_actor+0x345/0x650 [ 807.655675][ T2876] ? do_splice_direct+0x190/0x190 [ 807.660711][ T2876] do_splice_direct+0x106/0x190 [ 807.665620][ T2876] do_sendfile+0x675/0xc40 [ 807.670032][ T2876] __x64_sys_sendfile64+0x102/0x140 [ 807.675227][ T2876] do_syscall_64+0x44/0xd0 [ 807.679713][ T2876] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 807.685605][ T2876] RIP: 0033:0x7fca50b35ae9 [ 807.690013][ T2876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 807.709678][ T2876] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 807.718095][ T2876] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 807.726057][ T2876] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 807.734051][ T2876] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 807.742067][ T2876] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 807.750155][ T2876] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 19:42:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000281e) 19:42:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 807.758126][ T2876] 19:42:15 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x5}}]}) 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x300000000000000, 0x0) 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x400000000000000, 0x0) 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x500000000000000, 0x0) [ 807.828791][ C1] sd 0:0:1:0: tag#8191 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 807.838687][ C1] sd 0:0:1:0: tag#8191 CDB: opcode=0xe5 (vendor) [ 807.845047][ C1] sd 0:0:1:0: tag#8191 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 807.848454][ T2992] ISOFS: Unable to identify CD-ROM format. [ 807.854113][ C1] sd 0:0:1:0: tag#8191 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 807.868981][ C1] sd 0:0:1:0: tag#8191 CDB[20]: ba 19:42:15 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x600000000000000, 0x0) [ 807.954592][ T2992] ISOFS: Unable to identify CD-ROM format. 19:42:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000281a) 19:42:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x6}}]}) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x700000000000000, 0x0) 19:42:16 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 50) [ 808.245287][ T3116] FAULT_INJECTION: forcing a failure. [ 808.245287][ T3116] name failslab, interval 1, probability 0, space 0, times 0 [ 808.258062][ T3116] CPU: 1 PID: 3116 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 808.268130][ T3116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.278185][ T3116] Call Trace: [ 808.281645][ T3116] [ 808.284571][ T3116] dump_stack_lvl+0xd6/0x122 [ 808.289220][ T3116] dump_stack+0x11/0x1b [ 808.293376][ T3116] should_fail+0x23c/0x250 [ 808.297783][ T3116] ? mempool_alloc_slab+0x16/0x20 [ 808.302811][ T3116] __should_failslab+0x81/0x90 [ 808.307605][ T3116] should_failslab+0x5/0x20 [ 808.312171][ T3116] kmem_cache_alloc+0x4f/0x320 [ 808.316938][ T3116] mempool_alloc_slab+0x16/0x20 [ 808.321884][ T3116] ? mempool_free+0x130/0x130 [ 808.326567][ T3116] mempool_alloc+0x9d/0x310 [ 808.331093][ T3116] ? preempt_count_add+0x4e/0x90 [ 808.332979][ T3118] ISOFS: Unable to identify CD-ROM format. [ 808.336147][ T3116] ? _raw_read_unlock+0x13/0x30 [ 808.336172][ T3116] ? jbd2_transaction_committed+0xad/0xc0 [ 808.352488][ T3116] bio_alloc_bioset+0xcc/0x560 [ 808.357255][ T3116] ? iov_iter_alignment+0x34b/0x370 [ 808.362489][ T3116] iomap_dio_bio_iter+0x5ed/0xc70 [ 808.367590][ T3116] ? ext4_alloc_da_blocks+0x100/0x100 [ 808.373124][ T3116] __iomap_dio_rw+0x8b5/0x1070 [ 808.377896][ T3116] ? _raw_spin_lock_irq+0x41/0x50 [ 808.382934][ T3116] iomap_dio_rw+0x38/0x80 [ 808.387262][ T3116] ? ext4_file_write_iter+0x461/0x1200 19:42:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002821) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x800000000000000, 0x0) [ 808.392797][ T3116] ext4_file_write_iter+0xac3/0x1200 [ 808.398088][ T3116] ? ext4_file_write_iter+0x461/0x1200 [ 808.403551][ T3116] do_iter_readv_writev+0x2de/0x380 [ 808.408832][ T3116] do_iter_write+0x192/0x5c0 [ 808.413437][ T3116] ? splice_from_pipe_next+0x34f/0x3b0 [ 808.418902][ T3116] ? kmalloc_array+0x2d/0x40 [ 808.423495][ T3116] vfs_iter_write+0x4c/0x70 [ 808.428003][ T3116] iter_file_splice_write+0x43a/0x790 [ 808.433404][ T3116] ? splice_from_pipe+0xd0/0xd0 [ 808.438252][ T3116] direct_splice_actor+0x80/0xa0 [ 808.443222][ T3116] splice_direct_to_actor+0x345/0x650 [ 808.448601][ T3116] ? do_splice_direct+0x190/0x190 [ 808.453665][ T3116] do_splice_direct+0x106/0x190 [ 808.458586][ T3116] do_sendfile+0x675/0xc40 [ 808.463068][ T3116] __x64_sys_sendfile64+0x102/0x140 [ 808.468270][ T3116] do_syscall_64+0x44/0xd0 [ 808.472709][ T3116] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 808.478633][ T3116] RIP: 0033:0x7fca50b35ae9 [ 808.483040][ T3116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 808.502647][ T3116] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 808.511170][ T3116] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 808.519150][ T3116] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 808.527122][ T3116] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 808.535100][ T3116] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 808.543163][ T3116] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 808.551135][ T3116] [ 808.616878][ T3118] ISOFS: Unable to identify CD-ROM format. 19:42:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001e00000000000000000000ffff0000000000000000000000000020000000000000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa00000000000000, 0x0) 19:42:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x7}}]}) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc00000000000000, 0x0) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xf00000000000000, 0x0) [ 808.705728][ C1] sd 0:0:1:0: tag#8181 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 808.715613][ C1] sd 0:0:1:0: tag#8181 CDB: opcode=0xe5 (vendor) [ 808.721976][ C1] sd 0:0:1:0: tag#8181 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 808.731032][ C1] sd 0:0:1:0: tag#8181 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 808.740077][ C1] sd 0:0:1:0: tag#8181 CDB[20]: ba 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x1000000000000000, 0x0) [ 808.859124][ T3240] ISOFS: Unable to identify CD-ROM format. [ 808.933088][ T3240] ISOFS: Unable to identify CD-ROM format. 19:42:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x8}}]}) 19:42:16 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x4a10000000000000, 0x0) 19:42:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002822) 19:42:16 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000281b) 19:42:16 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 51) 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6000000000000000, 0x0) [ 809.218053][ T3468] FAULT_INJECTION: forcing a failure. [ 809.218053][ T3468] name failslab, interval 1, probability 0, space 0, times 0 [ 809.221855][ T3459] ISOFS: Unable to identify CD-ROM format. [ 809.230762][ T3468] CPU: 1 PID: 3468 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 809.230786][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.230797][ T3468] Call Trace: [ 809.230803][ T3468] [ 809.230809][ T3468] dump_stack_lvl+0xd6/0x122 [ 809.230833][ T3468] dump_stack+0x11/0x1b [ 809.271670][ T3468] should_fail+0x23c/0x250 [ 809.276122][ T3468] ? jbd2__journal_start+0xf7/0x3f0 [ 809.281324][ T3468] __should_failslab+0x81/0x90 [ 809.286089][ T3468] should_failslab+0x5/0x20 [ 809.290630][ T3468] kmem_cache_alloc+0x4f/0x320 [ 809.295463][ T3468] jbd2__journal_start+0xf7/0x3f0 [ 809.300484][ T3468] __ext4_journal_start_sb+0x159/0x310 [ 809.305979][ T3468] ext4_file_write_iter+0xbe6/0x1200 [ 809.311309][ T3468] do_iter_readv_writev+0x2de/0x380 [ 809.316505][ T3468] do_iter_write+0x192/0x5c0 [ 809.321139][ T3468] ? splice_from_pipe_next+0x34f/0x3b0 [ 809.326599][ T3468] ? kmalloc_array+0x2d/0x40 [ 809.331235][ T3468] vfs_iter_write+0x4c/0x70 [ 809.335800][ T3468] iter_file_splice_write+0x43a/0x790 [ 809.341178][ T3468] ? splice_from_pipe+0xd0/0xd0 [ 809.346030][ T3468] direct_splice_actor+0x80/0xa0 [ 809.350971][ T3468] splice_direct_to_actor+0x345/0x650 [ 809.356502][ T3468] ? do_splice_direct+0x190/0x190 [ 809.361602][ T3468] do_splice_direct+0x106/0x190 [ 809.366458][ T3468] do_sendfile+0x675/0xc40 [ 809.370876][ T3468] __x64_sys_sendfile64+0x102/0x140 [ 809.376129][ T3468] do_syscall_64+0x44/0xd0 [ 809.380708][ T3468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.386602][ T3468] RIP: 0033:0x7fca50b35ae9 [ 809.391011][ T3468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.410614][ T3468] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 809.419037][ T3468] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 809.427081][ T3468] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 809.435056][ T3468] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 809.443022][ T3468] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 809.451068][ T3468] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 809.459161][ T3468] 19:42:17 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) (fail_nth: 52) 19:42:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x6558000000000000, 0x0) 19:42:17 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x9}}]}) 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8000000000000000, 0x0) [ 809.536363][ T3459] ISOFS: Unable to identify CD-ROM format. [ 809.618809][ T3478] FAULT_INJECTION: forcing a failure. [ 809.618809][ T3478] name failslab, interval 1, probability 0, space 0, times 0 [ 809.621092][ C0] sd 0:0:1:0: tag#8159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.631483][ T3478] CPU: 1 PID: 3478 Comm: syz-executor.4 Tainted: G W 5.16.0-rc4-syzkaller #0 [ 809.641479][ C0] sd 0:0:1:0: tag#8159 CDB: opcode=0xe5 (vendor) [ 809.651467][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.651480][ T3478] Call Trace: [ 809.651488][ T3478] [ 809.651493][ T3478] dump_stack_lvl+0xd6/0x122 [ 809.657924][ C0] sd 0:0:1:0: tag#8159 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 809.667976][ T3478] dump_stack+0x11/0x1b [ 809.671293][ C0] sd 0:0:1:0: tag#8159 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 809.674185][ T3478] should_fail+0x23c/0x250 [ 809.678793][ C0] sd 0:0:1:0: tag#8159 CDB[20]: ba [ 809.687746][ T3478] ? mempool_alloc_slab+0x16/0x20 [ 809.687773][ T3478] __should_failslab+0x81/0x90 [ 809.720633][ T3478] should_failslab+0x5/0x20 [ 809.725142][ T3478] kmem_cache_alloc+0x4f/0x320 [ 809.729951][ T3478] mempool_alloc_slab+0x16/0x20 [ 809.734854][ T3478] ? mempool_free+0x130/0x130 [ 809.739535][ T3478] mempool_alloc+0x9d/0x310 [ 809.744162][ T3478] ? __crc32c_le_base+0x19c/0x350 [ 809.749187][ T3478] sg_pool_alloc+0x74/0x90 [ 809.753646][ T3478] __sg_alloc_table+0xce/0x290 [ 809.758407][ T3478] sg_alloc_table_chained+0xaf/0x140 [ 809.763695][ T3478] ? sg_alloc_table_chained+0x140/0x140 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8100000000000000, 0x0) [ 809.769345][ T3478] scsi_alloc_sgtables+0x18a/0x510 [ 809.774575][ T3478] sd_init_command+0x944/0x1610 [ 809.779442][ T3478] scsi_queue_rq+0x1026/0x1460 [ 809.784208][ T3478] blk_mq_dispatch_rq_list+0x534/0x11e0 [ 809.789816][ T3478] ? dd_has_work+0x207/0x260 [ 809.794403][ T3478] blk_mq_do_dispatch_sched+0x446/0x6d0 [ 809.800001][ T3478] __blk_mq_sched_dispatch_requests+0x1ca/0x270 [ 809.806242][ T3478] blk_mq_sched_dispatch_requests+0x9f/0x110 [ 809.812266][ T3478] __blk_mq_run_hw_queue+0xc1/0x140 [ 809.817473][ T3478] __blk_mq_delay_run_hw_queue+0x199/0x360 [ 809.823279][ T3478] ? __rcu_read_unlock+0x5c/0x290 [ 809.828302][ T3478] blk_mq_run_hw_queue+0x231/0x260 [ 809.833435][ T3478] blk_mq_sched_insert_requests+0x130/0x200 [ 809.839332][ T3478] blk_mq_flush_plug_list+0x372/0x460 [ 809.844742][ T3478] blk_flush_plug+0x25a/0x2b0 [ 809.849418][ T3478] ? ext4_iomap_end+0x33/0x50 [ 809.854099][ T3478] blk_finish_plug+0x44/0x60 [ 809.858818][ T3478] __iomap_dio_rw+0xcad/0x1070 [ 809.863584][ T3478] ? _raw_spin_lock_irq+0x41/0x50 [ 809.868721][ T3478] iomap_dio_rw+0x38/0x80 [ 809.873048][ T3478] ? ext4_file_write_iter+0x461/0x1200 [ 809.878553][ T3478] ext4_file_write_iter+0xac3/0x1200 [ 809.883883][ T3478] ? ext4_file_write_iter+0x461/0x1200 [ 809.889428][ T3478] do_iter_readv_writev+0x2de/0x380 [ 809.894679][ T3478] do_iter_write+0x192/0x5c0 [ 809.899270][ T3478] vfs_iter_write+0x4c/0x70 [ 809.903845][ T3478] iter_file_splice_write+0x43a/0x790 [ 809.909334][ T3478] ? splice_from_pipe+0xd0/0xd0 [ 809.914190][ T3478] direct_splice_actor+0x80/0xa0 19:42:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) [ 809.919203][ T3478] splice_direct_to_actor+0x345/0x650 [ 809.924577][ T3478] ? do_splice_direct+0x190/0x190 [ 809.929598][ T3478] do_splice_direct+0x106/0x190 [ 809.934445][ T3478] do_sendfile+0x675/0xc40 [ 809.938952][ T3478] __x64_sys_sendfile64+0x102/0x140 [ 809.944147][ T3478] do_syscall_64+0x44/0xd0 [ 809.948571][ T3478] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 809.954464][ T3478] RIP: 0033:0x7fca50b35ae9 [ 809.958868][ T3478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 809.978531][ T3478] RSP: 002b:00007fca502ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 809.982536][ C0] sd 0:0:1:0: tag#8161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 809.986993][ T3478] RAX: ffffffffffffffda RBX: 00007fca50c48f60 RCX: 00007fca50b35ae9 [ 809.987009][ T3478] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 809.987022][ T3478] RBP: 00007fca502ac1d0 R08: 0000000000000000 R09: 0000000000000000 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8847000000000000, 0x0) 19:42:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002823) 19:42:17 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000281c) [ 809.987045][ T3478] R10: 0000000080002800 R11: 0000000000000246 R12: 0000000000000002 [ 809.996872][ C0] sd 0:0:1:0: tag#8161 CDB: opcode=0xe5 (vendor) [ 810.004782][ T3478] R13: 00007ffc7736a5ff R14: 00007fca502ac300 R15: 0000000000022000 [ 810.004801][ T3478] [ 810.046267][ C0] sd 0:0:1:0: tag#8161 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 810.055302][ C0] sd 0:0:1:0: tag#8161 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 810.064377][ C0] sd 0:0:1:0: tag#8161 CDB[20]: ba 19:42:17 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x8848000000000000, 0x0) [ 810.150557][ T3698] ISOFS: Unable to identify CD-ROM format. 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x88a8ffff00000000, 0x0) [ 810.253475][ T3698] ISOFS: Unable to identify CD-ROM format. 19:42:18 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002800) 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xa6ffffff00000000, 0x0) 19:42:18 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xa}}]}) 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc00e000000000000, 0x0) 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xc3ffffff00000000, 0x0) 19:42:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002824) [ 810.539889][ T3709] ISOFS: Unable to identify CD-ROM format. [ 810.643224][ T3709] ISOFS: Unable to identify CD-ROM format. 19:42:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0xffffffff00000000, 0x0) 19:42:18 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000281d) 19:42:18 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xb}}]}) 19:42:18 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) socket$inet(0x2, 0x1, 0x20) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 810.889215][ T3926] ISOFS: Unable to identify CD-ROM format. [ 810.912242][ C0] sd 0:0:1:0: tag#8169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 810.922128][ C0] sd 0:0:1:0: tag#8169 CDB: opcode=0xe5 (vendor) [ 810.928486][ C0] sd 0:0:1:0: tag#8169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:42:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002825) [ 810.937558][ C0] sd 0:0:1:0: tag#8169 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 810.946745][ C0] sd 0:0:1:0: tag#8169 CDB[20]: ba 19:42:18 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x4810) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:18 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xc}}]}) [ 811.013036][ T3926] ISOFS: Unable to identify CD-ROM format. [ 811.149557][ T4046] ISOFS: Unable to identify CD-ROM format. [ 811.249561][ T4046] ISOFS: Unable to identify CD-ROM format. 19:42:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xd}}]}) 19:42:19 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000002) 19:42:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000281e) [ 811.429646][ T4148] ISOFS: Unable to identify CD-ROM format. [ 811.515947][ T4148] ISOFS: Unable to identify CD-ROM format. 19:42:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002826) 19:42:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xe}}]}) 19:42:19 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002822) 19:42:19 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000004) [ 811.802449][ T4356] ISOFS: Unable to identify CD-ROM format. [ 811.810235][ C1] sd 0:0:1:0: tag#8142 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 811.820124][ C1] sd 0:0:1:0: tag#8142 CDB: opcode=0xe5 (vendor) [ 811.826478][ C1] sd 0:0:1:0: tag#8142 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 811.835505][ C1] sd 0:0:1:0: tag#8142 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 811.844555][ C1] sd 0:0:1:0: tag#8142 CDB[20]: ba 19:42:19 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001480)=""/158, 0x9e}, 0x10}], 0x1, 0x2141, 0x0) [ 811.937932][ T4356] ISOFS: Unable to identify CD-ROM format. 19:42:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0xf}}]}) 19:42:19 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x83a1a2515b1cd283}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000240000042dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0d000800080007000300ff56000008000100736662002c00020028000100e200000001000080010001000500000000000000000200004706000081000000000000030c000100696e67726573730008000d00ffff00"/100], 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 19:42:19 executing program 3: r0 = socket$inet(0x10, 0x5, 0xfffffffe) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="b961212100f06cdba3c7e4d8aea6d4c09a03f6d0e073c901488eb57facc17600a66eb143b29ee039853406bf75a7cb356b87b82a1f3251509c2babf4abbc3c4b427b53a17dcfea9b709c578d", 0x4c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)}}], 0x1, 0x0, 0x0) 19:42:19 executing program 3: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000440)="9ac6f11de1e9bc1e64dd1d992ee829d500ca0ce016908609572034530e1f490c20c95bfe2572eb40d46bc32ec994f9904fd0ff9939e1a620c6ca0f31a9c3d513") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x5cbb7000) r1 = socket$inet(0x10, 0x2000000003, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000014c0)=ANY=[@ANYBLOB="ac1e0001000000000100000006000000e0000002ffffffffe00000027f00000164010101ac1414bb14c87519596b69bc757700c9db01f4ac86f879a3d1d1c58c7f4380407b5527f2f7f2050d032d17cba383fc63541fc018c7620cbd5efdba6c49551da7f6cabe573c1db0f1a4a7311f9f277f685fdbf6e74aabf42f25577e64ae73119f1b39a54127e6f682364af26d9a86"], 0x28) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000480)=0x3, 0x4) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000000280)=""/50, 0x32}], 0x2, &(0x7f0000000340)=""/42, 0x2a}, 0x2}], 0x1, 0x0, &(0x7f00000003c0)={0x77359400}) recvmmsg(r1, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 812.078693][ T4570] ISOFS: Unable to identify CD-ROM format. 19:42:19 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$phonet(0x23, 0x2, 0x1) ppoll(&(0x7f00000001c0)=[{r2, 0xa060}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x1000]}, 0x8) recvmmsg(r1, &(0x7f0000002540)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f00000025c0)=""/237, 0xed}], 0x2}, 0x4}, {{&(0x7f00000002c0)=@ax25={{0x3, @rose}, [@null, @default, @bcast, @netrom, @netrom, @remote, @netrom, @default]}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/53, 0x35}, {&(0x7f00000001c0)}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000400)=""/89, 0x59}, {0xfffffffffffffffe}, {&(0x7f00000001c0)}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x7, &(0x7f00000026c0)=""/4096, 0x1000}, 0x4}], 0x2, 0x0, 0x0) 19:42:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x10}}]}) [ 812.147064][ T4570] ISOFS: Unable to identify CD-ROM format. [ 812.368719][ T4689] ISOFS: Unable to identify CD-ROM format. [ 812.441805][ T4689] ISOFS: Unable to identify CD-ROM format. 19:42:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002827) 19:42:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002825) 19:42:20 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000c00) 19:42:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x11}}]}) [ 812.701848][ T4889] ISOFS: Unable to identify CD-ROM format. [ 812.707880][ C0] sd 0:0:1:0: tag#8140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 812.717782][ C0] sd 0:0:1:0: tag#8140 CDB: opcode=0xe5 (vendor) [ 812.724133][ C0] sd 0:0:1:0: tag#8140 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 812.733184][ C0] sd 0:0:1:0: tag#8140 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 812.742315][ C0] sd 0:0:1:0: tag#8140 CDB[20]: ba 19:42:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x12}}]}) [ 812.814345][ T4889] ISOFS: Unable to identify CD-ROM format. [ 812.963927][ T4895] ISOFS: Unable to identify CD-ROM format. 19:42:20 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x13}}]}) 19:42:20 executing program 3: r0 = socket$inet(0x10, 0x6, 0xfffffffd) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @broadcast}, &(0x7f0000000300)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0)="0dce08c63d00a06800271e11a88b440cb26dd16e1a45d5df506bea2550623474f1797b6c52b4", &(0x7f0000000240)=@udp=r1, 0x2}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@security={'security\x00', 0xe, 0x4, 0x450, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x24, 0x2, [0x2f, 0x7, 0x11, 0x2e, 0x2f, 0x3e, 0xf, 0x17, 0xa, 0x34, 0x6, 0x12, 0x2d, 0x3, 0x9, 0x1b], 0x0, 0x0, 0x7fff}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x26}, 0xff, 0xff000000, 'erspan0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0x3}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x4fa0eb18f1281057, 0x98}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x1, 0x1, 0x0, 0x6, 0x2], 0x4, 0x7}, {0x4, [0x0, 0x4, 0x7, 0x4, 0x1, 0x2]}}}}, {{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0x5, 0x49, 0x1, 0x8, 0xa1cd, 0x3, 0xf8e, 0x18, 0x18}, {0x1}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x5, 0x2}, {0x3, 0x5, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:20 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000283d) [ 813.055381][ T4895] ISOFS: Unable to identify CD-ROM format. 19:42:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002828) 19:42:20 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003b40)='/sys/module/nf_conntrack_netbios_ns', 0x2228c1, 0x112) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003b80)={0x0, @broadcast}, &(0x7f0000003bc0)=0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f0000000380)=[{&(0x7f0000002540)=""/255, 0xff}, {&(0x7f00000024c0)=""/78, 0x4e}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/173, 0xad}, 0x40) [ 813.149479][ T5068] x_tables: duplicate underflow at hook 2 [ 813.158596][ T5068] x_tables: duplicate underflow at hook 2 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4087, 0xff7}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000140)=""/30, 0x1e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000180)=""/173, 0xad}], 0x2, &(0x7f00000014c0)=""/4096, 0x1000}, 0xe9}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000440)=""/42, 0x2a}], 0x5, &(0x7f0000003540)=""/4096, 0x1000}, 0x7f}], 0x3, 0x0, 0x0) [ 813.190485][ T5066] ISOFS: Unable to identify CD-ROM format. [ 813.299477][ T5066] ISOFS: Unable to identify CD-ROM format. [ 813.344931][ T1402] ================================================================== [ 813.353118][ T1402] BUG: KCSAN: data-race in jbd2_journal_file_inode / jbd2_journal_finish_inode_data_buffers [ 813.363278][ T1402] [ 813.365622][ T1402] write to 0xffff88813ea2ecf8 of 8 bytes by task 5168 on cpu 1: [ 813.373249][ T1402] jbd2_journal_file_inode+0x17a/0x330 [ 813.378705][ T1402] jbd2_journal_inode_ranged_write+0x30/0x40 [ 813.384675][ T1402] ext4_map_blocks+0xdce/0xf00 [ 813.389437][ T1402] ext4_iomap_begin+0x4b0/0x630 [ 813.394302][ T1402] iomap_iter+0x395/0x4a0 [ 813.398647][ T1402] __iomap_dio_rw+0xb78/0x1070 [ 813.403410][ T1402] iomap_dio_rw+0x38/0x80 [ 813.407745][ T1402] ext4_file_write_iter+0xac3/0x1200 [ 813.413112][ T1402] do_iter_readv_writev+0x2de/0x380 [ 813.418301][ T1402] do_iter_write+0x192/0x5c0 [ 813.422889][ T1402] vfs_iter_write+0x4c/0x70 [ 813.427390][ T1402] iter_file_splice_write+0x43a/0x790 [ 813.432805][ T1402] direct_splice_actor+0x80/0xa0 [ 813.437748][ T1402] splice_direct_to_actor+0x345/0x650 [ 813.443117][ T1402] do_splice_direct+0x106/0x190 [ 813.447967][ T1402] do_sendfile+0x675/0xc40 [ 813.452392][ T1402] __x64_sys_sendfile64+0x102/0x140 [ 813.457604][ T1402] do_syscall_64+0x44/0xd0 [ 813.462015][ T1402] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 813.467911][ T1402] [ 813.470229][ T1402] read to 0xffff88813ea2ecf8 of 8 bytes by task 1402 on cpu 0: [ 813.478033][ T1402] jbd2_journal_finish_inode_data_buffers+0x3d/0x60 [ 813.484618][ T1402] ext4_journal_finish_inode_data_buffers+0x41/0x60 [ 813.491208][ T1402] jbd2_journal_commit_transaction+0x16a8/0x3460 [ 813.497536][ T1402] kjournald2+0x263/0x480 [ 813.501876][ T1402] kthread+0x2c7/0x2e0 [ 813.505942][ T1402] ret_from_fork+0x1f/0x30 [ 813.510352][ T1402] [ 813.512669][ T1402] value changed: 0x0000000000089fff -> 0x000000000008afff [ 813.519765][ T1402] [ 813.522076][ T1402] Reported by Kernel Concurrency Sanitizer on: [ 813.528225][ T1402] CPU: 0 PID: 1402 Comm: jbd2/sda1-8 Tainted: G W 5.16.0-rc4-syzkaller #0 19:42:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:21 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001400) 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000002c80)={'syztnl1\x00', &(0x7f0000002c00)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x40, 0x20, 0x9, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0x0, 0x8000}}) syz_io_uring_setup(0x6eb3, &(0x7f0000003500)={0x0, 0x80ab, 0x0, 0x2, 0x2c8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000003640)=0x0, &(0x7f0000003680)) syz_io_uring_setup(0x2a31, &(0x7f00000036c0)={0x0, 0x2077, 0x2, 0x0, 0x228}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000005880), &(0x7f00000058c0)=0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000005900), 0x90001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000059c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000005940)=@llc={0x1a, 0x8, 0x7f, 0xff, 0x2, 0xd7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x1}, 0x7) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x1, @local, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="91ba649ef85d448109ab6100c17a41c61a67c96ae833613189c78ea0d487305a2c3da64703c4fef7041e7ed006eff1263dcea456eb09dd78bddc795236d1be926574a5cf76cc79a4339f453097e4b1c15754e7f874d5d99cbe3a73bb7259e206a3bc8f2759ab33875b357ef469e02758bc7d6fc37125e3044b7ce34ad6e6b691bb0091f55fc1a175883b7b904e6638f55d27852ac1923a2e2fa7768f48b524c0a9dfa053e74b1f880be9333e9ea71124934ad32cc65da551debbbeabeadf5a71bcb7983a72fc052f56c62434e2cb05f8e5597d099177e65149749f457a43a74608eae06b88d031fac51961fde006e8304d8239e32a211adfee", 0xf9}], 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1210}}, {{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x4, @random="e6d825e95d7f", 'bond_slave_1\x00'}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000003c0)="7c95bfe1cbc8524337f6a4faad92af564109c54c0b50e7e94d9bc621903368d8e7211f66cf11f7ae8178b907ae5fbc7273909670f621ae901faeccb08b5838f59efea9c5714785fc8686c3daa21fc173c333ce848d9d1fda4f5036b63eabda30f1a71647d43db893851466635d38d6b9f47fe85f7a391abd431999dd43034220e49c9bc31b7ca0a62597099ead7e9d5881e01d55b61a3f1f71f7f0", 0x9b}, {&(0x7f0000002700)="6b64e01958a269407f6458809acdf64638cb7567580390bc0939a71dba50c378c72e1026f38767eb7bf1acdb4486f15141f665f2c53fc287b7122e7a74bbc4c0895f983751d2704fe24eabe15375a1996a01a00b6b3f6024d1481d546fde2bcbc99ebb98a8bd4ee2157206a6eb52a36b3288ed8a3a3b10645fa71e9ca482c7b94f5feb33fe15518006023e191a33de3e6f2e9ece", 0x94}, {&(0x7f0000000480)="acc23cbeb71ab50af567aedaa4315b7bbd238e19abf2", 0x16}, {&(0x7f00000027c0)="a8dd25402783371447e0ae179716a343589a63832e9c8e4bff339827818c71e977161b1fbb94f4b2", 0x28}, {&(0x7f0000002800)="fc3beb8a80a21e0f6ffb4f2166842bb60c8e122eaa4f7e11d6c904bc44a5d7c330809b25e69d822c7ade3b6e63568db478678192ac7f681fbdf6180e432957a3d937f6806e8c364f05224b2a1159be79f56e0db5884a8883d175d2ceb99ddb6313f0a499243910553206696557084f531f1cc2dbfba5ce6281f20e0a97487f40ef303014a5fde3", 0x87}, {&(0x7f00000028c0)="e02866ff2ba3e3cba12e2a6aa6689330745cb10669980641b7dba7c34babb64602516e2a864e4b988c38ee798c548d5b34ec4c2600c2563ba30fcf6472559c58d915050ae48e29e36121446f87cc5c021733a0a6", 0x54}, {&(0x7f0000002940)="bde6a093c42472e522f34c8a577ed6531144a8539999a328cf3aec75344ccf5f4912bfd9c25e373a858ba6eb609db14103e94a47f215aea6dff170d0f7a4da83bc196b67a0ee7dbb9c3b4b42402b5d860a23bbe65960b6fbfe6bd88d3ea6deea2fa52d6ddd710f3504cb56c7d6af6c0a3d942f562780b638659d8544ce9cd813d2b111f7a82e251f95914e6f60c2", 0x8e}], 0x7, &(0x7f0000002a80)=[{0x88, 0x119, 0x401, "7a47448b9c57475f86e7bb235c4f89fba0ffdbbd26774c71734b60aae49d319fa6485e338f19f5587acc5b1b975fd7a3b344dd8c32081c9d293e70f6088a08805900c3065c4cc14d12c3a560cc84cf9bd1e116ccdc3d79d1057dc1dbb8fde64d2739fd080f2deae32a1f751a51fa4913ac28f9e06052"}, {0xe8, 0x3a, 0xcc46, "d8fef8b385cda23e20baf3777366ea9228502f07602d67f69b3769271e55cbf60edfb1f5cdbadf015bae945e104fcda768411344c52ea43fd44f9322ef42f49cae661380bce4e4978cb7d8c1d6ce6077a08fa583f890cbcaf97d73005eaba7f5c814d17537efb1878604097084a96625015c6176ba05ee2351d5f34623f3f208d784c0b9a935ceaef621db332bf3afc61d49d7af7f43ded4329f79e19f7a36d23d940383c1796eacd4f6f6f0199cb76ce917647edb4c412de951fdb206c734812557422cf35b45d95b609258d4781d86e157f290b093"}], 0x170}}, {{&(0x7f0000002cc0)=@xdp={0x2c, 0x1, r1, 0x1}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d40)="e5b31e8402eb259136177336795104bb32165670e4dd11b19faf913f0f07e723ddcfa3f8", 0x24}], 0x1, &(0x7f0000002dc0)=[{0x88, 0x1, 0x5, "a1296f94161ea4a9fd15c3bedd216fa4343a87845f8111162254f38b2648bfb548aa2bf976294daab7cb0193bc833afade0b3118c492c82c6e697de0c093a3fbe1d27c59b1bf25737ad2a45cd4fc1d66e3025e01d70c9f1803badd29b779776cb71304f4606d4eb77e38be2df4ada83856b73f35be"}, {0xf8, 0x3a, 0x155, "494ea6b5f68a409cb9d7a43e5e375efd3a7a22db3343c80f53d0158948ad73f55bfa08b2d54f967eca1ac9bb1f1ed73e3ef2ef6887b450485a0236795838440df27e0f023e667f6d061c17b7e665cb84ee37901d2d73192c373db4857ac623d4d877795f8c7bc840c36581b1312229b18dd90cfc677d96be70f105d5a103df2a528db40cfd17afcec0a4adc27e98b4757802b605619845ac7cd63f9a05533cc1f15f453650728dc2e3980e1ed88a7f41279ef9d5d5f59f7fe0d309f373eb81640f3a88493b2e5270c5de577a98911e32a86fa0d4b2187b525665167e31eb15d923393402004ede"}, {0xe8, 0x105, 0x80000, "ffe78589bbcdc1b1b52616e42aad3626d74011bb28ac1daa6d5d9fd5c3384601ac7c2b0b66f3fb04989aa311ba5ecdd2f65351c9aa674660c51dfe61dd5a2849e473e79677010577a167f1c1db5d3b04e0738c538781f1938137a821bb10f330bbb5a7173a741c3bde1fdb153d25706a10dfe17a28f4aec1bb99a39d4e42b96ab3292e096a387907deaeb6633553ce27c244a0abae11bf2ac8ff5efb1426a7a321ab0acbf8cac6db646dcf3040d42015af49b5d28bad7c836380b971c0c3dd85d66c68e5c33c359cca51eee1f02605afab748486df"}, {0x20, 0x116, 0x3, "e8d252a1aee3d8c22e4a"}], 0x288}}, {{&(0x7f0000003080)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003100)="2366269c5d83bb461822a3d1ac29fc98eb05016ce22aa623a99f508a4f8944ebaf0521154272c8ef03af7a39086cb04d693e72511cea052620f6feb0c2c8f821fe7da56fbb35da720e570ba7d31fbfd832d41265d2ba95979bf12055a5f6b320d9bda800111be05f30b2210cb31303f129118f6b0ab6a82745f544d012195b99157ed950b7", 0x85}, {&(0x7f00000031c0)="54a7f1cdf9093809680c98f8494b6b4003c0add484013426fd86f4a2274237ae7794e805b148398200446ced9236a9e2882a78d214e27dc2ca38531e78643d432263e209c86202fd2aa48e4a373d3d115135a8a929bee6cdec7aa06eca320216290a43f6d194bc5d30b06de1076f16e6ea01706f878685ace2a4b034917dc4efddc45caa1650cf8cd95f2718fca3b90bb8a5e4876abb48d5226b46280adc", 0x9e}, {&(0x7f0000003280)="491e305e587cb7d731693150cbbc041d561f401860e749df", 0x18}, {&(0x7f00000032c0)="c1bcbeb83f9c485416d9462a0d1457c9a8f037dac1ed790e5bac", 0x1a}, {&(0x7f0000003300)="72bdc5e3a7ba7c1c24aced1656acda36bde8563637f22070ecdace2a5d816190fed4c8b10b632553515b37cc16b1f5", 0x2f}, {&(0x7f0000003340)="371e893e9fef1d52591459cf5508caeaf320922fde289a38aed9fca29c18be6252de2c22aa3bca1b6af745c9712a22007de0c2f15f899f64", 0x38}, {&(0x7f0000003380)="c09d9ddf75798fe3741c249c8bd6b78a1e9ba0c7f3d003a2f1673f5b9fe023309c958450aff33df1f546b7d4b954b6fb5cbcbb2bc59489aa91c1f0b6f93b3563ebf37c12e58454a62d0da4af4f0a27", 0x4f}], 0x7, &(0x7f0000003480)}}, {{&(0x7f0000003740)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="edfaa726884bf660aeaed8dffcbe2fb656b080797580f9a31cf4d021f99641781710d2915389d09e2fcb4eb49f79ab6175ac47ac0d6ddff6d257aee7651966ddd9eafccb414735f6481cca8e8ccf0502c669b20a93481c47b24c716aab3de75210b070b7824fda95f9171e537e3e3f963eff4e3018f139908eab7b390fc689cde659e4620c", 0x85}], 0x1, &(0x7f00000038c0)=[{0x50, 0x103, 0x1000, "c6cf099cc226732557813c6035116d726425c108dc0ec2be561edec31c1653d3b69b8e25b80152285fa2353c73fc925af91bc604ea3f0078c7186f"}, {0x48, 0x10c, 0x0, "341b6945693c69233b9e45193fca75c09e8700d6f3e24b06d92f57de2fd5b875b6e04c17d12b8c9d8e4176c6ec02177c1ea4c14c4866b878"}], 0x98}}, {{&(0x7f0000003980)=@xdp={0x2c, 0x9, 0x0, 0x8}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a00)="a67fbd9aeb3c06bea512798852acce9e748e3a9035316464fa17a59d14a35c8801645d0fe852f4a666ba3d2f34a5c74cf20b2d7db6d22dc01b6f87e274cb10b6a27225589896b341c740079b88847290fd913991460e9c996f8aeab16411f38929ae4b3ae54b21732f417d98ea665514fe6eb2c0ea15850916320c8b94d660eca6d263009f44f40d56e79d22595f3f62b78b70d19e889ee7439438493331529c9d1b7b9301f135839601f951ce3d764e750db54a879302fd65472118c6b60bc62e5b", 0xc2}, {&(0x7f0000003b00)="b339e41092c581fd42b85e84609cf3af8f466a2ffd3b18e563c6cb1dcf6f0572974a282c8c5dae13be6cd134e81cd993197de63d8219016e3779c632501262da0850aa2cf89b4ab4b655dedd98ebc6d072e00b20ad944f7208d3a7e0820d74fefb8ef9f7a5282c8543284a83a98ae55adfb2a2543f9939ee645b1efc7285a3fdb07649b5ec918178b54428c7740478e16835e20d15f4a61534e6e83d443e46fe25046ff11e714fcacaeecc7426798c821a426a90fad00a68f0681b7db1784608065c3856889db7c87c28719d178ae54f79d9ee25743b1c6199f57d6206bb88c2d7192d92bfcd480fbcfe39", 0xeb}, {&(0x7f0000003c00)="879fdc733a777ee522192afdbd03e2487b199130c423d86c789a031640d89ccd45abacbb15f2d2501ba0dc05d475d734538f3eb4ff6b81269aba1ba03ac7b02a6821399b34682d0524c783e3b6f1dd27ef9a34cfb51a59ec5f6aaaa09d02d0962ca1a57e1049b3f8723e96015cb70df0caf5a52b56c101f9ac219d947036", 0x7e}], 0x3, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x228}}, {{&(0x7f0000003f00)=@caif=@util={0x25, "3b7bdc7998d379b02230636a0f48a408"}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f80)="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", 0x1000}], 0x1}}, {{&(0x7f0000004fc0)=@ax25={{0x3, @default, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005040)="62534d14295ca86d70df8127dc16685e9fe24bc58710c1fb95d8fdff863521283322d39ab1182ddf44a9c3c0371aee1da736f0b229e700", 0x37}, {&(0x7f0000005080)="6a46f46da5", 0x5}], 0x2}}, {{&(0x7f0000005100)=@isdn={0x22, 0x9f, 0x81, 0x2, 0x1}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005180)="2199a3b85291e21742dff73a13ba423bed42f95352a6a8ee49039a24a78e964bbaf1edf68f52", 0x26}, {&(0x7f00000051c0)="b878bef5fd4bd6ca0bdab62a70c2e56cea6077134d28e09f6e7ee8767fd97b459a602a4b30cccc69c2031151d2b36c06ab6ed97e421c", 0x36}, {&(0x7f0000005200)="d854ffeac85b6802a8e6daf7970d167a31cfb40947e61efe0a1dbe783943430b39980da140eedea6a1354f3d5ff59a6c4d45545a19efafdf02955f1e6e12a996a7e2fd01cccd72623b2ba950dba0f06a389f3b88cf31c19688a87c9aec25f6dabe171d54db40841da07c9f0c3b82727db7296ccd46979b475bf461be93661db4b4b9a15a4edca21bd6637afbef2d29", 0x8f}, {&(0x7f00000052c0)="d3bb8849888eb88e3c10199d3eea3d1662a7a6fe4ec0466f5bf2c6d5375bdd1c844db3e85ff8ff0afa7792c3f8f02f91c089d13461615a40ff941752f0b897cb1e1f09a16f8d19a4fc34b6d20f82dfba2b84", 0x52}], 0x4, &(0x7f0000005380)=[{0xe0, 0x119, 0x4, "79289f6517cdc28a5b230d5e47f0ec65946e48ff04238dce922cfc3086f86332023648703a161ee699fe5b08cfddc31a11e2632ad4956e8de82d2034728b6f5945afd387e20e889d55778e5be19085bfa45d6cefc1f5423fdec2d3c3a4883f7326a3ce357dd0c9bd59d0c58adb754c0c071331a7fe8fa4af5908f2932270ade88bc11c366648feb8320c0a33dd82d9228885bccff1bedb314501de16dfd9111d352da4074ab5b3d2ae6b4470a9658c536267fc1730b7f96e3ab5192782fbddcd88dce9b868fae399436fe128e8fe6b"}, {0xb8, 0x0, 0x2, "a2c3ca329181e0a0272043e971d19e5a67c487f301bd39a9e882a61e08e3a344a2c0428fd6bffe8b0f0b41c1b3a560e8a43fc64e80aaec7d6a220a0ab6a8f7c4fd9e1566484b89e940b73b17374908beb17520c348eb78e559c254c049a6f28edcdb964931d2dab7794482a54996bef5e5a0365600d3e10957cfc5894ecd7c6eb2e986445ac5a49497117610d9f56d641cbe21df70cd34619473116b2a9e7f79af975168"}], 0x198}}], 0x9, 0x20040001) pwritev2(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f0000005780)="4acf1f76e29fac7fd1c07091646ff0bf7681f41a37fa7179adf1df7bff47e460149d2b8eeb362dd8c73fa2ebd5a23e1d5cbaf5ebddb72a3d859a5f3850aa639a65b694ea7dfdcd0028239803825d98ae35945ac97b92c613ec75bee1c077212bbd4ffbbb3d2f6890725cd2dfd15b2c14aa3ca272b3e7bf0165a757ff328d24b805c99aef6fbef316a0f6cff715a829413bb87b00400d4b98aa62ffb009381539a30fb178e25e62b9340c33d9104d1c4154ba72a5c8d908dd22ac78bdfbbfa9db86b0837f6e2ba01c8f07c9d5f6", 0xcd}, {&(0x7f0000003580)="c1119f3264271479fee9a797e96c7742436a4aaf4089235aad20a43ec09235c47c7699ab0400c5aeaa4546b607141d723b3dcd6c438388e674873e1aa74cee8bdc5a6999e1983c72c053ca876d82dd7cc6be242925302186b710b262b8555f1f8ae09688f8f9dd28f277c559f1d28d8925d398e18d7e5c6c4fb9e5feeac7e15a76222383395025d59fbbba42b999c5ea9d8d3e778e48eab1dfeaf3112786a40bf54fe28b915897ea4105fe", 0xab}, {&(0x7f0000003480)="b0170c033cdd4e8929b78b052898cf9a41a9f6242b1267deb53ba46dd2eea3192bb8448fda95ca9c56b55e178262874f93c5f0f0", 0x34}], 0x3, 0x1, 0x4, 0x7) 19:42:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x14}}]}) [ 813.538043][ T1402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.548094][ T1402] ================================================================== [ 813.637910][ C0] sd 0:0:1:0: tag#8169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 813.647796][ C0] sd 0:0:1:0: tag#8169 CDB: opcode=0xe5 (vendor) [ 813.654158][ C0] sd 0:0:1:0: tag#8169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 813.663345][ C0] sd 0:0:1:0: tag#8169 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 813.672419][ C0] sd 0:0:1:0: tag#8169 CDB[20]: ba 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f00000000c0)=""/39, 0x27}], 0x4, &(0x7f0000000440)=""/62, 0x3e}, 0x10001}, {{&(0x7f00000014c0)=@xdp, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001540)=""/244, 0xf4}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/201, 0xc9}, {&(0x7f0000002800)=""/189, 0xbd}], 0x5, &(0x7f0000002940)=""/115, 0x73}, 0x57}, {{&(0x7f00000029c0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002a40)=""/26, 0x1a}, {&(0x7f0000002a80)=""/209, 0xd1}, {&(0x7f0000002b80)=""/80, 0x50}, {&(0x7f0000002c00)=""/75, 0x4b}], 0x4, &(0x7f0000002cc0)=""/76, 0x4c}, 0x7b7b7bba}], 0x4, 0x0, &(0x7f0000002e40)={0x0, 0x3938700}) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:21 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002882) 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4089, 0xff9}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}, 0x4}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bond0\x00', 0x2}, 0x18) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) sendto$inet(r1, &(0x7f00000001c0)="23872948555a0258a1f2ea410c7c25a39b6dab5fbd24a585e5f756f0581ba0e44f19e5cc87fc1b028a8763dcfba8ca82bf7f29329b789db42b0f211d1c6edd342c718212dd92fbb6d0293b6f6a0cb49611820f2a694e35e40e29d3f9f2240c3ba729e7c00fde006e2c5248686a99973380d43bd284b59f7468e65faa00067c0bb6b9fd30e67bd890116821f44c4c60dce6320c36959fb90ec488a43cdbfbd5ef1e4fb875819ba775e66a303bc7a8a216656c2503555734b4e3d40416994c41bd82", 0xc1, 0x4000000, 0x0, 0x0) [ 813.813750][ T5220] ISOFS: Unable to identify CD-ROM format. 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000002640)={&(0x7f0000000080)=@isdn, 0x80, &(0x7f00000025c0)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/121, 0x79}, {&(0x7f0000002540)=""/108, 0x6c}], 0x7}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002829) [ 813.902652][ T5220] ISOFS: Unable to identify CD-ROM format. 19:42:21 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x15}}]}) 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d816c25ff3248195daf8bd18d58f2b298c3518c0bd3459912c750c9d652cba781450", 0x22}, {&(0x7f00000001c0)="a8423175929aca90343fd7516cd695916ce30fd237c0b0f6b1193300b93f04ce7436d04f029632630c66d823daf6670912d31e33a620e24978e11af67b32cede2f3657dbadd6426d7f2771", 0x4b}, {&(0x7f00000000c0)="1347837c37214764d6e8687eb2a98984c520", 0x12}, {&(0x7f0000000300)="418eec3f59a740cc0beb494496a494d28c296a9b8408374a08bf45cbbc90f6b76e35b40b5d13c0d893b9bc23f71987aa223fdf5f7ce58b13f51108861c9372473f4ed5cb674baed376d0372534a47d64fcbdca44e85eb43c4bce64fe281f0dd098a2bf43181b32a63a27032c23cc347733445321d530180317e333681d6d6c17b5f178ecb68ca7f16b2d70c5b795176cd6e675e2bb70fdd6884a59bd45a22caf818591ac82b4459f459b4ce51ed62fa60d713b644d", 0xb5}], 0x4, &(0x7f00000003c0)=[{0xb0, 0x105, 0x10001, "e423239c45dd4b3bba9f9d723fb90e4bc8758e76028c282b4c183ca61726ca2d1df1a1c9db0659333d0a817ebf46466d76ed53634352f3b287b06adce1224de1e29e217ce28f055c55322501aa8dda4c1c3fd94c03a08b02535a2d390e68253f8ba258efbf8a5bec40a2fb27f235dd5622c280e5dce810f0d8daee8cc0bc8b201cff78492ba2375b9f73c4bdecce2b96b5b5b227594015abf1f9d77ac6"}, {0xa0, 0x3a, 0x6, "eb85dc8117cdfaa59caafb3ea6b247f6407f751e8974c5724aaf96adc00ecf487facc5f7493a501fb26c2f40465dea3d1abd1bd46bc634723a1ece543110c3544b85927a288a4e75369b660c7fcef8e8f6a2e5be11c32223968afcd75bec307eeabad00487119ce30ebeab46fbb2083c3e5f3c34776afdd1e4daf49f1bab1a4ce660a5a9691c23c33059d76ab619a5"}, {0xe8, 0x115, 0x9, "a2b5c5a5cf1ae8851e6bc03d13a1d24392fcd121352194d4d18c02740341c03e588218fc27f9079515267960df2f4a6fb86cbd4f6af258391c76f9d7d4c9784ad549334f24effb5874541110d3259373889bb121d3b06857187f29054cd80e853df681bd13a385ac5086cb64a430fc9b6855285e0e45cc4b7b7c93ef4c810502b06bd3d15f6e6aee5a071f41c85324ef2f3aa9a3d2165565121f0d3797101b86fd1b03b616941072be3a80d02991795a99d20aa00074c17d6b926313ca4a918d51cd0d46a7d2240cc3d75df1561744f9c7a200ee3e2098"}, {0x40, 0x29, 0x6c86, "23cdf4d376a90b5ee0df8d54d8ca276504d892888d542befadd046e49f77b052658b407a0b2549694c"}], 0x278}, 0x44) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0xffffffffffffff85, &(0x7f00000002c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x1120, 0x0) 19:42:21 executing program 3: r0 = socket$inet(0x10, 0x1, 0x200) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00), 0x0, 0x0, 0x0) [ 814.054045][ T5442] ISOFS: Unable to identify CD-ROM format. [ 814.153011][ T5442] ISOFS: Unable to identify CD-ROM format. 19:42:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x0, @dev}}) 19:42:22 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80001f00) 19:42:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002887) 19:42:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x16}}]}) 19:42:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282a) 19:42:22 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x7) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="501314db7728824c2e4de1697966e31f4b87b496585df81bae47192d2cdd2ce8c8d23c7178fb82f2855013ae9d1c28d2d527c116583e1c3186d00805c6661af16a5d5a68505a9d830c4765cb7828fad08e7347311ba195646034cdbb0c28624be995360b6300b2598ebca557edc6570eb74423e44ab1edf43ff72ee38b968e49f75bf90f953e8a45276182f131d31194656ab13344", 0x95}, {&(0x7f0000000300)="50ae4cae2463aeae288925d28dbd35c312c0e3ea6cc538725fc0fbdd9603090ea6dcddace928a6e28e3618f28f723b9227bc9e4638d81773de6105672774ec52151edd9baa4deeb10f422f3bafe9d7e8607a24a50850039a303675897d6631288a2aa8eae2376a168baf94a1f27ac5e8c54e978ef61cf0f02d82c1a25ee1436ad3508ed776568945479dd453", 0x8c}, {&(0x7f0000000080)="8f1614a5e325c8e49fca3029c123ed032637d3", 0x13}, {&(0x7f00000003c0)="51b9037b9865288bf2590d934ce36937ab1cdb1e25f812bf94bd567dbbc58b766fe3d79258eb1e4006df394ca5a6bdbb6487a3d37f90ad635a3348d1d95cf17f52a7acf1fb3c6d78a428eb9c09a61a3287c6a2b5f62f2cc7922329d3dcf791e0c6d8ac0862bb8c98f16c2346a2be51abeeacb4baa2b22815d203117597b1625d59541b3f6dd57d9091656c48cda0da7b36c0fc3c160b", 0x96}], 0x4}}, {{&(0x7f00000014c0)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001540)="624daadecd8ff7c701e0f289eb4ade9be0ea2df2ba8f9a603c39a396c890282280e29025a919aa656d677d4ace463bb149602667ced33687d9f0b61d284e1f696b9b2486a6c62c89400f7d240d8250f7c9132aa05cf30e669c5d3dcd138a5d0bc5905e1d883ba83a48d9e09c71183156a39d5197d838195c9f87f093416cee32006f3b41e1eba45f253ff2598f2e5f46ee437b39218d8065d3d29ae84c50750ff008a8e54cb899e488fa0da7257dd3b21295ab94d6afbca50e6c814d7830ff105e7f876516307139a870b9da", 0xcc}, {&(0x7f0000000280)="5094d62e2d55cd57135ecb790e399549f1ad1629c72b91cd1aef9f29b4680c5f", 0x20}, {&(0x7f0000000480)="2f7d86a46376b12b710a7fb7573525a14b7adc3435f37aadbda643de5827ffa6", 0x20}, {&(0x7f0000001640)="1e3d43752543a13813d3046d6da763b6cd4f7e4ba8fedc08285124ff17e5993350f68811568f242d5c7d53a3d9d262f9f68fd4ce11c8ce9106b024d1931010d9bce50925eb5c6cd61cc5803279fc0288bd6d320ca5ad406844c1d39442f79045136550242b104ab3fdc8", 0x6a}, {&(0x7f00000016c0)="18167f9e87b0ea95a4e1846fefb0d55f507fabb43b33369c957b9fd7cb339a4ea38ec838a22549f89a7f8717819ed113f6ac0b848b0abe1e4bc7aba01538db9d8705a269fb9f0e46179d289755f8231e1444bb93eb37c41fe09db22abe0b6fd5dc0d67a273fdd0193001b10c14da9e11705c10fc6a2a0c6ef2d1605a079cd0cac4576922ad0a90e3b337ac34ae8762ec346ea4b011", 0x95}, {&(0x7f0000001780)="7495534c4113b497976c0db0c0fc942113f055f3b5862d823fab742b6401e1a80253f7479526a18fa84a067b1d97628d8c4f2169728960936fe0366b7f0bbe63c041bc07d212727c71dea0d083e6e9177448b6b4b7a56a606bb791", 0x5b}, {&(0x7f0000001800)="6bb03b75d1906641b52567a1aaf078d3b8a176df91eeae11251efde6e9b62660a0a1b3cc2fa3d85b4cf9e6f746d83e7b42b4c1a2fdefce9546c5ef0081d69f3f8286c6ae0ae522462f2f317fe7b3bed4e39ebbbcdfdcf6b8d62c345f3dbbc69b27feda590a17c955675e60f53060f21176b6786fcb1170ad4fea0efe9be70846d06b017c51261c04e347f6bd14a9e1f3241a15174e330c19317c5f9b0625c7bc7611302c67ac440d07", 0xa9}], 0x7}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001940)="9d3f350cfc739cd5eae2c5ed3a65c41ec80d2f4d859fe4639c564a6a3c424653a10a5c6b5f57aae646d00d2fef69f1cec2d4970b07799e982aab0e4c156b5ffab87b090320142ed1b97166dbfcde14f90c2db9ac5b8ab8241212c32184e1a268526a8c449d22b466599abf9bf2a0788a2947c6a33b0e4252eaf880f7dd798af472686f45d2e0c8aaee5c0abfb32be163679f2097bfc270010e43c777bdef09abe52fc72ef2cbb8b78827c077924d04e3fff3e96ebaa7a1ee4eee", 0xba}, {&(0x7f0000001a00)="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", 0xfd}, {&(0x7f0000001b00)="0b20bc8576d27a5d68b9c70c4bd52c6a24240c52e5980f01a05514989aaf23e5e7e8d7dd6faf2f07142c8cd0ebf2fbaed57d90d90519f56eb719f51c4a59dbb60174973dcd2cc29daf1d4214ec17bfbdcb9dedd4dde7b9708d120cc68c105e6ed19cc36552eca8", 0x67}, {&(0x7f0000001b80)="cef6b9c58a1498f333013a756007769e5dc96bcac804489a906ed7ab2af1d28024f710a72e9b1959ea94e1a273f185c307ead7a9b9c8e5e135248b390dd1ec3711c52f3e18d950dba3b6496ea2ae8375ad3cf2bdfa7a933d848e6ec01dda37198f270330d52e08de", 0x68}], 0x4, &(0x7f0000001c40)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x27}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x39}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}], 0xf0}}, {{&(0x7f0000001d40)=@llc={0x1a, 0x320, 0x80, 0xf7, 0x0, 0x3, @local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001dc0)="4f77fe066ef277153bd09763afeab88162c0a1340cc1276fa11dddc1eb29bbe4748b273ce66a3e9d6b3057a11583297cceb9b43bafb3382cc6c5a399b9ca02fa4acf9769333f3fb264c16f", 0x4b}, {&(0x7f0000001e40)="22ea329eecc30933cd63b737bd6d0d68b8e7ad005098648e5dba38dc7912ac3061f05c78433a652f95ecef2219e487441594bbb200736fc850f7e1d8b45bcec53de5139bc52ac83d2806e9bbef4d24a1e6e7fe176a2b8684cdb2ca9b4f798272a28b9070bbf4025561accc2068a7a214b9a7ad69d6be852b675ee0fd8a01c7f3644c4a3f1643275571ea43cdaa5de9691dc155409e6bf27403cbb768ee61a2cb42baad009c3326bd2042a2fd9743a50f293d70c91fed7710e30471a3ac4ee99a6092c72a5fd452e5", 0xc8}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="788b2b55fb7c4a1e6adb708a1fe6b18c738e5d564e196144a3", 0x19}, {&(0x7f0000002f80)="e4921065aac41d90ef0acc6e4c681182eeb14fcc9be9d27469dbcaba8322ee8f0a37224f4b5dd78d55bed65f596b8d4ab3e58acc52421dedc3ca42baa040072db3c9dd720222452a5bd3b03efda4fdb4adb20c3c3533c0ff80ab73ec8f5b970c96023ad45c68", 0x66}, {&(0x7f0000003000)="bd5194097e71b362c18d227262bb74a10eb3a15bc1faedc99e92a28526c7f611f951902f46d33159cf5f1efc5d9bd88c8bdd2a3b249962250c6d3667d98fe21e9d0b434612b60a37189c94a0e31c7d63488a9fc889169d3bd45b976ac33c82c8c93580b35e03f6e02581470ba385e4242d220673ad251a2f8ed73d487900e033b7965ddbb59abb9a1a1ea12b0c4f", 0x8e}, {&(0x7f00000030c0)="66471ac83e82", 0x6}, {&(0x7f0000003100)="24385d3666f3c5af37d23887d126b136626d97b47ae9d45e1efe469fb2b2789e", 0x20}], 0x8, &(0x7f00000031c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}, {{&(0x7f0000003200)=@in6={0xa, 0x4e20, 0x4, @local, 0x7}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003280)="ad5ac2101dd1325aba5383b5f59ea8a5e76db293aa01901bfe3f6837696aeee76507fdd6e06d257da0edfbaa49ed91f3776eb28f0e6c0d500572028725cc4a592d8100162349a71d85a81d91474d0529e3f1fb7459d927c834b1f390514686bb6956f319dc02c3be0503f675517ed256d8d90b19e8b513700d41290598067c34fe16f0702461c6af77530ddd13d08b2c4b4f76390fd46453d01a29c91630efd70c016fc0d8c71dbcca373d271b982c47a55cef1bf2", 0xb5}, {&(0x7f0000003340)="6dda87a81f1de6a1494217dde9d246bb4c827668462e46ff96db16658a1223d59db7c5fa47357d2f", 0x28}, {&(0x7f0000003380)="5ea98708124ef87e0e9306c3db9306dd412f6aad7e2684e0232141", 0x1b}, {&(0x7f00000033c0)="7ebf9716db56a509f398eeb62fb5871203a9db7261759b43203815c55a486cc2775cbc5f194df82d802e1a873506d7bada71d8a09af0476b2ff733cd9939eeca04c471656dc578de4f25e712f11e8d771a44ca58ddeae725b35be76fb950286f0d4cce2498d6cbc5e85fa69c8d7cb97b68d69e8cc8921e55129af9b025db3b285167c96b7cbf91e1c1a4ea92ba78dff073b8ff23c5bc87aa651cac6fb655b2f442606f8b9f03", 0xa6}, {&(0x7f0000003480)="74f9", 0x2}, {&(0x7f00000034c0)="4d73e58efa9e030242552c5c4a95520005d7887a8c2736e4bfdf7712a044b3bdc9bec7a66068889ad0d2eabd", 0x2c}, {&(0x7f0000003500)="980a3b19a3df9b0bc681d89498eb7b8e4020b4d01a4881affab63768280de5d04f3ddb733a95d78d456319e21efa41c26d4df44c2ac6fd5df61ee48c53780fdb6813bd79f76f8aa933ad231547ea4c28c8e0203c61311b7e189498e033a7b9b59330a86e77272048868cc31a9420fbe61362b2e4d0805d2f062ef1e554c8290aa7cce8392a619c8b38a43ba9685186175f389521a1f7cfb5b4d50b2e20c8118b75e1c1793fb70cb146320b51bde3e6421852a9dbe0753578cdc404e449c9b6dd14a561f089dc48cbe34230c8f764f975df38a3efb6ba49b268385c1a92", 0xdd}, {&(0x7f0000003600)="f095a366ff6afd61c108454ba2adc867a9d8dee2a162423ba7f200087caaa6c1e8bbdfaf37cac12e381224e0c8d01a4f0ae459b153b3b3005e969b025eaf1b6b664d222491f30f9e6bc4ed758f43a61118f59aca8f2c3383b5b33da08a3e172764b78f0c2a1498441943a05af499a655daffeed3de8281ae7ed165e90f8e1fc957b4d63b9a0ab82390668d16eec6ae7d90273786afa792cdc7ad10a33db5623c8bbae0727ce75cb3d50f2289d40bf8", 0xaf}, {&(0x7f00000036c0)="cf92159cc311267bc574be2daccf8321b0f1de00111daee2563949a8fe186330bb3352e052fcf9b26203858a7c1f31e2576e4c45e3fbf0ab132acc5bbbd56b8bbfa5bbe2ba33b209f58cb0661d4a9d4f46f0bddb531f7e2e21bbc02f53bc696bfe7a058b339080161ae04452d3a3a2d22946ab0cdf01cd88b3a4f20f651ea1d82e98ae5b907eb5e277418c38867001fe26ba21de52b7aa84980ffb87e448b8da33b01f2ff611e0c1f14abf2496a717ef7d1557b7631842942b", 0xb9}, {&(0x7f0000003780)="f2d5f0227e366c929d3314eb2d5da5b8773f5f161992b3798d472f5766fdd48b1d60ea0c84f0841cbab2dac8ceb524d497feba6b9b711b8734d830e0902f9e7f78d08a7f070b397a4452d2b99b7501e3e661f24f32c601a046f7be49900d5e0a5674afa45d1123f97f29b246c289e0025d91480c9f335a7228d989bcccf62480709082e4c728efa975e929e19168f3f56562a153c5ea07576df2d8eeb25ddd367d7c823370e7e88c9008f58a5d4284d2bbc99d2ae53d32113d7ac28c67d7c42b95ebf64cad0abce085adc6d16dfc6e", 0xcf}], 0xa}}], 0x5, 0x8080) [ 814.518388][ T5754] ISOFS: Unable to identify CD-ROM format. [ 814.541280][ C1] sd 0:0:1:0: tag#8136 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 814.551221][ C1] sd 0:0:1:0: tag#8136 CDB: opcode=0xe5 (vendor) [ 814.557574][ C1] sd 0:0:1:0: tag#8136 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 814.566629][ C1] sd 0:0:1:0: tag#8136 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 814.575646][ C1] sd 0:0:1:0: tag#8136 CDB[20]: ba 19:42:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x17}}]}) [ 814.673336][ T5754] ISOFS: Unable to identify CD-ROM format. 19:42:22 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002000) [ 814.812749][ T5765] ISOFS: Unable to identify CD-ROM format. 19:42:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x18}}]}) [ 814.891006][ T5765] ISOFS: Unable to identify CD-ROM format. 19:42:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282b) 19:42:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000288a) [ 815.039763][ T6072] ISOFS: Unable to identify CD-ROM format. [ 815.136096][ T6072] ISOFS: Unable to identify CD-ROM format. 19:42:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x19}}]}) 19:42:23 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002700) 19:42:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282c) 19:42:23 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='bridge_slave_1\x00') sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 815.422959][ T6303] ISOFS: Unable to identify CD-ROM format. [ 815.443074][ C0] sd 0:0:1:0: tag#8133 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 815.452969][ C0] sd 0:0:1:0: tag#8133 CDB: opcode=0xe5 (vendor) [ 815.459379][ C0] sd 0:0:1:0: tag#8133 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 19:42:23 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) faccessat(r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r2 = socket$inet(0x10, 0x2000000003, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa28300200006001d85680c1b7e2d00000000000000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e000000000000000000", 0x4c}], 0x1}, 0x40) recvmmsg(r2, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8000288f) [ 815.468436][ C0] sd 0:0:1:0: tag#8133 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 815.477495][ C0] sd 0:0:1:0: tag#8133 CDB[20]: ba [ 815.554246][ T6303] ISOFS: Unable to identify CD-ROM format. 19:42:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x1a}}]}) [ 815.678023][ T6395] ISOFS: Unable to identify CD-ROM format. 19:42:23 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x1b}}]}) [ 815.753973][ T6395] ISOFS: Unable to identify CD-ROM format. 19:42:23 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002802) 19:42:23 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x800028f1) [ 815.875879][ T6492] ISOFS: Unable to identify CD-ROM format. 19:42:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282d) [ 815.972277][ T6492] ISOFS: Unable to identify CD-ROM format. 19:42:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x1c}}]}) 19:42:24 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002803) 19:42:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80002900) 19:42:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000001c0)="7dd137c254c4e6daa4bc0526b1a685eab889989f2bfb344869ba35294d58661c477cc45b6ae20aa8c2a91e851c3dc1301774766dc9289e822e3d06cca4eb7eef9a518094ea9d24d9d6d990b0f94e929ce751053f51e5ce6d3708fa34c51578bbdf27eb72f0a28e285b93bdf9a21532ce349a7d5b14b54ccb2fed89f2f3556d5e63feb3310d7fdd8b3233ff971e9671cd709d09520f496bb3c8bb0a9bcc28bbf0c0d9fbd7900a09db4871ec4ce3371b09b3ed720dd759da56611a29773a2cdc0bf21c27d0bcc52e9b55044eb7e2f8ca12f49b02b7", 0xd4, 0x2400c005, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {0x2, 0xfff3}, {0xc, 0xffe0}}, [{0x8, 0xb, 0x9aa5}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x20000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20084000}, 0x800) [ 816.322201][ C1] sd 0:0:1:0: tag#8140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 816.332091][ C1] sd 0:0:1:0: tag#8140 CDB: opcode=0xe5 (vendor) [ 816.333884][ T6824] ISOFS: Unable to identify CD-ROM format. [ 816.338451][ C1] sd 0:0:1:0: tag#8140 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 816.338483][ C1] sd 0:0:1:0: tag#8140 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 816.362325][ C1] sd 0:0:1:0: tag#8140 CDB[20]: ba 19:42:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282e) 19:42:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4088, 0xff8}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x4}}], 0x1, 0x0, 0x0) 19:42:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) r1 = accept(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x80, 0xf6, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x80, 0x40, 0xc0, 0x1}}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x4e24, @multicast1}, {0x1, @local}, 0x20, {0x2, 0x4e22, @local}, 'tunl0\x00'}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x7fff, 0x81, 0x81}, 0xc) 19:42:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x1d}}]}) [ 816.464548][ T6824] ISOFS: Unable to identify CD-ROM format. [ 816.524007][ T7030] netem: change failed [ 816.545274][ T7031] netem: change failed 19:42:24 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) recvmsg$qrtr(r3, &(0x7f0000003740)={&(0x7f0000000080), 0xc, &(0x7f00000034c0)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/130, 0x82}], 0x8, &(0x7f0000003540)=[{0xa8, 0x0, 0x0, ""/149}, {0xd0, 0x0, 0x0, ""/188}, {0x80, 0x0, 0x0, ""/109}], 0x1f8}, 0x38, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:24 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000080)={0x80000000, 0x6, 0x8}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000801, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "98aff43016b7781900"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) syz_open_pts(r0, 0x40001) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000040)=""/19, 0xfdef) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x10000000000001cd}, 0x0) recvmmsg(r2, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 816.588225][ T7033] ISOFS: Unable to identify CD-ROM format. [ 816.623706][ T7035] netem: change failed [ 816.632630][ T7036] netem: change failed 19:42:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x1e}}]}) [ 816.681992][ T7033] ISOFS: Unable to identify CD-ROM format. [ 816.793558][ T7145] ISOFS: Unable to identify CD-ROM format. [ 816.871401][ T7145] ISOFS: Unable to identify CD-ROM format. 19:42:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe800000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:24 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002804) 19:42:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80003000) 19:42:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000282f) 19:42:24 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x21}}]}) [ 817.065606][ C0] sd 0:0:1:0: tag#8151 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 817.074853][ T7348] ISOFS: Unable to identify CD-ROM format. [ 817.075626][ C0] sd 0:0:1:0: tag#8151 CDB: opcode=0xe5 (vendor) [ 817.087805][ C0] sd 0:0:1:0: tag#8151 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 817.096893][ C0] sd 0:0:1:0: tag#8151 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 817.105981][ C0] sd 0:0:1:0: tag#8151 CDB[20]: ba 19:42:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x22}}]}) [ 817.178128][ T7348] ISOFS: Unable to identify CD-ROM format. [ 817.298387][ T7353] ISOFS: Unable to identify CD-ROM format. 19:42:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x23}}]}) [ 817.376174][ T7353] ISOFS: Unable to identify CD-ROM format. 19:42:25 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002805) 19:42:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80003f00) 19:42:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002830) 19:42:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000007500)={'veth0_vlan\x00', {0x2, 0x0, @initdev}}) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r2, &(0x7f0000007280)=[{{&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f00000014c0)=""/231, 0xe7}, {&(0x7f00000015c0)=""/254, 0xfe}, {&(0x7f00000016c0)=""/219, 0xdb}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000400)=""/74, 0x4a}], 0x7, &(0x7f0000001840)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002840)=""/114, 0x72}, {&(0x7f00000028c0)=""/86, 0x56}], 0x2, &(0x7f0000002940)=""/176, 0xb0}, 0x95}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000480)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000002a40)=@nfc, 0x80, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/215, 0xd7}, {&(0x7f0000002bc0)=""/102, 0x66}, {&(0x7f0000002c40)=""/126, 0x7e}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/170, 0xaa}], 0x5, &(0x7f0000003e00)=""/145, 0x91}, 0x2}, {{&(0x7f0000003ec0)=@generic, 0x80, &(0x7f0000004340)=[{&(0x7f0000003f40)=""/10, 0xa}, {&(0x7f0000003f80)=""/188, 0xbc}, {&(0x7f0000004040)=""/103, 0x67}, {&(0x7f00000040c0)=""/53, 0x35}, {&(0x7f0000004100)=""/141, 0x8d}, {&(0x7f00000041c0)=""/6, 0x6}, {&(0x7f0000004200)=""/70, 0x46}, {&(0x7f0000004280)=""/188, 0xbc}], 0x8}, 0x1}, {{&(0x7f00000043c0)=@caif=@rfm, 0x80, &(0x7f0000004500)=[{&(0x7f0000004440)=""/14, 0xe}, {&(0x7f0000004480)=""/49, 0x31}, {&(0x7f00000044c0)=""/40, 0x28}], 0x3}, 0xf4e2}, {{&(0x7f0000004540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000045c0)=""/44, 0x2c}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/216, 0xd8}, {&(0x7f0000005700)=""/168, 0xa8}, {&(0x7f00000057c0)=""/111, 0x6f}, {&(0x7f0000005840)=""/221, 0xdd}, {&(0x7f0000005940)=""/232, 0xe8}, {&(0x7f0000005a40)=""/76, 0x4c}], 0x8, &(0x7f0000005b40)=""/175, 0xaf}, 0xdd}, {{&(0x7f0000005c00)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005c80)=""/97, 0x61}, {&(0x7f0000005d00)=""/163, 0xa3}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000005e80)=[{&(0x7f0000005e00)=""/110, 0x6e}], 0x1, &(0x7f0000005f40)=""/146, 0x92}, 0x8}, {{&(0x7f0000006000)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000006080)=""/99, 0x63}, {&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/71, 0x47}], 0x3, &(0x7f0000007180)=""/206, 0xce}}], 0xa, 0x2012, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000007640)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000007600)={&(0x7f0000007540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000075c0)={&(0x7f0000007580)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) [ 817.522511][ T7665] ISOFS: Unable to identify CD-ROM format. [ 817.545842][ T24] audit: type=1400 audit(1638819745.333:9414): avc: denied { create } for pid=7670 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 19:42:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x5, 0x7fff, 0x0, 0x20c, 0x5}, 0x3) [ 817.585414][ T24] audit: type=1400 audit(1638819745.363:9415): avc: denied { ioctl } for pid=7670 comm="syz-executor.3" path="socket:[146296]" dev="sockfs" ino=146296 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 817.656199][ T7665] ISOFS: Unable to identify CD-ROM format. 19:42:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe800000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x241, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @random="923338f9f791"}, 0x1c, {0x2, 0x4e20, @empty}, 'tunl0\x00'}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x24}}]}) 19:42:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002831) 19:42:25 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x80004000) 19:42:25 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002806) 19:42:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 817.949801][ T7983] ISOFS: Unable to identify CD-ROM format. [ 817.975667][ C1] sd 0:0:1:0: tag#8163 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 817.985652][ C1] sd 0:0:1:0: tag#8163 CDB: opcode=0xe5 (vendor) 19:42:25 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) socket$inet(0x2, 0x80000, 0x9) open(&(0x7f00000002c0)='./file0\x00', 0x204000, 0x8) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000014c0)=""/4109, 0x100d}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/2}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000000300)=""/219, 0xdb}], 0x6}}], 0x1, 0x0, 0x0) [ 817.992033][ C1] sd 0:0:1:0: tag#8163 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 818.001085][ C1] sd 0:0:1:0: tag#8163 CDB[10]: ad 63 da 40 80 00 00 00 00 00 00 00 90 4c f1 2d [ 818.010148][ C1] sd 0:0:1:0: tag#8163 CDB[20]: ba [ 818.088025][ T7983] ISOFS: Unable to identify CD-ROM format. 19:42:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x25}}]}) 19:42:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) syz_io_uring_setup(0x4221, &(0x7f0000000080)={0x0, 0x2cad, 0x4, 0x2, 0xa1}, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000008540)=@IORING_OP_WRITE={0x17, 0x0, 0x2000, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x10001) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r5}}, 0x4) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) 19:42:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/196, 0xc4}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f00000001c0)=""/98, 0x62}], 0x3}}], 0x1, 0x0, 0x0) [ 818.231481][ T8006] ISOFS: Unable to identify CD-ROM format. 19:42:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000014c0)={0x428, 0x3f4, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0xffff, [0x2, 0x416, 0x0, 0x19d, 0xb1, 0xffff, 0x7, 0xe9, 0x5, 0x80000001, 0x0, 0xffff0001, 0x1, 0x1, 0x14c, 0x1, 0x6, 0x2, 0xffffffff, 0x40, 0xd3, 0x4, 0x5, 0x10001, 0x9, 0x4, 0x5, 0xa44, 0x5, 0xfffffffb, 0x8, 0x8, 0x9, 0x2, 0x4, 0x6b, 0x1f, 0x2, 0x6f3, 0x8, 0x64e7, 0x80, 0x0, 0x7, 0x6, 0x80, 0x4, 0x3, 0x2, 0x6, 0x3, 0x7, 0x5, 0x7, 0xffffffff, 0x3, 0x76, 0x3, 0x8, 0x7ff, 0xff, 0x4, 0x2, 0x7], [0x100, 0x80000001, 0xffff0001, 0x8, 0x8, 0x2, 0xfffffe01, 0x80000001, 0x1, 0x800, 0xfff, 0x63a, 0x2, 0x3, 0x6, 0x4, 0x1, 0x57c, 0x6, 0x1f, 0x1, 0x3, 0x5, 0x4, 0x1, 0x8, 0xe89651bf, 0xffff, 0x3, 0x5, 0x1f, 0x3, 0x5, 0x7fff, 0x9, 0x378, 0x7e, 0x1, 0x1, 0xdb, 0x5, 0xb50, 0x800, 0x3, 0x6, 0x3ff, 0x7, 0x7174, 0x4, 0x8, 0x7da, 0xfff, 0x1, 0x6fb90825, 0x6, 0x7, 0x40, 0x0, 0x10001, 0x9072, 0x101, 0xde, 0x1, 0x1], [0x2, 0x1, 0x3, 0x1, 0x6, 0x0, 0x3ff, 0x8, 0x0, 0x1c, 0x3, 0x5, 0x8000, 0x6, 0x1, 0x5, 0x6, 0x0, 0x7, 0x8, 0x1, 0x8000, 0x1fa, 0x1c0000, 0x4, 0x5bb3, 0x7, 0x0, 0x400, 0x3f, 0x7, 0x7, 0x1, 0x2, 0x0, 0x7, 0x8, 0x5, 0xcb5, 0x200, 0xcca5, 0x7, 0x8, 0x7, 0x8001, 0x6, 0x7fffffff, 0x0, 0x949, 0x8, 0x6, 0x6, 0x54, 0x3, 0x2, 0x5, 0xffffffff, 0x1000, 0x94, 0x7, 0x3f, 0x1c50877, 0x7, 0x5], [0x0, 0x0, 0x10001, 0x2, 0x6, 0x5, 0x3, 0x1000, 0x2, 0x10000, 0x2, 0x800, 0x9, 0x6, 0x4, 0x2, 0x7, 0x71, 0x7, 0x400, 0xffffff80, 0x100000, 0x796b72ad, 0x200, 0x9, 0x5, 0x5, 0x6, 0x80000001, 0x3, 0x0, 0x8, 0xb461, 0xab1, 0x3f, 0x5, 0x1, 0x8, 0x668a, 0x6, 0x7, 0x7ff, 0xffff, 0x7ff, 0x321, 0xbc, 0xffffffff, 0x6, 0x1000, 0x80000001, 0x7, 0x81, 0x2, 0x0, 0x9, 0x4, 0x5, 0xb3a, 0x7f, 0xc4c, 0xfffffffb, 0x4, 0x7f, 0x3], 0x5, ['#\x00', '\\.\x00']}, ["", ""]}, 0x428}}, 0x4004000) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 818.330388][ T8006] ISOFS: Unable to identify CD-ROM format. 19:42:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) wait4(0x0, &(0x7f0000000540), 0x8, &(0x7f0000000580)) fsetxattr$trusted_overlay_nlink(r0, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="2f0a04050400b90a00000000000000000000000000000000fe8000000000000000000000000000bbfe800000"], 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x1055c1, 0x40) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x3, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/115, 0x73}]}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121cad63da408000000000000000904cf12dba", 0x0, 0x7fffffff, 0x0, 0x100, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80002800) 19:42:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)={[{@overriderock}, {@mode}, {@dmode={'dmode', 0x3d, 0x26}}]}) 19:42:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000019c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7b, 0x0, 0x6, [0x3c, 0x8001]}, @noop, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x2, [0x2]}, @timestamp_prespec={0x44, 0x14, 0x52, 0x3, 0x0, [{@empty, 0x8}, {@rand_addr=0x64010102, 0x5}]}, @generic={0x7, 0x8, "0f7a81254ba3"}, @noop, @cipso={0x86, 0x22, 0x3, [{0x5, 0x5, "68958f"}, {0x0, 0x12, "f8147878039df1d34992072eaaafb1c7"}, {0x5, 0x3, "b4"}, {0x6, 0x2}]}, @rr={0x7, 0x1b, 0xe6, [@empty, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @loopback]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0xb8}}], 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001e40)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0x100, 0x0, 0xffffffff, 0x310, 0x1e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, &(0x7f0000001940), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x4}}, @common=@addrtype={{0x30}, {0x9, 0x2e1, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @broadcast, @local, @gre_key=0x9d4, @gre_key=0x6}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000, 0xff000000, 'ip6tnl0\x00', 'macvtap0\x00', {}, {}, 0x88, 0x4, 0x50}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x2, 0x0, 0x0, 0x5], 0x4, 0xc}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast2, @empty, @gre_key=0xff, @gre_key=0x1}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d807", 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'erspan0\x00', {0x0, 0x261fcd95, 0x5, 0x2, 0x6, 0x3, 0x3, 0x20, 0x78}, {0x2fca}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @multicast1, @remote, @icmp_id=0x67, @port=0x4e20}}}}, {{@ip={@loopback, @private=0xa010101, 0xff, 0xffffff00, 'veth0_vlan\x00', 'netpci0\x00', {}, {0xb31e5d6906c69ea0}, 0x6c}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x7ff]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xa, @remote, @local, @gre_key=0x1, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x0, &(0x7f0000000300)=0x5, 0x4) sendmmsg$inet(r3, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) sendto$inet(r3, &(0x7f00000000c0)="536185c3b738555ab3136bd1a75c14735025057b780cf8b21686fa198b0132498217d4f52fbd", 0x26, 0x4011, 0x0, 0x0) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1}, 0x1}, {{&(0x7f0000000440)=@can, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/175, 0xaf}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000100)=""/52, 0x34}, {&(0x7f0000001600)=""/225, 0xe1}, {&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000001700)=""/33, 0x21}, {&(0x7f0000001740)=""/161, 0xa1}], 0x8, &(0x7f0000001880)}, 0x1}], 0x2, 0x10120, 0x0) 19:42:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0xffffffffffffffff) 19:42:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000580)) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x400000) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x58) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80002832) 19:42:26 executing program 4: ptrace$setregs(0xd, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'L-', 0x2}, 0x16, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80002807) 19:42:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x1c, 0x0, 0xf}]}}}], 0x18}}], 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) [ 818.834575][ T8325] ISOFS: Unable to identify CD-ROM format. [ 818.863335][ C1] sd 0:0:1:0: tag#8165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 818.873219][ C1] sd 0:0:1:0: tag#8165 CDB: opcode=0xe5 (vendor) 19:42:26 executing program 3: r0 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a053b1cc7e63975c0ac47b6268e3966cf055d90f15a30000034e00000000", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/56, 0x38}, {&(0x7f0000000100)=""/18, 0x12}], 0x3}}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x201}, 0x14}}, 0x0) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1ff}}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000001c0)="7fbae9e76cf934065f2f7c7f72afc9b2ea565819b9d9c98be17e95b6a1dbbed00b46731466488b3ea9793743f887234eccd0fd147dad48c25aad0e8b28ae77948ff6c5f395c5e46546289effcd5a5fe7a1fa1cdba5e827e9d675fd9a390b8e271ade49e2c043751e0625cd06cf64c97a84b9cc4efd635ebdec9067a8aac9607c055ea75d85d0dccd532825b1dfe43267165d252cd01bad0b0cc197e55f9315124a7f42c9b0992b2e41de513a2e9e36ea390ccd29e948a15459", 0xb9}, {&(0x7f0000000280)="67a7461373b644eac6", 0x9}, {&(0x7f0000000300)="d0402b6638fa2330b0ee9186f8fea0e78348", 0x12}, {&(0x7f00000014c0)="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