x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x8, 0x0, 0x9, 0xdd, 0x1f, @random="bdb626f385db"}, 0x10) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8c96cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef8737682c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c45ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e4201170000000000"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r6 = fcntl$dupfd(r2, 0x406, r4) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000300)=0x5) ptrace$cont(0x7, r0, 0x0, 0x0) [ 981.595556] audit: type=1804 audit(1594254318.689:73): pid=19815 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir314971252/syzkaller.Ge9jnH/932/bus" dev="sda1" ino=15865 res=1 00:25:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x10000000}, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000), 0x0, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x2a, 0x7, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b306cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f299e0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b54e2c82a735780ba470e3f7733033d106846dead7b94009fa663c9f46e7e420117ad462011c5bbe106731aead9b13baf9fbe11ba8ce8abc09100b0fcfe20617dc96789093b11c959df0d1cb5405973e0fc11721dcf4d80e6730d47fd73cf7ec3ec02faa373f36f4d46da865bb4bacf02464dd8edeb2c1d6d87d8b581b546da9d800ab82862f9acf40595f843c9b33a4f40b9cb64a2c3e2464f8ad4efe276c37c6d734b9bbb81785adcdf5351733bf7e0357f9bb7a1922834bd13073ac41e6a07306ab36170ad24f6fc5ad58bbf28f4e3d35d24bb912f1cf01a093f6b20abe0ee6b2b1b84df42451cf27bbd71966dda00cd17e1fec2a05719ccaa575e5016c57667294a553bc1d39fa1fa3b37de19746dc969401f6fc77a442469e058c35dbb808d8084d846f9"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="b723fdffffd7f2f1e630f5d6e345a5b96aea9a4fbdff8dfd008ab2c1d5792671dc6bdd8b05484d3e73f1424028a9b222c4c35263475f2037b98582c4b58f31d994c4390de34b00058149d9d3a808f8701e81160465432d0a3258479d23095ae4ec7061a3d406c17b5c313c7687a02c7a7be61a7c3a92250855be14658783b1faf86d49677980c5eb8aa156aed44ebdde8bdd085bc68f13da6d08f4dee0e0250e664a"], 0x1c}}, 0x4008000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x1, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540)='NLBL_CALIPSO\x00') preadv(r5, &(0x7f00000017c0), 0x375, 0x0) io_submit(0x0, 0x7, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x6cd3, r0, &(0x7f00000000c0)="68a68d26f5953f2ae5afa7e280989cefe7947956b1cf0158f8b3d47ec9377e90b3e07bdb4102c2c7c4ce18b4f29d30ae89e1fc1977c3db167cba6c29c82f731bdf169270c9cae7b21f37f73b199cde51f686dc1e4a3bfa0703fe", 0x5a, 0x6, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x3f, 0xffffffffffffffff, &(0x7f0000000180)="0d365bc0947757b927e1c5ff667e9ebbe53bcdfb610aa4b4a20ebc88eeee684cbdced23520786b4068ac13116883fd6ea787990004355f1eedb0aaafe2fd63bd0532d4f7829e221e3d09a95bb23afb39aa229da28b99205299698f61e561ca33a9ae94f1b5395a8e954db50968d60ac8c48572b4066317c1a487c051d48c6f082bbd173b75a99c2f89cc8a395da8b2e92fe5ddce1513146d33633a65b63c8006bdf235a3454885a88de98d1da5e6", 0xae, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000000300)="c76eafc052af4139ac0f9f9e0ede33d9239d087aa1535c29a873ddfe36af4ff53daef5fc5c3b91274fdb58d96555f3cb37769c658b4f1a81ac71d7510fd193e345fae05d08c892108496537e6b0c992ae1c84ea24537ed3713d8a10daed85d0cc304db48f6417a373705e591d915bc599ba55f7479df260cd20e69c1e362d619178b0d98eb3ace2a7ba273cd07124e716cfd41d8e4c453a15b2e31173d128234f6523d4c4399ca983ffe8120690bb16b335e2a1e7b816e3ebd61d6a08f95477bd0fea9b8904f3a2535574d050cc87ddeb0cda220b4f9137ee35d267494e2cda0775a5ae2a7040ac5f1611f8c3208bc5dbb3fadad07518ba6622256fff54131", 0xff, 0x3ffff, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000440)="9f95c489473b74395631565707094df24a6a2a8248f3a22defde5aebeea0d1d84acd8755899d377c8cb0cae04136747c2d9fbd9a8b2d9de175ed374acc8501cc5c223bfc6013dff2f2d170984074fd653e47ac7da04193b86bc2f3422168c67751622faa784ce2634d269d9acc4a987ac444154be9aad8906f6769f5119bc053d633d9e13d45fff4ddbb9d307df6", 0x8e, 0x6, 0x0, 0x0, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x101, r0, &(0x7f0000000580)="faf2cd5870a2d19f833ce371ca18120073b8c4756176a0184d5bb81066048e3196cc0cab9793c6a7adec1b02cb6e596daa95330a81dc52177562a488dd522fce6d37bf1ff33d1f0bcaaeccbf1ce56bc9c0a447fa422d8a512a567f226353bfde219c846a5d89bfbf9e47eca638e8e848cb534b2bb1b71c0516d1143de8bea8febdbda486939a346958a8401368c7e29d88fea7b066466b2146065bdfdbe4d16834aeb685d1beccc29d5f292bd7fadfaa20d5d2b68b2cb524", 0xb8, 0x20, 0x0, 0x3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000680)="dd0bca44c781f658ab8715c52bfc67f5ec18a21b2e6a6991188c351f5549e4f17f1f7240576e7a10534870fc53a88735", 0x30, 0x6, 0x0, 0x2, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000700)="ad98cba966ac00", 0x7, 0x1e2, 0x0, 0x1}]) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) migrate_pages(r1, 0x5, &(0x7f0000000180)=0x80, &(0x7f0000000280)=0x4) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x401}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="fa69f1f2f90245e6efb82260de3b5ef63314bc7883333a54f5541f7d408ea8126394e87cce4732ccfcf535e9b41fb30f1a10e1d3892f48f171c3eef59bc60875ee9eb0ba80169c73110e5cbcd4b8f3623d6a013ff539bdc7a082efc1cc718fa689739f96e31a7085571c31c3f397666035494379a461c86ca9211f888482201cc226fbd6925a3c74d6089e79eab3a40aa91142aa3ad76b2c8b536b22d2aa827355086e9d606e600184dfcf94e8ac784d752b1c2447205a7371e764ce1d81709f916e5af3fea61fb5e0ed1f39bbed3950938a4e3e2249a42c62649b4b80edb8647c5ca6a701e5a30057ae3c71870bf0d1615788d9b1619ce025ef2cf5172b4ca40c0d37a935dc3732803430f36086ec75c5866fe4c8c9f0fbf46944adb2a0135a0894457f3b8cd147079ce93e0cbdfe9f36914a09db606b122380777f54b5f541478bab24be091d8e47a5c690fb486386fb0e82a6c083110beb179f8b6a5bb7350c24c822e2cfd558b46c9356407b447db0062c4d91e84e7d49906d6d3aa12c95fabe4d3df8e53cbaf41c10b5787f"], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x20, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x82000000) 00:25:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$cont(0x20, 0x0, 0x7fffffff, 0x101) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x20, @private2, 0x2}}, 0x8, 0x7}, 0x90) r5 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x67, 0x67, 0x6, [@func={0x3}, @struct, @datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x2, 0x1ff, 0x5}, {0x4, 0x5}, {0x4, 0x0, 0x85c}, {0x4, 0xffffffff, 0x1ff}], "c2b9c7"}, @var]}, {0x0, [0x2e, 0x5f, 0x30, 0x61]}}, 0x0, 0x86}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) [ 984.107842] warning: process `syz-executor.5' used the obsolete bdflush system call [ 984.117655] Fix your initscripts? 00:25:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r6 = fcntl$dupfd(r2, 0x406, r4) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000300)=0x5) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:21 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x3, 0x0, 0xfffffe, 0x3, 0x2a6a, 0x6}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000040)=""/63) wait4(0x0, 0x0, 0x0, 0x0) 00:25:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70c7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x5a043, 0x0) 00:25:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x3, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x65, 0xfffffffd, 0xa558, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @mcast2, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x4280, 0x44) 00:25:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xa4, 0x15, 0x1, 0x70bd27, 0x25dfdbfb, {0x1a, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "b5990b137ef355c9acca008019b1b526140f327daa8b462694ae1a929cda83e75855b2844dc0f7ffb1cbccf40695afc650e4b9251125593e26fd2c84d35b03208b8e4862874794b2022d0f4207fb7564929dc08e74e835d4c8d9dc87334c5d611e273970d44fbbff8e3d91685a380f317abaa11a6b31e7612c26a4b8a927ccffe492758a584783c7431e"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040044}, 0x2400c880) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x5a2a, 0x5, 0x5, 0x0, 0x0, 0x0, 0x10000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:24 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0xffffffffffffff75}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x40, 0x0, 0x20005, 0x3, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r2 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="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"], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r5, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fcntl$dupfd(r2, 0x406, r4) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:24 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000280)=0x3ffffffd, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r4, 0xa7, "8580d1066e4a4d2325afb7e80bf474e86f635f14c5e1fb2c05b55e2a28a630caef2f389b1dbb4cf6b2d33d04271b1c13d55e8ecb0499873411b896566f9e9626ef0284520096ec025328a25be28cd9c14788075f1e94af36311e5ecc9339d1c12259ddd5d038455df2a26ae3f928aa96f3561a4d0cf0377d1baa5025c03cf07d7446c38ec21bf12389858ac7e074ffd68c1a6eebf73b32dc92954176ae9127a17ddc400b91cc85"}, &(0x7f00000001c0)=0xaf) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0xfff9, 0x8}, @sack_perm, @mss={0x2, 0x87}, @timestamp, @timestamp], 0x5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0xd}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) getpriority(0x1, 0x0) move_pages(0x0, 0x3, &(0x7f0000000200)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff8000/0x1000)=nil], &(0x7f00000002c0)=[0x7], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) tkill(r5, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000280)=0x2001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x2, 0x1}, {0x6, 0x1, 0x8b}]}, @func, @ptr={0x80001, 0x0, 0x0, 0x2, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x3}]}}, 0x0, 0x6e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="f40000000086852526285b6fc6ae3ce4ad812fa9", @ANYRES64, @ANYBLOB="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"], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x8) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:27 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x121200, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/199) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x2000) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004008, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @private1, 0x40008}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x1459c0, 0x0) 00:25:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xc8913380, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000c0000000000000000000000040000000000000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000280)="684b21f1d2f02dd6a8ba5a67c992ae8ab286ab91dac095bd99ddae636b35059592cafed1dbda9efb745d7b10ec3f03f80df3043005e9f7c8f166a90fec243ed44f128c946f56793d45a129b4f28786275442cdcf7872561002398b7b03b8213890f0e774fc26b8dfb92c809c17b6d284f6d7c1cccf1dbd36d045b3ecd8015550448c945865ad625413a9a438d808d2d663f000f72535df9faa7eac96cf950a45aea5ad9a92027d2e314eafb2b1b46828f89ffff40506331184a02217d154e7748c13ab25c68c2edb50777d636032eb17580d3a3ee6419cb968d00f45d4018ec1a787e68eecba6b016055", 0xea}, {&(0x7f0000000000)="e9b1a5f42812a07faa6593b00f4a21959ea5bdeea0afdd6431d5318fe062a6a89ee203587fa1b06fbb26ea90ba3619deaf3e862f89566d6b6a0adc03", 0x3c}, {&(0x7f0000000040)="f583f693443db87ebb45fb", 0xb}, {&(0x7f0000000100)="c4f484586980ce45d1e4ccbca87a3c8387542ede709b0cf39f4acc3c84ec73645a92e64bf3ac6f5c90913d69bc9487db2fbdf9c3b5033499e2253283977989f0a3a43d1db5d7c20780561d99354668a5d83611cc0160f53fb6219124f7a79edeb3c37550a3834199ab0bab42976487c0c17ebc5b492cdfa93bd2ca6b", 0x7c}, {&(0x7f0000000380)="9cd08edd252cf2d3674759ec2dfb198c3a423bd012be7b48bcf9c4f6f5123cfbb7f141d9dfb293de7b8c7025d3dce8501fdde4e864748e8e919d9077f5f4b93d98ae78860461f17d6f6bbc5dec6800389cb626cf912a9d2b3de93037daa0c807754547df0157201c2e09cca36fa94cbe5a6a4ac408cac5bcdeb4aac8387d2439440f119f234567b334770c078cd666221358ab0cc4fd96311a20927449e5865613c22c824dc8d9e72ee4713bfa132ca7cdcb242495d6a5321a", 0xb9}, {&(0x7f0000000440)="d2275671353f9af3fe5948cd336abe00d17e0cd705018fe44115c2cbc7378640156226ad11b5c55b50a1517381d426780b613c48c893a64afb77f8c60e69237e02529a9e123cc537de94da1dc61d38f8834b", 0x52}, {&(0x7f0000000180)="38e844afaa23c995341677aa63cc5f3f261b3d25630308dd145f72594a26e59fefca4aabb51684de73b2a504728666fdb5ac79f2aa23343c2c2f", 0x3a}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="ea89fa38d6ac624be3cf9f9d037c92c11ace2f368f795482d94d2d3612d8e6d592043a897739a1a60c12c6f3817232cc5ac590cbfe24eef8c74972cc79ff670c619d0dcd33c224fed9711b31ef865c04bde11a51da09c848ae9819654f63aeb5c6233407dba27e61482456a8d6df133efec561af49d54943e4ee054f700e69af5c1da380b23cca9dc423136cdcc66e93921beb1cf989d68ccfbc5dbe26f439cceab019efc0053020fbee9017ab7b9ec46b93a8d471", 0xb5}], 0x9, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x0, 0x6}]}, @func, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x9) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYBLOB="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"], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x10000002}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f23115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dbeb01004b9a0000000000000000000c00000000000000000000000400000800000000000000000c0000000000000000000000a0cfa4506f030734c17021dde470000800"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x169, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '*\x00'}) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00febcd6755b813a086f8aa2ca35a108d60e502e77238dce377c347de4a0b621e79ec0767848d3173ea73b0ff7d58be5817b2a89", @ANYRES16=r3, @ANYBLOB="b7a300000000000015000680000008000300c7157984edafa2a5d504f55c8cbfc3e7e0d9825f0cf1e1d880ee0550b00996f0f97e2c9124d8a482a45df771ee2e2731a33c78bc1ee2a8c32eb2fe6fa768514cae51051406be3ea6fc89d63bc792adfca37193112ec6e05e5af7c2349caddacd293861bb7631e5884070e8b2e3a5fbe12d2070a8874b60a02b80564078b95cdf7ef136d2d2c9772cca0cb71f256bcc39d3e401e62c82e70ade243ead1cb183825f02bc7f78f9dcda386954fb4b8789f54d0dc1a38862e16df500"/216, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) wait4(0x0, 0x0, 0x0, 0x0) 00:25:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:29 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x121200, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/199) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x2000) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpgrp(0x0) getpriority(0x1, r1) r2 = getpgrp(0x0) getpriority(0x1, r2) tkill(r2, 0x1019) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) [ 992.991520] audit: type=1800 audit(1594254330.090:74): pid=20073 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 00:25:30 executing program 1: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x10000, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x3, [0x7ff, 0x800, 0x0]}, &(0x7f00000001c0)=0xe) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x81, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0xfffffffffffffeb0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) [ 993.083103] audit: type=1800 audit(1594254330.090:75): pid=20078 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16363 res=0 00:25:30 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x4, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x8, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x1000000410c0, 0xd) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:30 executing program 0: shmdt(0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = getpgrp(0x0) getpriority(0x1, r1) sched_getscheduler(r1) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 993.511695] audit: type=1804 audit(1594254330.610:76): pid=20106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir633459309/syzkaller.fCNQCI/1359/bus" dev="sda1" ino=16364 res=1 00:25:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x3f, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x0, 0x1f, 0x87, 0x7, 0x4, 0x81, 0x0, 0xff, 0xfb, 0x7, 0x2, 0x0, 0x4}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000000c0)={0x5, 0xffff, {0x57, 0x81, 0x2, {0x1, 0x1}, {0x10, 0x1}, @rumble={0x81, 0x3f}}, {0xa2, 0x0, 0x3ff, {0xdc, 0x4}, {0x100, 0x7}, @period={0x5c, 0x8, 0x7ff, 0x3, 0x400, {0x320, 0x7ff, 0x1000, 0x101}, 0xa, &(0x7f0000000040)=[0x2, 0x7ff, 0x39, 0x3, 0x1, 0x4, 0x6, 0x80, 0x9, 0x7]}}}) syslog(0x3, &(0x7f0000000140)=""/167, 0xa7) wait4(0x0, 0x0, 0x0, 0x0) 00:25:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(0x0, 0x1) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0xffffffff, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x3f, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x1, 0x0, 0x1f, 0x87, 0x7, 0x4, 0x81, 0x0, 0xff, 0xfb, 0x7, 0x2, 0x0, 0x4}, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200200, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000e9ffffffffffff0d00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1f, 0xfffffffe, 0x40000000}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x40, 0x33, 0x1}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9fcb0100180000000000000034000000340000000200000000654ee15e00000c00000000100000000000000401800000000000000800000c00000000000000000004000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) epoll_pwait(r1, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x8, &(0x7f0000000180), 0x8) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var={0x0, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000001c0)=0x66dd6c13) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @fwd={0xf}, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = getpgrp(0x0) getpriority(0x1, r4) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r4}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = creat(0x0, 0x1) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0xffffffff, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000007000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:35 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100000000000000000034000000340000000200000000000000010000000000000000000000000400000000000000000000000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) getpriority(0x1, 0x0) tkill(0x0, 0x25) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) fchdir(r0) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000140)={0x0, 0x8, [@remote, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @multicast, @multicast, @broadcast, @multicast]}) 00:25:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf2586acf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) [ 999.237120] audit: type=1800 audit(1594254336.321:77): pid=20218 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16393 res=0 00:25:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000013eadca4065d99ad7cdb3c37ab60ea42c17d1f4556290686e833613c69010b0dbf0deeb202cfa4be092eaaf2142f7974f7c1f988377bdb0307c6804b4f589d214017c5217cae84989241b08e8ed62157eb51c25fe000000003bae4c88bad50000000000", @ANYRES16, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004804}, 0x20044000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1ac, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x88, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9abb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x105f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e6524ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42a74475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9c1d2d0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36e11d6c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42876c22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f75543}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14378d34}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6562eb20}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x231a3a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x428f1395}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3137}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c68dea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d11c120}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cd9c2e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25abb36d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1242b9c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xefcb8e0}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x616f4c0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158c3f91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec4792}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8d80d1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x245f9576}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682c4067}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d4d31d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d31dff5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141aa403}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22aa0963}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="00012abd7000fcdbdf25e1ffffff0700010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xfffffffffffffff8, &(0x7f0000000040)={&(0x7f00000008c0)={0xb8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff}, 0xfffffffffffffe82}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x20080000}, 0x40880) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="b771b01f", @ANYRES16, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x880}, 0x4004000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x274b5739}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35969296}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6df6c46f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cae829e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd0d481}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ce68cba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46ea0662}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44521880}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ee2}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30c4c0f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc350}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1307}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66576961}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9dfc}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf5dfd7d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8103}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7357}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a0397d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc7d8665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x483e3f77}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdd6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19494b57}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66237bd1}]}]}]}, 0x184}}, 0x400b0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1a0, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd430}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbb3b7fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x34ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1aaf590d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4896}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x873c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x778b9735}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc7d6a42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31f9ce41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x14e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x668444c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69684ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf6ad13d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x991d}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6938f942}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38be7343}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x507af90b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x337f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b95ef8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6651003d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc90}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e9be98a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e21524d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x333e3c94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a727f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51c}]}, {0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5766cb24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x450678b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x508e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7183}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e7f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eda73f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56ca0529}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2080cd44}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed2b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4019f63e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eeb}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 999.337615] audit: type=1800 audit(1594254336.321:78): pid=20223 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.1" name="bus" dev="sda1" ino=16393 res=0 00:25:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYBLOB="343fae8edea2714368f1a9fc4ed18b524b98ce61c0efdbde219b521282572ca8d05c44c05febe51ae4ce14bce041bdfeb84b9e3752684ad223a14d6758da956e25700af2fd72dc8b6a00483bf7fe452da2f1e510084f338d44409171abb2b3fe6a294cd2bfa2005c35512f374077f1676f71df028a134c198dd07d4044dd", @ANYRESOCT=r1], 0xfffffe0f) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = getpgrp(0x0) getpriority(0x2, r2) r3 = getpgrp(0x0) getpriority(0x1, r3) wait4(r3, 0x0, 0x2, 0x0) 00:25:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x8406, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x201e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0xfffffff7, 0x8, 0x7, 0x1, 0x34}, 0x14) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x7, 0x8, r3, 0x0, &(0x7f0000000100)={0x9a0905, 0x5, [], @value=0x3}}) 00:25:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) 00:25:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9f0000003400000002000000000000000000000c00000000000000000000000400c6f931b3c96fa1f000000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101000, 0x0) 00:25:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) dup2(r1, r3) r5 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = fcntl$getown(r1, 0x9) ptrace$cont(0x20, r2, 0xfffffffefffffffc, 0xfffffffffffffffe) 00:25:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f789815b13e89f37cd289ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622cad17ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357c51b7dbbf934f6cd195b5b79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b7490515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51a69b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c89db546846dead7b94009fa663c9f4"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa02222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788a85402acd622ebfddc12480422497ef87090000007fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415b862be456c395b2721e62701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233954b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77637c0600161aa105b542d3dbf6c6c4ed695ec2259eacf685e49ab77da51ea771b10a9716c0515004ec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993213a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93afdb725e949a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e42011ee34d30edcdb896b936bcc0ac151bce5a5f652ce5c9269651a45592368b78e6a39b63715a8dcfe1c52bffaf387b424bcac787afc3f249154563b58ba0fa262397a4e75171baed72da22911be865e8635940ee312048ff4ac4a2377e8a660fd6e8b21e44dd7b02630b36e2302959d106d38acf6c2b808e998fc1c39eddcacbd7f50dba3d0f4d04bcc577ee707a9ecc2cc6b2202d911b446c2c248bc0dbeffa570a4c00000000000000000000001970770f61c7386b9980ce8f9ccb6d02ced1db95edc7061ce45f6161bdc6434811c6eedf2d720294ab70a946b03e08e40e8a711a3e179b4c668d3c8959a2aca91bba2e6849899def71b3e22c58959c602640a0d516dcbe758ca64fe925d2de1830fde6a7a1c36abeab23afa875e9540b907f556b2ec50efbcb607487e09d3e2d7e55c1eec2d2c8583dc3a58cdfb4dc37d006f1d0134e5fc5776eb07a5eef9943bb3549678e1b9269ea2d2b79b75a766795623ba39a585c69a5fc708c8b559c"], 0x12) getpid() r4 = socket$inet6(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e00abf3060000000000008b35455d68d96a9db21e4299e2bde0b7bbfdc0fcde3c856383cc40974f6d15d3b6445cec408563238e68f501c0e05c4806ef46501978e6de37dff761dbdf2c82c82583ef144a3c3d365505436bc5231046a2c0141d3edfabac5b7dbd73f12ca4410a2b2eaf7ded4a6cea2c97bc47bb4c8d194b62999239e15dee73ce7134d21f7903849d38b11d1b2d96ff6f7af2c1b8b3461b88ab9711dde159cd764404e1b33964d1d2"], 0x0, 0x4e}, 0x20) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xa20) inotify_rm_watch(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000140)={0x0, 0x2, 0x4, 0x8, 0x20, {0x77359400}, {0x3, 0x2, 0xff, 0x77, 0x20, 0x1, "27696de2"}, 0x0, 0x3, @offset=0x1, 0x2, 0x0, r4}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002010000000000000004000c000000000000003440547d0400000000000000000000000c0000000000000000000000f9ffffffffffffff000000"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000280)="990d30e4f4025ed5bfaa1cce76b1c8ba46cd7621cb7bfd8aabe1aaa1b009bbbdea97f31767e74e81903619e146816d342237d89191f740a595a9d96854a77205c4543fb92c34ab8a44279e9cb1c48820a4508480ae9907cf7c6f81730668d6ee1914928525c672ca833557abab74206b0ce9edfd929f2e3d3f8699605f25941687615560f0378ec6a88e7f52c73763227834dcc891bc") ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x9) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYBLOB="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"], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:25:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20004008, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @private1, 0x40008}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x1459c0, 0x0) 00:25:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e00000000000000000000752ba39109d68f9ecb91a41fefc5379602f197369db0e0fb20b87be8f659f21451575c80cfa960dc9e67065b7d79dd96fbedcfd2e8a842a0c2d8393aa277a108b39b55ae5e3740e41b68a35b"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r2, &(0x7f0000000140)="91ba7171676ca5fbdcc0b3de4c3b35b39ab6bf12afdd352ebbdc5ac74da2c19d9b9c5b5276794e382f63ee7885fbc7c201036569bb32541d0121779dfbf6edc56afe6db4ce16da74a4e41515b21c4586e727ae222f9cec168f1d62e6435e524fd90904354a206b", 0x67, 0x4004, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b15e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) wait4(0x0, 0x0, 0x0, 0x0) [ 1006.672661] ptrace attach of "/root/syz-executor.0"[20417] was attempted by "/root/syz-executor.0"[20422] 00:25:44 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44011}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x6918, 0x33) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:25:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES16], 0x12) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) accept(r0, &(0x7f0000004b40)=@can={0x1d, 0x0}, &(0x7f0000004bc0)=0x80) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x401, @mcast2, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000000c0)="52f6d4728547ed12682f4741f5912ea0868ae2ced27fb8378a7c6974988ef02e33d266064eb5cd215f957be36eef07994bd3822072b1ac2d3252448bac9df5beffdbdba611f143f37456aec0ec202edc362318a37881c575585b6f1abc1cd09afaa3", 0x62}, {&(0x7f0000000140)="b7406c9f3c6f07e79e8c3f49e4b73d50dcb20a5832ea9800b8231f1906313e592076bb61b290d77c9b9bca8bd67c143b47b833acce233e33acff52ecaa37fe4315c29ba91ff26bbeb5d682aeda3772c3dd52f8563af1233eb4dc54c0173a5249133b97c99650103e788f5625473fd2c62f459644d85c1a6d6b34ad4ae71f5af506f8fe84c347f74f2fdce34ae660ec971d335570faca7b8a1f91169eef5779f5fa3a34b760c9d6cda11cd37f562e6eda8a0ce95e3f1b2353f324d72d841bfe6d94096edf0beff9dd020f95b4f1685450fc53457e47ac25253fe854dd31431a4a4d95e9a8ae51fe67b164fb2def1128", 0xef}, {&(0x7f0000000240)="0f6dc77badfdec9d0f06422146648eb688ee4d71b0c5186c5659f37a3573660ae076d7e630a0b83807728b6eaac3", 0x2e}, {&(0x7f00000002c0)="2974207cdf0b53aa048f1403fbecb8395da3e77265aac2ddd5c9a93f7b95be5ce61aacc86cdd47111b03d25ff992247fb0c53f6e2f42f36117e7e97312e130adad48596ea98d70b7300d13c8395ac9886122ea1214c84b98e9f388d02293f4ed69f4ed1abd0376cdffb6f4b56251e4207495fa23df08225b188ac248746ec23a018ca2e8807504db3a31c4ee3aa04acbb03d7a63bbdfd873ea1a2857da3eb8c6355f5cf6045c1068343cc49b4fd9ddfbe4e8a7c91a534e92b68d1c4eb3310c1130c1cf785b06fd2b436dbb7b3bb9f68902e02500809113b7f10161976f2fe2973eb408713e2c8c239ae911f4c51c", 0xee}, {&(0x7f00000003c0)="58c10a3fb6", 0x5}, {&(0x7f0000000400)="c0fac8ea40876976f1bb551fa75284dbf4ace15c6fe1f3416effcd19d5c95385e03525f53edf2c90", 0x28}, {&(0x7f0000000440)="939487f900ed6d22c1400a16b7563468e53c7742b4953bc21739fec3bb20cc270dbb813d46cf253a4fc5ec88e097e05a26cdad8abe624b6de8af152b3bf1fa66aeb092d66f6507c317dbc7a0bc8c3220c6bc55627837b538ca24ed8d3f6601b9d8b68bd1364ffc8625c7671875f2afe19d5ccac4f374830d0275381461004db8db4b36febb29ecef871fd4fd9e917ac96139095a505396baa148d861be2bdff7f9f7379879177ab46be6877d0cfa3d5998ed1d9b1a9be7b07576eeaeeaccb7f2a19d64930d20703c217c1840d65ad85c646204", 0xd3}, {&(0x7f0000000540)="e77e88cf8aa44cf5519f0d4e4bfb9190144ac43e8605b12217e09408fc2fb61f0ff62ef1598aa2926c667e7dd0f742970877f4234e4df40cb962bf30a48e3c2233d1b077c9f8632907f9805192d1362ecaae28211a759aa2516de045c3f4c8b479e8ee11b316fd0013c0657a77b219d2664759a1e973ce22646011708d67a019a58358d637adba68559efe0ece71664b96afcaeea39e527fd530fccc17a2b820c20f6756751461cf61596f0e14fad2073cbc67ccfd99", 0xb6}, {&(0x7f0000000600)="628127e31ff143fa0e827b0d3ef28cac38ccd8", 0x13}], 0x9, &(0x7f0000000700)=[@dontfrag={{0x14, 0x29, 0x3e, 0x33}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}, @rthdr={{0x88, 0x29, 0x39, {0x8, 0xe, 0x2, 0x0, 0x0, [@local, @dev={0xfe, 0x80, [], 0x24}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private1={0xfc, 0x1, [], 0x1}, @remote, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0xe0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0x8, @private2, 0xffffffb0}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000840)="f40bb3fb4612cb9e196ed1cd4cafd4d982486ad71b490cd87a6ff6364a248d8ec3fdb2df7eff014fc723f2a26b00adf90810a68583e3c061bc254e24ee", 0x3d}, {&(0x7f0000000880)="b3ad65cf0c52a5a6a26f4ece2b5bc3ec36f48ade0c969ec3f1dcdc3cf8de0af17a8578a0f973ab6bb3f8c2fc1e5b1ee6916e02e59d4ba975f6b966ae096b06f40d0c1fae5be008e5a1d27ec7dbc2c47b24199a7e9fcf4c1216f015631373927ff7d4a5efa1364346791887b0650ce91e49e6eb2cc2a2b22252e3d190f50539f2f3c399c82652480ade", 0x89}, {&(0x7f0000000940)="17be6b16d13b02e44c1adcce9d8f2b11b9df3c65d3111f869860029658534059004ccd7fddfdeee9fe313feb90515be3bd166716225cb314", 0x38}, {&(0x7f0000000980)="10af7a04088e0de30982758e8b7aa7374ae58f58ca6c6a76a4d82b1376506406798be1b0644ad9fb07a78a41399ab52a6354c1df72245dc7a60640bedd6db2bc648e1beaf4e74a1c750b1beb53ffafb9195825dcf1cdbcef638e7f1788370cc1cf9a8a0c7f7672abf8640f3c6524bcfc9dc68567fc4528f97785abc5bbae77227e87ec740362b6fa36b5e372e263e03bba973a9296300a03bb7c2785518c72a9bc269080ef939501783263d58c306966df6110a4db05feb05050cd6e4b1a4d2e5e4597b4683e01b1f1d62424f188c9828718de2eb7d5c16f83cc9d470e2483f6325e0f51b24d05", 0xe7}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="cd261bb50e477dcbb98e36fa79a434ae10056afa62ff00a170f198bbc1c6ec0eb24e8aac56cca037d535403b21b74ab6390dfb52128d53490308ce608e8c389ba536d650dddd350d160f3bf16fb492dedcdf8ae440bde3343be216be295237107150385953b3f239300cb572208c53debe345ded9d95ad59c53d86d55ea621dac283a3caede0b100aaa8356e81490ac3107ed66b0aa67557437c6767267c21a1907bdb9602e0bc3626f1d2a1b948325c23eda20de8", 0xb5}, {&(0x7f0000001b40)="24efbb226691a26e1dc7a147cb222184a85afd44ebd70d884fd5d324be70cfe5a6f55cb97fd79499365ef2cdf98c06d3e4f9542ae068577bf1817eb9bb8efe22d5250f2c4a55f734086553e362f28e531c6f5a82a50c483e7f068352980ebbfc2328e5d27c23e07c74b7e6e9ee4f62a9ffd0cf010352a73feb07694c6da1bbd01672f850c7dc46a415b67b86619583d16020cc2c62f82447bde4065bdf4c8da01c42e561ecd8800094b976d3a7e7fa0428a15f873c99d3ac10d0c7a1570391d8e6d376bdcf6414", 0xc7}, {&(0x7f0000001c40)="ca3ccc7c26eca7bd47dbfc4f5846220aed7c1316a66fb1cd41a8cf4f11", 0x1d}, {&(0x7f0000001c80)="99dbcf9ed939ac49328901eae82498eaf8665c9fda52bc9451f46476bb0bbb1a9ce7967b2f01efcbc2bfe3c3733000331fbc9744b50554ced443cd6a0726a5cb9571e2d9db33e84b18819b22e126999daaa3d47a8803f2cef97e729d31f5be766367e1a45f6287b0d54cc2c3b0837ca25fb466d12340e2c60594f5675ace19eaf0cba9e6280e17a5", 0x88}], 0x9, &(0x7f0000001e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x2, 0x3, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00']}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x20, 0x29, 0x36, {0x29, 0x0, [], [@pad1, @enc_lim={0x4, 0x1, 0x5}]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x1, 0xf, [], [@jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0x80, [0xfffffffffffffffb, 0x6, 0x7f, 0x0, 0x80000000, 0x8, 0x7f, 0x6, 0x3]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7d}}], 0x138}}, {{&(0x7f0000001f40)={0xa, 0x4e21, 0x200, @remote, 0x7}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000001f80)="43d5f43e76a02066059e35b4a4fe0d9d48445fad8a3c568cd82d18a47c37a01857301faf4fb23efdbdc371a27434ad8490b1aff4c56fb3c7a5f955e360834b85276b835242d33cdd6532ce4a1dea2ad68756cc9bdf0af06c03efa9a3ec0faf3c79cccf03745e89950b9c766d3d99da85883021645c44935be1eaf96ab0", 0x7d}, {&(0x7f0000002000)="7528af759e748ba1f17e1fdbbf7ba23a8707dd9f41db10475eff2df8f12b32235d583b6f1425b983e79dfb49ece9a2283551883ac5c26173f568938c64e7ebbf29c852d90678d674bbbf3004cd3cd1724df0264ac2a280ce8b7ca8e282533a17e7e941ff654eac89dd62c2a7dcee14c193b7fcb77b4945f5b0e50b2b3c719b4faa27c0ded52fd6d596fc0e960a54d4b5a4307db185519d70be4bc040a220112443b8f52def320ca59e5fbea13e57063ff291dd69e2d9b329e6e15c5c9adb914c5ee36d4345bad32982b0b46f7f471ac7b4285a4f1501b7ff5095320269da826e8c8daa9b6f23d75a74299575395ef28818acb41a1bf5faab7731351418e06d550e8c22ef5ddbb7318dd7a870cd1726b2dcd8af5f4aeb374e5274fbc23a73e1745ec8e9a3a4d6d177a22c1818e9bcd5194b6c70e079d29cbcc3f5e8c62ae66bff65a059a2eeb84cd17bdd9a1fde525ef1997958991a5271208b312bc743153484337dd77fb5fdb8407d7de9817c96f6962f2e18953cc554cd0f6e68c25bb5c0bc49fdadbd149c976e9d36e0a6a95adf948a1135e8ed6da4f1f0e44ec406e81df37bce26f3cf5ab8d15bbcc7b99a6d7a5a480138e2eda08f6dd38cc6d90e18f0b91307ada0723eb5ec2441562da0e5f4e0266943df4ab73b8a7dfbf1cd77b8c55e9ca866d1ef3667bc9d864ad7017777cab3eb3a35d7c6afb0888dce11acd97749b9375b03cd5af3b76fe9d3a948c565fe07bd80e75e10a25c2ae2ba09f4199c4d1d602af13387c89c8120be19ad654a69ca2b63c9ad9543d4674bd0052898f84ee51a70e43e0268a8583a632560056bf42f8705b5e781142ebb75484b64eccfd31948eff70da5f4629faa0cea42e650bc8b111c195bc645173fab76daadafba54ef6a9e2cbaf5483b6a0bb755abfedef60dd2377280760f8dd731c3458e9419085cdcea3b60c4e15fb020e81c00d85a6ae4a118e8965028444e049e490cd48462448a009e3099296dd09534a3c822da84700fbe29eab73465d22f6c929f3b349f07e648190e208cd1878c92fc214b6e698f1a5aec228ca625075ec6ecf8129cbb83a9182968e46b4e10462f0c69b21869db97a13edc8183d998cc456e85da12c4e17400c6a1323a240ddf5239510ee0517678af3ff2ea861932b42328f32fd4d6f675c6d3ec85f0b7fdfcc009641a2110fa99358cd939aee0da8d4e7b06cd5a7a80527663909eb3a20564e615628b9eababc9a83ae244f446d69b6c475e245aaf8575b4c1ef2c3de74458c35f9782c805c0604a17ff57b10c3153d2e13b16fd43976674262bcd478b6b7251a297ed85b281b575048dd1e56d90dbe82b32355c8ee7bb21cee54f91a6c138851be0036bb3915c1f3d63856639db3857905989df24811dcdd3c68226d29cb2d615ed7ed0bfb13dce3686b2127db5d55099e43f3fea37b50d2a46db5e02e2ce176159726de5bcbc8b06caf7513edad6203d255a6c2b718837137d926ea81beef9e55379ba382e24544a7dddbcb720feacc9f2166d7df9dd499e755aa6249f7c8b249f6bfa87c230aa9e999c357845cb0e6de3db64db48569d02e6ccf01dc9ae3797416ccb6137013ad57433fade84bf6eda2effd8bc0bd6badcc1abe0756794b419aca88d25dbe93f62563200a532145decf890d1ad203044891968000a47957932e6a70a2dca9c1c5ca740fb0201b3bdb68e66c09ffb71ac83a9823484179dc52b1283f1e8a004d47c952a66d151371332ca9a575b1e2f89da32acc1d145938d028e377fecf6b9904d49d60ffd035ff764aa06862d9b9c792ffa6812c29e9df150713faa248b509da47a6f1fac0681182436ded5b26fbd5abc9ff46421d40f7ae860ffdedc3a30b121cbb1f840d7878198218819c21f763d626b0aae4444b3fbce156080fc9854c96c2a1c80ad83666983373c277d30db5a128205ea46bf74d8781ffb453f72ea9579846aa689e90e1cbc725330add637c8db07ae5707bdd6f9bfe90f504f35ba16adc647c413298abda849807f839ba1bd2be747eafda2f31ec10719a0cc4755bd1ec2c748da979611800041218b7f41ffacfa5ae30067e7c920412d126c68a4ab8fc89ec80a2084e4234f6d32765e54c5c4a8d212aa291497aab593a017bb68468932e4b9f2251774c8198c7a16536adfbc1a90617a7055018f5130b908e211a00701e0d5a39d87c92485cece91dfad1f83f30b15e1e48c9cf927a192660f8ffabd42062d405a2b9fd3713f2360f9080378a4f18394f3ad9d6f16f147cbffeeadc4157d886419944de00d544bb8b1a67e1047891f627c9ac7c3f6a421e439bce1240ad443c51cdfb2fdd38c27b6c7aafe120cf212c178e3f470362c8c5ed22a8245b9c46678066aa0ebd6568d4a2c7f588c086d6c638fb5af5d13430742b4464056c81dc02fc9b061019c6bf5e922e458a3ebb3e51288ce2e52eccba3588db91773e0f53967c0d5c1f8201ae91d4323806c3aa913309fd49e90ccdc930d609db61bf6a87845bf86018f3a8640c04800f260f132ee00889e495b6f24b945b36fc687fc1593632e2e0c8ff612cfb5798f944a893565ed4063b2dca777b76e96b429b4ae59dc6619f7bf66937efdb09598692d6903d873d3e72e2d0af12c19198a554d4eb3ef87f3eb1247769d1ee367781da82d273f27020be5bf1fb778d6084f4af87f663525e395bffea1cb5790a2947980186ff617d497c813fdb16862e679ccc9c30433ea49fa7b15f950efabd5108ded506808aa2b0139b54c5652259ef6eb83a9881aefcaf938e6993bc1381d0e59c25cb3637fa4a12981fde1aa67d3b85edc0e923cce20a58ba0a51d79799055951f2237fcf63eb995aa07716a1fd85ad147b4febc3dbb5d7de7114c602eaf1dc99e63e1a61a39dd4708a8db528816051eb5273a0d8697991f499c90af3987b21cc1e2e016fb4af74e4dbd087f3859241e5ce85240857224870149d9ee16c35b79d187c004067bb0a274fa3496b919db219c1223f6fd8a48af47b985087f84f8466fdeb02e60ddf47a64782fa500f4077f1f8803caddaecc2f6b8eee49588428d23e0495481ab1808ee7a03431661f9d51bb8646af5043746a3a522111626aeaf270bb47982798e6699206401bef9a83d5a36bd8cc223f79e1470a970f03cb1c06330cc8eb978a92bc2e8bba1ffbf4fe3264979f79805f579ffc0d24987212d1ca6acf2053b4b11415c1cd327c4ba4129b4ee488af0361dfa56b0195bb969e31e6d9b420624cf26aba912b188e1475ef7492bb23116fcb9adfe4739ec4756c6ea90a680c4c9655c5eb0c153fe93df39f26fcb61b47d7d10cef6e68a625c35cda905805fc82e05a10b553dedce74eb47a776f7aff05c38c7c3fdcfb3af4dfba0b3b13ce01237e9cd4a31e6b73cbbbee4b7f438571135d8ee984707747e51e8f88520954edf00b4060a8d6e2465ddf0daddc8197e1fc611170e722669de5c6fe89cabbbe5eb9833771a1742b7f3b2becbf384024abce8b12aa2edf2f25248268b72b02caabffcf2d253801fe836e17521615869a42eece2c49905ef9e24ac28f6d7e4bd38db74d17276a9cae75867eecdf9a8e6e020b9dae2d2a0e11bcdd525c3200ebb7ed33db059b95f1c253ba5a8d8ab48f61cf102c452a5154ccec51ab22ceb2d0451fa2b511f41bddc61e06972dca4bb79ca5db6c3be06691298eb9799288be4933b312869166b7f7dfd2c5fd1d2d214456c1393e3dd7f8c6a03e0b966b7e18da5120193ea1d485e8b84ec30ae4d8c1634ddc87ba17bb1d40af1bac526e0b0c61239b6d5d54dc374179f7803e43aee53b5b9573632fc762f2b0d15c213b867f63429ce77711b4e5e156fc57fea22025dddeb45c44cbe7b95bf933febf23322e16f0520bac808d0fa60fd426188ae8d6b4059588ad9b5d90c6f048dcf2402554191be25ca04fbb3030932b486a5fe029059183defac18161bdbebfd7f069de4f56d5072aa38418bf314f2cac77d531d56bc4830f7354e7e29f88d157867794bdc1574d669abe0259dc0eece746aa55324970be9f010db0f028015f911868f8351ad8f05a8d8151a133c3a5da5e8c2dd7a3d1e3b6736536d1b88c9b69642e0307d565b90d2ca8f86823df2e528185df10d4fd6290e4d880b9f9867cc32f788ee329709972dc8003c8338098589ff29407c37c6b733e69444b9fe89ebadd19d406eb38de76cd74e51b40cf971f109bb2f6f963485f74f45190e01c4adb110ade33f4de0233f8186e0625cec4efed0ba275b48803af999504fe87eef4f3b6a1dcf12ba1f6a0c90e4434730c4d28ea9f1ca7ecfb17436e1136dd97ce78f147f32a9ce7644a06166c63f68d3cf9eac3b0a11f7301a4933d4db3f8ee5673af142f0033a016c4523d988ce8e123f7e9aa9c8d1a5703451c93e34e6053bf59ae77b428a006d7270cb728774d9e9d88dd7ef70386a41de38d09baac5fb3f0a1f736918c188e9005bfbb0efa27930b47f6f6eee39369a575e55357fa4c341030da755038b055f3a017a1d9f45d80178c14f1fac4457fce4c06aebde694f1c23911eb28b0dd3b768ef104a4203c2b72ae9cd70b3a185dac721cb3a46cabbb7fdb2e8b8fb48d48197c8701487a3a482edf55c0eacb4180d066bd4ab436afb5417a175df91804984ff5610476cc46777e6f33366486184cc11459d0917036e444696e64711f80e988e28f5522f61733932577946819077a9cc18fd2fe25bef0c13bb90ef6dfb710c60d5013ca5d5a07c37c8b39fc06b538369f72ee9b2953d92900e929cff0a7363960e66b4e147ff37e07c30e57dd2e3189b522ce398a350b5e7579475d475a5cab478611217addafdf9c18cd6766f8dd12a07813a2f09ab06462cd6d8aaba5ebb60c0fa455b0d65b21f87784ca8381201493a22552c91c5fdfa9a57de930de1e6f28d988ff5e1a57979d989e180054af1f2c02573a76d9c8c7db12cadb12107e17ba9ec5ac0c908bead25cb46a9f898baaaa6160810273c1c5f20fce4ecdf5b21a43423d4e7c692f4e9a1a09f100db8104c234cb49c26c2e16394c4d0a6b71502a37e2cdb5acb1067c64790a166818e331e85684a7b3d7337e6f3782729b0de57cd0baa741044b8cb5b029c4b16b93401375a7e518c9e449fcb7332d16ed32572fd6688033cf9c5f2652ea894677dca24e7dcef7a12cab4d6c6f4fb738f3c5937c90cc8e322f177205493929e87cbb5c003e84d4c5196934228eb048ce9b070fa165de10a08bd2bea74d0c6afaa503a831d29ff3f3b60395b4cf6f2bad6b895847214aca9c9f68bae7bd279d8170d4fc02fd3194345f110af98fd3292b318fe4b4dee81152620ae410bdd201ae6e7cb6f3fc0ef5bff941a0bcc447acec1af57c2bc24b3a54df828b4dd9e40992944cc4fe20f20023e26e2c69608542bacf3b5210f5c6d8ec85eddedcb211578723c91ec246eb863a616830e1aaef09bea4b03260b8e99ffee1fb0612d430214db41cde4b391a6eddf0ba8c07cc0d22ddb604e336757a1db25f4163b830ee97b32e39f36c88a7faf169b3e1c895b65ca8c6606584ddd3f1edb85f3f73e304b7d03f6e61540b62cab4f01fd8adbe582f08a08c816951524f321f212db0aec8ac4f83d43daf13547939f464fbbe9177dc5aa1db3c09173dee0872aa829d78ddc608db9c130e69ef8455d2abc730600484e4dbcc7f44890f530f110ff1a7125c3b90240ea2852df28a02ed126e47de2b5dac535932c203a163a696546399334812306e3b0910cde79d04703f6234f356ce", 0x1000}, {&(0x7f0000003000)="bcecd8a9f25e3e3a06c901fe9e430e7f5b7f124d014fc54eb4baee7dec6a98a2e0d9610b9793caec52033e5e59a8472f5adcc2186ba271a2c1f821a27fee436637218e7769eb471f082722d6ff22b83708a56a40c3df1f8d579c057df802257f642a4e555ca6a2703045429fcdc4c1aa924ddb617aa4c5ecdeafaa667652de25eb310eb3a3ce007dd588d783099b9be1a0f710366b1917681de4e4dbde9a81da031418948748d6538a4ea91bbd53374429b9d8", 0xb3}], 0x3, &(0x7f0000003100)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x140, 0x29, 0x4, {0x2c, 0x24, [], [@generic={0x41, 0x58, "5a2ad79833b007633d9315d4abbabc54482602b0fc8a0562f79419a92b0832085ef67db9c7822a5a98833d6d2b261f5c90d73e0e6db5b91e6cdd52704833959d2b29cfd3f3343967249f6359aa5e728df02b5be64f95dce7"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x25}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x9, 0x9, [0x778, 0x401]}}, @generic={0x1f, 0x1c, "cc4342ab16d58fbe0fd351da344b5e7275f30b4b367b605ca0cbfeb2"}, @generic={0x5, 0x71, "254c7d9193888d85a296f960bf9f7e1715712ee9ca5a7b204dd27b8f0cd475468bbb1285f1fcb71c1f0506c383b49cc9078dc9fb977af433faf6a30055292fc32506a5ac12d345f16e6999928e8e20a01e111890f38ea6f6e04804a9adabd5e3c45cdc77877ad06a4c3331a3c8deec05a1"}, @padn={0x1, 0x1, [0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @hopopts_2292={{0x188, 0x29, 0x36, {0x0, 0x2d, [], [@calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0xd7b5, [0x19a, 0x80000001, 0x8]}}, @jumbo={0xc2, 0x4, 0x7fff}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x18, {0x5, 0x4, 0x4, 0x2, [0x9, 0x800]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x8, [0x6e20, 0x3, 0x4, 0xfff]}}, @generic={0x9, 0xcb, "7eb48c38a094e118b928612cfc5fbfd3ca852e47eaa468076dc08359a4de606cf6df7b1561d2d9aa74ac90a8cec8f173342e6f2e17b1557d31a75bab8adabc279f2b88aeeafb58e3244edb041e1467f185db0c07a6deaf226bb3c7da1db5b1278935413471b0e43c925b9a9847c51112e214ead84c7a9c9ddef43593e348a01db053818f7ddb9ec007fa3831854685c3ed4d7b3f1e73901264a68dee6b0c3b56dcd58032d12fc187027009b1a78d74c9ea73137cb112aadf595e22baf5dab5901b7b9282f3f17eebd1ec9b"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, [], 0x1}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0xff, 0x0, [@dev={0xfe, 0x80, [], 0x11}, @empty]}}}], 0x378}}, {{&(0x7f0000003480)={0xa, 0x4e22, 0x8, @mcast2, 0xf0d}, 0x1c, &(0x7f0000004a80)=[{&(0x7f00000034c0)="4af8cee4b66971d6c8fbb30730ab1d45407839922120c9630e8c820c84a91497669bed3aae4f6a3efd39164b65c25233d4ad874489df3e478c227cf95d564c3473a1ce3aa60eded42005f824241a2b743a77d50e33a7abb9e5a7fbd41359b27db364055a7856914f66a08c07b15ea4a171348bf65d922c916c9a2c742c4d4aca5b296453d9b7164781caa37db878288bcb3980e161c48f1927d2566f7cdba328f7a2561fec0eafddeaa56539cc6fe97df501c5ba7b8426cfbac112ffe8b270ddf9f00be320e2a57947b48d329030e531abc7feed074ff6e42476ca31d980963eb2383e25f0bccdaf", 0xe8}, {&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="8e9cd971e73d5ec9fe54f0a70c7cb59d6300b96443376fe7dad9f590d9edd371c37c8e9cd034644038f8e8352e7067ac011acc72bd7cc6df191dee281e03febcd7145a0fd3206d291284145ac08583aa2c1e9f8def911e6a60f687ca79a419935a8858834b3ebfedb86d6fe7191c9f90a21f2d7556db3139d17d9108a5983fc458f3b560c0700de63ace8ffff3786e4a1a68db8d9c3a0ce87b5b76002bfe4c6b2b8e3ff4f3d3b7e3c8c5de4ec310d4c12c6852074f67", 0xb6}, {&(0x7f0000004680)="0c04800984f3354b8d27b140ea7b9d75ee933bdcb47ab3cf8b7ce7f09f41a1797eb10a2d1c7b122a8ca35f85820d170b54d492a37d162e361d0d8537bc28abafe0963fb1b7e87f615df3f449e871ab6042b42a634f58aadcbef4059df4a2b936a1159c64118cfaa7a05a59b452f5c4d4393f44f4ebdcf86a6790d36f4947c1933330f1e9490bba29edd0f1e69a4b4d73b4f3bc886e691182f67b5195fe7c3bfc18e5d8dfe77468fdc844bad095d0bd227798db1e269fda3a4f6d3fb295bf4eb7da5cd29a3afe738755d0d10567a413c8019efed01a52", 0xd6}, {&(0x7f0000004780)="caa70df7d8325b1ec441484bc29ee8910b39f9a3226eb08c4a8b14db4dc8983f299a4c9212ca2b828dd4864fa5b0cda8cd2b3ef15d3248f45d7ddc60f90e18b93e36b36a416d2bde7b5cef5993860e89de47b12b774287be82a37d8bf9de92069a808afa9c299dc73ca9e6cf52f92f50ecac773dc763b0239f1ecfaac9983ff1792b11bf8bb1649ead6fec66", 0x8c}, {&(0x7f0000004840)="5a5e17cc46435150726690944c7d0bcc37b9f257869412f5b661aa0ee1d5bb23967ab7b150b05cd018d3b5f8ce0c6f88561192f2831324f3d761ee977c25f7ae5b68628ef3c77b8fecbff1559485d768b72d88f1407daa97180872c9f2986357c8ec3e7317d5f7479f108b4301e7008d53c78d4ecb46be31b72abc02cfd729b8809b9ec87a21ebb66f7885c7ccf5efbd881efaca180e82653757c3302e", 0x9d}, {&(0x7f0000004900)="f1c274d90c80ca389a6aa7f025df48d0fb1e2307702b2eb0d9fc03161b245102ce1affa7c0507c3cbade6ed45ea4adefe9167b82be14f39dfdbfaea2c9f6256dd1fb8e5342dd65ee7b1500baba907f6281", 0x51}, {&(0x7f0000004980)="f51f9d6fb4a3a9a2c2df152567a2b9168d5c00a0", 0x14}, {&(0x7f00000049c0)="23671a402819414fb60ee8bdcf027c93ac105fa79770963f74659da066ca49042725100cd9311cb173d9fb5f3d6758856de04e6dcd7b4a5a7b642e7467a702c53ef02602b6a261055630acfe1da4892403e28f2c77c211e1dae70451e3d75cfc5da6ea03cae89c5c88bad8692a7791fad44ebc11ed5e45ad289a18ba722474b32b6be1591f33d1319c", 0x89}], 0x9, &(0x7f0000004c00)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr={{0x58, 0x29, 0x39, {0x1d, 0x8, 0x0, 0x3, 0x0, [@local, @ipv4={[], [], @loopback}, @mcast1, @mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0xd8}}, {{&(0x7f0000004d00)={0xa, 0x4e23, 0x9, @private0, 0x10001}, 0x1c, &(0x7f0000005e80)=[{&(0x7f0000004d40)="8e65966c4821660c09e87c509c4f606b5e282fad962d71286792cd327f099cd1f8ce649e552457fb87df1b54cae3b7ed28c90661f27a2e516f7b52a5f91ea6eef1ae32f0213a108e3b67a3732fd37a1f3f5dc6dd94ee3b3cab82dd85272f37798e5e46a65c19071692131417ee2caf8dc45c14b92e4c9a82fd7083351e7080ee5c6331b568686efaf90745816bdd33620e99", 0x92}, {&(0x7f0000004e00)="ad3817a981fe2d89c8e1be4467fff038303cbe0b91d4130c3051638fb587955f2563c1450ac38e9decf2139daae58a342f0d446d490370dd6883336072e4fda48cdf90a2d7b620b006c9f027ba", 0x4d}, {&(0x7f0000004e80)="efd169b5ab5b0bdb9df59277ca7a6b3ea2186ba91b1286c3f3b086b9145df5ec292e2792fcd7acb902f996e380280a4554a13145a4522441c22fa83b594752b406589fd8418fd0499b2eeed4c6e963451674d33742bd8a29288764dd12e082e3b08e21ee6d3b0047c314cc5cc3aac1446318767cb67ca42eea64f981c1b501f18a0ed8ac60268727e90e4c9ff60100bce97607b68aed9d3b5546f0b5de9d64703c345752ffec17e12ed02785ccfa7029cd050e61c35149a990ee3f3b3fb6f71327a8985410d9839a6a174e8bbfb25a6c9c5fb026b3939951fc57531a31168dec90d261dee994e791807c1f8b60bcc7641c335e2844a5ffcd835286fe480e40855f6548bb1968b0f4ffc2dbdd85001356b5088bdbd91f0e37467e4eb1aa9bab078358366f45646af4ff28a33ebb574c8687ff5f2290104c96890ba28ea2b19d14deb0d9d7da115606305b9646dc266bdd608a4dd0271a5ceeb15a78cca13b115ac509206d383ee444c02514a3d834f1a187dd53a1d7f50e8a3756a331f22ff2e3ab70215ef90719f48e56c222b16e4b2f63b2766b7993a590c4bb061b0394572514e4fee7d2deb881f2436fbabc3f90de9e8da4d3a4a4e636881dc1d6b8bd1baa3a5b40760537811d23af2e9c011d4be64e64541a329600b3d2e3a5add2660e7473b3f1c33aca82c5018a1caf2feb44d98612cfd2621eb258116ed882bd152430d3172d666dc610dd01e5602044e85cedbd760ec9b947f279d5bd0742dd7638449374141dafec2c3f88aa0d043940fbd16b449d4033d30256e612c64e24458c7c94cc6ca82500edb41abc6c15729f552af36e52b18efac25dd0208251ac0a415baeca40f82b33f5fae343d242460c7ab37231b23c80bf01d8f446de2900ce211ad0ae70507883af1184ce392359fc754785ddb5c6b01d48db2436921c6904235288038bb8fa49dc40beb28fcd0467da6d99e71b40a45c07e1095621819a3e22416dbf7c110ea5eca94b557985807a017fc2b1d8f7f3a9656b811d31ef51030fd5f52710b540b9beeac21e839bafd323f7ea7b697cb1d805d80cf13ffa4d935b810edd64cebe7900e02839f4a57d2d3ff236e278f0b8b76fa1cb4021a0d63bfb839655cb1ea33de25d902449c7f437e2d5a3439ac8b0493e2996dcc43f1ac62c8ba3cd2287d51a6582d3059e260aeca9a9b0f2f4b14d24ce7107a0bbb523b324b48f3b296c1a3eefc11fabfe0851bf61f6633aa519183a6b3c7832f57ddef214fd0ca9a0f8a0eab30101988499814d54a8192fd10060c51a381d265cdcd4f71053f75eb490d707247937ba7d6e42d4e184ddd5d3b2d257388e9b377e310916c19f76ba55547f89a1c7061df9f9b58be0aa1ec16054071d302300ef866bb5725dadf0e40fd2fe0c9ef3c2443fe25e9d3372876b928a48e64982a6c93a863006f838dbe8623b5a6959f81b7babfb39de71f90fb2b10873a5b089feea10ad6299d87a4d76587d2839d49350f9dd23bd22224ae8ea70fdb5a4f1b44136d21c2d02ac56889507d593330f3fb3b38cf32a5ea0b39d739f85a6877376f0ac885b3c2f1c7cc0dd5962775e01cf5768c0ff9d80a1e22b9e05e3b30cb8c57f26eedc7e8a04f46a785755064479f3e686362fbdd9c47f42aaead3cca2419a13c7e6a8df0dcae87486d7f6014e7934f58a3bce7b2a2204c24910428a9a64f49aba0c29798430904e1dcefee6c8511bd26e7ac53d83ca34d029f6d5148161960ee446fac7d7a6b0598e11d8d7b62eb4f13913e0682abae28aa6aac0ef46e8c22a5461a9e681efbb7612238dd32527083436963fed0a749220f7290798624a624e3cfc453a5c1fdfb98cc3bfad5f4efbde776f902763189b2b266e4c278da556b182e92e26cdf71771f8a0b1b6738fb3d2c4d282ef51fa96d1f211b8ad990b1b30f2add98685e0af9001415dffa7689cb0e55105897b21525f38ce1219e7ffcd107908973b98043737f6bda921956949eac9eee214605fa7380540089f446e10cfabc550f5ea64684d6432bfee3125149fb2edf19488b67adb6937251bd0c081d4b13f5f81a0deb140ebb62a81795c84a099c25ee9db7b93caf437e7395104ca4dc8eb58b85280d6dd712297c0c782622e927ec7471c80bfe02a8f729df1ef4cdb4e16e7d7797eb1413e3682c714c01f7da8c3a37ec806cc9149c5f6e40cb4c340b3679f55afaaeb4c754ca8903a2a50804836b2d11b063da019e0cadcde834eea65e224038410097f3af86c58c681689af16447cb5a3f7f820482e99800f5367c0d4a0288e789d67f342e6c2207912796dbeee7b8f87fef61410ab503af306686c092b39f61f66fc9b7b6f64bed7a50c7ed9cc6b95de2ec22a8f4724e1249aa80bce51be5c0b6e83d40dad33bae8421c35b9eefaf969d01dbece9d84662a816c0280d2a20b105775835cbae841c9f17e995b0dce022830a5045cf6a363a3edcab8e7540e8edd0e60c224a3d2cb345eb5084f7a9317cd2c281c745ef3a01619629153b5dd51205f545b82091c01726e4d6161c9212f97d40fb5181c01c2c095ad989d13d28ae5854e96048acbf36278631ba78a5221fe37b15434b6029f1d03835c742fe8977cb60ccb2f2b7810b927588fd454b4fbd679baf2afae8b34088acbcfb9a4bc9bb16b591a692560ebf092a6c134d370dfd7aa9cea83bc6cf6d6adf6492212943d7d8387b2501b81551ab0fddf651b917b7fc21953703de84f1432cd2b01cc393b07454e4c25aabe5dec51c6e523fd46ddf5788da4ef8876c47c9b5147135257590452e031d4ae97faefe59fb122d96a6410364b02647e59684eab090f22ceb75e45abb000deff0ffa08428a5997189a1489508eb4c2ae9829ac3159615d5ed9495e41f27b38734215f1601481706d0e68c8ce15e7dde3b618098fb9515769e32f1abbd2cb17b023979b1a9f39be8ba18a3422349204781fec300754e1d1230f7a3f6c1ed37da0b28ac54ffcbb38e8a1a0937ac8a5c248fa970576dc39fe51dc4cd6fa8d9e5acc2fc73600654809f1813cf87a7ff579d7762c3824addd3b2a2e7b7e8c61f1a51cb00fabeeb289a44f3444a1578525bf0de9698a09674c01b543e27c17c5c8da45ca40559de1d37f7e81dd32ff75967acf2acdb14422ab954c7bcf6b6d6bc08bb1b8ffd6e5f910258ed1ef57fa7700dd24d98b01584198dc5ccf89cb0cd1c661d93d211d5b19d2db8e64858d07d63f57f3e02494a04e58ab5564a5730d248c520669706bb8771350585833197c00b118bcd96ca75d62956412681eb03e4162a2c62580198829046f256c1b5fbfc03fb1bb23d78555c3868dbd0a7e8894e46935e743443af51f946c744adc96677893227140c8a427e150610649c1fff7d64aaede4a7cf542e84e031f817410e6afa5ba5c9ee05cd399025bdc8c76c24710847045cad8a49b4045678d5c2cb33fd0a6a7a7bbcd132f3b26a98ce6b10aae12b441371e9290e2993b90b6a12a5c270a65775589d2db216dab882c0a33389c19debbebab1b605805577f161c437a0847ff7cf8a89faddd2f2b32c9cc5f62dfbcc71c6e89f43bff27a6b46dc84f5bd45042045a284163da761b9f04c96bdadb53fbda0651cc766b956245f2236a2e00b20414d8cad61bbd0f8a75b7b15c9609bdd56fa0b7c942371e957ede8688550b30b5e0fc2e742b22875bd32673b1b71fc09f2eb1b52c1a1faf6a9f27c193cf0749a717ce00ef8594567cf335bd991e98d2a10674974238b8a951bd7f6f029005efa42e64f6540cbea43fb7e64e9c3fe3a1b755edf42a0afc1d578e0d56b09906d914fc90220aeff98d217867078b88c2035e476a32711d0fea740f5b3d8a2bc353e4fd3bce14196d1c879d7cf38814e9c55531971cbfd3406967ad196902bdb88193b62217d3400e254071ad819adfdbf9ed0c2cf8447e5056d37a670e7da6f7f56bd4f5c8040d933b395bf850446721ad2a97ce9a7def55bdf59a10d1fc6b4061debaf4c40300a9072abec1c19ec789c13dc5ddc8a1cc14dd2509579709471d1a9b0a393bb91183dfeae24e58419526c1929f1e2d3bcf44f552ea37ac00c98d4f18930ee649dc58685acff3dd44a0f393abad714e7ca7fca7b6d54b78d7151f59fb6defd13eafab5e1d74259e2f30d178826a53e51fdc35b313652401ae4bf013637279b5898fde72ab14988bef557d600f0c3fe46d0fff9df995b343ade2f16535cf9832d698fe605b7a491d2d72020e02c347b8c366f1bb1fa71ef1146eb48f7fb1c08779937c42c54429802b49ce3d01d9810abc7e80438cddcdca34caa0729194c7fa1b73a97700606128092bc9ac36a2e39858f6a6dedbe00d12ac7b6187148011a175af5d013611a4441a98852f1dba6610245b05f08640db153b970f893e266e6d668efb300ffec5a709d8f3d426f9842d67b8493a8458aa9db425e578c5fcb76f811645609467a3a386dc2d89291ee4cb6cb561cabe5cf35dfb4552f7b87478576a39a7871d6e86981ee0c2f4b9ac15b91375be30dcebfabde32a6197698e98c8103263819639e8d5b8be0c9f421527a5cf993f3901d2e62c5ae6af2477dd0d2f79f1567c913f435c5236c5a27baa56da6b9f42401dcae95bbd3351a63c67c9abb5721b216305e5bb20f8107be55db5fa8265b0d3d0d2aaea193212e339a20b8beab60ba1cbf3d5594306ddfec9fbc739072b5e1d865b9deb53cc7faea9727107a1c6032e7c58e385279630c6b8abacc184b608b4be4f8aa6f1d32a18d54fc249503280566223c265e51780ec956b2eb2dbc6d5ceba66fd434df1de6fb92cc1983b0ae372868ca8fef4d5c310009497355ee6c43afaa539a00ec73dfc442de2f7dc05cc9c79701e8225851690bd864d2a237f06dc8074f58fef2bfb5e0ee2d7dedaa745a9131b444c4319fc042687abc4876537c66bcde5e99f45fd2522510b717227f19a0905a02add4e8a4ad1f92b89d766a90d41dca82a617180b1005b7b957a06fd5fc44359188c9ebbe410805cd977eb352e9687079407211b73ee6f133f7a50e85be8695e8a4f969211ef7996688bea43f5477f37834c447c03ce523eadd1f58ba997df78cb6d55da7261f12b346e938122d59b4a07f3ec15b07889331664f108ce08e7cfa5e0c0002bf2564a8ec7e0760d243fee0730859a22815d553a26853de62f1b9ef66f07ae15029cc52a8ed1e9cf6293af556a566cd7a012360cd4abe7fa5caef9543893e65bb6ba3e1742e1f642dd54855a19251e54c72be3b3a91ebf06cb561bff68d300225783103f9713d1d9f1cda8f8623882c1f0ddf73cdaccc5cc2e0f716cb5bcdf2634172c6826d3f2afe6fc63ab70304632cf4a5085b37efdc66bc874c70b34663a6d26149f0b3837ca4bbef13c32ee261562a9587d1beb6ccb587f6cc04203c06d990604e2c8b999fa2ece95b970eebb19eefca90069e256d5249acb99ba01e6e7ae153c9a4d14459974812b25fecefc16ea2b9ce0b679c4e438bb467b0004580b1e2e73b58c15d4d9a0a3c1e8d803a349ddfde23534c39231f10999311e0e84642e58965c5584a2b431bd06e2c2deb64787739466e0920056185618d6ebab2d15834ce3bac2dd60a639d745fb2752accbab88f39e49c3386876afca6a71aa11a3bff5debf7a8eed797db89969f13742b94f192b5b4a7a966866aabcadde3548936688034623af07c06167bf8023f3b92344270f087df3707c20057e892096c103b90c7473f4ca5b7e3b614853e2f692752d34f4ef3650d14ae5800b44563ef25", 0x1000}], 0x3, &(0x7f0000005ec0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x45}}, @dstopts={{0x70, 0x29, 0x37, {0x1, 0xb, [], [@pad1, @generic={0x6, 0x2f, "fdef962f7fb398d130a76707702ffa8b1dcb53d0b4ac2f74329bab6913a7409eccd99a7b4baa31ca7370514dbfba85"}, @enc_lim={0x4, 0x1, 0x3f}, @ra={0x5, 0x2, 0x1}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @padn, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1a}}]}}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x2b, 0x13, [], [@hao={0xc9, 0x10, @remote}, @generic={0x7f, 0x84, "8b2b8030a71c4d5f1625e0cb3015b95aeb66358bbcbab698e098d36bb378eaf11e607cb8ecfd06ca864a6faf00bcc930105200544a8651c850cbf08619f4c55560433ba2d244a08fc05f017043b1cf8a59c94e7f21b99546f6abbf8141a5f6fdd823e51ea64464dc0a55f97ae3eeb882facc01d92b3c116d44760b136f318e9f84d748c0"}, @pad1, @ra={0x5, 0x2, 0xfff}]}}}, @rthdrdstopts={{0x2e8, 0x29, 0x37, {0x2c, 0x59, [], [@padn={0x1, 0x1, [0x0]}, @generic={0x3, 0xeb, "8e5656d09fb0cbe5b0d6a2a8f637a79933e2df8d7739039ef64c96b612693c0717185201d57b8b5eec904bfc8ee09dc95ead015b5ffa410f038c6f0dad7f091515c89014c6f1426b7a06e908bd8a89ef02a94048f6c74c060765dfd747cc256e77c71b067f2e7338c977aa2bbaed0772334b43b43d5a37e7cdf55fd9137dd5e110b0c79c4227bef6e80954c1d4fe2653a6e716cad041b3c9f2101d1763195b509746feaeb97618589e76ca6d98bef81d727e6d3c8ea7b244c2d8a626f14dcebc221509035995757b552b1d32bb555d35ac0d5faf8d120782512dcbced8b1fc141cfe29b7e0e5c3a9c702d4"}, @calipso={0x7, 0x28, {0x2, 0x8, 0xb6, 0x1ff, [0x1f, 0x7, 0x600000000000, 0x5]}}, @generic={0x99}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @local}, @generic={0x0, 0x4c, "cb97a86c703e6b2551246ff06b013ea3fc422500b88377d2413df8664a211603f23d406d08a4f5795c3d62ee0fb436e6f854ba08a39b7a71ef5dcebc3501f1fda39b9dd91aa63b4da12a9787"}, @generic={0x3, 0x69, "531d6416b6258ea7f6a153ad12de0857989893176ab22208253d04dd84b3b5151df5ff144d103823ab5580ab30a03072b3f1bc72637e20fb366c811e05151f0283f28303f9680ed859600f37bc4cd218ffd2db6ff5698e2132360cc3fdcb8fc111ae96ff7d0f09caf3"}, @generic={0x8, 0xd0, "e52e3a0ae03a0e3018cb24b9e7612f134cf027c36ddb5d350a28c977dec3081bfbe22040025dc8a8108e7dbf38faee961d1d63bc27addeee8094a3f8fa59ae9ebfc6183c5698a48c551c75c3d6ab189effdeeffd99e4a0731832c78b831af390c7b62017f6c8c3e7471e97ada428cfc45f75952a282213c5b25d2c1e9feeeeeb8228f1aaf2fcc509cbb80366dfa2b5f26da711c82d8884172b05a557a11fc7001ebf75b1669eab8311605a92e71e6d6029a8dd5bf58d832c270d9b0f3da518c736470a145c3e2a113557f3fdc59fe97a"}]}}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x88, 0x1d, [], [@hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x6}, @generic={0xb, 0xb1, "1c28850a3c8bcd98fcf1e367f9c460d0bfc3d2bc039d6f5b6b7498f843cf94e8b12339d884fa8664e3b205d3ae81897fcf76b19e36db311a17469ae61d25fe3bb6b67eb2f3c6434ad31d6ea7fcf5cdab75c3a9ff0bb94f6c55f50e75acc777a6fe00ff60a76143144fd8f532b365801029888a4e397d300f1b50ed464b563e6afebee5430a6e5b98105a954fef50f8b62461d23fca5e555d0ae84ff4320af37db0244240733918839b0f4c12f35d93f835"}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x7}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hopopts={{0x28, 0x29, 0x36, {0x2, 0x1, [], [@ra={0x5, 0x2, 0x8}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts={{0x100, 0x29, 0x36, {0x3a, 0x1d, [], [@calipso={0x7, 0x28, {0x0, 0x8, 0x56, 0x6, [0xfffffffffffff341, 0x401, 0x8ebc, 0x100000001]}}, @generic={0x8, 0x91, "ba4cbdc7042bd3254ec20e190f814e110fd8660d117008e26e283cafce108cdd288ab4b6331208ad5aa55aa3ff9b83e535f857b17af28ea7cf12ae6d977dec30466dc28c1a68cad7e9b4bfb6c40ed9942e1c3dfb73dcb440b72958030b68b5b6f3de5bdb028187380e30797285fdfcb108097fa48d437d05e6bf596147a8edde5809422d777f6d5b868e5398ec1ad10b48"}, @ra={0x5, 0x2, 0x7f}, @enc_lim={0x4, 0x1, 0xd7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7ff}, @generic={0x81, 0x2, "9809"}]}}}, @hopopts_2292={{0x2038, 0x29, 0x36, {0x2c, 0x404, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x27}}, @generic={0x0, 0x1000, "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"}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x16, 0x1, [], [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x26c8}}, {{&(0x7f00000085c0)={0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000008740)=[{&(0x7f0000008600)="fe6f6d35df22e9c98edfcf3ae2d012990d4272bf6431a8", 0x17}, {&(0x7f0000008640)="d35c09efb945ad4798feff58fa5bef51e0f4625c8a85122c09e909b39f55f4fce0db6603b5c380b98d6a9dbbb76050594bdb941237f877a487f85f2ef3600c86445b4d", 0x43}, {&(0x7f00000086c0)="16b539fdabb4eb8d9c07b83cc2990172c74ce56baa810203d1468263d441005cba466dd410e217df770436016b02d978425ef4970f4824903a5d49a02dc3b038d105b6ab1c1531e45fb85c77b9c4d1052cf51a924da13919", 0x58}], 0x3, &(0x7f0000008780)=[@tclass={{0x14, 0x29, 0x43, 0x9b2}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x8, 0x6, 0x1, 0x7, 0x0, [@mcast2, @dev={0xfe, 0x80, [], 0x28}, @remote]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x2, 0xd8, 0x0, [@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x33}}, @private0={0xfc, 0x0, [], 0x1}, @local, @mcast2, @mcast1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x1, 0x5, 0x0, [@mcast1]}}}], 0xf0}}, {{&(0x7f0000008880)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, 0x1c, &(0x7f0000008900)=[{&(0x7f00000088c0)="d3e090dee4922d4ad252db69f3a77f4b86f85467e0bf8ba50495f3fa67352e1ea5dcb666e778472ae0", 0x29}], 0x1, &(0x7f0000008940)=[@rthdr_2292={{0x38, 0x29, 0x39, {0xff, 0x4, 0x1, 0x40, 0x0, [@private0, @remote]}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000008980)}}], 0x8, 0x20000000) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 00:25:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"/574], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = getpgrp(0x0) getpriority(0x1, r1) tkill(r1, 0xa) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='&\x00', 0x2, 0x3) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1008.821367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:25:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = getpgrp(0x0) getpriority(0x1, r1) tkill(r1, 0xa) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)='&\x00', 0x2, 0x3) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1009.283872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:25:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000005, 0x1, 0x3, 0x0, 0x4}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) syslog(0xa, &(0x7f00000000c0)=""/95, 0x5f) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d40d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596433f15bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2e48e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3db05000000000000009eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e42011700"/574], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141242, 0x11) 00:25:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000155042, 0xa9) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="cb4144a49a04003d715c462e911bde9976c1e360db1e198f283e4d113d8896cd7812cd634f16d52b8140d3a0893bbe753d25b1478bff7f9d3992f484f85e582be9f083cee5f3bad26d46c41f8658731f6bfbbfa42222f8591d381cc0f7899ec783e9e4bb5d7a9ab7c3e6a1f6011050f9446d3609651a729963d20c933a5f8d08b368e2264b9ba60cbcd5488a343d19b8958d184cfd7489f16f8eaa655a240cf1adde3c0dc10c3bbeb29c98950661c740f344961628367191cce2788e85402acd622ebfddc12480422497ef873768c0ad7fe8612c2692fdb83ee6709f622c9517ea640000000000000049d68563c5c596434415bc62be456c395b27212701d693ec27aed1293c7f9d15d9b1e05a9da8a29fac1db67b97bcb789622b408a8635eeee8434b83ff61c34d70e7361a909b994b1e7d8e4477f6a357cb79abce696bd2eb0f848e7c9af1fce72f28b258f31add0d9d8512233b74b0515e2e7f11bf05b75fe80abcc6d61fe17249214ab2f1a51969b56bc77e37cb05c161aa105b542d3dbf6c6c4ed695ebf259eacf685e49ab77da51ea771b10a9716c051501fec02790990c8dd045ef3b3d6cbeee91b905f415e07bb767899a6ec0a7fa6b37993217a72b83654d12ec16bbfe4e9d5a5cad9f29de0f54275280852cbfb93af9a7174d76b8e41a1302d50a01ad2589ed1039d0646f6ee52b9d1b58133a4fee352f1f9e7d948086d0d48152cdc2a3e7af5b3c315d43699d78774389877bf04bccd948614f5d959c50c0da3c44f9d2c895b546846dead7b94009fa663c9f46e7e420117"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000155042, 0xa9) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) 00:25:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1000}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="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"], 0x12) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x800}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000155042, 0xa9) sendfile(r4, r5, 0x0, 0x8000fffffffe) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) [ 1011.395900] audit: type=1800 audit(1594254348.452:79): pid=20511 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16100 res=0 00:25:48 executing program 2 (fault-call:9 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1011.844574] audit: type=1800 audit(1594254348.932:80): pid=20526 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=16151 res=0 00:25:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:25:49 executing program 5 (fault-call:13 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:49 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:25:49 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000c0000000000000000000000040000000092f600000000000c000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="040000000000000005040000a00000000000000000000000fa030000000000f6ab103ccd78147b96e300019ae27a0000000087090000000000003904000000000000290300000000"]) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1011.959942] audit: type=1800 audit(1594254348.932:81): pid=20535 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16164 res=0 [ 1011.997392] FAULT_INJECTION: forcing a failure. [ 1011.997392] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.018238] CPU: 0 PID: 20550 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1012.029385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.038750] Call Trace: [ 1012.041365] dump_stack+0x1b2/0x283 [ 1012.045011] should_fail.cold+0x10a/0x154 [ 1012.049181] should_failslab+0xd6/0x130 [ 1012.053172] __kmalloc+0x2c1/0x400 [ 1012.056717] ? SyS_memfd_create+0xb9/0x3a0 [ 1012.060967] SyS_memfd_create+0xb9/0x3a0 [ 1012.065069] ? shmem_fcntl+0x120/0x120 [ 1012.069106] ? SyS_clock_settime+0x1a0/0x1a0 [ 1012.074079] ? do_syscall_64+0x4c/0x640 [ 1012.078100] ? shmem_fcntl+0x120/0x120 [ 1012.082889] do_syscall_64+0x1d5/0x640 [ 1012.086794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1012.091993] RIP: 0033:0x45cba9 [ 1012.095225] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1012.102942] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1012.110218] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1012.117494] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1012.124765] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 [ 1012.133433] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:51 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f00000001c0)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x90000, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x41) setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x1}, 0x20) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:51 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1013.917765] FAULT_INJECTION: forcing a failure. [ 1013.917765] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.930020] CPU: 0 PID: 20567 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1013.938047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1013.947410] Call Trace: [ 1013.950027] dump_stack+0x1b2/0x283 [ 1013.953681] should_fail.cold+0x10a/0x154 [ 1013.957850] should_failslab+0xd6/0x130 [ 1013.961843] kmem_cache_alloc+0x28e/0x3c0 [ 1013.965998] __d_alloc+0x2a/0x9b0 [ 1013.969447] ? lock_downgrade+0x6e0/0x6e0 [ 1013.973606] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1013.978450] ? shmem_rename2+0x6e0/0x6e0 [ 1013.982512] ? __alloc_fd+0x1bf/0x490 [ 1013.986340] SyS_memfd_create+0x1f6/0x3a0 [ 1013.990485] ? shmem_fcntl+0x120/0x120 [ 1013.994371] ? SyS_clock_settime+0x1a0/0x1a0 [ 1013.998783] ? do_syscall_64+0x4c/0x640 [ 1014.002756] ? shmem_fcntl+0x120/0x120 [ 1014.006645] do_syscall_64+0x1d5/0x640 [ 1014.010539] entry_SYSCALL_64_after_hwframe+0x46/0xbb 00:25:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1014.015744] RIP: 0033:0x45cba9 [ 1014.018925] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1014.026723] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1014.033994] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1014.041272] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1014.048544] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 [ 1014.055820] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:51 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:25:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1014.140138] FAULT_INJECTION: forcing a failure. [ 1014.140138] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.178297] CPU: 0 PID: 20583 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1014.186224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.195727] Call Trace: [ 1014.198333] dump_stack+0x1b2/0x283 [ 1014.201983] should_fail.cold+0x10a/0x154 [ 1014.206149] should_failslab+0xd6/0x130 [ 1014.210129] kmem_cache_alloc+0x28e/0x3c0 [ 1014.214267] ? shmem_destroy_callback+0xa0/0xa0 [ 1014.218984] shmem_alloc_inode+0x18/0x40 [ 1014.223027] ? shmem_destroy_callback+0xa0/0xa0 [ 1014.227677] alloc_inode+0x5d/0x170 [ 1014.231291] new_inode_pseudo+0x14/0xe0 [ 1014.235259] new_inode+0x1b/0x40 [ 1014.238614] shmem_get_inode+0x74/0x780 [ 1014.242573] __shmem_file_setup.part.0+0x104/0x3c0 [ 1014.247538] ? shmem_rename2+0x6e0/0x6e0 [ 1014.251629] ? __alloc_fd+0x1bf/0x490 [ 1014.255426] SyS_memfd_create+0x1f6/0x3a0 [ 1014.259557] ? shmem_fcntl+0x120/0x120 [ 1014.263429] ? SyS_clock_settime+0x1a0/0x1a0 [ 1014.267820] ? do_syscall_64+0x4c/0x640 [ 1014.271777] ? shmem_fcntl+0x120/0x120 [ 1014.275669] do_syscall_64+0x1d5/0x640 [ 1014.279543] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1014.286109] RIP: 0033:0x45cba9 [ 1014.293188] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1014.300879] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1014.313340] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1014.321489] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1014.328768] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 00:25:51 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1014.336464] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1014.376778] FAULT_INJECTION: forcing a failure. [ 1014.376778] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.388759] CPU: 0 PID: 20594 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1014.396644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.405992] Call Trace: [ 1014.408596] dump_stack+0x1b2/0x283 [ 1014.412245] should_fail.cold+0x10a/0x154 [ 1014.416406] should_failslab+0xd6/0x130 [ 1014.420381] kmem_cache_alloc+0x28e/0x3c0 [ 1014.424537] selinux_inode_alloc_security+0xb1/0x2a0 [ 1014.429634] security_inode_alloc+0x8f/0xd0 [ 1014.433939] inode_init_always+0x576/0xb10 [ 1014.438163] alloc_inode+0x7a/0x170 [ 1014.441777] new_inode_pseudo+0x14/0xe0 [ 1014.445746] new_inode+0x1b/0x40 [ 1014.449110] shmem_get_inode+0x74/0x780 [ 1014.453093] __shmem_file_setup.part.0+0x104/0x3c0 [ 1014.458012] ? shmem_rename2+0x6e0/0x6e0 [ 1014.462079] ? __alloc_fd+0x1bf/0x490 [ 1014.465879] SyS_memfd_create+0x1f6/0x3a0 [ 1014.470016] ? shmem_fcntl+0x120/0x120 [ 1014.473888] ? SyS_clock_settime+0x1a0/0x1a0 [ 1014.478278] ? do_syscall_64+0x4c/0x640 [ 1014.482243] ? shmem_fcntl+0x120/0x120 [ 1014.486132] do_syscall_64+0x1d5/0x640 [ 1014.490026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1014.495204] RIP: 0033:0x45cba9 [ 1014.498376] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1014.506070] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1014.513330] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1014.520581] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1014.527842] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 [ 1014.535102] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:25:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x400000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:52 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1014.948744] FAULT_INJECTION: forcing a failure. [ 1014.948744] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.962187] CPU: 0 PID: 20603 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1014.970093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.979449] Call Trace: [ 1014.982049] dump_stack+0x1b2/0x283 [ 1014.985695] should_fail.cold+0x10a/0x154 [ 1014.989857] should_failslab+0xd6/0x130 [ 1014.993845] kmem_cache_alloc+0x28e/0x3c0 [ 1014.998005] get_empty_filp+0x86/0x3e0 [ 1015.001901] alloc_file+0x23/0x440 [ 1015.005454] __shmem_file_setup.part.0+0x198/0x3c0 [ 1015.010393] ? shmem_rename2+0x6e0/0x6e0 [ 1015.014461] ? __alloc_fd+0x1bf/0x490 [ 1015.018276] SyS_memfd_create+0x1f6/0x3a0 [ 1015.022436] ? shmem_fcntl+0x120/0x120 [ 1015.024479] ptrace attach of "/root/syz-executor.5"[20610] was attempted by "/root/syz-executor.5"[20611] [ 1015.026321] ? SyS_clock_settime+0x1a0/0x1a0 [ 1015.026334] ? do_syscall_64+0x4c/0x640 [ 1015.026345] ? shmem_fcntl+0x120/0x120 [ 1015.048266] do_syscall_64+0x1d5/0x640 [ 1015.052166] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1015.057357] RIP: 0033:0x45cba9 [ 1015.060544] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1015.068260] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1015.075536] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1015.082810] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1015.090084] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 00:25:52 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f0801001800000000000000240000002400000002000000000000000000000c0000000000000000000000000000000c0000000000003466145a002cd62de2175e2b0a88c04b43fa150668ff1c5425d3295e03d456d05d4e2263ac651dd0ef8eba7c78b5602fa29ef687e8819f67a2254281fb683e7d17e88b71274bda41000d2ef2ed3fe2c12bd924d4586130dda7c7329ce44d48eefd56f58ec8a030b41758788c5b12218d1435c61f997c86374f8284e4"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) r1 = getpgrp(0x0) getpriority(0x1, r1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @tid=r1}, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000080)) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1015.097358] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000600)="f7f3223cf4f854199da5325c585ccbe4ed83b836c1a6474914dc55e72206297bb3c7218a9169a85ea0bdc9e1587a0500000000570000422cb49673160161b1cd3923dd4a7150829eaa9452c99926022b8753a18a748c569f435fb3bae96efb74b50ec900002f5e8e198a061dd6a5e3f7b3190637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf60d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba0fc65c6992986f7049fde4081e8f0004020009a85dc6193d33b1665ca735fd312c157105bb10c446ab7deabbe520a0e43a2247a7bb1782f5d8ee47df147485a9c9a86e13b4", 0xf5, r1) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/112, 0x2ae, &(0x7f0000000580)={&(0x7f0000000040)={'tgr160-generic\x00'}}) keyctl$read(0xb, r2, &(0x7f00000000c0)=""/245, 0xf5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000040)) 00:25:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4008094) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:54 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1016.950993] FAULT_INJECTION: forcing a failure. [ 1016.950993] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.968498] CPU: 0 PID: 20639 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1016.976407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1016.985765] Call Trace: [ 1016.988364] dump_stack+0x1b2/0x283 [ 1016.992000] should_fail.cold+0x10a/0x154 [ 1016.996152] should_failslab+0xd6/0x130 [ 1017.000158] kmem_cache_alloc+0x28e/0x3c0 [ 1017.004322] selinux_file_alloc_security+0xaf/0x190 [ 1017.009353] security_file_alloc+0x66/0xa0 [ 1017.013674] ? selinux_is_enabled+0x5/0x50 [ 1017.017909] get_empty_filp+0x15c/0x3e0 [ 1017.021878] alloc_file+0x23/0x440 [ 1017.025421] __shmem_file_setup.part.0+0x198/0x3c0 [ 1017.030345] ? shmem_rename2+0x6e0/0x6e0 [ 1017.034398] ? __alloc_fd+0x1bf/0x490 [ 1017.038204] SyS_memfd_create+0x1f6/0x3a0 [ 1017.042348] ? shmem_fcntl+0x120/0x120 [ 1017.046233] ? SyS_clock_settime+0x1a0/0x1a0 00:25:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000030000350c95321f33c0b8d5fc4543eebff77200000000000000000c000000000000000000000004000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = getpgrp(0x0) getpriority(0x1, r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) tkill(0x0, 0x29) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1017.050639] ? do_syscall_64+0x4c/0x640 [ 1017.054607] ? shmem_fcntl+0x120/0x120 [ 1017.058494] do_syscall_64+0x1d5/0x640 [ 1017.062384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1017.067567] RIP: 0033:0x45cba9 [ 1017.070747] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1017.078457] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045cba9 [ 1017.085732] RDX: 0000000020000058 RSI: 0000000000000000 RDI: 00000000004c1d11 [ 1017.093009] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 00:25:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x6, 0x2, 0xff, 0x0, 0x3f, 0x48c}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1017.100289] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 [ 1017.107568] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:54 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1017.219445] FAULT_INJECTION: forcing a failure. [ 1017.219445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.261571] CPU: 0 PID: 20657 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1017.269490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.278843] Call Trace: [ 1017.281448] dump_stack+0x1b2/0x283 [ 1017.285092] should_fail.cold+0x10a/0x154 [ 1017.289265] __alloc_pages_nodemask+0x22b/0x2730 [ 1017.294030] ? check_preemption_disabled+0x35/0x240 [ 1017.299051] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1017.303979] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1017.308811] ? HARDIRQ_verbose+0x10/0x10 [ 1017.312897] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1017.317823] ? avc_has_perm_noaudit+0x157/0x2a0 [ 1017.322495] ? lock_acquire+0x170/0x3f0 [ 1017.326552] ? lock_downgrade+0x6e0/0x6e0 [ 1017.330705] alloc_pages_vma+0xc1/0x4b0 [ 1017.334678] shmem_alloc_page+0xe1/0x180 [ 1017.338732] ? shmem_swapin+0x180/0x180 [ 1017.342703] ? cred_has_capability+0x11e/0x220 [ 1017.347279] ? selinux_inode_copy_up+0x180/0x180 [ 1017.352032] ? find_get_entry+0x31b/0x660 [ 1017.356272] ? check_preemption_disabled+0x35/0x240 [ 1017.361355] ? __vm_enough_memory+0x261/0x460 [ 1017.365836] shmem_alloc_and_acct_page+0x126/0x670 [ 1017.370753] shmem_getpage_gfp+0x388/0x27b0 [ 1017.375064] ? shmem_should_replace_page.isra.0.part.0+0x10/0x10 [ 1017.381221] shmem_write_begin+0xeb/0x190 [ 1017.385364] generic_perform_write+0x1c9/0x420 [ 1017.389945] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1017.394608] ? current_time+0xb0/0xb0 [ 1017.397249] ptrace attach of "/root/syz-executor.0"[20662] was attempted by "/root/syz-executor.0"[20665] [ 1017.398398] ? lock_acquire+0x170/0x3f0 [ 1017.398416] __generic_file_write_iter+0x227/0x590 [ 1017.398436] generic_file_write_iter+0x36f/0x650 [ 1017.421758] __vfs_write+0x44e/0x630 [ 1017.425488] ? HARDIRQ_verbose+0x10/0x10 [ 1017.429551] ? kernel_read+0x110/0x110 [ 1017.433439] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1017.438436] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 1017.443174] vfs_write+0x17f/0x4d0 [ 1017.446695] SyS_pwrite64+0x116/0x140 [ 1017.450480] ? SyS_pread64+0x140/0x140 [ 1017.454354] ? fput+0xb/0x140 [ 1017.457440] ? do_syscall_64+0x4c/0x640 [ 1017.461397] ? SyS_pread64+0x140/0x140 [ 1017.465289] do_syscall_64+0x1d5/0x640 [ 1017.469170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1017.474347] RIP: 0033:0x416987 [ 1017.477519] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1017.485204] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416987 [ 1017.492487] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1017.499737] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1017.506986] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000003 [ 1017.514237] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1017.573601] print_req_error: I/O error, dev loop1, sector 0 00:25:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:25:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x10001, "d73856392d5c43b1480b3a848dfd6d7ddf90dca4aa690c429c9663251ab8938f", 0x2, 0x80, 0x4, 0x6cf, 0x4, 0x2, 0x0, 0x46}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:55 executing program 1 (fault-call:0 fault-nth:7): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1017.970840] FAULT_INJECTION: forcing a failure. [ 1017.970840] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.982128] CPU: 1 PID: 20677 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1017.990016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1017.999388] Call Trace: [ 1018.002001] dump_stack+0x1b2/0x283 [ 1018.005637] should_fail.cold+0x10a/0x154 [ 1018.009795] should_failslab+0xd6/0x130 [ 1018.013774] kmem_cache_alloc+0x40/0x3c0 [ 1018.017852] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1018.023504] __radix_tree_create+0x32b/0x4b0 [ 1018.027923] __radix_tree_insert+0x98/0x500 [ 1018.032250] ? __radix_tree_create+0x4b0/0x4b0 [ 1018.036835] ? shmem_add_to_page_cache+0x236/0x7f0 [ 1018.041772] shmem_add_to_page_cache+0x552/0x7f0 [ 1018.046530] ? shmem_alloc_and_acct_page+0x670/0x670 [ 1018.051628] ? __radix_tree_preload+0x1c3/0x250 [ 1018.056301] shmem_getpage_gfp+0x13fa/0x27b0 [ 1018.060718] ? shmem_should_replace_page.isra.0.part.0+0x10/0x10 [ 1018.066873] shmem_write_begin+0xeb/0x190 [ 1018.071038] generic_perform_write+0x1c9/0x420 [ 1018.075640] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1018.080316] ? current_time+0xb0/0xb0 [ 1018.084116] ? lock_acquire+0x170/0x3f0 [ 1018.088096] __generic_file_write_iter+0x227/0x590 [ 1018.093038] generic_file_write_iter+0x36f/0x650 [ 1018.097799] __vfs_write+0x44e/0x630 [ 1018.101514] ? HARDIRQ_verbose+0x10/0x10 [ 1018.105582] ? kernel_read+0x110/0x110 [ 1018.109474] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1018.114477] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 1018.119225] vfs_write+0x17f/0x4d0 [ 1018.122761] SyS_pwrite64+0x116/0x140 [ 1018.126545] ? SyS_pread64+0x140/0x140 [ 1018.130431] ? fput+0xb/0x140 [ 1018.133540] ? do_syscall_64+0x4c/0x640 [ 1018.137544] ? SyS_pread64+0x140/0x140 [ 1018.141437] do_syscall_64+0x1d5/0x640 [ 1018.145324] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1018.150497] RIP: 0033:0x416987 [ 1018.153670] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 1018.161369] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416987 [ 1018.168684] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1018.175939] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1018.183190] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000003 [ 1018.190439] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @sack_perm, @mss={0x2, 0x8}, @window={0x3, 0x5, 0xe52}, @window={0x3, 0x8f, 0xbe}, @timestamp], 0xa) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x480c41) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, 0x8, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:55 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000c26d0c236b05eef900000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000092dc4ff8c59fdca80e8d8480803b37c1781dbe392006c2e44be6a6c07c94188f5e7efbd577885a7d989785663c605dc146181d6eaf1bc6339ddd935b08a52c9054cde81aba695d10c94b7357ef4c2765c3324962f5a7a80ad532e5f58167087fc72cba397ef639db1e76"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = getpgrp(0x0) getpriority(0x1, r2) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000280)="24b86394c301b797225a87b0fed8fdad4af0bead4b762b035595f2c8c8351cb294901ff0be2f8878715630de7c65bbaa6f7fc8cc50b55821cb525b8114b1b0f646", 0x41}, {&(0x7f0000000300)="7ac057385eb4df7fa7ea1a7fbd1a8571d5484d474bedd2466f3a3e22a5f23a022c224e5b333d8ece7a666b1fb6b86a810f7cc4987f30fdda7b966d134da81ae4807d08abc12f00592763952939d405f0d809cccca8dd8d0ed8c5efcf63ed822767dd85f19e013d8b8f38aacd8694099c8aeed2f1b4ae32495db9daa907ec235c25a212c936850ab41be00c111f240d3810661639cee3ccc4a5e240a9d283942886d2a073645635c6d6dd6d30e9eb2117b71ea1a84015e887e69b1cf17783b5c1ae2f1f4abc0510d6edf81e2aed30d824d2e9dcc4e557fb390be774c28c8f07912347ce05c974e34c4c70390a438807dc3d7c", 0xf2}, {&(0x7f0000000400)="e6025be1353bb8ec4bf76c5c01f959c2cb2918126c406254e08fc2aea9a0c87a25167a2e97e61d303037b4c506bca0107a07b18bb25afe6e4bb700f49546170850d6ce18e1741f327568160131cb83ae2efb795f35577b02fc6c03c5f673ab23122aa91b59bad9e0e8900aeadcf89525495859217796aa7da144ffd2bea8a0d62ed0e68a099905707f1557108445b934883466a3e64b0b7459c8faac05f2ff", 0x9f}, {&(0x7f00000004c0)="a5fb92b3873ed3169ecf79437f641aacb8277ee495e87443104d8e34d922087ff909406b99915e0c69df6054a9e55464c0b8399d7f644da6aa6cce9fc4c03d61444ca199d176169bfc7a6d73623923e78abe396e40f76def8ccebe02f3aae39ff35cd3bdd66d3b0cb57e7a275680d514cb2f0bbcfb94982295d352760ef23d5f2add40ae641ab87452c46541c22302d514532b44310defde822af00912350343cfe6a765ef8e8d3c762f7c0eb76d382e5233d38be39ffa41b8cc5a5297d50aaf0f2b0f2b9ebf94efe6c41c2ed25f0291d19336d877f36559665337244482f78fc7935f9a3c9cb7a37022211adcdd64fc4a4cf5", 0xf3}, {&(0x7f00000005c0)="da0124d4d41cc5ea3262affc10fa99b38e3d4877b4b1b32fe3ee1b0991bbec5b43c4efa79c45ec5df228857d164d47836b9baaedd280d2db5f940e31b30df22e9bfa9658b2510857179dc27993e2a46b88aacb4c7f98d54acaf27c2558b3b9f6844eac6290a7424506e88c6dfee241c38b96755f6e31664adfaa76d1c903a6c28e52faffffff676c695dfa674bfc347e495ad0c5f29c331302144c23fc6a9b0100000000000000191e3be1fcc8edd0c0158001caf9f6d3871950903f1fb2", 0xbe}], 0x5, &(0x7f0000000a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, r6, r1]}}, @cred={{0x1c}}], 0xf8, 0x20000054}, 0x810) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000140)={0x3d, 0x5, 0x4}) ptrace$cont(0x7, r2, 0x0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 00:25:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x7}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x0) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = getpgrp(0x0) getpriority(0x1, r5) sched_setattr(r5, &(0x7f0000000040)={0x38, 0x7291078fe03d237d, 0x10000024, 0x1f, 0x101, 0x5, 0x2, 0xfff, 0x9, 0x4}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 00:25:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x6861f97301b0f356, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0x0, 0x3ff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() ptrace$setopts(0x4200, r2, 0x6, 0x300040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000240)=0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) recvfrom$l2tp(r0, &(0x7f0000000300)=""/163, 0xa3, 0x2000, &(0x7f00000003c0), 0x10) uname(&(0x7f00000002c0)=""/21) [ 1018.284831] BTRFS error (device loop1): superblock checksum mismatch [ 1018.324352] BTRFS error (device loop1): open_ctree failed 00:25:55 executing program 1 (fault-call:0 fault-nth:8): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1018.409428] FAULT_INJECTION: forcing a failure. [ 1018.409428] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.439255] CPU: 1 PID: 20709 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1018.447187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.456544] Call Trace: [ 1018.459139] dump_stack+0x1b2/0x283 [ 1018.462768] should_fail.cold+0x10a/0x154 [ 1018.466916] should_failslab+0xd6/0x130 [ 1018.470883] kmem_cache_alloc+0x28e/0x3c0 [ 1018.475034] getname_flags+0xc8/0x550 [ 1018.478826] do_sys_open+0x202/0x3e0 [ 1018.482533] ? filp_open+0x60/0x60 [ 1018.486179] ? SyS_pwrite64+0xca/0x140 [ 1018.490055] ? fput+0xb/0x140 [ 1018.493140] ? do_syscall_64+0x4c/0x640 [ 1018.497094] ? do_sys_open+0x3e0/0x3e0 [ 1018.500970] do_syscall_64+0x1d5/0x640 [ 1018.504896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1018.510070] RIP: 0033:0x416921 [ 1018.513299] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1018.521004] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416921 [ 1018.528260] RDX: 00007f753bb6bb0a RSI: 0000000000000002 RDI: 00007f753bb6bb00 [ 1018.535517] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1018.542814] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1018.550589] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:57 executing program 1 (fault-call:0 fault-nth:9): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1020.127049] FAULT_INJECTION: forcing a failure. [ 1020.127049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1020.138896] CPU: 1 PID: 20721 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1020.146787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.156146] Call Trace: [ 1020.158723] dump_stack+0x1b2/0x283 [ 1020.162339] should_fail.cold+0x10a/0x154 [ 1020.166469] __alloc_pages_nodemask+0x22b/0x2730 [ 1020.171215] ? generic_file_write_iter+0x37a/0x650 [ 1020.176126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1020.180948] ? trace_hardirqs_on+0x10/0x10 [ 1020.185183] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1020.190194] ? HARDIRQ_verbose+0x10/0x10 [ 1020.194264] cache_grow_begin+0x91/0x410 [ 1020.198503] cache_alloc_refill+0x28c/0x360 [ 1020.202824] kmem_cache_alloc+0x333/0x3c0 [ 1020.206977] getname_flags+0xc8/0x550 [ 1020.210776] do_sys_open+0x202/0x3e0 [ 1020.214480] ? filp_open+0x60/0x60 [ 1020.217998] ? SyS_pwrite64+0xca/0x140 [ 1020.221872] ? fput+0xb/0x140 [ 1020.224968] ? do_syscall_64+0x4c/0x640 [ 1020.228922] ? do_sys_open+0x3e0/0x3e0 [ 1020.232800] do_syscall_64+0x1d5/0x640 [ 1020.236676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.241845] RIP: 0033:0x416921 [ 1020.246064] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1020.254715] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416921 [ 1020.262096] RDX: 00007f753bb6bb0a RSI: 0000000000000002 RDI: 00007f753bb6bb00 [ 1020.269371] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 00:25:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r4, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:25:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRESHEX=r1, @ANYRES64=r7], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1020.276743] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1020.283996] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1020.342555] BTRFS error (device loop1): superblock checksum mismatch [ 1020.387552] BTRFS error (device loop1): open_ctree failed 00:25:58 executing program 1 (fault-call:0 fault-nth:10): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:25:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x6b45680, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000280)="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") 00:25:58 executing program 4 (fault-call:13 fault-nth:0): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1020.993824] FAULT_INJECTION: forcing a failure. [ 1020.993824] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.006116] CPU: 0 PID: 20756 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1021.014143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.023683] Call Trace: [ 1021.026300] dump_stack+0x1b2/0x283 [ 1021.029920] should_fail.cold+0x10a/0x154 [ 1021.034076] should_failslab+0xd6/0x130 [ 1021.038046] kmem_cache_alloc+0x28e/0x3c0 [ 1021.042234] get_empty_filp+0x86/0x3e0 [ 1021.046161] path_openat+0x87/0x2aa0 [ 1021.049874] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1021.054472] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 1021.059003] ? kmem_cache_alloc+0x124/0x3c0 [ 1021.063313] ? getname_flags+0xc8/0x550 [ 1021.067276] ? do_sys_open+0x202/0x3e0 [ 1021.071148] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.076505] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1021.081441] ? path_mountpoint+0x960/0x960 [ 1021.085671] ? trace_hardirqs_on+0x10/0x10 [ 1021.089894] ? check_preemption_disabled+0x35/0x240 [ 1021.094917] do_filp_open+0x18e/0x250 [ 1021.098729] ? may_open_dev+0xe0/0xe0 [ 1021.102537] ? __alloc_fd+0x1bf/0x490 [ 1021.106451] ? lock_acquire+0x170/0x3f0 [ 1021.110429] ? lock_downgrade+0x6e0/0x6e0 [ 1021.114599] ? do_raw_spin_unlock+0x164/0x250 [ 1021.119101] ? __alloc_fd+0x1bf/0x490 [ 1021.123349] do_sys_open+0x292/0x3e0 [ 1021.127067] ? filp_open+0x60/0x60 [ 1021.130608] ? SyS_pwrite64+0xca/0x140 [ 1021.134502] ? fput+0xb/0x140 [ 1021.137607] ? do_syscall_64+0x4c/0x640 [ 1021.141588] ? do_sys_open+0x3e0/0x3e0 [ 1021.145479] do_syscall_64+0x1d5/0x640 [ 1021.149464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.154653] RIP: 0033:0x416921 [ 1021.157837] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1021.165547] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416921 [ 1021.172819] RDX: 00007f753bb6bb0a RSI: 0000000000000002 RDI: 00007f753bb6bb00 [ 1021.180093] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1021.187363] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 00:25:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, &(0x7f0000000240), 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000140)=0x7f60) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb41001800000000000000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1021.194673] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:25:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0x37e8, @loopback, 0x7}, {0xa, 0x6, 0x1f, @private0, 0x6}, 0xaf71, [0x5, 0x9, 0xe017, 0xfffffff8, 0x7, 0x200, 0x2a, 0x400]}, 0x5c) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x1, [{0xf, 0x3, 0x6}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x4c}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 00:25:58 executing program 1 (fault-call:0 fault-nth:11): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1021.288681] FAULT_INJECTION: forcing a failure. [ 1021.288681] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.300258] CPU: 0 PID: 20772 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1021.308157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.317519] Call Trace: [ 1021.320120] dump_stack+0x1b2/0x283 [ 1021.323764] should_fail.cold+0x10a/0x154 [ 1021.327996] should_failslab+0xd6/0x130 [ 1021.332006] kmem_cache_alloc+0x28e/0x3c0 00:25:58 executing program 0: r0 = getpgrp(0x0) getpriority(0x1, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x2, 0x0}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000040)={0x3, 0x7, 0x80000001, 0x80808080}) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x2, &(0x7f00000000c0)) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:25:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x10080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000c00000000000000000000000400000000000000000000000c0000000000006b1782638b0cbeba1fff957920199cbc4542f27f5862654bb91eb1b935dbc9ed6d80d3b2b1ff31c1f8b90e7d9deec36519b61ef392e7306232199150c6"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r1 = getpgrp(0x0) getpriority(0x1, r1) ptrace$cont(0x9, r1, 0x400, 0x8dfd) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1021.336164] selinux_file_alloc_security+0xaf/0x190 [ 1021.341186] security_file_alloc+0x66/0xa0 [ 1021.345426] ? selinux_is_enabled+0x5/0x50 [ 1021.349668] get_empty_filp+0x15c/0x3e0 [ 1021.353650] path_openat+0x87/0x2aa0 [ 1021.357369] ? kasan_kmalloc.part.0+0xa6/0xd0 [ 1021.362042] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 1021.366554] ? kmem_cache_alloc+0x124/0x3c0 [ 1021.371009] ? getname_flags+0xc8/0x550 [ 1021.374989] ? do_sys_open+0x202/0x3e0 [ 1021.379055] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb 00:25:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000005c0024000000240000000215000000000000002838608a682e6f0000b2746b93a65db93a48a60000000000000cab7703000000000000000000b0ba80426448e41c0cc342f8feb0d13ad30ddb009a8f48dccf98ff62115ed774ce5f2ae26a9ac3d82b0f2f0222e687d84113ecf666fd"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x2, {0xfffffe01, 0x8, "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", 0x2, 0x53, 0x7, 0xb, 0x5}, r5}}, 0x128) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1021.386943] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1021.391879] ? path_mountpoint+0x960/0x960 [ 1021.396121] ? trace_hardirqs_on+0x10/0x10 [ 1021.400450] ? check_preemption_disabled+0x35/0x240 [ 1021.405483] do_filp_open+0x18e/0x250 [ 1021.409312] ? may_open_dev+0xe0/0xe0 [ 1021.413117] ? __alloc_fd+0x1bf/0x490 [ 1021.416926] ? lock_acquire+0x170/0x3f0 [ 1021.420904] ? lock_downgrade+0x6e0/0x6e0 [ 1021.425062] ? do_raw_spin_unlock+0x164/0x250 [ 1021.429559] ? __alloc_fd+0x1bf/0x490 [ 1021.433381] do_sys_open+0x292/0x3e0 00:25:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1021.438719] ? filp_open+0x60/0x60 [ 1021.442264] ? SyS_pwrite64+0xca/0x140 [ 1021.446158] ? fput+0xb/0x140 [ 1021.449270] ? do_syscall_64+0x4c/0x640 [ 1021.453249] ? do_sys_open+0x3e0/0x3e0 [ 1021.457140] do_syscall_64+0x1d5/0x640 [ 1021.461038] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.466227] RIP: 0033:0x416921 [ 1021.469417] RSP: 002b:00007f753bb6ba60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1021.477134] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 0000000000416921 [ 1021.484411] RDX: 00007f753bb6bb0a RSI: 0000000000000002 RDI: 00007f753bb6bb00 [ 1021.491687] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1021.498967] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 1021.506247] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1021.629942] ptrace attach of "/root/syz-executor.0"[20796] was attempted by "/root/syz-executor.0"[20799] 00:26:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:00 executing program 1 (fault-call:0 fault-nth:12): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x2, @multicast1}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x4, @remote, 0x20}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x1ff}, @in6={0xa, 0x4e23, 0x6, @private0, 0x3}], 0x90) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1023.361466] FAULT_INJECTION: forcing a failure. [ 1023.361466] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.388919] CPU: 1 PID: 20805 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1023.396844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.406201] Call Trace: [ 1023.408799] dump_stack+0x1b2/0x283 [ 1023.412439] should_fail.cold+0x10a/0x154 [ 1023.416597] should_failslab+0xd6/0x130 [ 1023.420571] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1023.425254] ? loop_get_status64+0x100/0x100 [ 1023.429749] __kthread_create_on_node+0xbe/0x3a0 [ 1023.434633] ? kthread_park+0x130/0x130 [ 1023.438621] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1023.443563] ? __fget+0x1ff/0x360 [ 1023.447024] ? loop_get_status64+0x100/0x100 [ 1023.451610] kthread_create_on_node+0xa8/0xd0 [ 1023.456104] ? __kthread_create_on_node+0x3a0/0x3a0 00:26:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x3, 0x2, 0x31, &(0x7f0000000040)="3ae77029a9c91624367ed05755e5e86ef392d8d38cc29529bcca139f7528fcf1baa42b4ae054a89b167d78ba603b393e27"}) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1023.461121] ? __lockdep_init_map+0x100/0x560 [ 1023.465613] ? __lockdep_init_map+0x100/0x560 [ 1023.470110] lo_ioctl+0xca9/0x1c00 [ 1023.473661] ? loop_clr_fd+0xac0/0xac0 [ 1023.477556] blkdev_ioctl+0x91d/0x17c0 [ 1023.481443] ? blkpg_ioctl+0x8d0/0x8d0 [ 1023.485337] ? trace_hardirqs_on+0x10/0x10 [ 1023.489591] block_ioctl+0xd9/0x120 [ 1023.493224] ? blkdev_fallocate+0x3a0/0x3a0 [ 1023.497550] do_vfs_ioctl+0x75a/0xfe0 [ 1023.501359] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1023.506992] ? ioctl_preallocate+0x1a0/0x1a0 [ 1023.511419] ? security_file_ioctl+0x76/0xb0 [ 1023.515836] ? security_file_ioctl+0x83/0xb0 [ 1023.520247] SyS_ioctl+0x7f/0xb0 [ 1023.523611] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1023.527677] do_syscall_64+0x1d5/0x640 [ 1023.531569] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1023.536751] RIP: 0033:0x45ca77 [ 1023.539935] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.547641] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1023.554907] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1023.562200] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1023.569466] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1023.576731] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:01 executing program 1 (fault-call:0 fault-nth:13): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1024.001791] FAULT_INJECTION: forcing a failure. [ 1024.001791] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.018931] CPU: 1 PID: 20823 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1024.026855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.036243] Call Trace: [ 1024.038824] dump_stack+0x1b2/0x283 [ 1024.042462] should_fail.cold+0x10a/0x154 [ 1024.046601] should_failslab+0xd6/0x130 [ 1024.050559] kmem_cache_alloc+0x28e/0x3c0 [ 1024.054781] __kernfs_new_node+0x6f/0x470 [ 1024.058944] kernfs_new_node+0x7b/0xe0 [ 1024.062818] kernfs_create_dir_ns+0x3c/0x130 [ 1024.067211] internal_create_group+0xea/0x7e0 [ 1024.071703] lo_ioctl+0x1108/0x1c00 [ 1024.075316] ? loop_clr_fd+0xac0/0xac0 [ 1024.079194] blkdev_ioctl+0x91d/0x17c0 [ 1024.083081] ? blkpg_ioctl+0x8d0/0x8d0 [ 1024.086953] ? trace_hardirqs_on+0x10/0x10 [ 1024.091181] block_ioctl+0xd9/0x120 [ 1024.095358] ? blkdev_fallocate+0x3a0/0x3a0 [ 1024.099666] do_vfs_ioctl+0x75a/0xfe0 [ 1024.103462] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1024.109091] ? ioctl_preallocate+0x1a0/0x1a0 [ 1024.113509] ? security_file_ioctl+0x76/0xb0 [ 1024.117920] ? security_file_ioctl+0x83/0xb0 [ 1024.122327] SyS_ioctl+0x7f/0xb0 [ 1024.125707] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1024.129685] do_syscall_64+0x1d5/0x640 [ 1024.133590] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.138791] RIP: 0033:0x45ca77 [ 1024.141993] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:26:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x400100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x1, 0x4}, 0x20) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x1e) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000100)={0x0, {{0xa, 0x4e22, 0x3, @mcast2, 0x33}}, {{0xa, 0x4e23, 0x9, @ipv4={[], [], @empty}, 0x2}}}, 0x108) socket$nl_audit(0x10, 0x3, 0x9) wait4(0x0, 0x0, 0x0, 0x0) 00:26:01 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000500)=0x3be2) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x4000000, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0x80fd, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0xeaf6, 0x0, &(0x7f0000000480), 0xc0, &(0x7f0000000280)='\x1czM\xe6N\xc2\xfb\x15\x88\xe9V\xde\x12#*\'\xe6H0\x8d\x87\xb1\x9d\xb4\xac\x12?\xaa,\xde\xb0W\xb1\xe1I\x02\xf3\x90GDN\xb8RK\xc9)ee\x1d\xa7\xf6\x00'/65) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000001600000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) connect$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, [], 0x2c}, 0xfff, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x20041000) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x5, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e, 0x61]}}, 0x0, 0x2a, 0x0, 0x80000001}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@empty, @private=0xa010102}, 0xc) [ 1024.149698] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1024.156962] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1024.164269] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1024.171546] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1024.180126] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="da00ee792cab8c28f0583adb2b366a10040db3fd01009b57f31363769d00404dc2", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000140)=[0x7, 0x7f, 0x2bc2, 0xfc00, 0x1000], &(0x7f0000000180)=[0x20, 0x1, 0x1, 0x40, 0x7, 0x7ff, 0x33b9, 0x8001, 0xffe1], &(0x7f0000000280)=[0x8, 0x2, 0x6, 0x5dc], &(0x7f00000002c0)=[0x9f1f]}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c0000000000000000000000040000000000000000000000ae00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r5 = getpgrp(0x0) getpriority(0x1, r5) ptrace$setopts(0x4200, r5, 0x2, 0x12) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:01 executing program 0: r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d14b7f496c5fd0e6f2074186520e80af48a0ce3169c7ca7b1f26281def2e3569bd23947fbcd4d8b17c43662d4df071276b1a8a7fe4f77af9470e2987314b2b93332cfbfb6af578bd76bcb3a2927a7caabc", @ANYRES16=r2, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) r4 = getpgrp(0x0) getpriority(0x1, r4) prctl$PR_SET_PTRACER(0x59616d61, r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x1, 0x0, 0xe, 0x1, 0x100}, 0x20) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1024.236635] BTRFS error (device loop1): superblock checksum mismatch [ 1024.302826] print_req_error: I/O error, dev loop5, sector 0 [ 1024.317503] BTRFS error (device loop1): open_ctree failed 00:26:01 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400)='/dev/input/mice\x00', 0xd0000) getpeername$l2tp(r1, &(0x7f0000000440)={0x2, 0x0, @empty}, &(0x7f0000000480)=0x10) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000400000024000000020000000000000000000000000400000000000000000000000c00000000000700"/62], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x7, 0x40) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01050000000000000000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000811f4f73d740be1c89b13fe7f58eb3774f0a9ea44d1173710dd02c0ba2b591f23009945519f82567fd782f267c4ceeb211869f"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=""/48, 0x30, r3}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000060000000000000000000900000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x0, 0x220400) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:03 executing program 1 (fault-call:0 fault-nth:14): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:03 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0x9, 0x4}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x1}, @func={0x0, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x52}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @window={0x3, 0x81, 0x401}], 0x2) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:26:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func={0x7}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x105540, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x63db, 0xdb5}) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:26:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x896) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1026.404790] FAULT_INJECTION: forcing a failure. [ 1026.404790] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.449109] CPU: 1 PID: 20889 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1026.457036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.466579] Call Trace: [ 1026.469179] dump_stack+0x1b2/0x283 [ 1026.472822] should_fail.cold+0x10a/0x154 [ 1026.476980] should_failslab+0xd6/0x130 [ 1026.480962] kmem_cache_alloc+0x28e/0x3c0 [ 1026.485120] __kernfs_new_node+0x6f/0x470 [ 1026.489276] kernfs_new_node+0x7b/0xe0 [ 1026.493173] __kernfs_create_file+0x3d/0x320 [ 1026.497592] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1026.502268] internal_create_group+0x23b/0x7e0 [ 1026.506865] lo_ioctl+0x1108/0x1c00 [ 1026.510498] ? loop_clr_fd+0xac0/0xac0 [ 1026.514379] blkdev_ioctl+0x91d/0x17c0 [ 1026.516448] ptrace attach of "/root/syz-executor.4"[20908] was attempted by "/root/syz-executor.4"[20909] [ 1026.518309] ? blkpg_ioctl+0x8d0/0x8d0 [ 1026.518321] ? trace_hardirqs_on+0x10/0x10 [ 1026.518347] block_ioctl+0xd9/0x120 [ 1026.518355] ? blkdev_fallocate+0x3a0/0x3a0 [ 1026.518365] do_vfs_ioctl+0x75a/0xfe0 [ 1026.547966] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1026.553594] ? ioctl_preallocate+0x1a0/0x1a0 [ 1026.558124] ? security_file_ioctl+0x76/0xb0 [ 1026.562530] ? security_file_ioctl+0x83/0xb0 [ 1026.566939] SyS_ioctl+0x7f/0xb0 [ 1026.570298] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1026.574271] do_syscall_64+0x1d5/0x640 [ 1026.578173] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.583365] RIP: 0033:0x45ca77 [ 1026.586544] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:26:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x2, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) [ 1026.594330] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1026.601595] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1026.603473] audit: type=1400 audit(1594254363.554:82): avc: denied { write } for pid=20891 comm="syz-executor.0" name="net" dev="proc" ino=148998 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 1026.609812] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1026.609818] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 00:26:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000200)={0x24e}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000a0000000000000019307835ec83b5a09fc0777dee0000000c00000000000000000000000400000000000000000053dd351200e70e00000000b65a2e2ffe16c0fbb1bfb6501039da9c10ffd6c66807084942eb00b10308000000000000000000"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0), 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1026.609825] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1026.658959] BTRFS error (device loop1): superblock checksum mismatch [ 1026.682696] audit: type=1400 audit(1594254363.554:83): avc: denied { add_name } for pid=20891 comm="syz-executor.0" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 1026.711136] audit: type=1400 audit(1594254363.554:84): avc: denied { create } for pid=20891 comm="syz-executor.0" name="pfkey" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 00:26:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="3629f4a682fb606d6b499b5f424ae4c0aef8c85a9a3fa208"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x0, 0x4e, 0x3b}, 0xfffffffffffffeee) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4200, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1026.785674] BTRFS error (device loop1): open_ctree failed 00:26:03 executing program 1 (fault-call:0 fault-nth:15): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1026.905163] FAULT_INJECTION: forcing a failure. [ 1026.905163] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.922263] print_req_error: I/O error, dev loop1, sector 0 [ 1026.934880] print_req_error: I/O error, dev loop1, sector 0 [ 1026.940635] buffer_io_error: 1 callbacks suppressed [ 1026.940641] Buffer I/O error on dev loop1, logical block 0, async page read [ 1026.943323] CPU: 0 PID: 20940 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1026.945896] print_req_error: I/O error, dev loop1, sector 0 [ 1026.952765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.952770] Call Trace: [ 1026.952789] dump_stack+0x1b2/0x283 [ 1026.952807] should_fail.cold+0x10a/0x154 [ 1026.952824] should_failslab+0xd6/0x130 [ 1026.952834] kmem_cache_alloc+0x28e/0x3c0 [ 1026.960700] Buffer I/O error on dev loop1, logical block 0, async page read [ 1026.966514] __kernfs_new_node+0x6f/0x470 [ 1026.966527] kernfs_new_node+0x7b/0xe0 [ 1026.966539] __kernfs_create_file+0x3d/0x320 [ 1026.966551] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1026.966566] internal_create_group+0x23b/0x7e0 [ 1026.966586] lo_ioctl+0x1108/0x1c00 [ 1026.976280] print_req_error: I/O error, dev loop1, sector 0 [ 1026.978528] ? loop_clr_fd+0xac0/0xac0 [ 1026.978542] blkdev_ioctl+0x91d/0x17c0 [ 1026.982206] Buffer I/O error on dev loop1, logical block 0, async page read [ 1026.986282] ? blkpg_ioctl+0x8d0/0x8d0 [ 1026.990379] print_req_error: I/O error, dev loop1, sector 0 [ 1026.994371] ? trace_hardirqs_on+0x10/0x10 [ 1026.994395] block_ioctl+0xd9/0x120 [ 1026.994405] ? blkdev_fallocate+0x3a0/0x3a0 [ 1026.994415] do_vfs_ioctl+0x75a/0xfe0 [ 1026.994428] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1027.001589] Buffer I/O error on dev loop1, logical block 0, async page read [ 1027.005656] ? ioctl_preallocate+0x1a0/0x1a0 [ 1027.009730] print_req_error: I/O error, dev loop1, sector 0 [ 1027.013918] ? security_file_ioctl+0x76/0xb0 [ 1027.013928] ? security_file_ioctl+0x83/0xb0 [ 1027.013939] SyS_ioctl+0x7f/0xb0 [ 1027.013946] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1027.013959] do_syscall_64+0x1d5/0x640 [ 1027.013976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1027.018643] Buffer I/O error on dev loop1, logical block 0, async page read [ 1027.023208] RIP: 0033:0x45ca77 [ 1027.023213] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.023224] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1027.023230] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1027.023235] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1027.023240] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1027.023246] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1027.176801] print_req_error: I/O error, dev loop1, sector 0 [ 1027.182719] Buffer I/O error on dev loop1, logical block 0, async page read [ 1027.190004] print_req_error: I/O error, dev loop1, sector 24 [ 1027.195873] Buffer I/O error on dev loop1, logical block 3, async page read [ 1027.217595] BTRFS error (device loop1): superblock checksum mismatch [ 1027.262005] BTRFS error (device loop1): open_ctree failed 00:26:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = accept(r3, &(0x7f0000000140)=@nfc, &(0x7f0000000280)=0x80) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000002c0)) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/39, 0x27) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000380)="d13861b261f564c5da2677045055716b6da4087c3f35983870078ef830a8a9d22359ab3a4fbd6811713a6d90c1560d8b0da7b8e0d638913b2172bdd251db33fcb69c6fd22ccdc25da549b37f08921de4ef2431b682382dae03c8833c2ab755532ab1ff7e0375ff8b41749d3a1a248058483250f13e175530d3bfcb7adb2559bd6ca4714a944929e42e3d2ee3d7b06331991046") ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:06 executing program 1 (fault-call:0 fault-nth:16): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000005000)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0x804}, {&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000400)="40aad2b41b4b382e95f77a97478bc894ca34f79285ec09228fd0733eea2d1e57a2da58c2d9066c473698b3aa0d38f87d46afaa49b6bb95eecfa62fbc1e159c0f5f", 0x41}, {&(0x7f0000000480)="1439b62ef716f0d55931fc72e2865f0123c311872ebfee14bbae98b102119d0604aa785168f7bfb440834eeddc356d7421f9dd1f5d9121479425cc13d7430a3f942d535702cb45b85c335ac3a49b7c905bb58998916976d68187ea9621f6204419fe796dcffdf55f7017d5089c175bf2e8290ba45938d01e86b836452ab0d459e2c987551c0b020341df939d25537221273a9d901bea9fed8e9b80d853f7139a5582811461d2c14d6a6ac35d038613dbcc26e605a3fe419b5c18e4ae7f5b4c444b9cbabc", 0xc4}, {&(0x7f0000000580)="3dccaad09d3a9b8cc9489bbb20af8bc0398e5e081bba77c38ceacb90c73a6af8f1c5", 0x22}, {&(0x7f00000005c0)="313abdb1def422a573283d769c2163c40d437ea42d6ae4ef2dc53020e3611e989178a647132c8b9abb28cf27b700cf3558af4df28516b0c89628b64ac7637c4f81208535fc1dc2cee13a07b6db982f89bf28deac6546567e294e9fb3e8989e642f4020e4d1c369a93e3bb48982a31e5fb8b24dc82ea14b3fc7afce02ea3bacd4eeaf21ad945f399804b81d927fd1be928af2eb6daf0ba993c47dcc98e3756d99efbe14a71a9faea9ff7edfd0d3795ee167b3204a1b13f206750092e180cfd38032f0a176d013152d5838c96a4a13581d10384872bc4b0b9ce2917b2185eca8f7edc6855f8da9d9409cbec46a2259332a976e2b03854e8f10", 0xf8}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="fec8970726ce3b113d91ec782b15e07ed9d0d86103f9ebc55cc4bcf4a90347b08ed677fa50eee3512fe95119785203386866503b1dc07b4a06b97340b50885de177692b8a461d0e2735d0f6326ce93ee6fa96461e3642f064f2e10f6677e14afc6b76f48490946ce", 0x68}], 0x6, &(0x7f00000018c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r1, r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0, 0x4}, {&(0x7f0000001980)=@file={0x9f5b0b489d75ac8d, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a00)="4bee23", 0x3}, {&(0x7f0000001a40)="f14290917e7158e9dcb0b5e28f75f49bac110bfdb904ee4325f375688cfc9dadba82a2f43d6e710190dd5163a3631110cc9c3dac02164e37550c977a05b1916b6855", 0x42}, {&(0x7f0000001ac0)="d0cb921c1735de825ca955478e7a9e3e1c4f424059844737bb094ce6d5e77be684d29bd9dabbcabcdbe22bac0ddb5d9c", 0x30}, {&(0x7f0000001b00)="820aea1e9b09a3ce305f717f9bf3fd3847c28d9135c0f58ad383c1e6cf28e7f24cbdeae5a81a39b87653f342afefdcccff52ac59bee6440ad7da36610fe1608b9f2c3936660b1784ff0a5ba6ec7d3e04509b627e825e873875c2a59e7db8931f5247a896541832f5de02bd507ddf169f4e5d327d5886174b162342d66a2362379dbb2aabb2cd1f24033609a4ba86323d2f099a4b1f606d", 0x97}, {&(0x7f0000001bc0)="d99412352f5a5d3ad86da738f3b6e0368f0d7f884660fa71e6cbbe8ec71ff75bfb676348c28583aee9355482dd4bb636c02251b2ddc704dd11183b857006248c7dc43a489edb014a3ebd8fb15e69bee245e37db9b714930d60f4ac19e081cf9c17f96fa0f808e21acbec73b6ee59048f9947a022c7eb4df3b331ef0a2fd091c6f6eec9", 0x83}, {&(0x7f0000001c80)="6b6afce14c3b240017087de5fe3968538faba0dfe3006227bccb0b161156c292bd7076d960d053c195bf7cb8", 0x2c}, {&(0x7f0000001cc0)="ca7aaea69f36b60f2235ec59b2c6efcfc2432b27c81d0d2b5d554021e7e97d6796efd78c85a8ead9916ca72de7b06b11154ec18818a1000e082f7cf4993a8c0b7887109c590f240c894f8c2bc4b4", 0x4e}, {&(0x7f0000001d40)="5af11817cb069b84bd07eac1105130524ebc3808bec7fa1a0e9b1ac608cec4db349cbae976db8bc088125f3d2bc40d703e972a15642a6406930c44d57ce0d81eca4fcb354bc9c86248b51efc3692327b8bb62cce33834d0b7ac9dffee86bfddc070875edf14ac69a0372905468e1a289e5337d6f4f85c6bbf6423c9b5dee591df7e56db9e3807598260af327", 0x8c}], 0x8, &(0x7f0000002140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x1}, {&(0x7f00000021c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002240)="36c95020cdb4248e554e653c57d0781c753f48877af519504a43e62e6cb5338264a9d72e2e8f05665fdd830aa0fa36511eb4831b65360f2767a93c95e8d3c462bc6210f1c1ea6cc217ce07df0177ef7004771c2f99053648bbd249ced66f750edc195c93fe8aef1f8f546c885137e2babbf4f312221b39cb", 0x78}], 0x1, &(0x7f0000002600)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150, 0x20000000}, {&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002900)=[{&(0x7f0000002800)="be30dcbb38fc7350edb95c9ecf9c7cc2e00d5aacfe0cf587bd52ca9fdea6051b98b274460a488093642edd8d88fe457341e69e3d76c00861a6aa494907bd96d9b07cbf59f4d7bf59e1b9aece56c94f34db4de092d8921170649f575ea7ff504d9df95bd8b8a4d76e1f0b2b52320d0e6c572b6b118f7287cea9a50e9ac8184527249bdfa111ecf1b97867ca0b9fce43d3127e31456faae677ccae4713a2ee0f2d36b2637dec0a4aa55dec2d34a879738fd2226f7bb33222e317dbe66544d5795e5c788e04f33194f6eabe2878414d247d4209520f4d9b4d7d1ab773bb947ebe", 0xdf}], 0x1, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x24004800}, {&(0x7f00000029c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002a40)="0254acb81b241231b6d74bd2a4050f43b5dc17d48372144c466525b1eb1ca1acab01ac6b387d954f06200317d91b8eb4cc7c9c84d8704839c59394a8815b650a458644f004fe37cb9df8aa88f94ab3e038c7c2a6c0dd0002bcd70b028da73b670fe99c39a144a4fa0cf7e52b53919d9945b47e7721948f4f7bce62e850346f3f32fdf123eb039240288ab4e68aed538e9e6669071f7bd7c2e7d9a360ec50c258b7b7580ba7dde8f36b9518347199cb818ecb3c01351fc0786c827de3fc", 0xbd}, {&(0x7f0000002b00)="613037c9cac94f1423818d", 0xb}, {&(0x7f0000002b40)="8e99b8616c0d943de43961ec2ddf97560f15c94d45bfd5debd0e77358bbffea13f21afcb3bb85f30aba5f14a729c5226eeb5db001153bce8672ade19809acc523cf62a9241c7fcd16b2cc911dc525fe07bfe4b488d34706044a5d23c230441ca0e193804d9a9a79b29268ae20d4c562339247b87072319a456703c4a7d035f0842ec98d85dc3358ed33857a9d6e9fd9c50fd8f414c7b29fc57827337c493920f159a861f726dd99062cde5b8454e7520f80c3f9fe5ea16d4937d00e2", 0xbc}], 0x3, &(0x7f0000002d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140, 0x24000050}, {&(0x7f0000002e80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002f00)="6192ad02d296f2e415e1", 0xa}, {&(0x7f0000002f40)="a94fa806be3cd9a568318627ce5f673490da8ebefc68d9c8e29ca2c047e9f3c7967a61a3544f8a0fdd568a32f8696d1900e3c1d048696c5e1dee33a5cb95d8f5e8b7c63d9f53f865e9a9090fe2ac478463be0bec0f1419a2e147f1bce4d6cebba8bfd1d5e0110ed68325e7ae5be488f0b710dfbc710677b6aaab38de634161fea389d051099372ed4c4cf1bf5dc707530c0d71b1f553c0b6705086a70b35e6dd800fbfd5ca758a29d914e9ac357b2dc440eb38c6b503258fd26b4d3c68f64828996943a82b699773ef35483e09849a498eb99e3c80c82a3cfc521be52d9d9f1d81d4416e75b384f3f192", 0xea}], 0x2, &(0x7f0000003080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x24008080}, {&(0x7f00000030c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003140)="39cc0164", 0x4}, {&(0x7f0000003180)="b5d208f2caa9191933ecae9ccdf6c8c0f6303263f931b18d5008edb672b7580e5e56917b46591a2e500c7ec61e0354988c4c1c4d61da256c025ded705a765abbab7cad64415849c245c391f1f8992649fa987d4d6d387a3e05a831d9b51261645909e3c2c35c08d90f1e09693fe409b24f2c200b6cff8457de113f100f453f1d0b5d59", 0x83}, {&(0x7f0000003240)="ce3e54a5ac62d9", 0x7}, {&(0x7f0000003280)="ba25ce047610247f41fcb448341eeecfd7c434b359c30cdfac96a62a117eb0abb27bdf2ceaf3b91ac45654a544999924b95436646b967c65f6c8801b402b818d833d978ab3054b266e920ade5ec584882b426ecb82d6272c4da3c173f07b9ed77211e5387bff22312844cb2ee495cd57b7e791690fa65d9b1f5ba17952ea3e1e70d979ad388e72463f10ae9478962a157bb2e93be858cc7326fe08f89bcaed1698fc73e34ced76", 0xa7}], 0x4, 0x0, 0x0, 0x4000081}, {&(0x7f0000003380)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="ffa4b0d0c354c754d97ff679d2603cdced5219a5b69993246e6333ef1add6ef6548be7c663ff0d8e27cc91c92a610777a020651aa69f09077f3ccdba5d1eafa3a48b", 0x42}, {&(0x7f0000004480)="001dc665b02ee64d8a15d760ecc11314656e02dbc69521852cce3c6b6715f47447f693f4dd88d7aa1aadd4dc85f0475a1ada37a20e567c364d5040a406e831c2e36901eb90bb95dbab397f6528a0a48ac0b34da22a019bbc468ecd28ba7594099eda416ea6767cb45e3dd2faa40719a5759614c35097c203d4fe3e4e0d74c105b12591535bfd3ba3fc324dbd06a671afb6cfd2f3d10419542f5a5d7ec8157525d14b399985a0af9b921f680fd398e2", 0xaf}, {&(0x7f0000004540)="b7ff4fbf26909e5aae76325227ce00b76a9809e08733a0908b646d0eafefb78d0aa5ff494553b01199b0b3987c653f77303c2ba95bd5a0ae6e02eeb07dfcd7c24ef0301ab72c1fea7fcdf7fe680a529390e53196519900f67dd417c1b546fe3f117f355b6a00f893d295d1aa81dda32fcf48ae1427c73011ecca7de7b00c13ff6c3e54dabcef8c5b9e95463486309157e112e1755a0870751b7a0af74290783ef293a726e2775a9c42256ded3df1b3fb06a8868c8ead5dabd1ab", 0xba}, {&(0x7f0000004600)="a7b3316b80b0463d7cd9d135f693e59b408cbc23", 0x14}, {&(0x7f0000004640)="9a2bb8ce7aa2fd8568576d0c30cfb94679ae34ffb62b509abf3acb2d9171f8eb8c813c97855fdc93f7444af9f60ac0515bae9711141a32d255a45e9c84f74bc8", 0x40}, {&(0x7f0000004680)="d955a5c6774e2597662b3205b5c2c282f843493ecf25ade54fcf5a8b9409cb072c38", 0x22}, {&(0x7f00000046c0)="7f47654ed94ca289d926e9ccd4911c22dd8425765da9e89953be27e2ded8fbace3b73220ac2bfaf3a3abb242f52285e885090d53199176af2dca3cd48024af76601b70c79e327b9d2f0535276678b1444aaf19a22739cf1e051df703fbbffb61da253a98d61de09cd379b7131aa723f0a742ae3ea4a2c28e746d8c32fc2ee68001a360b6d7cc3da812ba7b9a1738c08a825b9d4726480987f05729adadbae7da3fb51bc35f316b8977e87bf872808a2e484cc06ff7c08a4f2125e7b364dfcbf42580ee18d0bb7294a8d21009bf40d4719d951f8b679d813c05baeb6a0bb8224b78", 0xe1}, {&(0x7f00000047c0)="5fd58e0ecbfb9561276319887cff4b28ba862f4158bff5cfb549f0b07edb7cb743a15fa5e9382565ab01e24c0650939ee75eec51246b4652dba72aff237e3edd76ad680f2af218d658102b237be46e9db8b50c8227443c3da7623034d73d9718f918dbbc02dddcd68434bd2cdca092a003c9", 0x72}], 0x9, &(0x7f00000049c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0xb0, 0x4895}, {&(0x7f0000004a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004b00)="72ae7572e9e362f955a531390fb78a0d41781d68c320fef91ab44d51a01ef4ab84bfa5aa4a1c44e04458262db5e3dbfe85cbfcf7ac04299b17147db5", 0x3c}, {&(0x7f0000004b40)="36aad5a7ed18a946220022f8296745b87fa31f077c3536b05df6593237227fadac52cbfd727175ed45e11431369675661c196e4f73a3811f72948f6e46ebb99a2a5db248f540c29b6380af7d98d0873039f7e73061eabd055b66c98077fd1d8c65d4604f569be76d6f5c5257f270ea65c0cd957529953c9cef85a0881320aae8c43b4ac7608c49a55e86041a49833474e7b5ff336a0cc989492329e3446904b50b52fffc1eccf2ca87f5e4e8a3752058f06314fb53b5f1085c914866942be4fa8ede8bed76f07a15fca10153e766d9a4ecfc6ff479d553a95aecc44df6ba99f17d752d3d3e35634ac08e02d1485f3e31", 0xf0}, {&(0x7f0000004c40)="f009fbfc0dcd29d811fa2ce633b5c46e248761e93e3b171dc806f71cdf5257940ccea73704b4e3457458d937be6c0c60afd81806b9ebf8e9fa1b79c8e1d480e2844d2543626cef09bdfc66849fe101a49a1ae7df04febe5177fe63e4248f72e59a49112150f87f6f1d1bfb6edbcd40e8385bbfe212b8321dcc23efc1d1210f53933d643f0b1f897418f8fb0e1f67827d3d1a8b1768fe02eebe26428c7b372a2e641fb1249548a63d700710", 0xab}, {&(0x7f0000004d00)="ced0f6f05229849317e6aff2ae78b421f1d614749782c82fcfd79a417afd43a683004720722e9af14334442366778371a9b4f990e1ccdd3efa49c94509b31f750f6586be445ff6051fbcc4683dbbe4a22e4cf7f508a4326f8c9ec5d2ec2888d056e6585cf8fb5cff22ac66fb7071", 0x6e}, {&(0x7f0000004d80)="43334e7fe35fd8e467111d47e4595100cd06f5b10a305a5a157f84106444ffe52ac973f816ffd39f453a9a396d746694258dce696a23a6c4153772df418324acfd9c461f117a1c133c06859d541acf651ad2b3f35744501b78998560b3ee7eec48646e926f3f09126454efa39c6e23ec0cc604b25285ed34baaaae6d612b39d6", 0x80}, {&(0x7f0000004e00)="9bab8afd8d7035aae0ddb6d9e97323a5e14c8716f823d6418f41e5ed55fe31e0ae5884ea5d975eac103bde8882402cb05c05f1248126c90b2bdfbe113cf829dd5d0e1e1f92cc4765cd4e3bbfbb701586d9862b644214934c7a7d9bd57442cf9287cda91a2e02012d6cf2c637a12b6ac3e8d22b275375413bf24419ebe551390d4d0057ed47894191e06bffe6676eba24c995df00d9374f78f7ecd056c0f447db495a641d1ea80b391d01e2ba2d2268ffd742d78ed6708e99d96a3ca312842f88cb76374d7ed610635813f74893d185fd2f5d4c923adb42fda27ca6726372e87a", 0xe0}, {&(0x7f0000004f00)="28968fd072bc1e20fadf9c20", 0xc}], 0x7, &(0x7f0000004fc0)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x10}], 0xa, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:06 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000c00000000000000000000000400000000000000000000006265000100000072c78dd668af9cbc109357ae95b1c8c595ee01113f2b27de9987e9e6f31122ca65fa17cdc0918c16364c84b3b97be9274a903f396c64235150d629fa55a8b2354d0cbf8a3602662a597df8ac123ea05aea7837d51bb14dfa230bcdd0a2920beaf99edcd2569dd470e178e4654773ab179686e84932fb71ad938ae43070b7565c82a8f1cb7e9c305d5924f70c523b5623890f6c06844bcb47ad"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) pkey_alloc(0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x83b) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1029.457773] FAULT_INJECTION: forcing a failure. [ 1029.457773] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.487929] CPU: 0 PID: 20962 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1029.495860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.505220] Call Trace: [ 1029.507817] dump_stack+0x1b2/0x283 [ 1029.511461] should_fail.cold+0x10a/0x154 [ 1029.515627] should_failslab+0xd6/0x130 [ 1029.519605] kmem_cache_alloc+0x28e/0x3c0 [ 1029.523762] __kernfs_new_node+0x6f/0x470 [ 1029.527919] kernfs_new_node+0x7b/0xe0 [ 1029.531815] __kernfs_create_file+0x3d/0x320 [ 1029.536319] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1029.541002] internal_create_group+0x23b/0x7e0 [ 1029.545597] lo_ioctl+0x1108/0x1c00 [ 1029.549229] ? loop_clr_fd+0xac0/0xac0 [ 1029.553120] blkdev_ioctl+0x91d/0x17c0 [ 1029.557011] ? blkpg_ioctl+0x8d0/0x8d0 [ 1029.560900] ? trace_hardirqs_on+0x10/0x10 [ 1029.565149] block_ioctl+0xd9/0x120 [ 1029.568775] ? blkdev_fallocate+0x3a0/0x3a0 [ 1029.573101] do_vfs_ioctl+0x75a/0xfe0 [ 1029.576911] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1029.582544] ? ioctl_preallocate+0x1a0/0x1a0 [ 1029.586977] ? security_file_ioctl+0x76/0xb0 [ 1029.591394] ? security_file_ioctl+0x83/0xb0 [ 1029.595813] SyS_ioctl+0x7f/0xb0 [ 1029.599271] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1029.603258] do_syscall_64+0x1d5/0x640 00:26:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000280)={{0x2, 0x1, 0x3ff, 0x540d62c0eae3c26b, 0xea}, 0xfffffff9, 0xff, 'id0\x00', 'timer0\x00', 0x0, 0x3, 0x200000000, 0x3f, 0x10001}) wait4(0x0, 0x0, 0x80000002, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "cb820d21ab33ad38", "53ba60f5be4ac657479b7094bc30ac32", "a80239ca", "71dc293c31367b26"}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800eba7c4f9255b3157630000000000000000000000000c00000000000000000000000400000000000000000000000c00000000004000000000000e00"/74], 0x0, 0x4e}, 0x20) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1029.607163] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1029.612366] RIP: 0033:0x45ca77 [ 1029.615557] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1029.623285] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1029.630570] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1029.637850] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1029.645131] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1029.652624] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1029.677872] BTRFS error (device loop1): superblock checksum mismatch 00:26:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0x6}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f00000000c0)={{0x2, 0x0, @descriptor="26fd2cdd068cacc1"}}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1029.722110] ptrace attach of "/root/syz-executor.0"[20982] was attempted by "/root/syz-executor.0"[20976] [ 1029.746824] BTRFS error (device loop1): open_ctree failed 00:26:06 executing program 1 (fault-call:0 fault-nth:17): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1029.872558] FAULT_INJECTION: forcing a failure. [ 1029.872558] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.884755] CPU: 1 PID: 21010 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1029.892670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.902037] Call Trace: [ 1029.904634] dump_stack+0x1b2/0x283 [ 1029.908267] should_fail.cold+0x10a/0x154 [ 1029.912765] should_failslab+0xd6/0x130 [ 1029.916739] kmem_cache_alloc+0x28e/0x3c0 [ 1029.920886] __kernfs_new_node+0x6f/0x470 [ 1029.925035] kernfs_new_node+0x7b/0xe0 [ 1029.928921] __kernfs_create_file+0x3d/0x320 [ 1029.933330] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1029.938000] internal_create_group+0x23b/0x7e0 [ 1029.942614] lo_ioctl+0x1108/0x1c00 [ 1029.946330] ? loop_clr_fd+0xac0/0xac0 [ 1029.950223] blkdev_ioctl+0x91d/0x17c0 [ 1029.954106] ? blkpg_ioctl+0x8d0/0x8d0 [ 1029.958070] ? trace_hardirqs_on+0x10/0x10 [ 1029.962317] block_ioctl+0xd9/0x120 [ 1029.965932] ? blkdev_fallocate+0x3a0/0x3a0 [ 1029.970268] do_vfs_ioctl+0x75a/0xfe0 [ 1029.974064] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1029.979807] ? ioctl_preallocate+0x1a0/0x1a0 [ 1029.984220] ? security_file_ioctl+0x76/0xb0 [ 1029.988619] ? security_file_ioctl+0x83/0xb0 [ 1029.993039] SyS_ioctl+0x7f/0xb0 [ 1029.996410] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1030.000402] do_syscall_64+0x1d5/0x640 [ 1030.004286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1030.009456] RIP: 0033:0x45ca77 [ 1030.012628] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:26:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1030.020330] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1030.027590] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1030.034852] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1030.042104] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1030.049361] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1030.085470] BTRFS error (device loop1): superblock checksum mismatch [ 1030.136063] BTRFS error (device loop1): open_ctree failed 00:26:07 executing program 1 (fault-call:0 fault-nth:18): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1030.229207] FAULT_INJECTION: forcing a failure. [ 1030.229207] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.253904] print_req_error: I/O error, dev loop1, sector 0 [ 1030.259982] print_req_error: I/O error, dev loop1, sector 0 [ 1030.265891] Buffer I/O error on dev loop1, logical block 0, async page read [ 1030.275034] print_req_error: I/O error, dev loop1, sector 0 [ 1030.281071] Buffer I/O error on dev loop1, logical block 0, async page read [ 1030.289977] print_req_error: I/O error, dev loop1, sector 0 [ 1030.296000] Buffer I/O error on dev loop1, logical block 0, async page read [ 1030.304786] print_req_error: I/O error, dev loop1, sector 0 [ 1030.311417] print_req_error: I/O error, dev loop1, sector 0 [ 1030.317502] print_req_error: I/O error, dev loop1, sector 0 [ 1030.323737] print_req_error: I/O error, dev loop1, sector 24 [ 1030.344698] CPU: 1 PID: 21026 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1030.352619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.361977] Call Trace: [ 1030.364579] dump_stack+0x1b2/0x283 [ 1030.368218] should_fail.cold+0x10a/0x154 [ 1030.372375] should_failslab+0xd6/0x130 [ 1030.376354] kmem_cache_alloc+0x28e/0x3c0 [ 1030.380506] __kernfs_new_node+0x6f/0x470 [ 1030.384658] kernfs_new_node+0x7b/0xe0 [ 1030.388547] __kernfs_create_file+0x3d/0x320 [ 1030.392968] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1030.397650] internal_create_group+0x23b/0x7e0 [ 1030.402238] lo_ioctl+0x1108/0x1c00 [ 1030.405988] ? loop_clr_fd+0xac0/0xac0 [ 1030.409873] blkdev_ioctl+0x91d/0x17c0 [ 1030.413757] ? blkpg_ioctl+0x8d0/0x8d0 [ 1030.417643] ? trace_hardirqs_on+0x10/0x10 [ 1030.421893] block_ioctl+0xd9/0x120 [ 1030.425515] ? blkdev_fallocate+0x3a0/0x3a0 [ 1030.429818] do_vfs_ioctl+0x75a/0xfe0 [ 1030.433612] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1030.439235] ? ioctl_preallocate+0x1a0/0x1a0 [ 1030.443658] ? security_file_ioctl+0x76/0xb0 [ 1030.448063] ? security_file_ioctl+0x83/0xb0 [ 1030.452473] SyS_ioctl+0x7f/0xb0 [ 1030.455890] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1030.459858] do_syscall_64+0x1d5/0x640 [ 1030.463744] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1030.468920] RIP: 0033:0x45ca77 [ 1030.472101] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.479843] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1030.487106] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1030.494409] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1030.501676] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1030.508941] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1030.544333] BTRFS error (device loop1): superblock checksum mismatch [ 1030.591231] BTRFS error (device loop1): open_ctree failed 00:26:07 executing program 1 (fault-call:0 fault-nth:19): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1030.707027] FAULT_INJECTION: forcing a failure. [ 1030.707027] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.721821] CPU: 0 PID: 21041 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1030.729715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.740370] Call Trace: [ 1030.742974] dump_stack+0x1b2/0x283 [ 1030.746833] should_fail.cold+0x10a/0x154 [ 1030.750983] should_failslab+0xd6/0x130 [ 1030.754975] kmem_cache_alloc+0x28e/0x3c0 [ 1030.759144] __kernfs_new_node+0x6f/0x470 [ 1030.763292] kernfs_new_node+0x7b/0xe0 [ 1030.767185] __kernfs_create_file+0x3d/0x320 [ 1030.772029] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1030.776708] internal_create_group+0x23b/0x7e0 [ 1030.781294] lo_ioctl+0x1108/0x1c00 [ 1030.784945] ? loop_clr_fd+0xac0/0xac0 [ 1030.788837] blkdev_ioctl+0x91d/0x17c0 [ 1030.792729] ? blkpg_ioctl+0x8d0/0x8d0 [ 1030.796618] ? trace_hardirqs_on+0x10/0x10 [ 1030.800949] block_ioctl+0xd9/0x120 [ 1030.804568] ? blkdev_fallocate+0x3a0/0x3a0 [ 1030.808881] do_vfs_ioctl+0x75a/0xfe0 [ 1030.812835] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1030.818457] ? ioctl_preallocate+0x1a0/0x1a0 [ 1030.822953] ? security_file_ioctl+0x76/0xb0 [ 1030.827354] ? security_file_ioctl+0x83/0xb0 [ 1030.831886] SyS_ioctl+0x7f/0xb0 [ 1030.835406] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1030.839396] do_syscall_64+0x1d5/0x640 [ 1030.843383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1030.848718] RIP: 0033:0x45ca77 [ 1030.851905] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.859645] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1030.867031] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1030.874392] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1030.881666] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1030.888934] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1030.921107] BTRFS error (device loop1): superblock checksum mismatch [ 1030.971126] BTRFS error (device loop1): open_ctree failed 00:26:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:09 executing program 1 (fault-call:0 fault-nth:20): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:09 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x8fb95400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000009e7587d58ba3029c576000240000002400000002000000000000000000000c0000000000000000000000040000000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = getpgrp(0x0) getpriority(0x1, r1) ptrace$setregs(0xf, r1, 0xfffffffffffff800, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) timer_create(0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000280)="dc11d600574eb9eee6a7ab79b581e656e048117917350bf5297cec6c2d610cc441ef8a81e1776dba578f19f004182f5ec929a0d5ad7088cbb3f2780b9802d0aa11acded0f931123912", &(0x7f00000003c0)="514254f68337161b67ab41a6256d21eecc883997776dec17a86552fe5ddb6c6a8b7ebfbd3abefccacb67e1067d1261dc00009c8bb495147d8b740001000000000000bd97ef00babc9b92948ecb8d6a0a8fe1a593000000895f187aea0000871911eb29e72d0dc96c2e78096782846788fe701e66bfa40d6c7871cf328e192da8898321f3d3b347b9e58db65b5a3f502b675bcfa6e53b35bfa36ca27acd84a02635e18f7fc48d7ee9ef34b6b802429114a7c7cdb63b262b4e1cec2f236795"}}, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func={0x4}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 00:26:09 executing program 2: write$9p(0xffffffffffffffff, &(0x7f0000000200)="7d7f3c58227d165f8942acc85ef27b827fb614664e052352baa502b72fcc41d25c06f37091a40280b90e11df41d0c1c044e0bcb9b25d57a630730f25b3fd222074ba4fb0f89d9a94616c775c78e3ad942a59351cbf27b1540e7b1c22ce58f5f376f7d1e5576ff41213f740e6b6e47ec6e36289f2ed0f28555c334869c65128618f3594dae824dcc191837e08bf43c824dac3cd20ca245b68088a7c689530dcc4cd214bdfb0ba6009fe9128dc9adc011fce535c0d90cca73431f33819cf4a7d593815d8ce9202721f435b0d0d18bd11da40d3293a01657dc5f0ae1d2089cc32e078067a5803", 0xe5) r0 = getpgrp(0x0) r1 = getpgrp(0x0) getpriority(0x1, r1) ptrace$cont(0x1f, r1, 0x3ff, 0x81) getpriority(0x1, r0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0142f2881b60d247a6fbee0000000000003686c78d2b640000000000000000001deac9a632f937"], 0x0, 0x3e}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) personality(0x10) tkill(r2, 0x33) ptrace$setregs(0xf, r2, 0x7, &(0x7f0000000140)="98620e1084f58f2cca67b039a969c2acc8196d2e6de2aa511ba3a02f1430017b98f909ccfd600d47a1d2e403d6b49e7607e75f7ff7b3481979fe4f0d3fbe772572d0b7ff878a7c8dcc689c3110967abedb4e3d0c007d64a6d9") ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1032.465715] FAULT_INJECTION: forcing a failure. [ 1032.465715] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.508041] CPU: 0 PID: 21057 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1032.516268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.525644] Call Trace: [ 1032.528265] dump_stack+0x1b2/0x283 [ 1032.532009] should_fail.cold+0x10a/0x154 [ 1032.536425] should_failslab+0xd6/0x130 [ 1032.542264] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1032.546955] ? dev_uevent_filter+0xd0/0xd0 [ 1032.551215] kobject_uevent_env+0x1fa/0xc50 [ 1032.555659] lo_ioctl+0x1177/0x1c00 [ 1032.559479] ? loop_clr_fd+0xac0/0xac0 [ 1032.563388] blkdev_ioctl+0x91d/0x17c0 [ 1032.567302] ? blkpg_ioctl+0x8d0/0x8d0 [ 1032.571214] ? trace_hardirqs_on+0x10/0x10 [ 1032.575739] block_ioctl+0xd9/0x120 [ 1032.579530] ? blkdev_fallocate+0x3a0/0x3a0 [ 1032.583874] do_vfs_ioctl+0x75a/0xfe0 [ 1032.587699] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1032.593347] ? ioctl_preallocate+0x1a0/0x1a0 [ 1032.597909] ? security_file_ioctl+0x76/0xb0 [ 1032.602513] ? security_file_ioctl+0x83/0xb0 00:26:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @func_proto, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000280)={0x6, "aa501f84b4cfaba5e66924d9c26229eaf0960d7b0a151e012657686e59664114eed73982912c6f997259637becc7ddbf193a41637f31e46a7352b15609053c85", {0x0, 0x7}}) r4 = getpgrp(0x0) getpriority(0x1, r4) socket$nl_generic(0x10, 0x3, 0x10) ptrace$setopts(0x4206, 0x0, 0x7, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:09 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='jdev=.']) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fcntl$getown(r2, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1032.607272] SyS_ioctl+0x7f/0xb0 [ 1032.610833] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1032.614830] do_syscall_64+0x1d5/0x640 [ 1032.618743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1032.624111] RIP: 0033:0x45ca77 [ 1032.627394] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1032.635347] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1032.643125] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1032.651011] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1032.658386] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1032.665840] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0300000000000000000024002c922400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000200)=0x68) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) pause() ptrace$cont(0x7, r0, 0x0, 0x0) [ 1032.714031] BTRFS error (device loop1): superblock checksum mismatch [ 1032.734113] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 [ 1032.760899] BTRFS error (device loop1): open_ctree failed 00:26:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev(r4, &(0x7f00000035c0)=[{&(0x7f0000000140)="6de005b891a6120cb52abb59eb39dc45a5836405a691ece953fa2603dd6dbc21c9bcf557e348a11ef68709ade923b15b748384ee430b623808d21ab25db724c8ce866626e4f51a3a12b040f52584d71b0a5fe73dffe94928763edb57", 0x5c}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="5b0fc5726325137ed28b12a50826758447d5f537d0d5548e9b19b9369e0532e5b16879df74792a405b4609b4aca92207de5d5de92632b88b1d037818f6bc73afd4160fb870dd9da7db4f1222fc24f5de822552961cd93b78bc5c5c34e09af6951154382cdce4b580fdb4c4604601598fea47d8161d35458a4e4deb25306fd38c9610012096916b51e0bed302621759e11eca6e9caefe2c7039e4c4db2441156e520c2166b2", 0xa5}, {&(0x7f0000001340)="7de9853f1e49e717bf827f2e592f205a3ee4d40603257c5e0b4fe3895abac3e5469f35c14eacc9e6fdff722d62e1fb9e9aa81386cc1bf2a9b4faee6318debc7d085e7677812b78ce0583b246edb061a4f87ab6bbd6bdaeb0be3f7172cd51a38f7fa22dfba1a3bf83493d5f19279a8ad08e0f8ece436869c5379eb37ec79912e6f8bb59ab82b34bf8a8d8344eb9f49d3348f412ce4f3a599319cd17f4f8b7f8f758394074f3144bbccfd27d2c53cfc54d21681603b793fff160be1e960574f2c01b3d", 0xc2}, {&(0x7f0000001440)="cc3b299f4775035bc8c0c0afba2184c435d06c71e2dd7e94d0c6ff0ae3fff1eabde97ede761b47267c9a6cdbc96e353b6e726cc0a4ad3d9cd5723ea5c527ca33d617558f80fdfc540a306d6e82fd42b6fafb15d160d224633dd7550efcd647757a20f7902760feb689e4907583f47c83f27705cba4f4a2671ab7bc73dc834a361da969aa4403cbca76b3c17f2dc26c6ad4bbad9d04a2faa22043a62ca99b2f3e61f93d5e9a1e55e89e987dbce48d51b422e7ec6c4b0bf4193b08d94c334e231fa2b48c2f2e5f22ffb7d8378fe990b45fba632d6ef772fc5ee084ed47c97de7f5f8e1165b3462f70b196e99415deb0e83eeb9a7cc9444e152674d98d9340e1e292d1847c756f6ee6b59038edad573a8bba2b2ed921826e97c86081b06b96fce2de63cafcacfcb04b04d5be30283fcf5ae5e6cbd95ee2e8b24c42475bceeec6b59304cf592123ac916d74e2e9a01f907642a6b29a9c8acdae1098b2e2232e243431089e65ca976ef59a8c826a3f92106b74806b6079147f78f22dbc44f48855694dcd496cf3a40a2a1948bf0a037b7a78b4c8bfc75cbabb64e393930ab046ce1b651ec7a301d32fc29c27a818b01b09e55bbc0058d4124780fac83de1df1a6dbfe7e09e4ecdf796ed614d9a38260ba1b3f124b68861e927700bc35e196056012dfd78869b0213e5fadbf847c68fe8453a4a3a8a056cca73048afa9ed3c6e598db2437103e42cae6c7bdd38dba76702528793f250e57bd4bd877d40fb493381f65b069b5ac5c666e0dd1aba51101987be088779567de1c3c4bba944b31d43f7ef0afa1a3c90131a825ae91246ddd3f1a4fe5822adb4b0a93f3e09986a6ca4b769d4a0530a701ecb08a2a1ca3ae843b7a679147dfbc83a270bbf1fa8d309a2eb0cc4a0c6e42d22d96e73298eb78ebe7dc0c40649943a7d77dc7813d230b5c702eb7da3a11b7c73c700c07fa7a7b2a84723dcb266beda024295390018897e6148251875b2512ded40db02f43df861116e29ce7584d488e081e1898ed04c7f05aaf038e97bf5ad89e95ceeb37db40e5972cae79a84266d531be080f166b026032dc3b59ee1073a74218fcee12d65d1c9c00db0992fde4ff021c7a784b6840ff68b22f43c1f227e449dd37460b5cfe5dae8e0b0bf340a5238c3c4c06108011b8d007cb6ea9ed48bdfd9cfdd2943851008527bddc3a1e7d0d5f46deaa881eb7aecf21bd1179fe903aa9f14994197723fe04c720c868ee5239608478fabbdd0f45711e48db6c347ca943ed8581a03aa5606989a6a315e5cd25caefd33979f4aa67b29d7f110fcdca775468db4c7426c31aecf6615e9cc4be3294da90a4cadc9da95ec8a336598c36750f29b3e0126bb83a067ff6e1f2cbae374e4cffddeb88c40e7670206a20c540ec8822375147e718437ac353cc3e5f1c15940389628e428b97b3b281cd315b5449f5045a3fb72f1b2d7a2837e76a46f495fed313c51c04a5777a5be8cba7e1bbdc85ff7dc812738e4c911cb3540a4a54010bc9e8fa9414cd545ecc7b73928e42b9098718444de70ff9fe1a5205f8af4a1320f217f86177ff46a9604bf4fc786137f41704a238429537d3e79aec4678565d7682792da3de0a6c1d6a879a7e153ac8a77e66249fccde97c161a6c060c40298e59fa829dcd20ee4df5a294856dee6feddf09e745de7c1d9720283013beb08d51b484964d31ae11e918a30769f33c6aaf32ef4ad487960d913b669fb06061fd8f5cb1bbe6d5305e6fac2b9f340359ddbce358f98b96474bbea82b094f3747d186a5fb364844333986222ad8dede6264895901b73dd096d1009e17da8392efb886348946bb84f152fafdbbf831c7d15c893af025794a225bc6a07334108f06fc3faae886adcda63d8fb949b4b136522f2a6cab510c5e50a64710d3623c60953847711862ebf505742d6297440267c569c3c2de03acece949b477479eef2d16763447e9f500a8931fde9f33b5cee7e5ca03abdd8748aa22bb8ea18768aeb1338c704f37486a4a175aeaf8cd040bdb9720025d3724c523de2940c8d366366c3ec3645ac9b1693158680fb3f23fd0fdc15b2c654ec62ec0718f5e5c2429954f17d372f7c19a07a47bee1e76c91c62f72bf53c67b4ccbe912b36f709175cfe91d6b68bba17f098d63cc374969a3c062cdfbc17145ac279b476e208ec3713a42ac28bb232644d6407aa2bbe8bd17d7246f940aa22738b6d770791b9fa6bda25ecaa46415937cede058a09c3c9a61640649dcf7f621ffc041e52ddeac4f50d9aa2f7ac706203d3353517cbe1702ca777f1a435888d1414d5dca8dc16b0e10de871b12456f4fe2fc3f64461ee7304011d0aeadfd52c236a1c398c5c31a9d5735a7427f687a13a87c8947f68a75659c19092ddc424e2d37c26db4ab73c90192d8fff7dca3024ddbe3b451749bf4587222ebc80bd05d5a4ec369384d5a78961b6a7566399c353f828040f66326506d5cb0ae9fca14a59590a97d58ef70438e3d029a321ba4f36ea519adf7f782c999e9dc9ec01c49595a25cce15f4d4e39cc6adfab6b930719caba7f428c65ffaacf4a107e19471bda17c38d4fa143c67242a82ddd344889c5cdd59609dd6773ee59aa0de7fc967299a52c365255049b2efd2f64e873524757a9868413857d800149dd4ebfc078105711940a3cc07186af94baf3967a92a6a12d4d098c62fa3d9d1a912d4b9ce3a5f4619777ae5520a0262a7149023072a89beb2d138c3761c167a5e86aaada4526333f247e5193bc7797bb9952126cb25353d44bf722b4f781ad3d41b945568408c0e2789aa248eccc106e4764f4432b505eecaa595cab36275da3f2f9d8c206644a0db40d227caf5d4ed6e847d3e756cf182a1c355af3078f0d13deeacc1c32317865baf747908c041ff00d40a08b0661e5e470b8d267e0387d5dc96abbc12e696bf62d96866b724bb1fd589f01eb407687e3c84dd50e832b330408d7909c981f051289cea8cd4cd8055429831b4355521418aeb99a1e9c5df4c2bd9232d444d38d03c111cb81a60c5382842feae87b9b369be7d474ef7c5a33c76bef633a8544cdd9e4148a058e99d44abcffe7f0010949615f77d04ef15d3a979e8782ef3868ca9bab7ef8aa061e10c87f829a25914b46606287dfde51c37a6233187c55b53b249511a9b1a086528fce0bd8d457abf348a3eea80ef857d3fc50701813a2308e12959e7de2127e40c4a4e99a4c583a8077f28a4d5528f724c2daeff175a029a4ec5fec89ea0676c090afecdee298bf447f54496f58cc2c706c9212e908ac6b53bc34b7d9f11fc258de98c83ed0e55d53a8ee867e8cf991d2a91ebe073ecc0ff61c189d4596b48ed6b97016a309ac319b7dba3c37b6a0500671ef30c853279caeac39d59008d75cc62a5fa268fdc5eb5e9e378313ae317150cb9d92f23931f455b30a293785c8b5feacdbe54923abc45b02a36ffdf1e1796ce38e48a4ec8e72aaae7597a1dce4ea104a69fc770ad5268002511fcef4762a1757ee073f431235e85cda7aaf485154f1683555d9830f0c566861ae9e1cabde137d20eb5775b80d9064d01b8d0d2f987e0e7d997258965adc694fa91aa553e3d5f6bd0f8474817e7dbfac70dbd101909ee05c3cf25e27f37d7938471f4ed188240dd259322576917026f7eefbb845883ceeb407173c33fcba40668e04852747100cc192a100e749a7615cfba8eb3c46d0a9915681fe859b2810285df848ae438bea885ad2bf4bedb9f128a183c842b46ff67f3fd143598972931cf2b807e91fca23e3ca5e2a2c2f4744cbce097f107d335e243ca4ed89b88c498b47fe4618e3e902b5a385d5bbbad96d9c6218bb4eb98ec10d0153f841d096b35d2f31b06932ded3080c3f5b4fb8a383d372eb40aa828d99dc0df227cead6c8444beff8ec4bb98c8c414c9140843ca204c8628a39b45b25e3a10d35776b146f1b457ebdbfe8cd315acf51c6180ff156814bea1c4bb61f49e763fa9ba05ccc4de222450aa22d51af12364a958036328128ae208bfc53407e219bb2d89c169da2415afede41019848d6ecc2ac96cb21f4fded47026f3781bc4e66bdef94b67b1a9eb9a40d1e25119bb9982cc32182a7777fca247febf6ed42bd7573d6b7e806d0e4a97fa4ff4c311021968387daebd45b75af6e3d7ca41fe52ec229b43877fd825cb3a5af300e316420c3b6b60fd7fc4a4d6c0eea2c4efad591958bd3217573883a9c428c90b452b7df1c5648b84f08cc098ed38091d3f5d3e757109f5369e46eb16f7111cb1fb5e1b3cde47242c146066ad8c44b844c35874ae0d3864d863567d903a780a2d082930a6df0d61ca116fbc996634d0b60ed74d0213fff18811016677d3a317fec2c9d295a582bbeffe29af58d17ca20f243d4056fcf7a85459cb99c128fea49dd8a138dd6120e58751ceba3f92ad1d8c9e27f226e114b114492b5ee8f989c40ac96ec8d47ad05077b9275e2ac77b5262714165e89be0f43595a3bfcf0bf12976e36cb685098ca3fceeb754fd36504fd821a1c51930946c7a58fdbc456f8c1b2eea4ebff58d33728d3ee1251174258749e18cb7a88e39f10c158fed02cf099cf650da25b3ec07f91fd14861352d9c6b7d7b4baaadd318ce14f783a9c340e51128e75340f8d3ab26247dd312b910662189f5498247d1bbd0eca85debbeabc26dac2dc60e2833e2f42fb1c0e2dfa8e5b6c3bbd936420ac74f4250c4bcebcb269e0394e1ef59416f3faa3ba4d4d963244daa7c6ca5e097dd51694c826e5e4850415d97ed015510110ffc2e8a082fe9dc99ea4036eb49b0c89796de5383122b7eab9a6fa3c4e73342a5b039a1301d8ace35360f67d5087e24e61d4c8749827b719e277d7264da81e3e4575db82e91c7cbb65d8ec58661b2834e1dd702ccf4db2a60596cbf109133fa012e8998dc90b5967f834aaf352bc4867eea4ee8dccf624607e8539d164a74b0522b739d8c9f4abdc8fbda8ca18cf14776898cef93093f7d812e9e7d6502e640b77b6abeeea0b728bf63174a4f73941732a5fca3ae5d04137704a04745bdb342b940a15d34bcad5e974d4986df56d5660a4b68357ab70871f10bef29cb0ba6864c3fcf216d9a13d433dd60c36750533695cdf116bbcbfa7fe648f897998437cbf965c9b33ffaa3009504a61c9b0e8d84e963529c1a3297f3f9921380ddba571292b8f69aecf946fc24ba61bcb5e8e734cab6b1902913b0a2bcf80fd20d8a9b2a14d436ebe01aff2d70c264cdc961d23a484e12f77947806c599f0eb792e782981aafec91426fa1f8b6fe815ed5f1b5f51e4a49e881d61a89a148e20373b00c150e2801ad03943ab4b88939c975b22b68e5e7cf335c98906434ac688101ab1995446530d1dcd9597f55b2d0638695a752cb107916f45e2cc25799b1d73fcca716a4618721b522729b5d589157efd3e7a44eced09e5003b63a44e8277f3abb6ede85eb83d97a984373ff6c5799d79e1474ab43c378f4be8f350d1b20b1cc4afb796b13a103cfcc321bf9db927adf6b3008a891c3b571dbcd00acc2cab434def181a4ab34357bc3285eb7b56b59c2d8819654f37db376b82fe50fc99c4105f74816eef65b96798c380e4d3964a5c29557ec935166a54a287b408b18bf6612d972d22676c81b1763142a56a9d5ea0143b02a3ef8f37fb37dde4d8316a2464619445ba547fb89f61c944fbfa0a0c71be1e4e2224abf5b2f8f15c8ec35fb9e93f7960fb043afedc5145456c1b371eef2c43e57b32b780dd6b7f3c9d8b271e104ca9fa", 0x1000}, {&(0x7f0000002440)}, {&(0x7f0000002480)="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", 0x1000}, {&(0x7f0000003480)="4523170263b47cd020f5245401b6987fa1f4fbfa07d4ef1bdc845e440093fa1a3f29a8f8c115ba085ca4c6d222554b18b88ecb9d35bc8124a3643c27ed6e84280d04b36e61ee766564ba212691fbfb96bb132af63377638cb843fbebd52d9022305b6980ff12368abf6d97396ebbe59fb27c66f7ef51292103", 0x79}, {&(0x7f0000003500)="6adcb8a51294dccb68a4d0604f1c119d4b18714e7f7c02cd72bb260ea703426a1c5fdab8bfe6f3b294a005f403ed94c49eedf3c7938d3d02cf1bc095dc0083729e85f389c8d55a85ae3184ce0b944b1f6bf0e26f750a64c2043a163e2caf14f1aa7ba986e626075f3409d8d0044986facd2929d580b7b00a5194f524a329e0f086e132c06d99cfddbca78581c80cb3d08f16c708ed6ab0fc0cbc3d85", 0x9c}], 0x9, 0x0) 00:26:10 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) recvfrom$packet(r3, &(0x7f00000000c0)=""/87, 0x57, 0x2102, &(0x7f00000001c0)={0x11, 0x2, r4, 0x1, 0x6, 0x6, @remote}, 0x14) wait4(0x0, 0x0, 0x0, 0x0) 00:26:10 executing program 1 (fault-call:0 fault-nth:21): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:10 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) timer_create(0x1, &(0x7f0000000240)={0x0, 0xffffffff, 0x0, @tid=r0}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800f500000000003400b4f89d29b21f8b6c00ebff0000000000020c000000000000000010ceab0400000100000000000000000c00000000000006000000000e00000000000000000000c42c15de704c737c34f56289f0ac33b0e4962b9be08af9dcffa3d62f5ed01685b3a24b9ace81cff8cf0000000001000000ccc82fbbd0db1010ea524063ad37fec82a598c724300000000000000052c9bd6067f7245e68095e5f71440310f8459f506abedeb6216095c2ef1f13ba3972c9461df"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000140)={0x3f, 0x3, 0x4, 0x1000004}) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1033.116437] FAULT_INJECTION: forcing a failure. [ 1033.116437] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.130377] CPU: 0 PID: 21119 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1033.138430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.147885] Call Trace: [ 1033.150492] dump_stack+0x1b2/0x283 [ 1033.154274] should_fail.cold+0x10a/0x154 [ 1033.158441] should_failslab+0xd6/0x130 [ 1033.162429] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1033.167110] ? dev_uevent_filter+0xd0/0xd0 [ 1033.171353] kobject_uevent_env+0x1fa/0xc50 [ 1033.175838] lo_ioctl+0x1177/0x1c00 [ 1033.179574] ? loop_clr_fd+0xac0/0xac0 [ 1033.183478] blkdev_ioctl+0x91d/0x17c0 [ 1033.187466] ? blkpg_ioctl+0x8d0/0x8d0 [ 1033.191731] ? trace_hardirqs_on+0x10/0x10 [ 1033.195991] block_ioctl+0xd9/0x120 [ 1033.199627] ? blkdev_fallocate+0x3a0/0x3a0 [ 1033.203963] do_vfs_ioctl+0x75a/0xfe0 [ 1033.207958] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1033.213768] ? ioctl_preallocate+0x1a0/0x1a0 [ 1033.218216] ? security_file_ioctl+0x76/0xb0 [ 1033.222753] ? security_file_ioctl+0x83/0xb0 [ 1033.227175] SyS_ioctl+0x7f/0xb0 [ 1033.230679] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1033.234672] do_syscall_64+0x1d5/0x640 [ 1033.238580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1033.243938] RIP: 0033:0x45ca77 [ 1033.247338] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.255145] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1033.262422] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1033.269705] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1033.277110] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1033.284698] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1033.318933] BTRFS error (device loop1): superblock checksum mismatch [ 1033.351848] BTRFS error (device loop1): open_ctree failed 00:26:12 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x8, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8000}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x3c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf469}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffffd, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf2508000000401a3b5fd3b250dee07b6df750a3da10275d895aa75622199fd4b96a875cae75a7a22cd2638a66dd6b0172980c824284799eccea2bf77768af1686a542c9b9100860dc1aeedf70942b255dad8a35a4f4010385c5aac7b4431c04169bc6c2c025fccd3d6708516e58b1907cf95392c7a553d7a7c304f6b2ed6966830ffb31917b35"], 0x14}, 0x1, 0x0, 0x0, 0x40040c1}, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:26:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bind$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x1, 0x2, 0x1, 0x0, 0x5, "35fba8d4626715ecd599bfe43c5fe2ae389fb9f8f8907518769f2dd358662f4dbc898500a2546a10685fdd737745795a2a1677ae91ac57438c9fd58a9bf2b6", 0x3c}, 0x60) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:12 executing program 1 (fault-call:0 fault-nth:22): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x5b, &(0x7f0000000140)=0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1035.473935] FAULT_INJECTION: forcing a failure. [ 1035.473935] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.512618] CPU: 1 PID: 21143 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1035.520554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.529925] Call Trace: [ 1035.532537] dump_stack+0x1b2/0x283 [ 1035.536194] should_fail.cold+0x10a/0x154 [ 1035.540362] should_failslab+0xd6/0x130 [ 1035.544351] kmem_cache_alloc_node+0x25f/0x400 [ 1035.548962] __alloc_skb+0x9a/0x4c0 [ 1035.552860] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1035.557712] ? netlink_has_listeners+0x1ff/0x310 [ 1035.562481] kobject_uevent_env+0x6d1/0xc50 [ 1035.566823] lo_ioctl+0x1177/0x1c00 [ 1035.570464] ? loop_clr_fd+0xac0/0xac0 [ 1035.574359] blkdev_ioctl+0x91d/0x17c0 [ 1035.578252] ? blkpg_ioctl+0x8d0/0x8d0 [ 1035.582317] ? trace_hardirqs_on+0x10/0x10 [ 1035.586572] block_ioctl+0xd9/0x120 [ 1035.590464] ? blkdev_fallocate+0x3a0/0x3a0 [ 1035.594795] do_vfs_ioctl+0x75a/0xfe0 [ 1035.598772] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1035.604490] ? ioctl_preallocate+0x1a0/0x1a0 [ 1035.608918] ? security_file_ioctl+0x76/0xb0 [ 1035.613797] ? security_file_ioctl+0x83/0xb0 [ 1035.618228] SyS_ioctl+0x7f/0xb0 00:26:12 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) [ 1035.621595] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1035.625725] do_syscall_64+0x1d5/0x640 [ 1035.629778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1035.635099] RIP: 0033:0x45ca77 [ 1035.638469] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1035.646707] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1035.653991] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1035.661274] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1035.668849] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1035.676206] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1035.703867] BTRFS error (device loop1): superblock checksum mismatch 00:26:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={r6}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={r6, 0x7}, &(0x7f0000000200)=0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:12 executing program 1 (fault-call:0 fault-nth:23): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1035.755194] BTRFS error (device loop1): open_ctree failed [ 1035.856791] FAULT_INJECTION: forcing a failure. [ 1035.856791] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.884797] CPU: 1 PID: 21180 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1035.892903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.902393] Call Trace: [ 1035.905007] dump_stack+0x1b2/0x283 [ 1035.908662] should_fail.cold+0x10a/0x154 [ 1035.913081] should_failslab+0xd6/0x130 [ 1035.917082] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1035.922213] __kmalloc_node_track_caller+0x38/0x70 [ 1035.927167] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1035.931860] __alloc_skb+0xca/0x4c0 [ 1035.935510] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1035.940375] ? netlink_has_listeners+0x1ff/0x310 [ 1035.945239] kobject_uevent_env+0x6d1/0xc50 [ 1035.949773] lo_ioctl+0x1177/0x1c00 [ 1035.953423] ? loop_clr_fd+0xac0/0xac0 00:26:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1035.957501] blkdev_ioctl+0x91d/0x17c0 [ 1035.961749] ? blkpg_ioctl+0x8d0/0x8d0 [ 1035.965664] ? trace_hardirqs_on+0x10/0x10 [ 1035.970030] block_ioctl+0xd9/0x120 [ 1035.973678] ? blkdev_fallocate+0x3a0/0x3a0 [ 1035.978246] do_vfs_ioctl+0x75a/0xfe0 [ 1035.982063] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1035.987790] ? ioctl_preallocate+0x1a0/0x1a0 [ 1035.992228] ? security_file_ioctl+0x76/0xb0 [ 1035.996654] ? security_file_ioctl+0x83/0xb0 [ 1036.001079] SyS_ioctl+0x7f/0xb0 [ 1036.004457] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1036.008446] do_syscall_64+0x1d5/0x640 [ 1036.012517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1036.017719] RIP: 0033:0x45ca77 [ 1036.020919] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.028648] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1036.036072] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1036.043358] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1036.050646] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1036.058077] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1036.101115] BTRFS error (device loop1): superblock checksum mismatch 00:26:13 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) preadv(r2, &(0x7f00000017c0), 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x4}]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0xffffffffffffffff, 0x0) [ 1036.150962] BTRFS error (device loop1): open_ctree failed 00:26:13 executing program 1 (fault-call:0 fault-nth:24): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1036.259880] FAULT_INJECTION: forcing a failure. [ 1036.259880] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.294122] CPU: 1 PID: 21210 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1036.304956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.318641] Call Trace: [ 1036.321359] dump_stack+0x1b2/0x283 [ 1036.325526] should_fail.cold+0x10a/0x154 [ 1036.336894] should_failslab+0xd6/0x130 [ 1036.341515] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1036.347671] __kmalloc_node_track_caller+0x38/0x70 [ 1036.352906] __kmalloc_reserve.isra.0+0x35/0xd0 00:26:13 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) r2 = getpgrp(0x0) getpriority(0x1, r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e1f, @multicast1}, @in6={0xa, 0x4e23, 0x8, @empty, 0x3}, @in={0x2, 0x4e20, @local}], 0x3c) ptrace$setopts(0x4206, r2, 0xb, 0x54) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000000c0)=0x1, 0x4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="00ec0000e3a6cd48004534c5e9b634ccf8b3e100000900000000", @ANYRES16=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x60045}, 0x20004080) [ 1036.359275] __alloc_skb+0xca/0x4c0 [ 1036.364924] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1036.371541] ? netlink_has_listeners+0x1ff/0x310 [ 1036.376458] kobject_uevent_env+0x6d1/0xc50 [ 1036.380910] lo_ioctl+0x1177/0x1c00 [ 1036.385076] ? loop_clr_fd+0xac0/0xac0 [ 1036.388987] blkdev_ioctl+0x91d/0x17c0 [ 1036.392984] ? blkpg_ioctl+0x8d0/0x8d0 [ 1036.397322] ? trace_hardirqs_on+0x10/0x10 [ 1036.401744] block_ioctl+0xd9/0x120 [ 1036.405388] ? blkdev_fallocate+0x3a0/0x3a0 [ 1036.409722] do_vfs_ioctl+0x75a/0xfe0 [ 1036.414005] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1036.419780] ? ioctl_preallocate+0x1a0/0x1a0 [ 1036.424368] ? security_file_ioctl+0x76/0xb0 [ 1036.428878] ? security_file_ioctl+0x83/0xb0 [ 1036.433619] SyS_ioctl+0x7f/0xb0 [ 1036.437270] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1036.441264] do_syscall_64+0x1d5/0x640 [ 1036.445173] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1036.450372] RIP: 0033:0x45ca77 [ 1036.453565] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.461282] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1036.468809] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1036.476090] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1036.483529] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1036.490812] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1036.512624] print_req_error: I/O error, dev loop1, sector 0 [ 1036.518626] print_req_error: I/O error, dev loop1, sector 0 [ 1036.524499] buffer_io_error: 4 callbacks suppressed [ 1036.524506] Buffer I/O error on dev loop1, logical block 0, async page read [ 1036.557798] BTRFS error (device loop1): superblock checksum mismatch [ 1036.620251] BTRFS error (device loop1): open_ctree failed 00:26:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000280)="72b731481eb9273af68195f72d519dd23d925304ffb160942bcf74f207c0cb9b0586897e411cdc5bfc664bab312ca476718c6da2d53a72af0b9dbd72f57e49bba39444372ae13faeb0fe52d7db149ac006b5953694f3ec00940ea26bbfe4b3c055de32c9b933dc60ca3e258b416935920d91ac5bffe28a4013a05cca12070e0279623303a7d5d9f0d986c51ddbaa8bd548eae00cb6383bac1e17135ccc48e914941e71", &(0x7f0000000140)="49d5a264fa8fac345db81e17236a45e2317f"}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040)=0x3ff, 0x29, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 00:26:15 executing program 1 (fault-call:0 fault-nth:25): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)=""/107, &(0x7f0000000300)=0x6b) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'nr0\x00', 0x800}) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func={0x0, 0x0, 0x0, 0xc, 0x5}, @struct={0x9}, @func, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000140)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1038.537911] FAULT_INJECTION: forcing a failure. [ 1038.537911] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.579312] CPU: 1 PID: 21238 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1038.587256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1038.596837] Call Trace: [ 1038.599452] dump_stack+0x1b2/0x283 [ 1038.603101] should_fail.cold+0x10a/0x154 [ 1038.607270] should_failslab+0xd6/0x130 [ 1038.611257] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1038.618542] __kmalloc_node_track_caller+0x38/0x70 [ 1038.624715] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1038.629495] __alloc_skb+0xca/0x4c0 [ 1038.633135] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1038.638003] ? netlink_has_listeners+0x1ff/0x310 [ 1038.642872] kobject_uevent_env+0x6d1/0xc50 [ 1038.647313] lo_ioctl+0x1177/0x1c00 [ 1038.650966] ? loop_clr_fd+0xac0/0xac0 [ 1038.655077] blkdev_ioctl+0x91d/0x17c0 [ 1038.658982] ? blkpg_ioctl+0x8d0/0x8d0 [ 1038.663098] ? trace_hardirqs_on+0x10/0x10 [ 1038.667537] block_ioctl+0xd9/0x120 [ 1038.671178] ? blkdev_fallocate+0x3a0/0x3a0 [ 1038.675677] do_vfs_ioctl+0x75a/0xfe0 00:26:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8400, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'macvlan1\x00', 0x800}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x11e98f600, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000100c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c001e00", @ANYRES16=r4, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="f647d09f1309cda4d54501c4a628aa531a07e5b9056204110c044778f35b325ab7370ef233000000b45b"}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x10aa, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1038.679579] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1038.685327] ? ioctl_preallocate+0x1a0/0x1a0 [ 1038.689860] ? security_file_ioctl+0x76/0xb0 [ 1038.690680] ptrace attach of "/root/syz-executor.0"[21249] was attempted by "/root/syz-executor.0"[21251] [ 1038.694603] ? security_file_ioctl+0x83/0xb0 [ 1038.694618] SyS_ioctl+0x7f/0xb0 [ 1038.694628] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1038.694642] do_syscall_64+0x1d5/0x640 [ 1038.694661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1038.694670] RIP: 0033:0x45ca77 00:26:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') r3 = getpgrp(0x0) getpriority(0x1, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000100)={0x6, 0x136f62ac, {r3}, {r5}, 0x5, 0x9e}) preadv(r2, &(0x7f00000017c0), 0x375, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) [ 1038.694676] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1038.694686] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1038.694694] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1038.752982] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1038.760364] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1038.767658] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0x1e, 0x0, @thr={&(0x7f0000000280)="72b731481eb9273af68195f72d519dd23d925304ffb160942bcf74f207c0cb9b0586897e411cdc5bfc664bab312ca476718c6da2d53a72af0b9dbd72f57e49bba39444372ae13faeb0fe52d7db149ac006b5953694f3ec00940ea26bbfe4b3c055de32c9b933dc60ca3e258b416935920d91ac5bffe28a4013a05cca12070e0279623303a7d5d9f0d986c51ddbaa8bd548eae00cb6383bac1e17135ccc48e914941e71", &(0x7f0000000140)="49d5a264fa8fac345db81e17236a45e2317f"}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100000800240008000300000000000000000400000000a58900002a9be09c4ab09da10000000000fffff9f5000000b00f2e1ad009000000ac8bb529969dff3fbcd2218b7c3ea4cbbd662a1f2b14b86b8941fca998447c639b03f3c2166005da58f9b8b3debf275c52a5c229fcd4963ae1aa22719f7a3d"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = getpgrp(0x0) getpriority(0x1, r3) ptrace$setopts(0x4200, r3, 0x0, 0x23) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = getpgrp(0x0) getpriority(0x1, r4) r5 = getpgrp(0x0) getpriority(0x1, r5) ptrace$cont(0x18, r5, 0x2000000080000000, 0x2000000004) [ 1038.796193] print_req_error: I/O error, dev loop1, sector 0 [ 1038.812771] print_req_error: I/O error, dev loop1, sector 0 [ 1038.818721] Buffer I/O error on dev loop1, logical block 0, async page read [ 1038.828468] print_req_error: I/O error, dev loop1, sector 0 [ 1038.835444] Buffer I/O error on dev loop1, logical block 0, async page read 00:26:15 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1038.856372] print_req_error: I/O error, dev loop1, sector 0 [ 1038.862496] Buffer I/O error on dev loop1, logical block 0, async page read [ 1038.871082] print_req_error: I/O error, dev loop1, sector 0 [ 1038.876841] Buffer I/O error on dev loop1, logical block 0, async page read [ 1038.885191] print_req_error: I/O error, dev loop1, sector 0 [ 1038.891298] Buffer I/O error on dev loop1, logical block 0, async page read [ 1038.898553] print_req_error: I/O error, dev loop1, sector 0 00:26:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, @tid=r0}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c1b000000000000000000000400000000000000000000000c00000000000000000000000e00000000000000000000d3eb7401b230e725f5b9c6a9be5e4f2aaef1bbd0e1fccde9d7a3d1c2dec62a4c62e31f248f5511fcaea4f0fd379ea131b86bb3675f6b5687ba863028aa7acdbf23f2b522578757039a7ee036e42d3c3529a287db134bb1a85a1c048e7faf7b9aa84c49bcdf69c33221567cd05d40fcb6ef83b5ecf4569fbb07455c72"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0xca3f5f0a64ee3a35, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='!\x00', r4}, 0x10) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1038.904368] Buffer I/O error on dev loop1, logical block 0, async page read [ 1038.911997] print_req_error: I/O error, dev loop1, sector 24 [ 1038.918184] Buffer I/O error on dev loop1, logical block 3, async page read [ 1038.968689] BTRFS error (device loop1): superblock checksum mismatch [ 1039.020110] BTRFS error (device loop1): open_ctree failed 00:26:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x1000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180)={0x401}, 0x4) 00:26:18 executing program 1 (fault-call:0 fault-nth:26): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1041.521874] FAULT_INJECTION: forcing a failure. [ 1041.521874] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.536245] CPU: 1 PID: 21298 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1041.544151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.553533] Call Trace: [ 1041.556220] dump_stack+0x1b2/0x283 [ 1041.559939] should_fail.cold+0x10a/0x154 [ 1041.564107] should_failslab+0xd6/0x130 00:26:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={@remote={[], 0x3}, 0x6, 'veth1\x00'}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1041.568108] kmem_cache_alloc_node+0x25f/0x400 [ 1041.572688] __alloc_skb+0x9a/0x4c0 [ 1041.576483] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1041.581335] ? netlink_has_listeners+0x1ff/0x310 [ 1041.586097] kobject_uevent_env+0x6d1/0xc50 [ 1041.590433] lo_ioctl+0x1177/0x1c00 [ 1041.594073] ? loop_clr_fd+0xac0/0xac0 [ 1041.598414] blkdev_ioctl+0x91d/0x17c0 [ 1041.602309] ? blkpg_ioctl+0x8d0/0x8d0 [ 1041.606218] ? trace_hardirqs_on+0x10/0x10 [ 1041.610604] block_ioctl+0xd9/0x120 [ 1041.614359] ? blkdev_fallocate+0x3a0/0x3a0 [ 1041.618979] do_vfs_ioctl+0x75a/0xfe0 [ 1041.622823] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1041.628970] ? ioctl_preallocate+0x1a0/0x1a0 [ 1041.633743] ? security_file_ioctl+0x76/0xb0 [ 1041.638839] ? security_file_ioctl+0x83/0xb0 [ 1041.643706] SyS_ioctl+0x7f/0xb0 [ 1041.647665] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1041.652193] do_syscall_64+0x1d5/0x640 [ 1041.656134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1041.660966] ptrace attach of "/root/syz-executor.5"[21308] was attempted by "/root/syz-executor.5"[21309] 00:26:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x640002, 0x1c0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x1ff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1041.661700] RIP: 0033:0x45ca77 [ 1041.661706] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.661718] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1041.661724] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1041.661729] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1041.661735] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1041.661741] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1041.714418] BTRFS error (device loop1): superblock checksum mismatch 00:26:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) timer_create(0x4, &(0x7f0000000240)={0x0, 0x0, 0x0, @tid=r0}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x4048800) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1041.802056] BTRFS error (device loop1): open_ctree failed 00:26:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:18 executing program 1 (fault-call:0 fault-nth:27): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsgid(r6) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, r4, r6}, 0xc) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@union={0x7, 0x3, 0x0, 0x5, 0x0, 0x1000, [{0xf, 0x5, 0x53}, {0xb, 0x4, 0x2}, {0x9, 0x3, 0xfffffffd}]}, @struct={0xfffffffe}, @func]}}, 0x0, 0x62, 0x0, 0x1}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 1041.932189] print_req_error: I/O error, dev loop1, sector 0 [ 1041.938089] print_req_error: I/O error, dev loop1, sector 0 [ 1041.939766] FAULT_INJECTION: forcing a failure. [ 1041.939766] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.943951] Buffer I/O error on dev loop1, logical block 0, async page read [ 1041.963075] print_req_error: I/O error, dev loop1, sector 0 00:26:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_raw(r2, &(0x7f0000000080)={&(0x7f0000000140)=@l2tp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/90, 0x5a}, {&(0x7f0000000940)=""/139, 0x8b}], 0xa}, 0x40010020) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1041.981347] Buffer I/O error on dev loop1, logical block 0, async page read [ 1041.989987] print_req_error: I/O error, dev loop1, sector 0 [ 1041.995716] Buffer I/O error on dev loop1, logical block 0, async page read [ 1042.003267] print_req_error: I/O error, dev loop1, sector 0 [ 1042.009108] Buffer I/O error on dev loop1, logical block 0, async page read [ 1042.016463] print_req_error: I/O error, dev loop1, sector 0 [ 1042.028106] Buffer I/O error on dev loop1, logical block 0, async page read [ 1042.030976] CPU: 0 PID: 21336 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1042.040282] print_req_error: I/O error, dev loop1, sector 0 [ 1042.043714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.049420] Buffer I/O error on dev loop1, logical block 0, async page read [ 1042.059199] Call Trace: [ 1042.059217] dump_stack+0x1b2/0x283 [ 1042.059232] should_fail.cold+0x10a/0x154 [ 1042.059248] should_failslab+0xd6/0x130 [ 1042.059258] kmem_cache_alloc_node+0x25f/0x400 [ 1042.059272] __alloc_skb+0x9a/0x4c0 [ 1042.059284] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1042.071067] print_req_error: I/O error, dev loop1, sector 24 [ 1042.072552] ? netlink_has_listeners+0x1ff/0x310 [ 1042.076677] Buffer I/O error on dev loop1, logical block 3, async page read [ 1042.080634] kobject_uevent_env+0x6d1/0xc50 [ 1042.080655] lo_ioctl+0x1177/0x1c00 [ 1042.080670] ? loop_clr_fd+0xac0/0xac0 [ 1042.080682] blkdev_ioctl+0x91d/0x17c0 [ 1042.080691] ? blkpg_ioctl+0x8d0/0x8d0 [ 1042.080700] ? trace_hardirqs_on+0x10/0x10 [ 1042.080723] block_ioctl+0xd9/0x120 [ 1042.139849] ? blkdev_fallocate+0x3a0/0x3a0 [ 1042.144187] do_vfs_ioctl+0x75a/0xfe0 [ 1042.148044] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1042.153784] ? ioctl_preallocate+0x1a0/0x1a0 [ 1042.158327] ? security_file_ioctl+0x76/0xb0 [ 1042.162746] ? security_file_ioctl+0x83/0xb0 [ 1042.167205] SyS_ioctl+0x7f/0xb0 [ 1042.170615] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1042.174612] do_syscall_64+0x1d5/0x640 [ 1042.178522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1042.183753] RIP: 0033:0x45ca77 [ 1042.188244] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.195962] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1042.203309] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1042.211031] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1042.218651] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1042.226302] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func={0xe}]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1042.267630] BTRFS error (device loop1): superblock checksum mismatch [ 1042.329926] BTRFS error (device loop1): open_ctree failed [ 1042.370324] print_req_error: I/O error, dev loop1, sector 0 00:26:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000140)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:21 executing program 1 (fault-call:0 fault-nth:28): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1044.542620] FAULT_INJECTION: forcing a failure. [ 1044.542620] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.554344] CPU: 1 PID: 21378 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1044.562259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.571693] Call Trace: [ 1044.574304] dump_stack+0x1b2/0x283 [ 1044.577858] print_req_error: I/O error, dev loop1, sector 0 [ 1044.577984] should_fail.cold+0x10a/0x154 [ 1044.578001] should_failslab+0xd6/0x130 [ 1044.585083] Buffer I/O error on dev loop1, logical block 0, async page read [ 1044.587874] kmem_cache_alloc_node+0x25f/0x400 [ 1044.587892] __alloc_skb+0x9a/0x4c0 [ 1044.587907] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1044.592167] Buffer I/O error on dev loop1, logical block 0, async page read [ 1044.599459] ? netlink_has_listeners+0x1ff/0x310 [ 1044.599473] kobject_uevent_env+0x6d1/0xc50 [ 1044.599498] lo_ioctl+0x1177/0x1c00 [ 1044.599516] ? loop_clr_fd+0xac0/0xac0 [ 1044.599530] blkdev_ioctl+0x91d/0x17c0 [ 1044.599540] ? blkpg_ioctl+0x8d0/0x8d0 [ 1044.599550] ? trace_hardirqs_on+0x10/0x10 [ 1044.599572] block_ioctl+0xd9/0x120 [ 1044.599583] ? blkdev_fallocate+0x3a0/0x3a0 [ 1044.604897] Buffer I/O error on dev loop1, logical block 0, async page read [ 1044.607901] do_vfs_ioctl+0x75a/0xfe0 [ 1044.607916] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1044.607927] ? ioctl_preallocate+0x1a0/0x1a0 [ 1044.607950] ? security_file_ioctl+0x76/0xb0 [ 1044.607958] ? security_file_ioctl+0x83/0xb0 [ 1044.607968] SyS_ioctl+0x7f/0xb0 [ 1044.647226] ptrace attach of "/root/syz-executor.3"[21384] was attempted by "/root/syz-executor.3"[21385] [ 1044.650463] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1044.650485] do_syscall_64+0x1d5/0x640 [ 1044.650503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1044.650514] RIP: 0033:0x45ca77 [ 1044.650519] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.732510] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 00:26:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func={0x8000}, @struct, @func={0xb}, @var, @fwd={0x6}]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1044.739901] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1044.747300] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1044.754561] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1044.761819] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1044.779140] BTRFS error (device loop1): superblock checksum mismatch [ 1044.826169] BTRFS error (device loop1): open_ctree failed 00:26:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="d5923a78d4319fa06d51f9edb9365c2c0cc237838794ce1c30541f43320e9fb54ea133"], 0x1c}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) r4 = getpgrp(0x0) getpriority(0x1, r4) ptrace$cont(0x7, r4, 0x10000, 0xffffffffffffeffd) 00:26:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:22 executing program 1 (fault-call:0 fault-nth:29): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpgrp(0x0) getpriority(0x1, r5) write$FUSE_LK(r4, &(0x7f0000000140)={0x28, 0x0, 0x1, {{0x2, 0x81, 0x0, r5}}}, 0x28) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1044.962872] FAULT_INJECTION: forcing a failure. [ 1044.962872] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.983109] CPU: 0 PID: 21412 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1044.991273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.000879] Call Trace: [ 1045.003559] dump_stack+0x1b2/0x283 [ 1045.007250] should_fail.cold+0x10a/0x154 [ 1045.011562] should_failslab+0xd6/0x130 [ 1045.015614] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1045.020780] __kmalloc_node_track_caller+0x38/0x70 [ 1045.025784] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1045.030522] __alloc_skb+0xca/0x4c0 [ 1045.034229] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1045.039137] ? netlink_has_listeners+0x1ff/0x310 [ 1045.043914] kobject_uevent_env+0x6d1/0xc50 [ 1045.048252] lo_ioctl+0x1177/0x1c00 [ 1045.051891] ? loop_clr_fd+0xac0/0xac0 [ 1045.055784] blkdev_ioctl+0x91d/0x17c0 00:26:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x82080, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func={0x0, 0x0, 0x0, 0xc, 0xffffffff}, @struct, @func, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x809c}}]}}, 0x0, 0x56}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1045.059768] ? blkpg_ioctl+0x8d0/0x8d0 [ 1045.063658] ? trace_hardirqs_on+0x10/0x10 [ 1045.067926] block_ioctl+0xd9/0x120 [ 1045.071561] ? blkdev_fallocate+0x3a0/0x3a0 [ 1045.075898] do_vfs_ioctl+0x75a/0xfe0 [ 1045.079711] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1045.085542] ? ioctl_preallocate+0x1a0/0x1a0 [ 1045.090004] ? security_file_ioctl+0x76/0xb0 [ 1045.094504] ? security_file_ioctl+0x83/0xb0 [ 1045.098929] SyS_ioctl+0x7f/0xb0 [ 1045.102290] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1045.106268] do_syscall_64+0x1d5/0x640 00:26:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1045.110164] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1045.115351] RIP: 0033:0x45ca77 [ 1045.118535] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.126259] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1045.133530] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1045.140901] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1045.148187] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1045.160069] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1045.188128] BTRFS error (device loop1): superblock checksum mismatch 00:26:22 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sync() ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e000000000000000000005e74050d2df1928c22c9f4067314ea8018f41e3251cb366b9e47cb6011425f5d113d1118cf0c87ec5e3c148aebe78d6cac62bc5a10e86d13b4dcb0842b8d2a7cc011353d277d90439c0438ed6827e10fbe19bde7bf2abf36cf279cdef9a5"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1045.234703] BTRFS error (device loop1): open_ctree failed 00:26:22 executing program 1 (fault-call:0 fault-nth:30): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1045.338361] FAULT_INJECTION: forcing a failure. [ 1045.338361] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.354354] CPU: 0 PID: 21458 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1045.362257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.371609] Call Trace: [ 1045.374236] dump_stack+0x1b2/0x283 [ 1045.377882] should_fail.cold+0x10a/0x154 [ 1045.382103] should_failslab+0xd6/0x130 [ 1045.386077] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1045.391174] __kmalloc_node_track_caller+0x38/0x70 [ 1045.396099] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1045.400756] __alloc_skb+0xca/0x4c0 [ 1045.404386] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1045.409571] ? netlink_has_listeners+0x1ff/0x310 [ 1045.414345] kobject_uevent_env+0x6d1/0xc50 [ 1045.418676] lo_ioctl+0x1177/0x1c00 [ 1045.422288] ? loop_clr_fd+0xac0/0xac0 [ 1045.426176] blkdev_ioctl+0x91d/0x17c0 [ 1045.430052] ? blkpg_ioctl+0x8d0/0x8d0 [ 1045.433931] ? trace_hardirqs_on+0x10/0x10 [ 1045.438155] block_ioctl+0xd9/0x120 [ 1045.441763] ? blkdev_fallocate+0x3a0/0x3a0 [ 1045.448931] do_vfs_ioctl+0x75a/0xfe0 [ 1045.452832] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1045.458533] ? ioctl_preallocate+0x1a0/0x1a0 [ 1045.464525] ? security_file_ioctl+0x76/0xb0 [ 1045.468912] ? security_file_ioctl+0x83/0xb0 [ 1045.473310] SyS_ioctl+0x7f/0xb0 [ 1045.476665] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1045.480638] do_syscall_64+0x1d5/0x640 [ 1045.484533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1045.490446] RIP: 0033:0x45ca77 [ 1045.494686] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.502397] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1045.509652] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1045.516913] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1045.524186] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1045.531620] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1045.552192] BTRFS error (device loop1): superblock checksum mismatch [ 1045.600437] BTRFS error (device loop1): open_ctree failed 00:26:22 executing program 1 (fault-call:0 fault-nth:31): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1045.675112] FAULT_INJECTION: forcing a failure. [ 1045.675112] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.689995] CPU: 1 PID: 21471 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1045.698169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.707656] Call Trace: [ 1045.710853] dump_stack+0x1b2/0x283 [ 1045.714488] should_fail.cold+0x10a/0x154 [ 1045.718652] should_failslab+0xd6/0x130 [ 1045.722612] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1045.727791] __kmalloc_node_track_caller+0x38/0x70 [ 1045.732756] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1045.738302] __alloc_skb+0xca/0x4c0 [ 1045.748696] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1045.753550] ? netlink_has_listeners+0x1ff/0x310 [ 1045.758328] kobject_uevent_env+0x6d1/0xc50 [ 1045.762655] lo_ioctl+0x1177/0x1c00 [ 1045.766277] ? loop_clr_fd+0xac0/0xac0 [ 1045.770186] blkdev_ioctl+0x91d/0x17c0 [ 1045.775331] ? blkpg_ioctl+0x8d0/0x8d0 [ 1045.780707] ? trace_hardirqs_on+0x10/0x10 [ 1045.786352] block_ioctl+0xd9/0x120 [ 1045.790216] ? blkdev_fallocate+0x3a0/0x3a0 [ 1045.794539] do_vfs_ioctl+0x75a/0xfe0 [ 1045.798484] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1045.805085] ? ioctl_preallocate+0x1a0/0x1a0 [ 1045.809705] ? security_file_ioctl+0x76/0xb0 [ 1045.814105] ? security_file_ioctl+0x83/0xb0 [ 1045.818546] SyS_ioctl+0x7f/0xb0 [ 1045.822011] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1045.826068] do_syscall_64+0x1d5/0x640 [ 1045.829977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1045.835156] RIP: 0033:0x45ca77 [ 1045.838641] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1045.846416] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1045.853689] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1045.860966] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1045.868231] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1045.875511] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1045.908279] BTRFS error (device loop1): superblock checksum mismatch [ 1045.949494] BTRFS error (device loop1): open_ctree failed 00:26:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:24 executing program 1 (fault-call:0 fault-nth:32): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1047.835902] FAULT_INJECTION: forcing a failure. [ 1047.835902] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.847773] CPU: 1 PID: 21483 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1047.855671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.865218] Call Trace: [ 1047.867828] dump_stack+0x1b2/0x283 [ 1047.871843] should_fail.cold+0x10a/0x154 [ 1047.876963] should_failslab+0xd6/0x130 [ 1047.880953] kmem_cache_alloc_node+0x25f/0x400 [ 1047.885788] __alloc_skb+0x9a/0x4c0 [ 1047.889549] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1047.894646] ? netlink_has_listeners+0x1ff/0x310 [ 1047.899707] kobject_uevent_env+0x6d1/0xc50 [ 1047.904118] lo_ioctl+0x1177/0x1c00 [ 1047.907772] ? loop_clr_fd+0xac0/0xac0 [ 1047.911687] blkdev_ioctl+0x91d/0x17c0 [ 1047.915749] ? blkpg_ioctl+0x8d0/0x8d0 [ 1047.919745] ? trace_hardirqs_on+0x10/0x10 [ 1047.924015] block_ioctl+0xd9/0x120 [ 1047.927661] ? blkdev_fallocate+0x3a0/0x3a0 [ 1047.932004] do_vfs_ioctl+0x75a/0xfe0 00:26:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x90002001}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x100008) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000200000000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000004000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1047.936006] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1047.941806] ? ioctl_preallocate+0x1a0/0x1a0 [ 1047.946248] ? security_file_ioctl+0x76/0xb0 [ 1047.950788] ? security_file_ioctl+0x83/0xb0 [ 1047.955408] SyS_ioctl+0x7f/0xb0 [ 1047.960022] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1047.964026] do_syscall_64+0x1d5/0x640 [ 1047.968095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1047.973409] RIP: 0033:0x45ca77 [ 1047.976604] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:26:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) capget(&(0x7f0000000140)={0xecd4be45a66bc08b, 0xffffffffffffffff}, &(0x7f0000000180)={0x6, 0x7ff, 0x1, 0x2, 0x7, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1047.984332] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1047.991910] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1047.999491] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1048.006778] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1048.014066] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1048.045008] BTRFS error (device loop1): superblock checksum mismatch [ 1048.093825] BTRFS error (device loop1): open_ctree failed 00:26:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000000000000000000000400000000008000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x1c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}}, 0x14}}, 0x40000) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000005b7407000000000000000300000000000000", @ANYRES32, @ANYBLOB="000000000400"/28, @ANYRES32=r5, @ANYBLOB="000000000400"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00H\x00'/28]) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:25 executing program 1 (fault-call:0 fault-nth:33): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1048.207426] FAULT_INJECTION: forcing a failure. [ 1048.207426] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.218077] print_req_error: 23 callbacks suppressed [ 1048.218084] print_req_error: I/O error, dev loop1, sector 0 [ 1048.219654] CPU: 1 PID: 21523 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1048.230091] print_req_error: I/O error, dev loop1, sector 0 [ 1048.230401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.230407] Call Trace: [ 1048.230426] dump_stack+0x1b2/0x283 [ 1048.230445] should_fail.cold+0x10a/0x154 [ 1048.230460] should_failslab+0xd6/0x130 [ 1048.238629] buffer_io_error: 18 callbacks suppressed [ 1048.238635] Buffer I/O error on dev loop1, logical block 0, async page read [ 1048.244233] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1048.244250] __kmalloc_node_track_caller+0x38/0x70 [ 1048.244264] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1048.244281] __alloc_skb+0xca/0x4c0 [ 1048.244296] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1048.244313] ? netlink_has_listeners+0x1ff/0x310 [ 1048.244326] kobject_uevent_env+0x6d1/0xc50 [ 1048.254805] print_req_error: I/O error, dev loop1, sector 0 [ 1048.256467] lo_ioctl+0x1177/0x1c00 [ 1048.256483] ? loop_clr_fd+0xac0/0xac0 [ 1048.256496] blkdev_ioctl+0x91d/0x17c0 [ 1048.256506] ? blkpg_ioctl+0x8d0/0x8d0 [ 1048.256516] ? trace_hardirqs_on+0x10/0x10 [ 1048.256537] block_ioctl+0xd9/0x120 [ 1048.260323] Buffer I/O error on dev loop1, logical block 0, async page read [ 1048.264390] ? blkdev_fallocate+0x3a0/0x3a0 [ 1048.264402] do_vfs_ioctl+0x75a/0xfe0 [ 1048.264416] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1048.264427] ? ioctl_preallocate+0x1a0/0x1a0 [ 1048.264448] ? security_file_ioctl+0x76/0xb0 [ 1048.272818] print_req_error: I/O error, dev loop1, sector 0 [ 1048.276868] ? security_file_ioctl+0x83/0xb0 [ 1048.276882] SyS_ioctl+0x7f/0xb0 [ 1048.276891] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1048.276905] do_syscall_64+0x1d5/0x640 00:26:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080), 0x2) ptrace$cont(0x7, r0, 0x0, 0x0) dup(r1) 00:26:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16}, &(0x7f00000000c0)=0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000140)) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) r2 = getpgrp(0x0) getpriority(0x1, r2) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1048.276922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1048.276931] RIP: 0033:0x45ca77 [ 1048.276936] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.276948] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1048.276954] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1048.276960] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1048.276965] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 00:26:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c000000000000000000000000000000000e0000000000000000000038a061718dbaa9cf6c095fc8d7c26baaf44167ab00"/90], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000280)={{0x81, 0xcd}, 'port1\x00', 0xa0, 0x30058, 0x6, 0x8, 0x9, 0x6, 0xffff, 0x0, 0x2, 0x3}) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1048.276973] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1048.284328] Buffer I/O error on dev loop1, logical block 0, async page read [ 1048.485096] BTRFS error (device loop1): superblock checksum mismatch [ 1048.569038] BTRFS error (device loop1): open_ctree failed 00:26:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c0000000000000000000000040000000000000000002bb90c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000280)={0x5c23edef, 0x2c1f, 0x2, 0x1f, 0x8, [{0x5, 0x5, 0x7, [], 0x80}, {0x6, 0x2, 0x6, [], 0x100}, {0xe5, 0x9, 0x1ff, [], 0x1909}, {0x1000, 0x7ff, 0x6, [], 0x202}, {0x5ff, 0x400, 0x50, [], 0x5}, {0x650, 0x4, 0x2}, {0x7ff, 0x8, 0x92, [], 0x1204}, {0x8, 0xfffffffffffff967, 0x4, [], 0x1200}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:27 executing program 1 (fault-call:0 fault-nth:34): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1050.866175] FAULT_INJECTION: forcing a failure. [ 1050.866175] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.878362] CPU: 0 PID: 21577 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1050.888296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.898457] Call Trace: [ 1050.901890] dump_stack+0x1b2/0x283 [ 1050.905701] should_fail.cold+0x10a/0x154 [ 1050.909958] should_failslab+0xd6/0x130 00:26:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00dfff00000000000000000400000000000000000000000c00000000000000000000120e00000000000000000000a91c7cd23f9b832aa285ee1f05d4c517f58a70b2b636653fc17e7a9f9af05e53b48e408773844b68e321d739530f74950b9401347ed8b6"], 0x0, 0x4e}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="b723000000000000000006000000089d3000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=0x77) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1050.914235] kmem_cache_alloc_node+0x25f/0x400 [ 1050.918833] __alloc_skb+0x9a/0x4c0 [ 1050.922470] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1050.927323] ? netlink_has_listeners+0x1ff/0x310 [ 1050.932076] kobject_uevent_env+0x6d1/0xc50 [ 1050.936404] lo_ioctl+0x1177/0x1c00 [ 1050.940075] ? loop_clr_fd+0xac0/0xac0 [ 1050.943982] blkdev_ioctl+0x91d/0x17c0 [ 1050.947886] ? blkpg_ioctl+0x8d0/0x8d0 [ 1050.951794] ? trace_hardirqs_on+0x10/0x10 [ 1050.956064] block_ioctl+0xd9/0x120 [ 1050.959709] ? blkdev_fallocate+0x3a0/0x3a0 [ 1050.964053] do_vfs_ioctl+0x75a/0xfe0 [ 1050.967878] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1050.973512] ? ioctl_preallocate+0x1a0/0x1a0 [ 1050.978063] ? security_file_ioctl+0x76/0xb0 [ 1050.982468] ? security_file_ioctl+0x83/0xb0 [ 1050.986873] SyS_ioctl+0x7f/0xb0 [ 1050.990278] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1050.994260] do_syscall_64+0x1d5/0x640 [ 1050.998197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1051.003384] RIP: 0033:0x45ca77 [ 1051.006566] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:26:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x7fa61680, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1051.014883] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1051.023054] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1051.030340] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1051.037709] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1051.045601] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000140)={0x2, 0x6}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000035b0300000000000000000008000042d5600f0004007d5f1f80bd6e72138ea487e0360000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = getpgrp(0x0) getpriority(0x1, r3) r4 = getpgrp(0x0) getpriority(0x1, r4) ptrace$setopts(0x4206, r4, 0x6, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1051.074339] BTRFS error (device loop1): superblock checksum mismatch [ 1051.154462] BTRFS error (device loop1): open_ctree failed 00:26:28 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x8000000000000) 00:26:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000001beff5ff2400000003000000000000000000005bbf5cbdb88af59600000000040000000000000000000067df32fab4a1e2451e14628954f1000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:28 executing program 1 (fault-call:0 fault-nth:35): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1051.392424] FAULT_INJECTION: forcing a failure. [ 1051.392424] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.405534] CPU: 0 PID: 21620 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1051.414399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.424010] Call Trace: [ 1051.426604] dump_stack+0x1b2/0x283 [ 1051.430237] should_fail.cold+0x10a/0x154 [ 1051.434388] should_failslab+0xd6/0x130 00:26:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44eb01001800000000000000240000002400000003001000000000000000000c00000000000000000000000400000000fd8382e10000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000200)={0x9, 0x80, 0xffff, 0x0, 0x5, "34142ecf57d0210990de870f174472c71f6f15", 0x6, 0xfffffff7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0xffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000140)=0xa3) [ 1051.438373] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1051.443490] __kmalloc_node_track_caller+0x38/0x70 [ 1051.448433] __kmalloc_reserve.isra.0+0x35/0xd0 [ 1051.453127] __alloc_skb+0xca/0x4c0 [ 1051.456915] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1051.464298] ? netlink_has_listeners+0x1ff/0x310 [ 1051.469259] kobject_uevent_env+0x6d1/0xc50 [ 1051.474041] lo_ioctl+0x1177/0x1c00 [ 1051.477695] ? loop_clr_fd+0xac0/0xac0 [ 1051.483077] blkdev_ioctl+0x91d/0x17c0 [ 1051.486986] ? blkpg_ioctl+0x8d0/0x8d0 [ 1051.491673] ? trace_hardirqs_on+0x10/0x10 [ 1051.496352] block_ioctl+0xd9/0x120 [ 1051.500757] ? blkdev_fallocate+0x3a0/0x3a0 [ 1051.505160] do_vfs_ioctl+0x75a/0xfe0 [ 1051.509046] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1051.515565] ? ioctl_preallocate+0x1a0/0x1a0 [ 1051.520844] ? security_file_ioctl+0x76/0xb0 [ 1051.525247] ? security_file_ioctl+0x83/0xb0 [ 1051.529740] SyS_ioctl+0x7f/0xb0 [ 1051.533223] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1051.537198] do_syscall_64+0x1d5/0x640 [ 1051.541606] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1051.546795] RIP: 0033:0x45ca77 [ 1051.551560] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.559349] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1051.566650] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1051.575563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1051.582913] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1051.590177] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1051.607829] BTRFS error (device loop1): superblock checksum mismatch [ 1051.660805] BTRFS error (device loop1): open_ctree failed 00:26:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:30 executing program 1 (fault-call:0 fault-nth:36): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1053.872559] FAULT_INJECTION: forcing a failure. [ 1053.872559] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.884615] CPU: 0 PID: 21645 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1053.894372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.906522] Call Trace: [ 1053.909177] dump_stack+0x1b2/0x283 [ 1053.914619] should_fail.cold+0x10a/0x154 [ 1053.918770] should_failslab+0xd6/0x130 [ 1053.922796] kmem_cache_alloc_node+0x25f/0x400 [ 1053.927440] __alloc_skb+0x9a/0x4c0 [ 1053.932790] ? __kmalloc_reserve.isra.0+0xd0/0xd0 [ 1053.937929] ? netlink_has_listeners+0x1ff/0x310 [ 1053.943694] kobject_uevent_env+0x6d1/0xc50 [ 1053.948848] lo_ioctl+0x1177/0x1c00 [ 1053.952695] ? loop_clr_fd+0xac0/0xac0 [ 1053.957991] blkdev_ioctl+0x91d/0x17c0 [ 1053.962960] ? blkpg_ioctl+0x8d0/0x8d0 [ 1053.967547] ? trace_hardirqs_on+0x10/0x10 [ 1053.972116] block_ioctl+0xd9/0x120 [ 1053.975740] ? blkdev_fallocate+0x3a0/0x3a0 [ 1053.980064] do_vfs_ioctl+0x75a/0xfe0 [ 1053.983881] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1053.989545] ? ioctl_preallocate+0x1a0/0x1a0 [ 1053.993957] ? security_file_ioctl+0x76/0xb0 [ 1053.998711] ? security_file_ioctl+0x83/0xb0 [ 1054.003114] SyS_ioctl+0x7f/0xb0 [ 1054.006465] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1054.010424] do_syscall_64+0x1d5/0x640 [ 1054.014330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1054.019539] RIP: 0033:0x45ca77 [ 1054.022740] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.031405] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1054.038668] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1054.045928] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1054.053180] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1054.063566] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800edffffffffff2300000024000000030000000080000000000000000000010004000000000000000000000a0c000000000000002063ec3759839f68c29cfe7146fdb0b8fb3a7d0a8b2e864dd5842629ee951ceed69ae372bafd8fe71ca94638a382bb8d2522089099b9097f0000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000015}, 0x20000010) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 00:26:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1054.085517] BTRFS error (device loop1): superblock checksum mismatch 00:26:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000180)={0xa20000, 0x1f, 0x2c0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0xa10907, 0x5, [], @value=0x6fb8}}) connect$vsock_dgram(r4, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) getxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'system.', 'stack\x00'}, &(0x7f0000000340)=""/57, 0x39) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1054.128532] BTRFS error (device loop1): open_ctree failed 00:26:31 executing program 1 (fault-call:0 fault-nth:37): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace(0x11, r2) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1054.240213] FAULT_INJECTION: forcing a failure. [ 1054.240213] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.243205] print_req_error: I/O error, dev loop1, sector 0 [ 1054.261171] print_req_error: I/O error, dev loop1, sector 0 [ 1054.266933] Buffer I/O error on dev loop1, logical block 0, async page read [ 1054.271677] CPU: 0 PID: 21681 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1054.275749] print_req_error: I/O error, dev loop1, sector 0 [ 1054.281912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.281918] Call Trace: [ 1054.281938] dump_stack+0x1b2/0x283 [ 1054.281957] should_fail.cold+0x10a/0x154 [ 1054.281973] should_failslab+0xd6/0x130 [ 1054.281986] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1054.281997] ? kobject_create_and_add.cold+0x3f/0x3f [ 1054.282011] call_usermodehelper_setup+0x73/0x2e0 [ 1054.282025] kobject_uevent_env+0xa79/0xc50 [ 1054.282050] lo_ioctl+0x1177/0x1c00 [ 1054.282065] ? loop_clr_fd+0xac0/0xac0 [ 1054.282077] blkdev_ioctl+0x91d/0x17c0 [ 1054.282087] ? blkpg_ioctl+0x8d0/0x8d0 [ 1054.282096] ? trace_hardirqs_on+0x10/0x10 [ 1054.282119] block_ioctl+0xd9/0x120 [ 1054.282128] ? blkdev_fallocate+0x3a0/0x3a0 [ 1054.282139] do_vfs_ioctl+0x75a/0xfe0 [ 1054.282152] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1054.282163] ? ioctl_preallocate+0x1a0/0x1a0 [ 1054.282186] ? security_file_ioctl+0x76/0xb0 [ 1054.282195] ? security_file_ioctl+0x83/0xb0 [ 1054.282206] SyS_ioctl+0x7f/0xb0 [ 1054.282213] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1054.282226] do_syscall_64+0x1d5/0x640 [ 1054.287930] Buffer I/O error on dev loop1, logical block 0, async page read [ 1054.297274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1054.297282] RIP: 0033:0x45ca77 [ 1054.297287] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1054.297301] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045ca77 [ 1054.297306] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1054.297311] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a 00:26:31 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x14000, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x0, 0x2, 0x70bd2a, 0x10001, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x21) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x2, [@struct={0x5, 0x8, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x5, 0x8}, {0xd, 0x0, 0x9}, {0xe, 0x5, 0x4}, {0x6, 0x3, 0x7}, {0x10, 0x5, 0x3326}, {0xa, 0x2, 0x77}, {0x7, 0x4, 0x7}, {0xe, 0x5, 0x3}]}, @struct, @func]}}, 0x0, 0x9e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}, {&(0x7f00000004c0)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}, {&(0x7f0000000400)="ea1e1dd23e47bc334e48c6e525700407f1197ddf4a150234115be89da2f3e320ca4029ec9e1d557e7caf921003903ed9609d57c8e24f582a61cd9da271c662aea1819581604c449849140f23cb2105b6f3ccd674291a1e9c0691794650c2c5e63bed72fe314d0f670dcad905817fd50c8e8198ed1fbc95bfcba119644c8c3def3e22cb6e23a9f4609163de6dca3b837ff7027af3061ce834c634a3aac8184e33b632c6c1fef9e4760f", 0xa9}], 0x3, 0x1) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000340)=0x7582) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) fcntl$addseals(r3, 0x409, 0x1) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018d500000000000034000000340000000200000000000000000408000000000000000000ed63389900000000000000000084d7509fdf94f92a2048f2250e0000000000000000000000000000004a125e260000000000"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1054.297316] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1054.297321] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1054.464469] BTRFS error (device loop1): superblock checksum mismatch 00:26:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000300)={0xa20000, 0x7ff, 0xa8f6, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090a, 0x6, [], @value64=0xf746}}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000340)={[], 0x2, 0x9, 0x5, 0x0, 0x2, 0x2000, 0x4000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func={0xfffffffd}, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38311dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xffffffffffffff68}, {&(0x7f0000000140)="2beb78b653d92449f33798729c98b65fafafcfe195418bd2cdb01e448702f36b672daf0ba7b22d00074f635e2c21de623f3e2373a72a66592f0ddf0fe5a7d4e0609ad8fcd6d03a14b5ebeece9a2e", 0x4e}], 0x3, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x2, 0x576) [ 1054.498682] BTRFS error (device loop1): open_ctree failed 00:26:31 executing program 1 (fault-call:0 fault-nth:38): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1054.612400] FAULT_INJECTION: forcing a failure. [ 1054.612400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1054.624246] CPU: 0 PID: 21723 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1054.632135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.641494] Call Trace: [ 1054.644074] dump_stack+0x1b2/0x283 [ 1054.647734] should_fail.cold+0x10a/0x154 [ 1054.651871] __alloc_pages_nodemask+0x22b/0x2730 [ 1054.656609] ? __mutex_unlock_slowpath+0x75/0x780 [ 1054.661463] ? __lock_acquire+0x655/0x42a0 [ 1054.665679] ? set_blocksize+0x24b/0x2e0 [ 1054.669726] ? lo_ioctl+0x8b5/0x1c00 [ 1054.673422] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1054.678248] ? trace_hardirqs_on+0x10/0x10 [ 1054.682465] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1054.687376] ? HARDIRQ_verbose+0x10/0x10 [ 1054.691420] cache_grow_begin+0x91/0x410 [ 1054.695461] cache_alloc_refill+0x28c/0x360 [ 1054.699767] kmem_cache_alloc+0x333/0x3c0 [ 1054.703905] getname_flags+0xc8/0x550 [ 1054.707690] SyS_mkdirat+0x83/0x220 [ 1054.711308] ? SyS_mknod+0x30/0x30 [ 1054.714826] ? fput+0xb/0x140 [ 1054.717912] ? do_syscall_64+0x4c/0x640 [ 1054.721867] ? SyS_mkdirat+0x220/0x220 [ 1054.725733] do_syscall_64+0x1d5/0x640 [ 1054.729644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1054.734816] RIP: 0033:0x45c027 [ 1054.737985] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1054.745686] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1054.752933] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1054.760189] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1054.767454] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1054.774716] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1054.792489] BTRFS error (device loop1): superblock checksum mismatch [ 1054.828488] BTRFS error (device loop1): open_ctree failed 00:26:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:34 executing program 1 (fault-call:0 fault-nth:39): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1056.908418] FAULT_INJECTION: forcing a failure. [ 1056.908418] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.920081] CPU: 1 PID: 21738 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1056.928083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.937443] Call Trace: [ 1056.940045] dump_stack+0x1b2/0x283 [ 1056.943677] should_fail.cold+0x10a/0x154 [ 1056.947820] should_failslab+0xd6/0x130 [ 1056.951800] kmem_cache_alloc+0x28e/0x3c0 [ 1056.955955] getname_flags+0xc8/0x550 [ 1056.959772] SyS_mkdirat+0x83/0x220 [ 1056.963408] ? SyS_mknod+0x30/0x30 [ 1056.966952] ? fput+0xb/0x140 [ 1056.970067] ? do_syscall_64+0x4c/0x640 [ 1056.974049] ? SyS_mkdirat+0x220/0x220 [ 1056.977944] do_syscall_64+0x1d5/0x640 [ 1056.981849] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1056.987038] RIP: 0033:0x45c027 [ 1056.990222] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1056.997920] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1057.005326] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1057.012594] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1057.019861] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1057.027121] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:34 executing program 1 (fault-call:0 fault-nth:40): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.153244] FAULT_INJECTION: forcing a failure. [ 1057.153244] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.165229] CPU: 1 PID: 21752 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1057.173133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.182496] Call Trace: [ 1057.185352] dump_stack+0x1b2/0x283 [ 1057.188984] should_fail.cold+0x10a/0x154 [ 1057.193142] should_failslab+0xd6/0x130 [ 1057.197113] kmem_cache_alloc+0x28e/0x3c0 [ 1057.201295] __d_alloc+0x2a/0x9b0 [ 1057.204746] d_alloc+0x46/0x240 [ 1057.208052] __lookup_hash+0x51/0x180 [ 1057.211846] filename_create+0x156/0x3f0 [ 1057.215893] ? kern_path_mountpoint+0x40/0x40 [ 1057.220391] SyS_mkdirat+0x95/0x220 [ 1057.224013] ? SyS_mknod+0x30/0x30 [ 1057.227536] ? do_syscall_64+0x4c/0x640 [ 1057.231543] ? SyS_mkdirat+0x220/0x220 [ 1057.235422] do_syscall_64+0x1d5/0x640 [ 1057.239311] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1057.244633] RIP: 0033:0x45c027 00:26:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) r2 = getpgrp(0x0) getpriority(0x1, r2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) wait4(0x0, 0x0, 0x80000002, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000001000000000000005c00000000001000000000000400000000000000000000000c00664bdc6639cf"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.247809] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1057.255516] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1057.262905] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1057.270180] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1057.277454] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1057.284730] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:34 executing program 1 (fault-call:0 fault-nth:41): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.389976] FAULT_INJECTION: forcing a failure. [ 1057.389976] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.406245] CPU: 1 PID: 21767 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1057.414196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.423562] Call Trace: [ 1057.426164] dump_stack+0x1b2/0x283 [ 1057.429807] should_fail.cold+0x10a/0x154 [ 1057.433974] should_failslab+0xd6/0x130 00:26:34 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0xa30000, 0x7fff, 0x1ff, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0xa10908, 0x1f, [], @p_u16=&(0x7f0000000080)=0x4}}) vmsplice(r2, &(0x7f0000001440)=[{}, {&(0x7f0000000200)="dc99e40ddc455299dff084f69a3d8ebf800b1956c7f8e51468f98c070d933382d753892ae3df5ea9b003cba1e9777a71b38bf49a9d2a5bae4dc41bb6e261962e0672b21b5c19f7e7a248b946ee68adc41774d2e16ad84fe50bfaed23a7bfd6801769e19d84990d37a0f324dcb6ea62c1e008c49f6203a6dfe43570e451daff58e4f89dadb7d420bfd6c93c658e8ea31e6228d9ba48536eb1f20097192c9f7b944cd0825d5d1b88e900f342e8be5d94ecc0c560bb"}, {&(0x7f0000000000)="c4681443c425f140e3bba6463761d760b088081a8f0df02b1a63e9baad92178addf2608b9f01199d28513980da9401339727424a47353f09"}, {&(0x7f00000002c0)="fe3b97805e8d51ea7bce2a1faeeee2353ce3d5691639b11a48fa5a2edd799de6cadec59b28789cee5a9b592381249e3fbb9c776057d91db83c4e807b5323bcc93ec84f40dd3876b8e8e8351233c4f5544fe0f2175414f909d7ea6221c09988668fbbf1e23651bbfe4f98aba27a69a4"}, {&(0x7f00000014c0)="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"}, {&(0x7f0000000340)="a6cf58c15d8cc3aab00f1b44321dc8bfcf89e3c37e59c4057d749ab9b62ab5a8b55ebcda98a4a54de4d51e0fb868ca456439b5e7e8da94a7789c3f1ea783c7fb9fe1d9efa4e4842e74cfe0b81284d79511e09e67fa94e5625c050d3a5827236b91b0be7486d79983edb985e6dbea824fbe60f610e9dc628d1947c9040aff2aeee2c213b1f4c1d664495830ba836576f55d6b73382d6842a798148f070c7099908ec1bc55e092107faf9b0d1b102830e0240b908be05964fdcebb2e6c6dcd4af8cd3e0cf7981fba1922400bcbf13dcd28a312b099"}], 0x54, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.437963] kmem_cache_alloc+0x28e/0x3c0 [ 1057.442131] ? ext4_sync_fs+0x7e0/0x7e0 [ 1057.446123] ext4_alloc_inode+0x19/0x610 [ 1057.450193] ? ext4_sync_fs+0x7e0/0x7e0 [ 1057.454177] alloc_inode+0x5d/0x170 [ 1057.457817] new_inode_pseudo+0x14/0xe0 [ 1057.461799] new_inode+0x1b/0x40 [ 1057.465173] __ext4_new_inode+0x356/0x4e80 [ 1057.469521] ? ext4_free_inode+0x14a0/0x14a0 [ 1057.473939] ? avc_has_perm+0x1a4/0x320 [ 1057.477931] ? __dquot_initialize+0x3f4/0x980 [ 1057.482441] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 1057.487129] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1057.492462] ? security_transition_sid+0xcb/0x120 [ 1057.497321] ? security_transition_sid+0x9d/0x120 [ 1057.502182] ext4_mkdir+0x2e4/0xb60 [ 1057.505826] ? selinux_dentry_init_security+0x220/0x220 [ 1057.511208] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1057.515898] ? security_inode_mkdir+0xcc/0x100 [ 1057.520534] vfs_mkdir+0x3af/0x620 [ 1057.524095] SyS_mkdirat+0x1b5/0x220 [ 1057.527816] ? SyS_mknod+0x30/0x30 [ 1057.531392] ? do_syscall_64+0x4c/0x640 [ 1057.535374] ? SyS_mkdirat+0x220/0x220 [ 1057.539273] do_syscall_64+0x1d5/0x640 [ 1057.543173] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1057.548363] RIP: 0033:0x45c027 [ 1057.551583] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1057.559304] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1057.566584] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1057.573864] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1057.582702] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 00:26:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x800, 0x0, @thr={&(0x7f0000000140)="b709151c8d8ff452f0926f8e10474499e9a2e6", &(0x7f0000000240)="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"}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000002000000000000000000000c00000000000000000000000400000000000000000000000000000e00"/68], 0x0, 0x4e}, 0x20) timer_settime(0x0, 0x1, &(0x7f0000001240)={{}, {0x77359400}}, &(0x7f0000001280)) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x42) tkill(r1, 0x33) r4 = getpgrp(0x0) getpriority(0x1, r4) r5 = getpgid(r4) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000140)) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.589998] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:34 executing program 1 (fault-call:0 fault-nth:42): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0xd8243, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1057.709752] FAULT_INJECTION: forcing a failure. [ 1057.709752] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.726309] CPU: 1 PID: 21802 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1057.734666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.744046] Call Trace: [ 1057.746665] dump_stack+0x1b2/0x283 [ 1057.750314] should_fail.cold+0x10a/0x154 [ 1057.754481] should_failslab+0xd6/0x130 [ 1057.758471] kmem_cache_alloc+0x28e/0x3c0 [ 1057.762639] selinux_inode_alloc_security+0xb1/0x2a0 [ 1057.767845] security_inode_alloc+0x8f/0xd0 [ 1057.772184] inode_init_always+0x576/0xb10 [ 1057.776431] alloc_inode+0x7a/0x170 [ 1057.780079] new_inode_pseudo+0x14/0xe0 [ 1057.784075] new_inode+0x1b/0x40 [ 1057.787468] __ext4_new_inode+0x356/0x4e80 [ 1057.791769] ? ext4_free_inode+0x14a0/0x14a0 [ 1057.796187] ? avc_has_perm+0x1a4/0x320 [ 1057.800176] ? __dquot_initialize+0x3f4/0x980 [ 1057.804675] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 1057.809390] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1057.814568] ? security_transition_sid+0xcb/0x120 [ 1057.819404] ? security_transition_sid+0x9d/0x120 [ 1057.824237] ext4_mkdir+0x2e4/0xb60 [ 1057.827866] ? selinux_dentry_init_security+0x220/0x220 [ 1057.833239] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1057.837935] ? security_inode_mkdir+0xcc/0x100 [ 1057.842530] vfs_mkdir+0x3af/0x620 [ 1057.846131] SyS_mkdirat+0x1b5/0x220 [ 1057.852890] ? SyS_mknod+0x30/0x30 [ 1057.856455] ? do_syscall_64+0x4c/0x640 [ 1057.860428] ? SyS_mkdirat+0x220/0x220 [ 1057.864310] do_syscall_64+0x1d5/0x640 [ 1057.868193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1057.873469] RIP: 0033:0x45c027 [ 1057.876651] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1057.884360] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1057.891633] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1057.898998] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1057.908799] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1057.917014] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:37 executing program 1 (fault-call:0 fault-nth:43): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1059.924929] FAULT_INJECTION: forcing a failure. [ 1059.924929] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.938084] CPU: 0 PID: 21819 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1059.949124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.958489] Call Trace: [ 1059.961178] dump_stack+0x1b2/0x283 [ 1059.964823] should_fail.cold+0x10a/0x154 [ 1059.968989] should_failslab+0xd6/0x130 [ 1059.972965] __kmalloc+0x6d/0x400 [ 1059.976417] ? context_struct_to_string+0x323/0x610 [ 1059.981531] context_struct_to_string+0x323/0x610 [ 1059.986378] ? dump_masked_av_helper+0x90/0x90 [ 1059.990961] ? sidtab_search_core+0x17f/0x2a0 [ 1059.995458] security_sid_to_context_core+0x187/0x200 [ 1060.000738] selinux_inode_init_security+0x45a/0x680 [ 1060.005922] ? ext4_get_acl+0xcb/0x500 [ 1060.009891] ? selinux_inode_create+0x30/0x30 [ 1060.014437] ? ext4_get_acl+0xd0/0x500 [ 1060.018378] security_inode_init_security+0x15f/0x320 [ 1060.023563] ? ext4_init_acl+0x190/0x190 [ 1060.027618] ? security_kernel_post_read_file+0xd0/0xd0 [ 1060.036982] __ext4_new_inode+0x35ed/0x4e80 [ 1060.041350] ? ext4_free_inode+0x14a0/0x14a0 [ 1060.045742] ? avc_has_perm+0x1a4/0x320 [ 1060.049836] ? __dquot_initialize+0x3f4/0x980 [ 1060.054323] ? avc_has_perm_noaudit+0x2a0/0x2a0 [ 1060.059051] ? tcp_packet+0x40e0/0x4500 [ 1060.063014] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1060.068198] ? security_transition_sid+0xcb/0x120 [ 1060.073034] ? security_transition_sid+0x9d/0x120 [ 1060.077865] ext4_mkdir+0x2e4/0xb60 [ 1060.081491] ? selinux_dentry_init_security+0x220/0x220 [ 1060.086874] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1060.091551] ? security_inode_mkdir+0xcc/0x100 [ 1060.096130] vfs_mkdir+0x3af/0x620 [ 1060.099684] SyS_mkdirat+0x1b5/0x220 [ 1060.103388] ? SyS_mknod+0x30/0x30 [ 1060.107129] ? do_syscall_64+0x4c/0x640 [ 1060.111098] ? SyS_mkdirat+0x220/0x220 [ 1060.115002] do_syscall_64+0x1d5/0x640 [ 1060.118882] entry_SYSCALL_64_after_hwframe+0x46/0xbb 00:26:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1060.124062] RIP: 0033:0x45c027 [ 1060.127237] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1060.134935] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1060.142204] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1060.149565] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1060.156841] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1060.164113] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:37 executing program 1 (fault-call:0 fault-nth:44): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1060.243761] FAULT_INJECTION: forcing a failure. [ 1060.243761] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.255422] CPU: 1 PID: 21834 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1060.263315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.272766] Call Trace: [ 1060.275359] dump_stack+0x1b2/0x283 [ 1060.278997] should_fail.cold+0x10a/0x154 [ 1060.283159] should_failslab+0xd6/0x130 [ 1060.287143] __kmalloc+0x2c1/0x400 [ 1060.290690] ? ext4_find_extent+0x772/0x9f0 [ 1060.295012] ext4_find_extent+0x772/0x9f0 [ 1060.299195] ext4_ext_map_blocks+0x16f/0x4b30 [ 1060.303685] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1060.308599] ? HARDIRQ_verbose+0x10/0x10 [ 1060.312724] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1060.317742] ? lock_acquire+0x170/0x3f0 [ 1060.321764] ? lock_acquire+0x170/0x3f0 [ 1060.325723] ? ext4_map_blocks+0x3c7/0x1600 [ 1060.330033] ext4_map_blocks+0xc8f/0x1600 [ 1060.334171] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1060.340391] ? ext4_issue_zeroout+0x150/0x150 [ 1060.344870] ? __ext4_new_inode+0x278/0x4e80 [ 1060.349269] ext4_getblk+0x98/0x3f0 [ 1060.352883] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1060.357191] ? __dquot_initialize+0x3f4/0x980 [ 1060.361696] ext4_bread+0x6c/0x1a0 [ 1060.365231] ? ext4_getblk+0x3f0/0x3f0 [ 1060.369109] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1060.374304] ? security_transition_sid+0xcb/0x120 [ 1060.379130] ? security_transition_sid+0x9d/0x120 [ 1060.387870] ext4_append+0x143/0x350 [ 1060.391601] ext4_mkdir+0x4c9/0xb60 [ 1060.395228] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1060.399893] ? security_inode_mkdir+0xcc/0x100 [ 1060.404466] vfs_mkdir+0x3af/0x620 [ 1060.408004] SyS_mkdirat+0x1b5/0x220 [ 1060.411717] ? SyS_mknod+0x30/0x30 [ 1060.415254] ? do_syscall_64+0x4c/0x640 [ 1060.419233] ? SyS_mkdirat+0x220/0x220 [ 1060.423108] do_syscall_64+0x1d5/0x640 [ 1060.427072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1060.432249] RIP: 0033:0x45c027 [ 1060.435466] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 00:26:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000022111a34f64b960123f5ec8dc2df6e51d77e681682dcc902000000000000000000000c000000001c0000000000000400000000000000e4000006a563ad2ac74cd7337fc65cc655678bbbd7eddc440037e36399570dad55602f958615b037bc05e6ce7db94a1659a2878c42447e00046c9ad993"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x200000000004, &(0x7f0000000340)="9b73f52f3cfd25c185f9cf14c4f4b3f8eadebc67ea481ad516e2eaa535243da0804a4a146b49f2e158498c20c0cb1a2e305efe063b51b1f7421e2f536337feb7456d78fe3086d3f45bebcb55c2261077808f28faf479cd3cef41a9db07d50f98bb004c6561d95918f308f645630ef91b4df02aae3460f26fe78d6e9ec76cb42f1001d279e6020e66c835727e7a7ded587b94f7290ce4fbdac3686f03c74c07db6c27ccd4d92b5b588423a2ed2da6325a7263a4c05e72fd188f6270248341a1002a65e22013aee00486e5cdd45d356cce61b78254614917") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x2, 0x0, 0x0, {0x6}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r7, &(0x7f00000017c0), 0x375, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="b72308000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000280)={0x2, 'veth1_to_hsr\x00', {}, 0x8000}) getsockname$unix(r4, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) [ 1060.443174] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1060.450648] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1060.457933] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1060.465207] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1060.472654] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000080)='FROZEN\x00', 0x7) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:37 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1060.499697] BTRFS error (device loop1): superblock checksum mismatch 00:26:37 executing program 1 (fault-call:0 fault-nth:45): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1060.558006] BTRFS error (device loop1): open_ctree failed 00:26:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000b189ce80aabd7024aeb51be90d7f759a7c6d2477d90f69eac4ea081663fa22745bc17fff0100000000000027629ba23ea3625c954f5b6633734a991f3a61add58679d5195b21c8e8c5b118eb4a16a31d755f79845306911631a315b1b96377b616f3ba8f4ce0771b2f3f41e0b868649de76928354dab65cb9f6e148c8a65db21208583efe9791efdcb005966289eaae0000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="ded8e60afd6394bb028c1ea5dcba120672580f4f2653b53a5e2ee8b1afc6c91635f8610f6fe57c591cba74468868547aa4ce0555977d44e70a2210a877509cba7348948f405f1aee1745e5767565c26e8e65dd98d1f47257ce2d4b2de85c0edd9da3964219fbbddb693dbbc0dcbaa13515c0f97972b77f088a842e8a553856851c91740c81124a9fe8fe9897df5b121b27fa11e9c2f85d1723f3c635c550003758e82c304a63d6fadcba6c9fb824e3cfe0d6ec0afc3eab23dfca92f0d278576de7543fe926062a", 0xc7}, {&(0x7f00000003c0)="30bf394ca63508eb19af7932f1ff284d5f632462cf1f04c765cd62f01a06433455d86ab075430dc0f59259c330346eebd1c69d552e99a66bef1b9ee854c1860b6168710068", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1060.650724] FAULT_INJECTION: forcing a failure. [ 1060.650724] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.665816] CPU: 1 PID: 21863 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1060.673820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.683184] Call Trace: [ 1060.685783] dump_stack+0x1b2/0x283 [ 1060.689426] should_fail.cold+0x10a/0x154 [ 1060.693589] should_failslab+0xd6/0x130 [ 1060.697574] __kmalloc+0x2c1/0x400 [ 1060.701113] ? ext4_find_extent+0x772/0x9f0 [ 1060.705518] ext4_find_extent+0x772/0x9f0 [ 1060.709661] ext4_ext_map_blocks+0x16f/0x4b30 [ 1060.714141] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1060.719067] ? HARDIRQ_verbose+0x10/0x10 [ 1060.723221] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1060.729019] ? ext4_map_blocks+0x5c6/0x1600 [ 1060.733615] ? lock_acquire+0x170/0x3f0 [ 1060.737592] ? ext4_map_blocks+0x798/0x1600 [ 1060.741899] ext4_map_blocks+0x7ea/0x1600 [ 1060.746177] ? ext4_issue_zeroout+0x150/0x150 00:26:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1060.750662] ? __ext4_new_inode+0x278/0x4e80 [ 1060.755067] ext4_getblk+0x98/0x3f0 [ 1060.758687] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1060.763007] ? __dquot_initialize+0x3f4/0x980 [ 1060.767507] ext4_bread+0x6c/0x1a0 [ 1060.771049] ? ext4_getblk+0x3f0/0x3f0 [ 1060.774938] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1060.780140] ? security_transition_sid+0xcb/0x120 [ 1060.784986] ? security_transition_sid+0x9d/0x120 [ 1060.789839] ext4_append+0x143/0x350 [ 1060.793561] ext4_mkdir+0x4c9/0xb60 [ 1060.797198] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1060.801879] ? security_inode_mkdir+0xcc/0x100 [ 1060.806469] vfs_mkdir+0x3af/0x620 [ 1060.810021] SyS_mkdirat+0x1b5/0x220 [ 1060.813744] ? SyS_mknod+0x30/0x30 [ 1060.817289] ? do_syscall_64+0x4c/0x640 [ 1060.821258] ? SyS_mkdirat+0x220/0x220 [ 1060.825310] do_syscall_64+0x1d5/0x640 [ 1060.829195] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1060.834395] RIP: 0033:0x45c027 [ 1060.837743] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 00:26:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000280)="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", &(0x7f0000000140)="66cf1a0f7906f7c14b291f002295f2c8c824cfb6f7b4fb2dbba272bcd0b080b817ef196d03223108e5a6f6027f6aa1e1141775068f2d1b5abaddf1a8e0d6da8114ff31e8c81426e2f863fae99b2af2ad6079e1913a791cf1633553d0cf7eec"}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0xf, 0x1}, {0x8, 0x3f}, {0x8, 0xea2}, {0x10, 0x8a4}]}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @ptr={0x8}, @var={0xffffffff}]}}, 0x0, 0x72, 0x0, 0xfffffffe}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000240)={'mangle\x00'}, &(0x7f0000001280)=0x24) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x1, 0x4) preadv(r0, &(0x7f00000017c0), 0x375, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180)=0x1, 0x4) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) fadvise64(r2, 0x1, 0xffffffff, 0x2) [ 1060.845438] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1060.852705] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1060.859984] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1060.867263] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1060.874547] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:40 executing program 1 (fault-call:0 fault-nth:46): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1062.958334] FAULT_INJECTION: forcing a failure. [ 1062.958334] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.970371] CPU: 0 PID: 21899 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1062.978274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.987638] Call Trace: [ 1062.990241] dump_stack+0x1b2/0x283 [ 1062.993890] should_fail.cold+0x10a/0x154 [ 1062.998055] should_failslab+0xd6/0x130 [ 1063.002046] kmem_cache_alloc+0x28e/0x3c0 [ 1063.006286] ext4_mb_new_blocks+0x51f/0x3a50 [ 1063.010686] ? ext4_ext_search_right+0x2bc/0xaa0 [ 1063.015439] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1063.020502] ext4_ext_map_blocks+0x24a9/0x4b30 [ 1063.025184] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1063.030186] ? ext4_map_blocks+0x5c6/0x1600 [ 1063.034500] ext4_map_blocks+0x7ea/0x1600 [ 1063.038632] ? ext4_issue_zeroout+0x150/0x150 [ 1063.043108] ? __ext4_new_inode+0x278/0x4e80 [ 1063.047589] ext4_getblk+0x98/0x3f0 [ 1063.051202] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1063.055685] ? __dquot_initialize+0x3f4/0x980 [ 1063.060173] ext4_bread+0x6c/0x1a0 [ 1063.063697] ? ext4_getblk+0x3f0/0x3f0 [ 1063.067703] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1063.072874] ? security_transition_sid+0xcb/0x120 [ 1063.077696] ? security_transition_sid+0x9d/0x120 [ 1063.082523] ext4_append+0x143/0x350 [ 1063.086236] ext4_mkdir+0x4c9/0xb60 [ 1063.089851] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1063.094597] ? security_inode_mkdir+0xcc/0x100 [ 1063.099165] vfs_mkdir+0x3af/0x620 [ 1063.102697] SyS_mkdirat+0x1b5/0x220 [ 1063.106656] ? SyS_mknod+0x30/0x30 [ 1063.110179] ? do_syscall_64+0x4c/0x640 [ 1063.114139] ? SyS_mkdirat+0x220/0x220 [ 1063.118017] do_syscall_64+0x1d5/0x640 [ 1063.121900] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1063.127072] RIP: 0033:0x45c027 [ 1063.130241] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1063.138018] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1063.145271] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 00:26:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff012000", @ANYRES16=0x0, @ANYBLOB="b7230000000000000000060000000a000900aaaaaaaaaaaa000014f8b78d23e9c394b3d2b9a9a143dad6dfd4bb941e9c63a05b"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="57d7cb0e9e154da4442966a846710d3ab83996a2d9f2662bc936f1cfe5e0174d69e3010b1526952494594aeb5294fa9ba465f59517afdb4a09663edb97ff455148a8829d8e143bde0ae6db6212f1b4a5b8da02cdccd9c5dd9922c444ac012ca3"], 0x1c}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x3f, 0x1deccdb3cfa4e0e3}, 0xfffffffffffffd4c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="0832f497d38350418e4bb321019511dc5df26e9a0b06006974f527cc14538d1efb1ffe03284f6d33265be9c604c8fa46336ad7ac0c93f20e96beeb2aa4c457ac17a3a3f1ce", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xd) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0xffff7ffffffffffe, 0x0) [ 1063.152548] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1063.159799] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1063.167058] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:40 executing program 1 (fault-call:0 fault-nth:47): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1063.257754] FAULT_INJECTION: forcing a failure. [ 1063.257754] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.269956] CPU: 0 PID: 21917 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1063.277866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.287230] Call Trace: [ 1063.289832] dump_stack+0x1b2/0x283 [ 1063.293482] should_fail.cold+0x10a/0x154 [ 1063.297645] should_failslab+0xd6/0x130 [ 1063.301635] kmem_cache_alloc+0x28e/0x3c0 [ 1063.305787] ext4_mb_new_blocks+0x51f/0x3a50 [ 1063.310275] ? ext4_ext_search_right+0x2bc/0xaa0 [ 1063.315030] ? ext4_inode_to_goal_block+0x29a/0x3b0 [ 1063.321013] ext4_ext_map_blocks+0x24a9/0x4b30 [ 1063.325595] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 1063.330599] ? ext4_map_blocks+0x5c6/0x1600 [ 1063.334912] ext4_map_blocks+0x7ea/0x1600 [ 1063.339045] ? ext4_issue_zeroout+0x150/0x150 [ 1063.343522] ? __ext4_new_inode+0x278/0x4e80 [ 1063.347917] ext4_getblk+0x98/0x3f0 [ 1063.351545] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1063.355962] ? __dquot_initialize+0x3f4/0x980 [ 1063.360443] ext4_bread+0x6c/0x1a0 [ 1063.363964] ? ext4_getblk+0x3f0/0x3f0 [ 1063.367832] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1063.373004] ? security_transition_sid+0xcb/0x120 [ 1063.377825] ? security_transition_sid+0x9d/0x120 [ 1063.382650] ext4_append+0x143/0x350 [ 1063.386364] ext4_mkdir+0x4c9/0xb60 [ 1063.390003] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1063.394686] ? security_inode_mkdir+0xcc/0x100 [ 1063.399268] vfs_mkdir+0x3af/0x620 [ 1063.402844] SyS_mkdirat+0x1b5/0x220 [ 1063.406545] ? SyS_mknod+0x30/0x30 [ 1063.410066] ? do_syscall_64+0x4c/0x640 [ 1063.414025] ? SyS_mkdirat+0x220/0x220 [ 1063.417940] do_syscall_64+0x1d5/0x640 [ 1063.421826] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1063.426995] RIP: 0033:0x45c027 [ 1063.430168] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1063.437865] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1063.445176] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 00:26:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9fd07d2e5ce9d2eb01100e7d0a590aee7667801d726209b68fc800240000002400000003000000000000000000000000000000000000000c0000000000000028650810b829ae36733e7c55b70e4360cfef1cb00ae388203ce74924575d97b1d66625b5706ed6ea4f2015000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1063.452940] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1063.460197] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 1063.467452] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000f9a1a4ff7e162f1d54ce498cbbec5103000000000000000000000c000000000000001100000004000000002fda5af030b59de322a08e6326bbb4d5a2dbe9ba65ee8aea10b68df0ff8472d47fc70afdabd7d057d237b2c42939c0960620aa762155d4f45d112503525254cc06b1188a6620ed9b8b4d9225eb03c35300031d9939f944d01b8bc7be10820149484dbf826c496a"], 0x0, 0x3f}, 0x20) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x80000001, 0x1e) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm_plock\x00', 0x10200, 0x0) bind$rds(r0, &(0x7f0000000a40)={0x2, 0x4e21, @multicast2}, 0x10) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400089d0364680987992aae15b100002400000002000000000000000000000c000000000000000000000004000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x9) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000140)={0x8, 'macvtap0\x00', {'tunl0\x00'}, 0x3}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x90208018}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x8, 0x0) 00:26:40 executing program 1 (fault-call:0 fault-nth:48): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1063.640125] FAULT_INJECTION: forcing a failure. [ 1063.640125] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.651496] CPU: 1 PID: 21942 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1063.659384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.668772] Call Trace: [ 1063.671463] dump_stack+0x1b2/0x283 [ 1063.675097] should_fail.cold+0x10a/0x154 [ 1063.681176] should_failslab+0xd6/0x130 [ 1063.685169] kmem_cache_alloc+0x40/0x3c0 00:26:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000c00000000000000000000000400000000000000000000000c00"/63], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280), &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x2}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 1063.689250] __es_insert_extent+0x241/0xe20 [ 1063.693675] ext4_es_insert_extent+0x1b9/0x530 [ 1063.698274] ? ext4_es_find_delayed_extent_range+0x930/0x930 [ 1063.704193] ext4_map_blocks+0x9f6/0x1600 [ 1063.708358] ? ext4_issue_zeroout+0x150/0x150 [ 1063.712863] ? __ext4_new_inode+0x278/0x4e80 [ 1063.717287] ext4_getblk+0x98/0x3f0 [ 1063.720930] ? ext4_iomap_begin+0x7f0/0x7f0 [ 1063.725262] ? __dquot_initialize+0x3f4/0x980 [ 1063.729769] ext4_bread+0x6c/0x1a0 [ 1063.733343] ? ext4_getblk+0x3f0/0x3f0 [ 1063.737237] ? inode_get_rsv_space.part.0+0x100/0x100 [ 1063.742436] ? security_transition_sid+0xcb/0x120 [ 1063.747288] ? security_transition_sid+0x9d/0x120 [ 1063.752146] ext4_append+0x143/0x350 [ 1063.757781] ext4_mkdir+0x4c9/0xb60 [ 1063.761426] ? ext4_init_dot_dotdot+0x4b0/0x4b0 [ 1063.766202] ? security_inode_mkdir+0xcc/0x100 [ 1063.770827] vfs_mkdir+0x3af/0x620 [ 1063.774379] SyS_mkdirat+0x1b5/0x220 [ 1063.778203] ? SyS_mknod+0x30/0x30 [ 1063.781763] ? do_syscall_64+0x4c/0x640 [ 1063.785744] ? SyS_mkdirat+0x220/0x220 [ 1063.789643] do_syscall_64+0x1d5/0x640 [ 1063.794512] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1063.799705] RIP: 0033:0x45c027 [ 1063.802896] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1063.810611] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045c027 [ 1063.817881] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200001c0 [ 1063.825137] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000a [ 1063.833175] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 00:26:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x6, &(0x7f0000000240)={0x0, 0x0, 0x3, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = gettid() r2 = getpgrp(0x0) getpriority(0x1, r2) ptrace$poke(0x5, r2, &(0x7f0000000180), 0xd6ec) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000a40000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000668f21a33f0d2907686c18d0bb5711d916758ee48f8e9e5a0699960de7b34bed017f59426da1cc7541b0891c1d2e21c4cde8e7f5619c5b0777d4599e3c27fca38ee3fc3ef882ea234e26b3312e9f7304a46d08bbcdda067fd2"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x402, 0x0) [ 1063.840432] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1063.868843] BTRFS error (device loop1): superblock checksum mismatch [ 1063.919691] BTRFS error (device loop1): open_ctree failed 00:26:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000011000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0xde9f, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:43 executing program 1 (fault-call:0 fault-nth:49): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400005318000000000000000c00000000000000000000000e00000000000000000000f9505167dfa3d69e2988e148590d59fa8faac00ca193a065bb559f6868657e0744c36e01221a1ef4195f64b66d455f822347a94d574447cd1cffca3394d7e4590d21ac6d56eb4439b098085c8e10da8b50bd53efd9e8d08b26e2b740ec4651c66363a895d9f3d41e5b296457c902b711fd8d5900f793b447f0d42cd07d9cf1f25e"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1800000000000, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:43 executing program 5: r0 = getpgrp(0x0) getpriority(0x1, r0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='mountinfo\x00') sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x8, 0x1, 0x14, 0x0, 0x3, 0x2, 0x9, 0x6}, 0x0) preadv(r1, &(0x7f00000017c0), 0x375, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000140)=0x3ff, &(0x7f0000000180)=0x4) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000cdf725503a30502abdc967419a687f557d6b0fec1f606851893db38b9d307aaadd8f122f76d9d397c9a7fe5c4338c61e5d382d8f2b340722f5b0f7922163d9fdd0e7787f3396ea963b3eda194f8d"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 00:26:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x2, &(0x7f0000000240)={0x0, 0x37, 0x1, @thr={&(0x7f0000000140)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x7, r0, 0x3, 0x1) tkill(r0, 0x33) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1066.220920] FAULT_INJECTION: forcing a failure. [ 1066.220920] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.249644] CPU: 1 PID: 21995 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1066.260917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.274011] Call Trace: [ 1066.276618] dump_stack+0x1b2/0x283 [ 1066.280296] should_fail.cold+0x10a/0x154 [ 1066.284508] should_failslab+0xd6/0x130 [ 1066.288560] kmem_cache_alloc+0x40/0x3c0 [ 1066.292774] __sigqueue_alloc+0x1b8/0x3e0 [ 1066.296980] __send_signal+0x193/0x1280 [ 1066.301005] force_sig_info+0x240/0x340 [ 1066.305039] force_sig_info_fault.constprop.0+0x185/0x260 [ 1066.310648] ? is_prefetch.isra.0.part.0+0x300/0x300 [ 1066.315819] ? is_prefetch.isra.0.part.0+0x1fa/0x300 [ 1066.321034] ? bad_area+0x4e/0x80 [ 1066.324562] ? pgtable_bad+0x110/0x110 [ 1066.328508] ? lock_downgrade+0x6e0/0x6e0 [ 1066.332717] __bad_area_nosemaphore+0x1d6/0x2c0 [ 1066.341964] ? up_read+0x17/0x30 [ 1066.354261] __do_page_fault+0x842/0xb50 [ 1066.358403] ? mm_fault_error+0x2c0/0x2c0 [ 1066.362582] ? do_page_fault+0x60/0x4f2 [ 1066.366630] ? page_fault+0x2f/0x50 [ 1066.370529] page_fault+0x45/0x50 [ 1066.373982] RIP: 0c2b:0x4ce7e0 [ 1066.377428] RSP: 50a2a0:000000000078bf00 EFLAGS: 00000003 [ 1066.414798] BTRFS error (device loop1): superblock checksum mismatch [ 1066.457127] BTRFS error (device loop1): open_ctree failed 00:26:43 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x141800, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000140)) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xd7d, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, {0xa, 0x4e23, 0x7fffffff, @empty, 0x10001}, 0xfffd, [0x502, 0x8001, 0xd39, 0x8, 0x8, 0xfffffffc, 0x1, 0xff]}, 0x5c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x57c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7ff}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x7, 0x81}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x81}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x600000}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x10000}, {0x8, 0x0, 0xe6}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xf526}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x10000}]}, @NL80211_ATTR_IE={0x4c3, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}]}, 0x57c}}, 0x48011) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x0, 0x0, 0x3e, 0x0, "4f2ddbbbd0ec61b3fe6a751b4f99f4259477eae77dd7085124df515bb5e2155360ff767221d01d3ba1231b8454367715018ef6cd5cce391b213e5b6569c7d29a28685e5b502124e9608b012c96b8388e"}, 0xd8) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 00:26:43 executing program 1 (fault-call:0 fault-nth:50): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x404c0c4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000000000010000000000400000000000000000000000c000000000000009377602a092735f1c5494f9c237be4540b0c75796de8a1b3f9d4f07eade34efa32afdf7716b407c60b02dc4b125e3491056bd8c1d5fc33f0af5e994b08defde2d68c123acdf258369943ff51fcbb25c632628d43e2ce7f"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0xff, 0x3) [ 1066.652498] FAULT_INJECTION: forcing a failure. [ 1066.652498] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.665020] CPU: 1 PID: 22033 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1066.672927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.682294] Call Trace: [ 1066.684898] dump_stack+0x1b2/0x283 [ 1066.689590] should_fail.cold+0x10a/0x154 [ 1066.693759] should_failslab+0xd6/0x130 [ 1066.697751] __kmalloc_track_caller+0x2bc/0x400 [ 1066.702447] ? strndup_user+0x5b/0xf0 [ 1066.706268] memdup_user+0x22/0xa0 [ 1066.709822] strndup_user+0x5b/0xf0 [ 1066.713476] ? copy_mnt_ns+0x8a0/0x8a0 [ 1066.717613] SyS_mount+0x39/0x120 [ 1066.721306] ? copy_mnt_ns+0x8a0/0x8a0 [ 1066.725293] do_syscall_64+0x1d5/0x640 [ 1066.729379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1066.735122] RIP: 0033:0x45f5fa [ 1066.738676] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 00:26:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000bf0000240000002400000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200)=0xffff, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x201580, 0x0) write$P9_RRENAME(r3, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1066.746604] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1066.753897] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1066.761581] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1066.768934] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1066.776555] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 1 (fault-call:0 fault-nth:51): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1068.993868] FAULT_INJECTION: forcing a failure. [ 1068.993868] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.005525] CPU: 1 PID: 22056 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1069.013427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.022830] Call Trace: [ 1069.025430] dump_stack+0x1b2/0x283 [ 1069.029074] should_fail.cold+0x10a/0x154 [ 1069.033232] should_failslab+0xd6/0x130 [ 1069.037263] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1069.041922] ? _copy_from_user+0x94/0x100 [ 1069.046050] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.049917] copy_mount_options+0x59/0x2e0 [ 1069.054133] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.059215] SyS_mount+0x84/0x120 [ 1069.062690] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.066579] do_syscall_64+0x1d5/0x640 [ 1069.070455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.075623] RIP: 0033:0x45f5fa [ 1069.078796] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1069.086488] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1069.094010] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1069.101269] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1069.108607] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1069.115854] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000f4ffff230000002400009ed448e5dc060a43d1fe5238bd83dc8400030000000000000000a6e30c00f33d6736828c743e5eba80475700000000000000000040670400000000000000000000000c00000000000000b46ffb55efd4a57efc00d2fea2b6d91d90408dc222b694395a6823c233df63dbff4e5590e971bb9e1a090780e21a574fe51242f1233de8dd"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = getpgrp(0x0) getpriority(0x1, r3) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x8000000000006, &(0x7f0000000200)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 1 (fault-call:0 fault-nth:52): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1069.241545] FAULT_INJECTION: forcing a failure. [ 1069.241545] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.276008] CPU: 0 PID: 22071 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 00:26:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000001000000000000000c00000000000000000000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1069.284039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.293402] Call Trace: [ 1069.296010] dump_stack+0x1b2/0x283 [ 1069.299675] should_fail.cold+0x10a/0x154 [ 1069.303835] should_failslab+0xd6/0x130 [ 1069.307826] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1069.312514] ? _copy_from_user+0x94/0x100 [ 1069.317899] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.322236] copy_mount_options+0x59/0x2e0 [ 1069.326477] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.330499] SyS_mount+0x84/0x120 [ 1069.334017] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.337954] do_syscall_64+0x1d5/0x640 [ 1069.341833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.347017] RIP: 0033:0x45f5fa [ 1069.350233] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1069.386729] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1069.394014] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1069.401303] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1069.408765] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1069.416048] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:46 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000e1000c00000000000000000000000400000000000000000000000c000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) connect$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c95f40d2389533d3ebc2a0000024c89e59d971a88aa6e67d633e329c9a96ab6de878882da0939dc38ff235e98872655c9fe1a156dc69137172ea9bbf253d1cebc1a61afeb1a548524f5014e4226b338db3b5a48674fba5cd873a487e5864e8c8fe63b456fb3dbd9bd4fb1e1078f8054c32818b205130e9454889a23fa19e7e7e0c676a275eaee5d7d04b6aca01b1362a87fe372f631bd5da88d9261c8870d1aca059e98808faf4ca32c6fc1da2f0ff79e", @ANYRES16=r2, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd485b3978f705931, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb3400000002000000000000000000090000ed00000000000000003d04000000000000000c805097af000000000000000eaba5cfcab0385005000000042d0b0000c8fadf08000000883e1f00000000000000"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0)=0x3f, 0x2) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:46 executing program 1 (fault-call:0 fault-nth:53): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1069.647352] FAULT_INJECTION: forcing a failure. [ 1069.647352] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.659189] CPU: 0 PID: 22097 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1069.667101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.676597] Call Trace: [ 1069.679216] dump_stack+0x1b2/0x283 [ 1069.683151] should_fail.cold+0x10a/0x154 [ 1069.687345] should_failslab+0xd6/0x130 [ 1069.691334] __kmalloc_track_caller+0x2bc/0x400 00:26:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1069.696174] ? kstrdup_const+0x35/0x60 [ 1069.700082] ? lock_downgrade+0x6e0/0x6e0 [ 1069.704256] kstrdup+0x36/0x70 [ 1069.707472] kstrdup_const+0x35/0x60 [ 1069.711203] alloc_vfsmnt+0xe0/0x7c0 [ 1069.714946] vfs_kern_mount.part.0+0x27/0x3c0 [ 1069.719467] do_mount+0x3c9/0x25e0 [ 1069.723027] ? copy_mount_string+0x40/0x40 [ 1069.727278] ? copy_mount_options+0x17d/0x2e0 [ 1069.731902] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1069.736771] ? copy_mount_options+0x1ec/0x2e0 [ 1069.741291] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.745212] SyS_mount+0xa8/0x120 [ 1069.748785] ? copy_mnt_ns+0x8a0/0x8a0 [ 1069.752692] do_syscall_64+0x1d5/0x640 [ 1069.756609] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1069.761834] RIP: 0033:0x45f5fa [ 1069.765026] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1069.772724] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1069.780000] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1069.787257] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1069.794516] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1069.801767] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:49 executing program 1 (fault-call:0 fault-nth:54): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1072.026882] FAULT_INJECTION: forcing a failure. [ 1072.026882] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.048395] CPU: 0 PID: 22130 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1072.056360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.065727] Call Trace: [ 1072.068336] dump_stack+0x1b2/0x283 [ 1072.072004] should_fail.cold+0x10a/0x154 [ 1072.076330] should_failslab+0xd6/0x130 [ 1072.080326] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1072.085274] ? _copy_from_user+0x94/0x100 [ 1072.089451] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.093366] copy_mount_options+0x59/0x2e0 [ 1072.097629] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.101533] SyS_mount+0x84/0x120 [ 1072.105084] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.108980] do_syscall_64+0x1d5/0x640 [ 1072.112868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1072.118051] RIP: 0033:0x45f5fa [ 1072.121229] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1072.129651] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1072.137124] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1072.144472] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1072.152010] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1072.159505] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:49 executing program 1 (fault-call:0 fault-nth:55): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1072.292492] FAULT_INJECTION: forcing a failure. [ 1072.292492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1072.304405] CPU: 0 PID: 22146 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1072.313093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.322462] Call Trace: [ 1072.325077] dump_stack+0x1b2/0x283 [ 1072.328738] should_fail.cold+0x10a/0x154 [ 1072.332912] __alloc_pages_nodemask+0x22b/0x2730 [ 1072.337710] ? is_bpf_text_address+0xa3/0x120 [ 1072.342277] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1072.347145] ? trace_hardirqs_on+0x10/0x10 [ 1072.351400] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1072.356349] ? HARDIRQ_verbose+0x10/0x10 [ 1072.360434] ? kasan_kmalloc.part.0+0x4f/0xd0 [ 1072.364955] ? kmem_cache_alloc_trace+0x14d/0x3f0 [ 1072.369822] ? copy_mount_options+0x59/0x2e0 [ 1072.374257] ? SyS_mount+0x84/0x120 [ 1072.377918] cache_grow_begin+0x91/0x410 [ 1072.382059] cache_alloc_refill+0x28c/0x360 [ 1072.386770] kmem_cache_alloc+0x333/0x3c0 [ 1072.391104] getname_flags+0xc8/0x550 [ 1072.394897] user_path_at_empty+0x2a/0x50 [ 1072.399042] do_mount+0x10b/0x25e0 [ 1072.402608] ? copy_mount_string+0x40/0x40 [ 1072.406860] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1072.411879] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1072.416920] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.420991] ? copy_mount_options+0x1ec/0x2e0 [ 1072.425839] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.429733] SyS_mount+0xa8/0x120 [ 1072.433185] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.437081] do_syscall_64+0x1d5/0x640 [ 1072.440960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1072.446137] RIP: 0033:0x45f5fa [ 1072.449320] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1072.457058] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1072.464314] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1072.471586] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1072.478931] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1072.486191] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1072.518935] BTRFS error (device loop1): superblock checksum mismatch [ 1072.576301] BTRFS error (device loop1): open_ctree failed 00:26:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:26:49 executing program 1 (fault-call:0 fault-nth:56): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000df0000000000000000000000000000000c000000000000000d7b83adcbf313154488ffd360251115531cffe884616c51f3957b515ba3e59fd2d48ea325fda554dba51b119208241fb5c07cf444d82fe8bb45b15f76d1e5e2fc9e9ab93ef9b43fe54b360ad8f95ac0dea570e898e619f6a41af1f4ac8d59eff07d579a4974f6108922311c9955b6f28489da76d0183012d20ddd5c3c8a2b13d0c435413068b4c3fb88a7ce6ee117555c7d9707187d46d9631491f096f9efd398f51378865f59e1258bc4a87875f7b811092a81"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) fgetxattr(r3, &(0x7f0000000140)=@random={'os2.', '[\x88%!-]\xe6\x00'}, &(0x7f0000000380)=""/219, 0xdb) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1072.747310] FAULT_INJECTION: forcing a failure. [ 1072.747310] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.761338] CPU: 0 PID: 22177 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1072.769266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.778637] Call Trace: [ 1072.781235] dump_stack+0x1b2/0x283 [ 1072.784884] should_fail.cold+0x10a/0x154 [ 1072.789051] should_failslab+0xd6/0x130 [ 1072.793047] __kmalloc_track_caller+0x2bc/0x400 [ 1072.797733] ? strndup_user+0x5b/0xf0 [ 1072.801548] memdup_user+0x22/0xa0 [ 1072.805097] strndup_user+0x5b/0xf0 [ 1072.808736] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.812639] SyS_mount+0x68/0x120 [ 1072.816104] ? copy_mnt_ns+0x8a0/0x8a0 [ 1072.820101] do_syscall_64+0x1d5/0x640 [ 1072.824090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1072.829290] RIP: 0033:0x45f5fa [ 1072.832492] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1072.840390] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa 00:26:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:26:50 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6ddf35a0860daa0787af9b58d91c000000", @ANYRES16=r2, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x328, r4, 0x600, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x76ec}, {0x6, 0x16, 0x611}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x66}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xe52}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x7fff}, {0x5}, {0x6, 0x11, 0x6d}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x4d1f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x1ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x400}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0xfffffff8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xfff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x339e}, {0x8, 0xb, 0x3}}]}, 0x328}, 0x1, 0x0, 0x0, 0x40000}, 0x5) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000006c09000000000000000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000e4da85d26765726afd639cb31d2f5cd06b94f31668d26207a3f55e85"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1072.847674] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1072.854952] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1072.862233] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1072.869511] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024c8ab830b000000030000000000000000000000a600000000000000000000000c00000000000000000000000000000000000050c845b53c77e13f6325fe7ea779d902529979fff03507c7f402dd044dfa4a8f6acab926d7a09e2e14950953b6b290e524ea2fd6fc860c1855874a09aad09690209057333a900437a4abefea52400614d6c643ac2e272d85a7d093e44557b5ccd6685a00"/173], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:50 executing program 1 (fault-call:0 fault-nth:57): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:50 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x608000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x20040080) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e00000000000000000000efb7d8890000d6819bf91ff0e4"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r5}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x4, 0x30}, 0xc) ptrace$cont(0x7, r0, 0x0, 0x3) [ 1073.017509] FAULT_INJECTION: forcing a failure. [ 1073.017509] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.030337] CPU: 1 PID: 22223 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1073.038264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.047637] Call Trace: [ 1073.050243] dump_stack+0x1b2/0x283 [ 1073.053893] should_fail.cold+0x10a/0x154 [ 1073.058071] should_failslab+0xd6/0x130 [ 1073.062065] __kmalloc+0x2c1/0x400 [ 1073.065647] ? btrfs_mount+0x189/0x2838 [ 1073.069680] btrfs_mount+0x189/0x2838 [ 1073.073504] ? _find_next_bit+0xdb/0x100 [ 1073.077587] ? pcpu_alloc+0x37d/0xf70 [ 1073.082036] ? btrfs_remount+0x10c0/0x10c0 [ 1073.086306] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1073.091823] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1073.096956] ? pcpu_alloc+0xe1/0xf70 [ 1073.101066] ? pcpu_find_block_fit+0x380/0x380 [ 1073.106933] ? __lockdep_init_map+0x100/0x560 [ 1073.111805] ? __lockdep_init_map+0x100/0x560 [ 1073.116515] mount_fs+0x92/0x2a0 [ 1073.119912] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1073.124435] do_mount+0x3c9/0x25e0 [ 1073.128095] ? copy_mount_string+0x40/0x40 [ 1073.132361] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1073.137223] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.141226] ? copy_mount_options+0x1ec/0x2e0 [ 1073.145758] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.149938] SyS_mount+0xa8/0x120 [ 1073.153417] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.157353] do_syscall_64+0x1d5/0x640 [ 1073.161426] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1073.166638] RIP: 0033:0x45f5fa [ 1073.170000] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1073.177758] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1073.185053] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1073.192331] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1073.199597] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1073.206864] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:50 executing program 1 (fault-call:0 fault-nth:58): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1073.291219] FAULT_INJECTION: forcing a failure. [ 1073.291219] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.308182] CPU: 0 PID: 22242 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1073.316114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.325476] Call Trace: [ 1073.328081] dump_stack+0x1b2/0x283 [ 1073.331723] should_fail.cold+0x10a/0x154 [ 1073.335914] should_failslab+0xd6/0x130 [ 1073.339946] kmem_cache_alloc+0x28e/0x3c0 [ 1073.344084] alloc_vfsmnt+0x23/0x7c0 [ 1073.347847] vfs_kern_mount.part.0+0x27/0x3c0 [ 1073.352337] vfs_kern_mount+0x3c/0x60 [ 1073.356136] btrfs_mount+0x2a0/0x2838 [ 1073.359944] ? _find_next_bit+0xdb/0x100 [ 1073.364047] ? pcpu_alloc+0x37d/0xf70 [ 1073.367843] ? btrfs_remount+0x10c0/0x10c0 [ 1073.372071] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1073.377528] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1073.382541] ? pcpu_alloc+0xe1/0xf70 [ 1073.386348] ? pcpu_find_block_fit+0x380/0x380 [ 1073.390925] ? __lockdep_init_map+0x100/0x560 [ 1073.395417] ? __lockdep_init_map+0x100/0x560 [ 1073.399948] mount_fs+0x92/0x2a0 [ 1073.403307] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1073.407812] do_mount+0x3c9/0x25e0 [ 1073.411354] ? copy_mount_string+0x40/0x40 [ 1073.415583] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1073.420420] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.424297] ? copy_mount_options+0x1ec/0x2e0 [ 1073.428785] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.432754] SyS_mount+0xa8/0x120 [ 1073.436190] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.440075] do_syscall_64+0x1d5/0x640 [ 1073.443960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1073.449138] RIP: 0033:0x45f5fa [ 1073.452307] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1073.460008] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1073.467266] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1073.474544] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1073.481803] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1073.489057] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:50 executing program 1 (fault-call:0 fault-nth:59): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1073.617782] FAULT_INJECTION: forcing a failure. [ 1073.617782] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.633365] CPU: 0 PID: 22249 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1073.641485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.650853] Call Trace: [ 1073.653457] dump_stack+0x1b2/0x283 [ 1073.657085] should_fail.cold+0x10a/0x154 [ 1073.661242] should_failslab+0xd6/0x130 [ 1073.665203] kmem_cache_alloc+0x28e/0x3c0 [ 1073.669336] alloc_vfsmnt+0x23/0x7c0 [ 1073.673063] vfs_kern_mount.part.0+0x27/0x3c0 [ 1073.677544] vfs_kern_mount+0x3c/0x60 [ 1073.681378] btrfs_mount+0x2a0/0x2838 [ 1073.685163] ? _find_next_bit+0xdb/0x100 [ 1073.689205] ? pcpu_alloc+0x37d/0xf70 [ 1073.692989] ? btrfs_remount+0x10c0/0x10c0 [ 1073.697211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1073.702644] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1073.707645] ? pcpu_alloc+0xe1/0xf70 [ 1073.711343] ? pcpu_find_block_fit+0x380/0x380 [ 1073.715905] ? __lockdep_init_map+0x100/0x560 [ 1073.720388] ? __lockdep_init_map+0x100/0x560 [ 1073.724869] mount_fs+0x92/0x2a0 [ 1073.728221] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1073.732702] do_mount+0x3c9/0x25e0 [ 1073.736237] ? copy_mount_string+0x40/0x40 [ 1073.740506] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1073.745333] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.749203] ? copy_mount_options+0x1ec/0x2e0 [ 1073.753680] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.757554] SyS_mount+0xa8/0x120 [ 1073.761040] ? copy_mnt_ns+0x8a0/0x8a0 [ 1073.764929] do_syscall_64+0x1d5/0x640 [ 1073.768806] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1073.773983] RIP: 0033:0x45f5fa [ 1073.777214] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1073.784915] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1073.792170] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1073.799480] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1073.806736] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1073.813990] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:50 executing program 1 (fault-call:0 fault-nth:60): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1073.888527] FAULT_INJECTION: forcing a failure. [ 1073.888527] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.900483] CPU: 0 PID: 22258 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1073.908376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.917738] Call Trace: [ 1073.920331] dump_stack+0x1b2/0x283 [ 1073.923986] should_fail.cold+0x10a/0x154 [ 1073.928148] should_failslab+0xd6/0x130 [ 1073.932113] __kmalloc_track_caller+0x2bc/0x400 [ 1073.936782] ? kstrdup_const+0x35/0x60 [ 1073.940664] ? lock_downgrade+0x6e0/0x6e0 [ 1073.944801] kstrdup+0x36/0x70 [ 1073.947975] kstrdup_const+0x35/0x60 [ 1073.951677] alloc_vfsmnt+0xe0/0x7c0 [ 1073.955436] vfs_kern_mount.part.0+0x27/0x3c0 [ 1073.959956] vfs_kern_mount+0x3c/0x60 [ 1073.963759] btrfs_mount+0x2a0/0x2838 [ 1073.967560] ? _find_next_bit+0xdb/0x100 [ 1073.971607] ? pcpu_alloc+0x37d/0xf70 [ 1073.975388] ? btrfs_remount+0x10c0/0x10c0 [ 1073.979615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1073.985047] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1073.990052] ? pcpu_alloc+0xe1/0xf70 [ 1073.993759] ? pcpu_find_block_fit+0x380/0x380 [ 1073.998329] ? __lockdep_init_map+0x100/0x560 [ 1074.002815] ? __lockdep_init_map+0x100/0x560 [ 1074.007302] mount_fs+0x92/0x2a0 [ 1074.010668] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1074.015155] do_mount+0x3c9/0x25e0 [ 1074.018703] ? copy_mount_string+0x40/0x40 [ 1074.022974] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1074.028017] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.032663] ? copy_mount_options+0x1ec/0x2e0 [ 1074.037484] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.041538] SyS_mount+0xa8/0x120 [ 1074.045967] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.051256] do_syscall_64+0x1d5/0x640 [ 1074.055301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1074.060727] RIP: 0033:0x45f5fa [ 1074.064190] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1074.072027] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1074.079362] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1074.086723] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1074.093996] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1074.101250] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:51 executing program 1 (fault-call:0 fault-nth:61): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1074.174857] FAULT_INJECTION: forcing a failure. [ 1074.174857] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.187474] CPU: 1 PID: 22264 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1074.195388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.204750] Call Trace: [ 1074.207358] dump_stack+0x1b2/0x283 [ 1074.211005] should_fail.cold+0x10a/0x154 [ 1074.215160] should_failslab+0xd6/0x130 [ 1074.219121] __kmalloc_track_caller+0x2bc/0x400 [ 1074.223820] ? btrfs_parse_early_options+0xa3/0x310 [ 1074.228863] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1074.233776] kstrdup+0x36/0x70 [ 1074.237065] btrfs_parse_early_options+0xa3/0x310 [ 1074.242129] ? __lock_acquire+0x655/0x42a0 [ 1074.246356] ? btrfs_kill_super+0x540/0x540 [ 1074.250693] ? lock_acquire+0x170/0x3f0 [ 1074.255540] ? pcpu_alloc+0x86f/0xf70 [ 1074.260160] ? _find_next_bit+0xdb/0x100 [ 1074.264337] ? pcpu_next_unpop+0x8c/0x100 [ 1074.268632] btrfs_mount+0x119/0x2838 [ 1074.273355] ? lock_downgrade+0x6e0/0x6e0 [ 1074.277507] ? _find_next_bit+0xdb/0x100 [ 1074.281650] ? pcpu_alloc+0x37d/0xf70 [ 1074.285607] ? btrfs_remount+0x10c0/0x10c0 [ 1074.289960] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1074.295687] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1074.302987] ? pcpu_alloc+0xe1/0xf70 [ 1074.308374] ? pcpu_find_block_fit+0x380/0x380 [ 1074.315313] ? __lockdep_init_map+0x100/0x560 [ 1074.320621] ? __lockdep_init_map+0x100/0x560 [ 1074.325825] mount_fs+0x92/0x2a0 [ 1074.329347] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1074.339307] vfs_kern_mount+0x3c/0x60 [ 1074.344876] btrfs_mount+0x2a0/0x2838 [ 1074.351566] ? _find_next_bit+0xdb/0x100 [ 1074.355857] ? pcpu_alloc+0x37d/0xf70 [ 1074.360110] ? btrfs_remount+0x10c0/0x10c0 [ 1074.367717] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1074.374512] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1074.380675] ? pcpu_alloc+0xe1/0xf70 [ 1074.385429] ? pcpu_find_block_fit+0x380/0x380 [ 1074.391343] ? __lockdep_init_map+0x100/0x560 [ 1074.395846] ? __lockdep_init_map+0x100/0x560 [ 1074.400353] mount_fs+0x92/0x2a0 [ 1074.403725] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1074.408211] do_mount+0x3c9/0x25e0 [ 1074.411741] ? copy_mount_string+0x40/0x40 [ 1074.416030] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1074.421799] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.425707] ? copy_mount_options+0x1ec/0x2e0 [ 1074.430805] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.434841] SyS_mount+0xa8/0x120 [ 1074.438383] ? copy_mnt_ns+0x8a0/0x8a0 [ 1074.442347] do_syscall_64+0x1d5/0x640 [ 1074.446714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1074.452247] RIP: 0033:0x45f5fa [ 1074.456298] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1074.464021] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1074.471686] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1074.479058] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1074.486439] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1074.494393] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:53 executing program 1 (fault-call:0 fault-nth:62): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:53 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x56}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = getpgrp(0x0) getpriority(0x1, r1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x1f, 0x0, @tid=r1}, &(0x7f0000000140)) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1075.973927] FAULT_INJECTION: forcing a failure. [ 1075.973927] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.032815] CPU: 1 PID: 22277 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1076.040764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.050135] Call Trace: [ 1076.052743] dump_stack+0x1b2/0x283 [ 1076.056394] should_fail.cold+0x10a/0x154 [ 1076.060569] should_failslab+0xd6/0x130 [ 1076.064558] __kmalloc+0x2c1/0x400 [ 1076.068107] ? match_strdup+0x58/0xa0 [ 1076.071913] match_strdup+0x58/0xa0 [ 1076.075525] btrfs_parse_early_options+0x241/0x310 [ 1076.080436] ? __lock_acquire+0x655/0x42a0 [ 1076.084666] ? btrfs_kill_super+0x540/0x540 [ 1076.088970] ? lock_acquire+0x170/0x3f0 [ 1076.092953] ? pcpu_next_unpop+0x8c/0x100 [ 1076.097085] btrfs_mount+0x119/0x2838 [ 1076.100868] ? lock_downgrade+0x6e0/0x6e0 [ 1076.105006] ? _find_next_bit+0xdb/0x100 [ 1076.109049] ? pcpu_alloc+0x37d/0xf70 [ 1076.112837] ? btrfs_remount+0x10c0/0x10c0 [ 1076.117067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1076.122503] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1076.127509] ? pcpu_alloc+0xe1/0xf70 [ 1076.131210] ? pcpu_find_block_fit+0x380/0x380 [ 1076.135774] ? __lockdep_init_map+0x100/0x560 [ 1076.140268] ? __lockdep_init_map+0x100/0x560 [ 1076.144748] mount_fs+0x92/0x2a0 [ 1076.148141] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1076.152720] vfs_kern_mount+0x3c/0x60 [ 1076.156513] btrfs_mount+0x2a0/0x2838 [ 1076.160302] ? _find_next_bit+0xdb/0x100 [ 1076.164376] ? pcpu_alloc+0x37d/0xf70 [ 1076.168178] ? btrfs_remount+0x10c0/0x10c0 [ 1076.172402] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1076.177835] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1076.182835] ? pcpu_alloc+0xe1/0xf70 [ 1076.186539] ? pcpu_find_block_fit+0x380/0x380 [ 1076.191106] ? __lockdep_init_map+0x100/0x560 [ 1076.195587] ? __lockdep_init_map+0x100/0x560 [ 1076.200070] mount_fs+0x92/0x2a0 [ 1076.203422] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1076.207903] do_mount+0x3c9/0x25e0 [ 1076.211462] ? copy_mount_string+0x40/0x40 [ 1076.215685] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1076.220509] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.224387] ? copy_mount_options+0x1ec/0x2e0 [ 1076.228882] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.232872] SyS_mount+0xa8/0x120 [ 1076.236325] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.240203] do_syscall_64+0x1d5/0x640 [ 1076.244078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1076.249249] RIP: 0033:0x45f5fa [ 1076.252425] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1076.260122] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1076.267389] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1076.274651] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1076.281901] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1076.289151] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x2, 0x3, 0x288, 0x0, 0xe8, 0xe8, 0xe8, 0xe8, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'syz_tun\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0xe8000000, 0x6000000}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'vlan1\x00', 'vlan0\x00'}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x28d) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x9) ioctl$RTC_VL_CLR(r3, 0x7014) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/338, @ANYRES64=r2, @ANYRESHEX, @ANYRES64], 0x0, 0x57, 0x0, 0xfffffffd}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) 00:26:53 executing program 1 (fault-call:0 fault-nth:63): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1076.438986] xt_limit: Overflow, try lower: 3892314112/100663296 [ 1076.450806] ptrace attach of "/root/syz-executor.4"[22299] was attempted by "/root/syz-executor.4"[22301] [ 1076.476199] FAULT_INJECTION: forcing a failure. [ 1076.476199] name failslab, interval 1, probability 0, space 0, times 0 00:26:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c03a27acfe3d0bc8f230c7797eb1153d9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000001c0)={'veth0_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800006209bdb2002400e9970000240000000300000000030700000002000072c196ee3a61aba6f56fa7776f0000000000000005fc20340000000000000000000000ad00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$GETZCNT(r3, 0x0, 0xf, &(0x7f00000003c0)=""/232) [ 1076.493056] xt_limit: Overflow, try lower: 3892314112/100663296 [ 1076.516642] CPU: 0 PID: 22300 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1076.524588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.529164] veth0_vlan: Invalid MTU 0 requested, hw min 68 [ 1076.533946] Call Trace: [ 1076.533969] dump_stack+0x1b2/0x283 [ 1076.533986] should_fail.cold+0x10a/0x154 [ 1076.534000] should_failslab+0xd6/0x130 [ 1076.553938] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1076.558621] selinux_parse_opts_str+0x48d/0xa00 [ 1076.563303] ? debug_object_activate+0x450/0x450 [ 1076.568097] ? selinux_key_alloc+0x1a0/0x1a0 [ 1076.572539] ? selinux_sb_copy_data+0x206/0x380 [ 1076.577234] security_sb_parse_opts_str+0x6e/0xa0 [ 1076.582091] parse_security_options+0x49/0x90 [ 1076.586596] btrfs_mount+0x502/0x2838 [ 1076.590412] ? _find_next_bit+0xdb/0x100 [ 1076.594504] ? pcpu_alloc+0x37d/0xf70 [ 1076.598316] ? btrfs_remount+0x10c0/0x10c0 [ 1076.602566] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1076.608026] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1076.613090] ? pcpu_alloc+0xe1/0xf70 [ 1076.616825] ? __lockdep_init_map+0x100/0x560 [ 1076.621344] ? __lockdep_init_map+0x100/0x560 [ 1076.625864] mount_fs+0x92/0x2a0 [ 1076.629253] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1076.633765] vfs_kern_mount+0x3c/0x60 [ 1076.637587] btrfs_mount+0x2a0/0x2838 [ 1076.641166] veth0_vlan: Invalid MTU 0 requested, hw min 68 [ 1076.641397] ? _find_next_bit+0xdb/0x100 [ 1076.651079] ? pcpu_alloc+0x37d/0xf70 [ 1076.654905] ? btrfs_remount+0x10c0/0x10c0 [ 1076.659545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1076.665648] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1076.670808] ? pcpu_alloc+0xe1/0xf70 [ 1076.674548] ? pcpu_find_block_fit+0x380/0x380 [ 1076.679143] ? __lockdep_init_map+0x100/0x560 [ 1076.683656] ? __lockdep_init_map+0x100/0x560 [ 1076.688167] mount_fs+0x92/0x2a0 [ 1076.691561] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1076.696072] do_mount+0x3c9/0x25e0 [ 1076.699639] ? copy_mount_string+0x40/0x40 [ 1076.703885] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1076.708738] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.712645] ? copy_mount_options+0x1ec/0x2e0 [ 1076.717239] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.721137] SyS_mount+0xa8/0x120 [ 1076.724599] ? copy_mnt_ns+0x8a0/0x8a0 [ 1076.728502] do_syscall_64+0x1d5/0x640 [ 1076.732407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1076.737608] RIP: 0033:0x45f5fa [ 1076.740814] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1076.748534] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1076.755810] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1076.763086] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1076.770477] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1076.777756] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) 00:26:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() prctl$PR_SET_FP_MODE(0x2d, 0x1) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d0f9ffffffe79eaf9278", 0x0}}, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000380)={0x0, 0x20, 0x4, @thr={&(0x7f0000000280)="194aedd7c848850478aed01a9ec49b0966e7f919cd3030492f0f2dd1697571d12f90f3763b116de47cc0d0bf2716f5b678cc10f3afe0e02f918703fb60823cfc73ef73d80504a2d0cc9b1b8b043428f52c6ae52b72e55a1e33f80507a57f86b7d8e67368eb44fe2238e6c80128677476f4c5eaf14786f6dbb1c8abb8a8e91cc44df015ad2e23d55f1c15cb200763175a40620c69d5e9bd5ec03cf67b09aa945fa57ad91637ab492541a0c278fc56ff9cf3d36b00d85bdba3ab0e867380b4c6e15288c69c8fc04332", &(0x7f0000000140)="97beac86db77882bd92d2b14643d856b2f46dbc2cc34e920946d7f88620ab37002eea2a8977cbadf8b7cb978fcadf0acf0c72d8a2096f82e96ea00299b7ec1d7b9ac5f3ac28c9869b30123a97a"}}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f0000000400)) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvme-fabrics\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 00:26:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c00000000fa4c488a44449ecf89eddc760d50ca000000030000000600000000000005090010000600000005000000070000000600000002000000020000000700000003000000080000000b0000000400000006000000090000001b3cdfc0ff60a778c59d5afaf03900000000fdffffff0900000005000000400000000000"], 0x0, 0x1b, 0x0, 0x3}, 0x20) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @multicast2}, {0x306, @dev={[], 0x21}}, 0x40, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'batadv_slave_1\x00'}) r4 = getpgrp(0x0) getpriority(0x1, r4) ptrace$setopts(0x4206, r4, 0x200000000000, 0x100000) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000003000000000000000000000c00000000000000000000000400000000000000bf3e00000c00"/63], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) eventfd2(0x3ff, 0x1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x4, {0x6}}, 0x14}}, 0x200080d1) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r2}) 00:26:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:56 executing program 1 (fault-call:0 fault-nth:64): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:56 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x8d15a991e6d1522}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1078.962408] FAULT_INJECTION: forcing a failure. [ 1078.962408] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.989225] CPU: 0 PID: 22352 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1078.997165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.006528] Call Trace: [ 1079.009137] dump_stack+0x1b2/0x283 [ 1079.012792] should_fail.cold+0x10a/0x154 [ 1079.016969] should_failslab+0xd6/0x130 [ 1079.020972] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1079.025671] selinux_parse_opts_str+0x4f8/0xa00 [ 1079.030358] ? debug_object_activate+0x450/0x450 [ 1079.035138] ? selinux_key_alloc+0x1a0/0x1a0 [ 1079.039574] ? selinux_sb_copy_data+0x206/0x380 [ 1079.044265] security_sb_parse_opts_str+0x6e/0xa0 [ 1079.049131] parse_security_options+0x49/0x90 [ 1079.053650] btrfs_mount+0x502/0x2838 [ 1079.057494] ? _find_next_bit+0xdb/0x100 00:26:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1079.061588] ? pcpu_alloc+0x37d/0xf70 [ 1079.065457] ? btrfs_remount+0x10c0/0x10c0 [ 1079.069722] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.075287] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.080424] ? pcpu_alloc+0xe1/0xf70 [ 1079.084157] ? __lockdep_init_map+0x100/0x560 [ 1079.088666] ? __lockdep_init_map+0x100/0x560 [ 1079.093186] mount_fs+0x92/0x2a0 [ 1079.096566] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.101073] vfs_kern_mount+0x3c/0x60 [ 1079.104868] btrfs_mount+0x2a0/0x2838 [ 1079.108668] ? _find_next_bit+0xdb/0x100 [ 1079.112829] ? pcpu_alloc+0x37d/0xf70 [ 1079.116629] ? btrfs_remount+0x10c0/0x10c0 [ 1079.120857] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.126339] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.131345] ? pcpu_alloc+0xe1/0xf70 [ 1079.135056] ? pcpu_find_block_fit+0x380/0x380 [ 1079.139731] ? __lockdep_init_map+0x100/0x560 [ 1079.144305] ? __lockdep_init_map+0x100/0x560 [ 1079.148799] mount_fs+0x92/0x2a0 [ 1079.152162] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.156656] do_mount+0x3c9/0x25e0 [ 1079.160187] ? copy_mount_string+0x40/0x40 [ 1079.164468] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1079.169304] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.173712] ? copy_mount_options+0x1ec/0x2e0 [ 1079.178371] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.182387] SyS_mount+0xa8/0x120 [ 1079.185852] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.189751] do_syscall_64+0x1d5/0x640 [ 1079.193651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1079.199367] RIP: 0033:0x45f5fa [ 1079.202554] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1079.210260] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1079.217549] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1079.224997] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1079.232699] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1079.240147] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:56 executing program 1 (fault-call:0 fault-nth:65): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1079.340835] FAULT_INJECTION: forcing a failure. [ 1079.340835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.354110] CPU: 0 PID: 22377 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1079.362205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.371869] Call Trace: [ 1079.374480] dump_stack+0x1b2/0x283 [ 1079.378122] should_fail.cold+0x10a/0x154 [ 1079.382277] __alloc_pages_nodemask+0x22b/0x2730 [ 1079.387133] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.392776] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.398286] ? __alloc_pages_nodemask+0x1a8a/0x2730 [ 1079.403701] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1079.408736] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1079.413576] ? btrfs_parse_early_options+0x19d/0x310 [ 1079.418685] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1079.423784] alloc_pages_current+0xe7/0x1e0 [ 1079.428801] __get_free_pages+0xb/0x40 [ 1079.432682] selinux_sb_copy_data+0x28/0x380 [ 1079.437087] security_sb_copy_data+0x6e/0xa0 [ 1079.441491] parse_security_options+0x32/0x90 [ 1079.445980] btrfs_mount+0x502/0x2838 [ 1079.449867] ? _find_next_bit+0xdb/0x100 [ 1079.453933] ? pcpu_alloc+0x37d/0xf70 [ 1079.457731] ? btrfs_remount+0x10c0/0x10c0 [ 1079.461978] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.467446] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.472631] ? pcpu_alloc+0xe1/0xf70 [ 1079.476359] ? __lockdep_init_map+0x100/0x560 [ 1079.480872] ? __lockdep_init_map+0x100/0x560 [ 1079.485386] mount_fs+0x92/0x2a0 [ 1079.488778] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.493291] vfs_kern_mount+0x3c/0x60 [ 1079.497087] btrfs_mount+0x2a0/0x2838 [ 1079.500939] ? _find_next_bit+0xdb/0x100 [ 1079.505001] ? pcpu_alloc+0x37d/0xf70 [ 1079.508802] ? btrfs_remount+0x10c0/0x10c0 [ 1079.513203] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.518655] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.523672] ? pcpu_alloc+0xe1/0xf70 [ 1079.527398] ? pcpu_find_block_fit+0x380/0x380 [ 1079.531982] ? __lockdep_init_map+0x100/0x560 [ 1079.536546] ? __lockdep_init_map+0x100/0x560 [ 1079.541043] mount_fs+0x92/0x2a0 [ 1079.544405] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.548907] do_mount+0x3c9/0x25e0 [ 1079.552476] ? copy_mount_string+0x40/0x40 [ 1079.556810] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1079.561870] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.565863] ? copy_mount_options+0x1ec/0x2e0 [ 1079.570361] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.574247] SyS_mount+0xa8/0x120 [ 1079.577696] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.581579] do_syscall_64+0x1d5/0x640 [ 1079.585460] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1079.590637] RIP: 0033:0x45f5fa [ 1079.593819] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1079.601516] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1079.608794] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1079.616060] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1079.623343] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1079.631023] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:56 executing program 1 (fault-call:0 fault-nth:66): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1079.721442] FAULT_INJECTION: forcing a failure. [ 1079.721442] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.733592] CPU: 0 PID: 22384 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1079.741503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.750865] Call Trace: [ 1079.753458] dump_stack+0x1b2/0x283 [ 1079.757080] should_fail.cold+0x10a/0x154 [ 1079.761217] should_failslab+0xd6/0x130 [ 1079.765173] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1079.769828] selinux_parse_opts_str+0x4f8/0xa00 [ 1079.774501] ? debug_object_activate+0x450/0x450 [ 1079.779254] ? selinux_key_alloc+0x1a0/0x1a0 [ 1079.783652] ? selinux_sb_copy_data+0x206/0x380 [ 1079.788395] security_sb_parse_opts_str+0x6e/0xa0 [ 1079.793255] parse_security_options+0x49/0x90 [ 1079.797816] btrfs_mount+0x502/0x2838 [ 1079.801662] ? _find_next_bit+0xdb/0x100 [ 1079.805711] ? pcpu_alloc+0x37d/0xf70 [ 1079.809764] ? btrfs_remount+0x10c0/0x10c0 [ 1079.814143] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.820442] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.825599] ? pcpu_alloc+0xe1/0xf70 [ 1079.829606] ? __lockdep_init_map+0x100/0x560 [ 1079.834100] ? __lockdep_init_map+0x100/0x560 [ 1079.838888] mount_fs+0x92/0x2a0 [ 1079.842265] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.846992] vfs_kern_mount+0x3c/0x60 [ 1079.850972] btrfs_mount+0x2a0/0x2838 [ 1079.854865] ? _find_next_bit+0xdb/0x100 [ 1079.859316] ? pcpu_alloc+0x37d/0xf70 [ 1079.863559] ? btrfs_remount+0x10c0/0x10c0 [ 1079.868560] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1079.874166] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1079.879611] ? pcpu_alloc+0xe1/0xf70 [ 1079.884185] ? pcpu_find_block_fit+0x380/0x380 [ 1079.888794] ? __lockdep_init_map+0x100/0x560 [ 1079.893753] ? __lockdep_init_map+0x100/0x560 [ 1079.898252] mount_fs+0x92/0x2a0 [ 1079.901612] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1079.906095] do_mount+0x3c9/0x25e0 [ 1079.909619] ? copy_mount_string+0x40/0x40 [ 1079.913861] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1079.918686] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.922647] ? copy_mount_options+0x1ec/0x2e0 [ 1079.927274] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.931162] SyS_mount+0xa8/0x120 [ 1079.934706] ? copy_mnt_ns+0x8a0/0x8a0 [ 1079.938604] do_syscall_64+0x1d5/0x640 [ 1079.942506] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1079.947698] RIP: 0033:0x45f5fa [ 1079.950869] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1079.958569] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa 00:26:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002001000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000000000e00000000000000000000840886f20ffa8ef22f712b0b9cdc0cb8efe36b8911145d60bd78577edd6f8d"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1079.965843] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1079.973125] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1079.980412] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1079.987703] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:57 executing program 1 (fault-call:0 fault-nth:67): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1080.059766] FAULT_INJECTION: forcing a failure. [ 1080.059766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1080.071789] CPU: 1 PID: 22398 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1080.079720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.089088] Call Trace: [ 1080.091696] dump_stack+0x1b2/0x283 [ 1080.095348] should_fail.cold+0x10a/0x154 [ 1080.099511] ? kernel_text_address+0x6e/0xe0 [ 1080.104022] __alloc_pages_nodemask+0x22b/0x2730 00:26:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="0000e07f0000", @ANYRES16=r4, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000140)="242fdd3f5fa3fda446d0c2d1da1c5fc37783430a236c83720f1fbdd30ad29742073bc91af327cd7284d6", 0x2a}, {&(0x7f0000000280)="bbac7b9291081e097a5a3bacef036446f0a4f82ee328e9e064db8ae6a8e0cced87d0c2d236d7b9857d915adbc168435bffd9b976249397687a36ff48a2b98e238c857d37076cbb38af6ac09aec1ac0757193b75bd0a1a60989c078764f0ad009017a68011c83f2d9d9e204a11a10763aa3fb80597752d6ad74107735e90894207c9558078f1ed72626a908c6ed311d560bc80305de9eb0ed89b5897a95", 0x9d}, {&(0x7f0000000340)="f901008d79d3ccaa24a6c96bcd055a85801f451c36f51bc4469113bee3b3b1a457d0107e9611a591d51be1f3b5dda2db4560c2c3ca4d3c7051e318d0f86cf0307788bf522170137681114671e748b55b39189e4baeb54940f9181ce821288491417043cd752c48e4972e4defd26182594c7c083b7d6f0b2dc128652afdf11db123a57d04b31ce2545d289aef99a8fb1f4b9593969b7872f4", 0x98}, {&(0x7f0000000180)="249db24d52ecfc2d44abdc9dbac7e121ebd7048898b7f516d28e4a7dbf508ea937066d1c78766bb2a559fef0a8b3a1f816c60eccb92885", 0x37}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000200)="776c2f0f4eba1f6ff42e6ce7", 0xc}], 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct={0xb}, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1080.108815] ? trace_hardirqs_on+0x10/0x10 [ 1080.113159] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1080.118023] ? trace_hardirqs_on+0x10/0x10 [ 1080.122279] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1080.127226] ? HARDIRQ_verbose+0x10/0x10 [ 1080.131302] ? lock_acquire+0x170/0x3f0 [ 1080.135294] cache_grow_begin+0x91/0x410 [ 1080.139376] cache_alloc_refill+0x28c/0x360 [ 1080.143727] kmem_cache_alloc+0x333/0x3c0 [ 1080.147897] getname_kernel+0x4e/0x340 [ 1080.151786] kern_path+0x1b/0x40 [ 1080.155162] lookup_bdev.part.0+0x60/0x160 [ 1080.159473] ? blkdev_open+0x250/0x250 [ 1080.163349] ? selinux_key_alloc+0x1a0/0x1a0 [ 1080.167744] blkdev_get_by_path+0x70/0xf0 [ 1080.172097] btrfs_scan_one_device+0x84/0x330 [ 1080.176592] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1080.183009] ? device_list_add+0x8f0/0x8f0 [ 1080.187516] btrfs_mount+0x528/0x2838 [ 1080.192001] ? _find_next_bit+0xdb/0x100 [ 1080.196096] ? pcpu_alloc+0x37d/0xf70 [ 1080.199989] ? btrfs_remount+0x10c0/0x10c0 [ 1080.204497] ? rcu_lockdep_current_cpu_online+0xed/0x140 00:26:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1080.209966] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1080.215361] ? pcpu_alloc+0xe1/0xf70 [ 1080.219635] ? __lockdep_init_map+0x100/0x560 [ 1080.224931] ? __lockdep_init_map+0x100/0x560 [ 1080.230753] mount_fs+0x92/0x2a0 [ 1080.234764] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1080.239496] vfs_kern_mount+0x3c/0x60 [ 1080.245019] btrfs_mount+0x2a0/0x2838 [ 1080.249230] ? _find_next_bit+0xdb/0x100 [ 1080.253740] ? pcpu_alloc+0x37d/0xf70 [ 1080.259106] ? btrfs_remount+0x10c0/0x10c0 [ 1080.265773] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1080.271931] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1080.277317] ? pcpu_alloc+0xe1/0xf70 [ 1080.281167] ? pcpu_find_block_fit+0x380/0x380 [ 1080.286894] ? __lockdep_init_map+0x100/0x560 [ 1080.292745] ? __lockdep_init_map+0x100/0x560 [ 1080.297391] mount_fs+0x92/0x2a0 [ 1080.301266] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1080.306361] do_mount+0x3c9/0x25e0 00:26:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x10204800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x1, r4, 0x1}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = getpgrp(0x0) ptrace$cont(0x9, r5, 0x0, 0x7fff) [ 1080.310508] ? copy_mount_string+0x40/0x40 [ 1080.315261] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1080.322004] ? copy_mnt_ns+0x8a0/0x8a0 [ 1080.326594] ? copy_mount_options+0x1ec/0x2e0 [ 1080.331707] ? copy_mnt_ns+0x8a0/0x8a0 [ 1080.336681] SyS_mount+0xa8/0x120 [ 1080.340634] ? copy_mnt_ns+0x8a0/0x8a0 [ 1080.344550] do_syscall_64+0x1d5/0x640 [ 1080.348622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1080.354333] RIP: 0033:0x45f5fa 00:26:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9fcc01002500000000000000240000002400000003000000000000000000000c000000000000031f4c9cc54ae910a853e900000000000400000000000000000000000c00000000000000498d3678d7f4cc5ac667eff61ee64b5a3485db2773ba7b80f7197c22389f4babc1cf577ab6937dc7c76e7f753c009737d9e7e21459c8ddb3a6a10056df6e4bd873d617252aef18e687a091e1db983f59745c5b6e97ad31d3b6362bda3e47a9d1c3b7bda04585cc3ce86c202854e12772ca7483b4de2c"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x40) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000280)) r5 = getpgrp(0x0) ptrace$cont(0x7, r5, 0x400010000000041, 0xfffffffffffffffc) [ 1080.357766] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1080.366217] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1080.373764] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1080.381049] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1080.388381] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1080.395662] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) sysfs$1(0x1, &(0x7f0000000140)='.$&(!#@,\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1080.436689] BTRFS error (device loop1): superblock checksum mismatch [ 1080.480734] BTRFS error (device loop1): open_ctree failed 00:26:59 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="998467cd67d8ebb69bc17eca7ac70d72a26e708c50312307f040689948c76f37207afe56c909d3ad6dbb0200e0796791d3fff267", 0x34}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000140)={0x1d5, 0x20, &(0x7f0000000440)}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, 0xffffffffffffffff, 0x6, &(0x7f0000000180)="c9522d810b5f46d397537b369e3110fde1ff671fcec2e82f475cd3bc402a3be3e416ed56ea8e1c8e453188ed14221071e439dfdb44b287757eb87164f397ea1cca53997049b2c2798de26af4962e12941b555f71514fd19d002f9ac3724eba1bf3fd310567754e983bc967579b6a155a718f1eea35ecaaa5f4b3fd8d0ddbb1c6c4e9d0d841a2efaada2c76d728503592d6994456eb7d37531d14639fcf7bed0332a474") ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:59 executing program 1 (fault-call:0 fault-nth:68): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r1, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x4004000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1082.130941] FAULT_INJECTION: forcing a failure. [ 1082.130941] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.153798] CPU: 1 PID: 22459 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1082.162296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.172778] Call Trace: [ 1082.175363] dump_stack+0x1b2/0x283 [ 1082.179070] should_fail.cold+0x10a/0x154 [ 1082.183232] should_failslab+0xd6/0x130 [ 1082.187301] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1082.191960] selinux_parse_opts_str+0x4f8/0xa00 [ 1082.196618] ? debug_object_activate+0x450/0x450 [ 1082.201362] ? selinux_key_alloc+0x1a0/0x1a0 [ 1082.205759] ? selinux_sb_copy_data+0x206/0x380 [ 1082.213152] security_sb_parse_opts_str+0x6e/0xa0 [ 1082.218005] parse_security_options+0x49/0x90 [ 1082.222490] btrfs_mount+0x502/0x2838 [ 1082.227880] ? _find_next_bit+0xdb/0x100 [ 1082.231939] ? pcpu_alloc+0x37d/0xf70 [ 1082.236080] ? btrfs_remount+0x10c0/0x10c0 [ 1082.240399] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1082.245840] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1082.252936] ? pcpu_alloc+0xe1/0xf70 [ 1082.256656] ? __lockdep_init_map+0x100/0x560 [ 1082.261143] ? __lockdep_init_map+0x100/0x560 [ 1082.265658] mount_fs+0x92/0x2a0 [ 1082.269012] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1082.273506] vfs_kern_mount+0x3c/0x60 [ 1082.277290] btrfs_mount+0x2a0/0x2838 [ 1082.281336] ? _find_next_bit+0xdb/0x100 [ 1082.287031] ? pcpu_alloc+0x37d/0xf70 [ 1082.290905] ? btrfs_remount+0x10c0/0x10c0 [ 1082.295228] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1082.300958] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1082.305966] ? pcpu_alloc+0xe1/0xf70 [ 1082.309673] ? pcpu_find_block_fit+0x380/0x380 [ 1082.314237] ? __lockdep_init_map+0x100/0x560 [ 1082.318714] ? __lockdep_init_map+0x100/0x560 [ 1082.323197] mount_fs+0x92/0x2a0 [ 1082.326545] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1082.331021] do_mount+0x3c9/0x25e0 [ 1082.334559] ? copy_mount_string+0x40/0x40 [ 1082.338773] ? copy_mount_options+0x140/0x2e0 [ 1082.343249] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1082.348070] ? copy_mount_options+0x1ec/0x2e0 [ 1082.352548] ? copy_mnt_ns+0x8a0/0x8a0 [ 1082.356426] SyS_mount+0xa8/0x120 [ 1082.359876] ? copy_mnt_ns+0x8a0/0x8a0 [ 1082.363747] do_syscall_64+0x1d5/0x640 [ 1082.367638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1082.372811] RIP: 0033:0x45f5fa 00:26:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1082.376002] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1082.383692] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1082.390952] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1082.398240] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1082.405510] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1082.412763] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:26:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000e4ffffffff330000003400000002000000000000000000000c0000080000000000000000040500000000000c0000004000000000ef753de1851d0000000e1300000059445a80ca722c859bc09ebcea19cd30eb4b3791f223ac00000000c58e54c4c362e2a63636e62e71c154000000000000008000"/135], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000001c0)='$,\x00', 0x3) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:26:59 executing program 1 (fault-call:0 fault-nth:69): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:26:59 executing program 3: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1082.542008] FAULT_INJECTION: forcing a failure. [ 1082.542008] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.553625] CPU: 0 PID: 22483 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1082.554855] ptrace attach of "/root/syz-executor.3"[22486] was attempted by "/root/syz-executor.3"[22488] [ 1082.562486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.581631] Call Trace: [ 1082.584204] dump_stack+0x1b2/0x283 [ 1082.587813] should_fail.cold+0x10a/0x154 [ 1082.591939] should_failslab+0xd6/0x130 [ 1082.595887] kmem_cache_alloc+0x40/0x3c0 [ 1082.599930] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1082.605582] __radix_tree_create+0x32b/0x4b0 [ 1082.610019] page_cache_tree_insert+0x98/0x2a0 [ 1082.614577] ? file_check_and_advance_wb_err+0x370/0x370 [ 1082.620000] ? __add_to_page_cache_locked+0x22a/0x890 [ 1082.625169] __add_to_page_cache_locked+0x23a/0x890 [ 1082.630161] ? page_cache_tree_insert+0x2a0/0x2a0 [ 1082.634982] add_to_page_cache_lru+0xea/0x300 [ 1082.639451] ? add_to_page_cache_locked+0x40/0x40 [ 1082.644268] ? __page_cache_alloc+0xd7/0x3c0 [ 1082.648652] do_read_cache_page+0x338/0xc10 [ 1082.652965] ? blkdev_writepages+0xd0/0xd0 [ 1082.657236] btrfs_read_disk_super+0xd0/0x370 [ 1082.661710] btrfs_scan_one_device+0xb5/0x330 [ 1082.666197] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1082.671187] ? device_list_add+0x8f0/0x8f0 [ 1082.675400] btrfs_mount+0x528/0x2838 [ 1082.679284] ? _find_next_bit+0xdb/0x100 [ 1082.683321] ? pcpu_alloc+0x37d/0xf70 [ 1082.687097] ? btrfs_remount+0x10c0/0x10c0 [ 1082.691311] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1082.696739] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1082.701733] ? pcpu_alloc+0xe1/0xf70 [ 1082.705436] ? __lockdep_init_map+0x100/0x560 [ 1082.709906] ? __lockdep_init_map+0x100/0x560 [ 1082.714379] mount_fs+0x92/0x2a0 [ 1082.717726] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1082.722217] vfs_kern_mount+0x3c/0x60 [ 1082.725995] btrfs_mount+0x2a0/0x2838 [ 1082.729776] ? _find_next_bit+0xdb/0x100 [ 1082.733814] ? pcpu_alloc+0x37d/0xf70 [ 1082.737613] ? btrfs_remount+0x10c0/0x10c0 [ 1082.741830] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1082.747254] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1082.752245] ? pcpu_alloc+0xe1/0xf70 [ 1082.755959] ? pcpu_find_block_fit+0x380/0x380 [ 1082.760619] ? __lockdep_init_map+0x100/0x560 [ 1082.765115] ? __lockdep_init_map+0x100/0x560 [ 1082.769591] mount_fs+0x92/0x2a0 [ 1082.772940] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1082.777466] do_mount+0x3c9/0x25e0 [ 1082.780987] ? copy_mount_string+0x40/0x40 [ 1082.785200] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1082.790016] ? copy_mnt_ns+0x8a0/0x8a0 [ 1082.793881] ? copy_mount_options+0x1ec/0x2e0 [ 1082.798378] ? copy_mnt_ns+0x8a0/0x8a0 [ 1082.802242] SyS_mount+0xa8/0x120 [ 1082.805670] ? copy_mnt_ns+0x8a0/0x8a0 [ 1082.809533] do_syscall_64+0x1d5/0x640 [ 1082.813401] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1082.818593] RIP: 0033:0x45f5fa [ 1082.821759] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1082.829444] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa 00:27:00 executing program 3: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1082.836701] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1082.843948] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1082.851210] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1082.858488] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1082.907692] BTRFS error (device loop1): superblock checksum mismatch [ 1082.949576] ptrace attach of "/root/syz-executor.3"[22496] was attempted by "/root/syz-executor.3"[22498] [ 1082.965343] BTRFS error (device loop1): open_ctree failed 00:27:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7e61b44e}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b11659}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2cfa81be}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000880}, 0x24004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000002000000000c000000000000000000000004bdc10bba13acc4fa00fa000000000000000000962643dc8adf2b0432bd818307283f5551c73a4553f838b4bda2b75a0bfc03d67acf700944de8bbf1cdbc73a7645d08551"], 0x0, 0x3f}, 0x20) getpeername$netrom(r4, &(0x7f0000000140)={{0x3, @default}, [@bcast, @bcast, @netrom, @default, @bcast, @rose, @netrom]}, &(0x7f0000000200)=0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) 00:27:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x1}, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:02 executing program 3: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:02 executing program 1 (fault-call:0 fault-nth:70): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000008000000024000000240000000300000000000000d20b214194f149b85341da000000000000000000008a77c347edbb3c055aacd19cd57c7d77073d6e4a06ddaa2355d3f5e321f92f0f633640eaaf1e13edca6fee60a867487ad80aaf96e10f04ef5490f2acc15609d20c37751a5254817d01c11fc30037107ec3b958ef5ba48bc0a9d55fd64090ceaff250ca370369e20e5445b19a1cdf85c64b3d5e39f477bb044458bad3c46ef72af96a45fb934348e0e8600d378ee02e8f8ce89b94572483f0f2252278eef3901c10fff9efd9f0bd5fd2ce7e40b1f287142b7bc2770e61ccb94a754099da115978bec6896d5c21f4911a7e483f682f8fd46bb37e4a665f23d1463a7f40c3a74f2ce8dca96e7b4ea06081fa64aef78d8cdb1d739f04896a7643f73ce802decbe16dfe4a8b1d4c114cc87e049e5e86a5fe1ca364fba0842f04b0d879806a064cdd070b542a5fc4e8f146eec197ba6bf50bba015efbd400a887c01c120a6e8acbf265f9fd78d1567422354d5a3f5148fca851018f7d8be45a23ac9f812b547cc6cb88673fd6cd4fa8662396337a6b999f5f271a9ba79bf3be0f5069516af56db9d800f05cfaa4089ee7c242b1ce6eef461954afab0e33ef243cbe41cdac43227789f24b"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000280)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000180)={0x3, @default, r4}) 00:27:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1085.131573] ptrace attach of "/root/syz-executor.3"[22533] was attempted by "/root/syz-executor.3"[22536] [ 1085.143632] FAULT_INJECTION: forcing a failure. [ 1085.143632] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.157885] CPU: 1 PID: 22535 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1085.165790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.175144] Call Trace: [ 1085.177741] dump_stack+0x1b2/0x283 [ 1085.181484] should_fail.cold+0x10a/0x154 [ 1085.186494] should_failslab+0xd6/0x130 [ 1085.190622] __kmalloc_track_caller+0x2bc/0x400 [ 1085.195359] ? btrfs_parse_early_options+0xa3/0x310 [ 1085.200478] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1085.205472] kstrdup+0x36/0x70 [ 1085.208724] btrfs_parse_early_options+0xa3/0x310 [ 1085.213630] ? __lock_acquire+0x655/0x42a0 [ 1085.217933] ? btrfs_kill_super+0x540/0x540 [ 1085.222324] ? lock_acquire+0x170/0x3f0 [ 1085.226351] ? pcpu_alloc+0x86f/0xf70 [ 1085.230250] ? _find_next_bit+0xdb/0x100 [ 1085.234384] ? pcpu_next_unpop+0x8c/0x100 [ 1085.238604] btrfs_mount+0x119/0x2838 [ 1085.242485] ? lock_downgrade+0x6e0/0x6e0 [ 1085.246693] ? _find_next_bit+0xdb/0x100 [ 1085.250782] ? pcpu_alloc+0x37d/0xf70 [ 1085.254598] ? btrfs_remount+0x10c0/0x10c0 [ 1085.258850] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1085.264322] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1085.269356] ? pcpu_alloc+0xe1/0xf70 [ 1085.273091] ? pcpu_find_block_fit+0x380/0x380 [ 1085.277709] ? __lockdep_init_map+0x100/0x560 00:27:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000dd2300000003000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1085.282215] ? __lockdep_init_map+0x100/0x560 [ 1085.286723] mount_fs+0x92/0x2a0 [ 1085.290105] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1085.294613] vfs_kern_mount+0x3c/0x60 [ 1085.298458] btrfs_mount+0x2a0/0x2838 [ 1085.302310] ? _find_next_bit+0xdb/0x100 [ 1085.306382] ? pcpu_alloc+0x37d/0xf70 [ 1085.310199] ? btrfs_remount+0x10c0/0x10c0 [ 1085.314454] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1085.319916] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1085.324946] ? pcpu_alloc+0xe1/0xf70 00:27:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1085.328679] ? pcpu_find_block_fit+0x380/0x380 [ 1085.333358] ? __lockdep_init_map+0x100/0x560 [ 1085.337865] ? __lockdep_init_map+0x100/0x560 [ 1085.342811] mount_fs+0x92/0x2a0 [ 1085.346196] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1085.350704] do_mount+0x3c9/0x25e0 [ 1085.354268] ? copy_mount_string+0x40/0x40 [ 1085.358514] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1085.363547] ? copy_mnt_ns+0x8a0/0x8a0 [ 1085.367450] ? copy_mount_options+0x1ec/0x2e0 [ 1085.371953] ? copy_mnt_ns+0x8a0/0x8a0 [ 1085.376976] SyS_mount+0xa8/0x120 [ 1085.384442] ? copy_mnt_ns+0x8a0/0x8a0 [ 1085.388347] do_syscall_64+0x1d5/0x640 [ 1085.392253] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1085.397458] RIP: 0033:0x45f5fa [ 1085.400664] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1085.408385] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1085.415663] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1085.422942] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 00:27:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x8, 0x100002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$rxrpc(r4, &(0x7f0000000280)=""/213, 0xd5, 0x0, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x81}}, 0x24) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x30, 0x140e, 0x200, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1085.430222] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1085.437489] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:05 executing program 1 (fault-call:0 fault-nth:71): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:05 executing program 4: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x3, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540)="fbca5c9f08000000a27acf04000000230c7797eb1166ccb29a7238f18a0004000004000000d2e79eaf9278c9fa02788ca6d0e156470909bd7d173e7809786938e99b38cfa86fc2f857888e54a29bb2c7c44895eb6f77ce2c5aa49486f30157a18c2092cd1b0349787ad98886b5765830fc3ee918d7260998ce216c9c86f280c761bd607e682191bf479dd542a642eac9f039c5206617cd5e4ded61e8c07dfba1abdc13d13bf512f29b19a0f9bf69afd8efe171413e6d019c6d4fe44504afba7605b11dd13c8bb3fc19eb2c7ec3eedbb4591d816cfc9e650f639121d1b81d1120d7a271a411b3171511888c26fdf02a", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) creat(&(0x7f0000000000)='./file0\x00', 0x82) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f0000000080), 0x1000000000000060, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000631b5ee34a0034000000020000000000000000000000002ea3ff00000000000c00000000000000000000000e00000000000000000000000000000000000000f7a06a304dbc6d458e39"], 0x0, 0x4e}, 0x20) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000340)="2024693db02f71884f35fa88d5773cde2426d72fd972acd2974bb0b1bb4c705fffd679fa37c8c2b8f19726b8d374f564912599937b2df12fe8b3c4a17e38b761c3e85d830baf4b884dc31e80860a8e1bb52a04303398373deee74b9a3d8cf11dc9ba3e0dbdc727ba7500c3f7a97144c098e85e3d9b67722eb64fccab301b4345d4e3e3c4600c5d67de4e6d483fbcbc75c319c6cecf8f906754fed06abcc8ec047b0465b1459742d6b5f19939f2ab2e89440b8778059be697e7b422d048a30dad9861a7e017fa4b752901cc4204d43be9733b6d7c82e9073ef1746fa90b5077d0"}, {&(0x7f0000000440)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xff91}], 0x2, 0xe) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000280)=""/132) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:05 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9fac032dc147694f880000002400000024000000020000000000000c0000f59d0000000000000000000400000000000000000000000c0000000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpgrp(0x0) getpriority(0x1, r1) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0x0, 0x90c40) r3 = getpgrp(0x0) getpriority(0x1, r3) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={[], 0x23, 0x5, 0x86, 0xfff, 0x1, r3}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x7e533eed) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3040000037b6868cdfe3ce789f1a7912644fa0e209811ad4a0d75e9d606a2a53e0816161c94aeb6219cadac720f730f029c7adfbea75feb07296689136310841ef49b7fd866cccac9cdfb347e0b1ec828813f19aa80c8b190ef31f4a0486a9543ed4501b7f89d626b2e9fb87d66d18fc56c1053095e600d5f9d061c7aa109bfe134d6ac7af69efeba4bafd", @ANYRES16=r4, @ANYBLOB="200025bd7000fddbdf250000000005002200000000000c00160000040000000000000800180000000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) [ 1088.045015] FAULT_INJECTION: forcing a failure. [ 1088.045015] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.056681] ptrace attach of "/root/syz-executor.4"[22603] was attempted by "/root/syz-executor.4"[22607] [ 1088.083722] CPU: 0 PID: 22596 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1088.091692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.101056] Call Trace: [ 1088.103656] dump_stack+0x1b2/0x283 [ 1088.107293] should_fail.cold+0x10a/0x154 [ 1088.111521] should_failslab+0xd6/0x130 [ 1088.117767] kmem_cache_alloc_node+0x54/0x400 [ 1088.122342] create_task_io_context+0x2a/0x3c0 [ 1088.126999] generic_make_request_checks+0x1605/0x1a20 [ 1088.132295] ? part_round_stats+0x5c0/0x5c0 [ 1088.136626] ? retint_kernel+0x2d/0x2d [ 1088.140525] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1088.145557] generic_make_request+0x6b/0x850 [ 1088.150282] ? retint_kernel+0x2d/0x2d [ 1088.154180] ? blk_queue_exit+0x1d0/0x1d0 [ 1088.158340] ? submit_bio+0x146/0x390 [ 1088.162410] submit_bio+0x234/0x390 [ 1088.166051] ? generic_make_request+0x850/0x850 [ 1088.170731] ? guard_bio_eod+0x1ba/0x520 [ 1088.174798] ? bio_add_page+0x96/0xe0 [ 1088.179306] submit_bh_wbc+0x526/0x6f0 [ 1088.183209] block_read_full_page+0x71f/0x8f0 [ 1088.187720] ? set_init_blocksize+0x210/0x210 [ 1088.192226] ? __lru_cache_add+0x17b/0x250 [ 1088.196469] ? __bread_gfp+0x1f0/0x1f0 [ 1088.200542] ? add_to_page_cache_lru+0x151/0x300 [ 1088.205832] ? add_to_page_cache_locked+0x40/0x40 [ 1088.213904] ? __page_cache_alloc+0xd7/0x3c0 [ 1088.218384] do_read_cache_page+0x354/0xc10 [ 1088.222722] ? blkdev_writepages+0xd0/0xd0 [ 1088.226977] btrfs_read_disk_super+0xd0/0x370 [ 1088.231490] btrfs_scan_one_device+0xb5/0x330 [ 1088.236527] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1088.241562] ? device_list_add+0x8f0/0x8f0 00:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) r1 = getpgrp(0x0) getpriority(0x1, r1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1e, 0x0, @thr={&(0x7f00000001c0)="8e1906f92aa484676a900838a1592cbf6f3a69475ef0fd994efcd816305b331f966eb7d7564e14906d1f093901c3b93a728414ca7d3b15512785f42fd49cce60a21b1c4b08c830e772314f8613964708179e3a2add995b0d7829dcb0cc1180abcda31bf328862843a8f2208cf81036ca58", &(0x7f0000000240)="d4f5ce514ad8f0c4c8852ea949f0c6fdb99af43237e5d6e7f6a3eb63e3642b9ea2c9a25250431812f2c5b0c8077ba54830aa6a67500a75664a31eddf32f097985c8a8556522f2757773b7bd1bad02985badd82f0697913184bcdd18ef26f866f0c267457bee172e23c8a7270ed6770e916ec0188f39c6bdc55b29366f880bd0b7d41161b0659340ffacbf5fadc5211030216f66c07d3e39f37f8c5d3a3a4c898ce961cdeb31c7b69"}}, 0x0) r2 = gettid() setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000340)=0x6, 0x4) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800030000000000240004002400000003000000000000020000000c00000000000000000000000400000000000000000000000c00000000000000695f2356425ce651621ec26e229ab284274b5391d808e1ab0fc0ef99d9cd61d33bf1a0e6301d1b39fde4c53ec25752"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 1088.245826] btrfs_mount+0x528/0x2838 [ 1088.249644] ? _find_next_bit+0xdb/0x100 [ 1088.253719] ? pcpu_alloc+0x37d/0xf70 [ 1088.259791] ? btrfs_remount+0x10c0/0x10c0 [ 1088.264143] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1088.269610] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1088.280112] ? pcpu_alloc+0xe1/0xf70 [ 1088.283859] ? __lockdep_init_map+0x100/0x560 [ 1088.288370] ? __lockdep_init_map+0x100/0x560 [ 1088.292884] mount_fs+0x92/0x2a0 [ 1088.296269] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1088.300782] vfs_kern_mount+0x3c/0x60 [ 1088.304600] btrfs_mount+0x2a0/0x2838 [ 1088.308501] ? _find_next_bit+0xdb/0x100 [ 1088.312916] ? pcpu_alloc+0x37d/0xf70 [ 1088.316722] ? btrfs_remount+0x10c0/0x10c0 [ 1088.321198] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1088.327917] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1088.332951] ? pcpu_alloc+0xe1/0xf70 [ 1088.336805] ? pcpu_find_block_fit+0x380/0x380 [ 1088.341405] ? __lockdep_init_map+0x100/0x560 00:27:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1088.345920] ? __lockdep_init_map+0x100/0x560 [ 1088.350431] mount_fs+0x92/0x2a0 [ 1088.353813] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1088.358406] do_mount+0x3c9/0x25e0 [ 1088.361962] ? copy_mount_string+0x40/0x40 [ 1088.366493] ? copy_mount_options+0x17d/0x2e0 [ 1088.370998] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1088.375859] ? copy_mount_options+0x1ec/0x2e0 [ 1088.380362] ? copy_mnt_ns+0x8a0/0x8a0 [ 1088.384251] SyS_mount+0xa8/0x120 [ 1088.387707] ? copy_mnt_ns+0x8a0/0x8a0 [ 1088.391611] do_syscall_64+0x1d5/0x640 [ 1088.395516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1088.400708] RIP: 0033:0x45f5fa [ 1088.403898] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1088.411620] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1088.418902] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 00:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x400000000000, 0x0) [ 1088.427591] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1088.467336] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1088.474647] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1088.615726] BTRFS error (device loop1): superblock checksum mismatch 00:27:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000c00000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)=0x10001) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0), &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000200)=0x8) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:05 executing program 1 (fault-call:0 fault-nth:72): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1088.691195] BTRFS error (device loop1): open_ctree failed [ 1088.787245] FAULT_INJECTION: forcing a failure. [ 1088.787245] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.800329] CPU: 0 PID: 22646 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1088.808228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.817767] Call Trace: [ 1088.820910] dump_stack+0x1b2/0x283 [ 1088.824907] should_fail.cold+0x10a/0x154 [ 1088.831601] should_failslab+0xd6/0x130 [ 1088.836214] kmem_cache_alloc+0x40/0x3c0 [ 1088.840487] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1088.846137] __radix_tree_create+0x32b/0x4b0 [ 1088.850579] page_cache_tree_insert+0x98/0x2a0 [ 1088.855272] ? file_check_and_advance_wb_err+0x370/0x370 [ 1088.860742] ? __add_to_page_cache_locked+0x22a/0x890 [ 1088.866222] __add_to_page_cache_locked+0x23a/0x890 [ 1088.871700] ? page_cache_tree_insert+0x2a0/0x2a0 [ 1088.876576] add_to_page_cache_lru+0xea/0x300 [ 1088.881094] ? add_to_page_cache_locked+0x40/0x40 [ 1088.885958] ? __page_cache_alloc+0xd7/0x3c0 [ 1088.891087] do_read_cache_page+0x338/0xc10 [ 1088.896039] ? blkdev_writepages+0xd0/0xd0 [ 1088.900732] btrfs_read_disk_super+0xd0/0x370 [ 1088.905249] btrfs_scan_one_device+0xb5/0x330 [ 1088.910242] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1088.915796] ? device_list_add+0x8f0/0x8f0 [ 1088.920325] btrfs_mount+0x528/0x2838 [ 1088.924145] ? _find_next_bit+0xdb/0x100 [ 1088.929874] ? pcpu_alloc+0x37d/0xf70 [ 1088.933686] ? btrfs_remount+0x10c0/0x10c0 [ 1088.938025] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1088.943471] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1088.948464] ? pcpu_alloc+0xe1/0xf70 [ 1088.952178] ? __lockdep_init_map+0x100/0x560 [ 1088.956650] ? __lockdep_init_map+0x100/0x560 [ 1088.961213] mount_fs+0x92/0x2a0 [ 1088.964564] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1088.969055] vfs_kern_mount+0x3c/0x60 [ 1088.972834] btrfs_mount+0x2a0/0x2838 [ 1088.976632] ? _find_next_bit+0xdb/0x100 [ 1088.980796] ? pcpu_alloc+0x37d/0xf70 [ 1088.984625] ? btrfs_remount+0x10c0/0x10c0 [ 1088.988842] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1088.994411] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1088.999585] ? pcpu_alloc+0xe1/0xf70 [ 1089.003839] ? pcpu_find_block_fit+0x380/0x380 [ 1089.010934] ? __lockdep_init_map+0x100/0x560 [ 1089.017321] ? __lockdep_init_map+0x100/0x560 [ 1089.021815] mount_fs+0x92/0x2a0 [ 1089.025235] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1089.029737] do_mount+0x3c9/0x25e0 [ 1089.033258] ? copy_mount_string+0x40/0x40 [ 1089.037476] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1089.042295] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.046177] ? copy_mount_options+0x1ec/0x2e0 [ 1089.050843] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.054713] SyS_mount+0xa8/0x120 [ 1089.076295] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.081474] do_syscall_64+0x1d5/0x640 [ 1089.085450] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1089.090789] RIP: 0033:0x45f5fa [ 1089.093955] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1089.101638] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1089.110447] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1089.117693] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1089.124939] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1089.132201] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) vmsplice(r3, &(0x7f0000000100), 0x25, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1089.242378] BTRFS error (device loop1): superblock checksum mismatch 00:27:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x43000811) inotify_rm_watch(r0, r2) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/278], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)}, {&(0x7f0000000140)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f5275662538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1089.294913] BTRFS error (device loop1): open_ctree failed 00:27:06 executing program 1 (fault-call:0 fault-nth:73): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1089.430687] FAULT_INJECTION: forcing a failure. [ 1089.430687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1089.481567] CPU: 0 PID: 22672 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1089.489680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.499046] Call Trace: [ 1089.501682] dump_stack+0x1b2/0x283 [ 1089.505341] should_fail.cold+0x10a/0x154 [ 1089.509506] __alloc_pages_nodemask+0x22b/0x2730 [ 1089.514281] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1089.519746] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1089.524777] ? __alloc_pages_nodemask+0x1a8a/0x2730 [ 1089.529903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1089.534859] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1089.540151] ? btrfs_parse_early_options+0x19d/0x310 [ 1089.546222] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1089.551277] alloc_pages_current+0xe7/0x1e0 [ 1089.555844] __get_free_pages+0xb/0x40 [ 1089.559971] selinux_sb_copy_data+0x28/0x380 [ 1089.564764] security_sb_copy_data+0x6e/0xa0 [ 1089.569458] parse_security_options+0x32/0x90 [ 1089.574099] btrfs_mount+0x502/0x2838 [ 1089.577935] ? _find_next_bit+0xdb/0x100 [ 1089.582522] ? pcpu_alloc+0x37d/0xf70 [ 1089.586395] ? btrfs_remount+0x10c0/0x10c0 [ 1089.590930] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1089.596695] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1089.602021] ? pcpu_alloc+0xe1/0xf70 [ 1089.605922] ? __lockdep_init_map+0x100/0x560 [ 1089.610662] ? __lockdep_init_map+0x100/0x560 [ 1089.615443] mount_fs+0x92/0x2a0 [ 1089.618928] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1089.623579] vfs_kern_mount+0x3c/0x60 [ 1089.627610] btrfs_mount+0x2a0/0x2838 [ 1089.631434] ? _find_next_bit+0xdb/0x100 [ 1089.635524] ? pcpu_alloc+0x37d/0xf70 [ 1089.639346] ? btrfs_remount+0x10c0/0x10c0 [ 1089.643601] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1089.649068] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1089.654206] ? pcpu_alloc+0xe1/0xf70 [ 1089.657945] ? pcpu_find_block_fit+0x380/0x380 [ 1089.663135] ? __lockdep_init_map+0x100/0x560 [ 1089.667647] ? __lockdep_init_map+0x100/0x560 [ 1089.672163] mount_fs+0x92/0x2a0 [ 1089.675557] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1089.680069] do_mount+0x3c9/0x25e0 [ 1089.698483] ? copy_mount_string+0x40/0x40 [ 1089.702739] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1089.707617] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.711524] ? copy_mount_options+0x1ec/0x2e0 [ 1089.716052] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.719959] SyS_mount+0xa8/0x120 [ 1089.723476] ? copy_mnt_ns+0x8a0/0x8a0 [ 1089.727391] do_syscall_64+0x1d5/0x640 [ 1089.731316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1089.738084] RIP: 0033:0x45f5fa [ 1089.741281] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1089.749004] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1089.756888] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1089.764203] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1089.774002] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1089.782933] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:07 executing program 1 (fault-call:0 fault-nth:74): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1089.949843] FAULT_INJECTION: forcing a failure. [ 1089.949843] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.971844] CPU: 1 PID: 22681 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1089.980252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.990741] Call Trace: [ 1089.993957] dump_stack+0x1b2/0x283 [ 1089.997659] should_fail.cold+0x10a/0x154 [ 1090.010330] should_failslab+0xd6/0x130 [ 1090.014461] kmem_cache_alloc_node+0x54/0x400 [ 1090.019179] create_task_io_context+0x2a/0x3c0 [ 1090.024063] generic_make_request_checks+0x1605/0x1a20 [ 1090.030113] ? mirror_ctr+0x450/0x1640 [ 1090.034034] ? part_round_stats+0x5c0/0x5c0 [ 1090.038378] ? trace_hardirqs_on+0x10/0x10 [ 1090.042629] ? check_preemption_disabled+0x35/0x240 [ 1090.047838] generic_make_request+0x6b/0x850 [ 1090.052270] ? blk_queue_exit+0x1d0/0x1d0 [ 1090.056430] ? HARDIRQ_verbose+0x10/0x10 [ 1090.060517] ? check_preemption_disabled+0x35/0x240 [ 1090.065636] ? guard_bio_eod+0x15c/0x520 [ 1090.069728] submit_bio+0x234/0x390 [ 1090.073374] ? generic_make_request+0x850/0x850 [ 1090.082144] ? guard_bio_eod+0x1ba/0x520 [ 1090.086234] ? bio_add_page+0x96/0xe0 [ 1090.090052] submit_bh_wbc+0x526/0x6f0 [ 1090.093982] block_read_full_page+0x71f/0x8f0 [ 1090.098498] ? set_init_blocksize+0x210/0x210 [ 1090.103014] ? __lru_cache_add+0x17b/0x250 [ 1090.107263] ? __bread_gfp+0x1f0/0x1f0 [ 1090.111170] ? add_to_page_cache_lru+0x151/0x300 [ 1090.115944] ? add_to_page_cache_locked+0x40/0x40 [ 1090.120801] ? __page_cache_alloc+0xd7/0x3c0 [ 1090.125227] do_read_cache_page+0x354/0xc10 [ 1090.129559] ? blkdev_writepages+0xd0/0xd0 [ 1090.133813] btrfs_read_disk_super+0xd0/0x370 [ 1090.138327] btrfs_scan_one_device+0xb5/0x330 [ 1090.142840] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1090.147865] ? device_list_add+0x8f0/0x8f0 [ 1090.152126] btrfs_mount+0x528/0x2838 [ 1090.155941] ? _find_next_bit+0xdb/0x100 [ 1090.160015] ? pcpu_alloc+0x37d/0xf70 [ 1090.163831] ? btrfs_remount+0x10c0/0x10c0 [ 1090.168085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1090.173554] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1090.178585] ? pcpu_alloc+0xe1/0xf70 [ 1090.182326] ? __lockdep_init_map+0x100/0x560 [ 1090.186888] ? __lockdep_init_map+0x100/0x560 [ 1090.191485] mount_fs+0x92/0x2a0 [ 1090.194875] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1090.199398] vfs_kern_mount+0x3c/0x60 [ 1090.203217] btrfs_mount+0x2a0/0x2838 [ 1090.207038] ? _find_next_bit+0xdb/0x100 [ 1090.211113] ? pcpu_alloc+0x37d/0xf70 [ 1090.214930] ? btrfs_remount+0x10c0/0x10c0 [ 1090.219185] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1090.224650] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1090.229678] ? pcpu_alloc+0xe1/0xf70 [ 1090.233420] ? pcpu_find_block_fit+0x380/0x380 [ 1090.238015] ? __lockdep_init_map+0x100/0x560 [ 1090.242527] ? __lockdep_init_map+0x100/0x560 [ 1090.247043] mount_fs+0x92/0x2a0 [ 1090.250430] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1090.254943] do_mount+0x3c9/0x25e0 [ 1090.258501] ? copy_mount_string+0x40/0x40 [ 1090.262747] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1090.267610] ? copy_mnt_ns+0x8a0/0x8a0 [ 1090.271516] ? copy_mount_options+0x1ec/0x2e0 [ 1090.276031] ? copy_mnt_ns+0x8a0/0x8a0 [ 1090.279932] SyS_mount+0xa8/0x120 [ 1090.283403] ? copy_mnt_ns+0x8a0/0x8a0 [ 1090.287315] do_syscall_64+0x1d5/0x640 [ 1090.291226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1090.296433] RIP: 0033:0x45f5fa [ 1090.299629] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1090.307382] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1090.314661] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1090.321943] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1090.329222] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1090.336502] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1090.368743] BTRFS error (device loop1): superblock checksum mismatch [ 1090.437218] BTRFS error (device loop1): open_ctree failed 00:27:08 executing program 1 (fault-call:0 fault-nth:75): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0, r1}) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x20100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)="08ef5e0051781f30ea5c9f41033ffeb3bcc0679c22d22e79cb0084995bcab8fbd8a17f1d2440c1df05ba433291d7c616f3b3902c9ff30c3432cfca30c2e8c3e8a4e303ad565f832f7e8ca9a5fdc17d57f6ffd9e56340fbc5ef7ace02e197c8980f2cd9545a753da56a9145c04ac2dccecda968de2dba5459635e80fca0aa2ae268fdf214fd210432a68090c193fd519ec56fd5b35e65d4b2e4b7b9c17056a3404acec04d4f396a011ca92e4614a5c4e8b00bac657c563b903263848e400e34c51f63b73e053e7b5908d2fa1e66328c4c25d192b2ac6ca88d3837ca4788e29c55cf1b6abcdec8bf833c77c3454aae34cf9178f98bdfd24c603b", 0xf9, r5}, 0x68) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 00:27:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x47, 0x2040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r1, r2, 0x3}) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = getpgrp(0x0) getpriority(0x1, r5) ptrace$setopts(0x4200, r5, 0x6, 0x100000) 00:27:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1091.031038] FAULT_INJECTION: forcing a failure. [ 1091.031038] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.042385] CPU: 0 PID: 22696 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1091.050277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1091.059640] Call Trace: [ 1091.062244] dump_stack+0x1b2/0x283 [ 1091.065983] should_fail.cold+0x10a/0x154 [ 1091.070151] should_failslab+0xd6/0x130 [ 1091.074141] kmem_cache_alloc+0x40/0x3c0 [ 1091.078215] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1091.083857] __radix_tree_create+0x32b/0x4b0 [ 1091.088289] page_cache_tree_insert+0x98/0x2a0 [ 1091.092896] ? file_check_and_advance_wb_err+0x370/0x370 [ 1091.098798] ? __add_to_page_cache_locked+0x22a/0x890 [ 1091.098820] __add_to_page_cache_locked+0x23a/0x890 [ 1091.109079] ? page_cache_tree_insert+0x2a0/0x2a0 [ 1091.113936] ? lock_downgrade+0x6e0/0x6e0 [ 1091.118102] add_to_page_cache_lru+0xea/0x300 [ 1091.122617] ? add_to_page_cache_locked+0x40/0x40 [ 1091.127477] ? __page_cache_alloc+0xd7/0x3c0 [ 1091.131889] pagecache_get_page+0x2bb/0xa10 [ 1091.136194] __getblk_gfp+0x234/0x7b0 [ 1091.139977] ? __mutex_unlock_slowpath+0x75/0x780 [ 1091.144800] __bread_gfp+0x29/0x1f0 [ 1091.148481] btrfs_read_dev_one_super+0x98/0x260 [ 1091.153262] btrfs_read_dev_super+0x5a/0xa0 [ 1091.157583] ? btrfs_read_dev_one_super+0x260/0x260 [ 1091.162579] btrfs_get_bdev_and_sb+0xd7/0x2d0 [ 1091.167097] __btrfs_open_devices+0x175/0xa40 [ 1091.171616] ? find_device+0x100/0x100 [ 1091.175486] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1091.180914] btrfs_open_devices+0x98/0xb0 [ 1091.185040] btrfs_mount+0x10a2/0x2838 [ 1091.189005] ? _find_next_bit+0xdb/0x100 [ 1091.193043] ? pcpu_alloc+0x37d/0xf70 [ 1091.196821] ? btrfs_remount+0x10c0/0x10c0 [ 1091.201034] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1091.206458] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1091.211447] ? pcpu_alloc+0xe1/0xf70 [ 1091.215139] ? __lockdep_init_map+0x100/0x560 [ 1091.219650] ? __lockdep_init_map+0x100/0x560 [ 1091.224121] mount_fs+0x92/0x2a0 [ 1091.227467] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1091.231939] vfs_kern_mount+0x3c/0x60 [ 1091.235715] btrfs_mount+0x2a0/0x2838 [ 1091.239494] ? _find_next_bit+0xdb/0x100 [ 1091.243550] ? pcpu_alloc+0x37d/0xf70 [ 1091.247327] ? btrfs_remount+0x10c0/0x10c0 [ 1091.251544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1091.257074] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1091.262066] ? pcpu_alloc+0xe1/0xf70 [ 1091.265780] ? pcpu_find_block_fit+0x380/0x380 [ 1091.270338] ? __lockdep_init_map+0x100/0x560 [ 1091.274816] ? __lockdep_init_map+0x100/0x560 [ 1091.279340] mount_fs+0x92/0x2a0 [ 1091.282709] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1091.287186] do_mount+0x3c9/0x25e0 [ 1091.290794] ? copy_mount_string+0x40/0x40 [ 1091.295012] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1091.299838] ? copy_mnt_ns+0x8a0/0x8a0 [ 1091.303710] ? copy_mount_options+0x1ec/0x2e0 [ 1091.308182] ? copy_mnt_ns+0x8a0/0x8a0 [ 1091.312055] SyS_mount+0xa8/0x120 [ 1091.315483] ? copy_mnt_ns+0x8a0/0x8a0 [ 1091.319495] do_syscall_64+0x1d5/0x640 [ 1091.323362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1091.328528] RIP: 0033:0x45f5fa [ 1091.331692] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1091.339376] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1091.346623] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1091.353956] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1091.361232] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1091.368497] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000c00200000000000000000000c000000000000ad5c3e20f1e70152f4e22029f86159e85efb020c4ea3394ece402a90d8"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r1 = getpgrp(0x0) getpriority(0x1, r1) prlimit64(r1, 0x4, &(0x7f0000000080)={0x613c1153, 0xffff}, &(0x7f00000001c0)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001802000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000000002002f0e97b8bae8e87df0cb28e46eb80e00000000002000"/92], 0x0, 0x4e}, 0x20) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x228, 0x1, 0x1, 0x500, 0x0, 0x0, {0x7ce7baf4ae36c85c}, [@CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_NAT_DST={0x88, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={[], [], @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x5}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xfd, 0x2}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x4}]}}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x54) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000010825ab44a0e8bf48de2f9abc438f294119a92472a2724d17691fae7eb89cc436ef795392b1b47a0805a13104ef13702870c0000000000000101d91aa67ed1d2c54da11b93e35707cc56f509cc7a35cc32ecdaa272d5390270cb641eaf194ab1bfd0ecf5efe9b7cb01e0890000f95a907eb0de0000000000000000", @ANYRES16=r4, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000001c0)=0x2, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1091.453679] BTRFS error (device loop1): superblock checksum mismatch [ 1091.546949] BTRFS error (device loop1): open_ctree failed 00:27:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:27:09 executing program 1 (fault-call:0 fault-nth:76): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1092.398820] FAULT_INJECTION: forcing a failure. [ 1092.398820] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.423140] CPU: 1 PID: 22748 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1092.431068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1092.440427] Call Trace: [ 1092.443031] dump_stack+0x1b2/0x283 [ 1092.446677] should_fail.cold+0x10a/0x154 [ 1092.451108] should_failslab+0xd6/0x130 [ 1092.455097] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1092.460217] __kmalloc_node+0x38/0x70 [ 1092.464034] kvmalloc_node+0x88/0xd0 [ 1092.467763] btrfs_mount+0xea4/0x2838 [ 1092.471584] ? _find_next_bit+0xdb/0x100 [ 1092.475660] ? pcpu_alloc+0x37d/0xf70 [ 1092.479474] ? btrfs_remount+0x10c0/0x10c0 [ 1092.483735] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1092.489200] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1092.494234] ? pcpu_alloc+0xe1/0xf70 [ 1092.497972] ? __lockdep_init_map+0x100/0x560 [ 1092.502477] ? __lockdep_init_map+0x100/0x560 [ 1092.506986] mount_fs+0x92/0x2a0 [ 1092.510370] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1092.514878] vfs_kern_mount+0x3c/0x60 [ 1092.518690] btrfs_mount+0x2a0/0x2838 [ 1092.522511] ? _find_next_bit+0xdb/0x100 [ 1092.526583] ? pcpu_alloc+0x37d/0xf70 [ 1092.530394] ? btrfs_remount+0x10c0/0x10c0 [ 1092.534645] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1092.540110] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1092.545140] ? pcpu_alloc+0xe1/0xf70 [ 1092.548871] ? pcpu_find_block_fit+0x380/0x380 [ 1092.553482] ? __lockdep_init_map+0x100/0x560 [ 1092.557986] ? __lockdep_init_map+0x100/0x560 [ 1092.562489] mount_fs+0x92/0x2a0 [ 1092.565866] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1092.570378] do_mount+0x3c9/0x25e0 [ 1092.573935] ? copy_mount_string+0x40/0x40 [ 1092.578178] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1092.583028] ? copy_mnt_ns+0x8a0/0x8a0 [ 1092.586928] ? copy_mount_options+0x1ec/0x2e0 [ 1092.591434] ? copy_mnt_ns+0x8a0/0x8a0 [ 1092.595332] SyS_mount+0xa8/0x120 00:27:09 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r0, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000280)=""/251) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000240)={0x0, 0x100000, 0x1}, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) [ 1092.598794] ? copy_mnt_ns+0x8a0/0x8a0 [ 1092.602693] do_syscall_64+0x1d5/0x640 [ 1092.606598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1092.611794] RIP: 0033:0x45f5fa [ 1092.614984] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1092.622697] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1092.629968] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1092.637249] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 00:27:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 00:27:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000003000000000000000000000c00000000000000000000000400000000000000000000000c00"/63], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1092.644502] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1092.651755] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1092.683029] BTRFS error (device loop1): superblock checksum mismatch [ 1092.714313] BTRFS error (device loop1): open_ctree failed 00:27:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:11 executing program 1 (fault-call:0 fault-nth:77): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:11 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func, @struct, @func]}}, 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x454703, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x4, r1, 0x1}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1094.491478] FAULT_INJECTION: forcing a failure. [ 1094.491478] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1094.503322] CPU: 1 PID: 22799 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1094.511208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1094.520567] Call Trace: [ 1094.523168] dump_stack+0x1b2/0x283 [ 1094.526822] should_fail.cold+0x10a/0x154 [ 1094.530984] __alloc_pages_nodemask+0x22b/0x2730 [ 1094.535760] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1094.540712] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1094.545573] ? trace_hardirqs_on+0x10/0x10 [ 1094.549829] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1094.554773] ? HARDIRQ_verbose+0x10/0x10 [ 1094.558853] cache_grow_begin+0x91/0x410 [ 1094.562947] cache_alloc_refill+0x28c/0x360 [ 1094.570914] kmem_cache_alloc+0x333/0x3c0 [ 1094.575047] getname_kernel+0x4e/0x340 [ 1094.578922] kern_path+0x1b/0x40 [ 1094.582295] lookup_bdev.part.0+0x60/0x160 [ 1094.587474] ? blkdev_open+0x250/0x250 [ 1094.591344] ? btrfs_open_devices+0x22/0xb0 [ 1094.595647] blkdev_get_by_path+0x70/0xf0 [ 1094.599779] btrfs_get_bdev_and_sb+0x33/0x2d0 [ 1094.604256] __btrfs_open_devices+0x175/0xa40 [ 1094.608744] ? find_device+0x100/0x100 [ 1094.612618] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1094.618051] btrfs_open_devices+0x98/0xb0 [ 1094.622193] btrfs_mount+0x10a2/0x2838 [ 1094.626078] ? _find_next_bit+0xdb/0x100 [ 1094.630121] ? pcpu_alloc+0x37d/0xf70 [ 1094.633922] ? btrfs_remount+0x10c0/0x10c0 [ 1094.638143] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1094.643583] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1094.648590] ? pcpu_alloc+0xe1/0xf70 [ 1094.652299] ? __lockdep_init_map+0x100/0x560 [ 1094.656776] ? __lockdep_init_map+0x100/0x560 [ 1094.661257] mount_fs+0x92/0x2a0 [ 1094.664613] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1094.669090] vfs_kern_mount+0x3c/0x60 [ 1094.672876] btrfs_mount+0x2a0/0x2838 [ 1094.676662] ? _find_next_bit+0xdb/0x100 [ 1094.680705] ? pcpu_alloc+0x37d/0xf70 [ 1094.684486] ? btrfs_remount+0x10c0/0x10c0 [ 1094.688731] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1094.694168] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1094.699175] ? pcpu_alloc+0xe1/0xf70 [ 1094.702883] ? pcpu_find_block_fit+0x380/0x380 [ 1094.707466] ? __lockdep_init_map+0x100/0x560 [ 1094.711948] ? __lockdep_init_map+0x100/0x560 [ 1094.716425] mount_fs+0x92/0x2a0 [ 1094.719779] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1094.724258] do_mount+0x3c9/0x25e0 [ 1094.727793] ? copy_mount_string+0x40/0x40 [ 1094.732017] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1094.736853] ? copy_mnt_ns+0x8a0/0x8a0 [ 1094.740722] ? copy_mount_options+0x1ec/0x2e0 [ 1094.745209] ? copy_mnt_ns+0x8a0/0x8a0 [ 1094.749083] SyS_mount+0xa8/0x120 [ 1094.752542] ? copy_mnt_ns+0x8a0/0x8a0 [ 1094.756430] do_syscall_64+0x1d5/0x640 [ 1094.760315] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1094.765577] RIP: 0033:0x45f5fa [ 1094.768748] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1094.776444] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1094.783698] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 00:27:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="313c218bab68743284bc34b41edc3ae87a0042b80d5009e262068c2edce2b4b057773fa3a9cea7ce51cc961b5a67d50c9ecc953db1f54acb2a17c1b83014321582a1c0520055ca7361cc84a2164780febb5d6e94a26d1d4d7d17e20be8b22da9010039a98366a719b7ab399227395dc9562731d54e3630fcb561f57338499b92e3f88252b20943a585c93750b9c1dbbf3cb18d8b0d07c70299079d916340d759702cec5142f835f7c7abf0e0a014295c6bb668", @ANYRESDEC], 0x0, 0x4e, 0x0, 0xfffffffe}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1094.790955] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1094.798212] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1094.805468] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1094.831462] BTRFS error (device loop1): superblock checksum mismatch [ 1094.883969] BTRFS error (device loop1): open_ctree failed 00:27:12 executing program 1 (fault-call:0 fault-nth:78): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000002000000000002749ff08df9f52fd007dfff790000000000e3b2968500000000000000000400000000000000000000000c00000003000000000000000e000000000000000000000000200000000000"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="fa99c27cf515b46e8647d4e3a50b2f6e9c44eb78577d21676028884d20cd02966ca402e14945052c9cab2787efec8921e5a365d6a42b2d94bfda86d7d0fcb754fc83872301e9faa504ab1843e9eeadda0f14c3c2da00"/96) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1094.973107] FAULT_INJECTION: forcing a failure. [ 1094.973107] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.985627] CPU: 1 PID: 22826 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1094.993538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.002899] Call Trace: [ 1095.005504] dump_stack+0x1b2/0x283 [ 1095.009177] should_fail.cold+0x10a/0x154 [ 1095.013337] should_failslab+0xd6/0x130 [ 1095.017327] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1095.022009] btrfs_mount+0xf7d/0x2838 [ 1095.025832] ? _find_next_bit+0xdb/0x100 [ 1095.029900] ? pcpu_alloc+0x37d/0xf70 [ 1095.033710] ? btrfs_remount+0x10c0/0x10c0 [ 1095.038004] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1095.043465] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1095.048490] ? pcpu_alloc+0xe1/0xf70 [ 1095.052222] ? __lockdep_init_map+0x100/0x560 [ 1095.056727] ? __lockdep_init_map+0x100/0x560 [ 1095.061234] mount_fs+0x92/0x2a0 [ 1095.064614] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1095.069114] vfs_kern_mount+0x3c/0x60 [ 1095.072902] btrfs_mount+0x2a0/0x2838 [ 1095.076689] ? _find_next_bit+0xdb/0x100 [ 1095.080733] ? pcpu_alloc+0x37d/0xf70 [ 1095.084524] ? btrfs_remount+0x10c0/0x10c0 [ 1095.088750] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1095.094182] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1095.099187] ? pcpu_alloc+0xe1/0xf70 [ 1095.102895] ? pcpu_find_block_fit+0x380/0x380 [ 1095.107462] ? __lockdep_init_map+0x100/0x560 [ 1095.111952] ? __lockdep_init_map+0x100/0x560 [ 1095.116435] mount_fs+0x92/0x2a0 [ 1095.119787] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1095.124265] do_mount+0x3c9/0x25e0 [ 1095.127791] ? copy_mount_string+0x40/0x40 [ 1095.132010] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1095.136873] ? copy_mnt_ns+0x8a0/0x8a0 [ 1095.140750] ? copy_mount_options+0x1ec/0x2e0 [ 1095.145227] ? copy_mnt_ns+0x8a0/0x8a0 [ 1095.149100] SyS_mount+0xa8/0x120 [ 1095.152536] ? copy_mnt_ns+0x8a0/0x8a0 [ 1095.156419] do_syscall_64+0x1d5/0x640 [ 1095.160417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1095.165602] RIP: 0033:0x45f5fa 00:27:12 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x6, 'veth1_to_bridge\x00', {0x5}, 0x8}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000180)=0xff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r4 = getpgrp(0x0) getpriority(0x1, r4) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1095.168785] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1095.176477] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1095.183743] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1095.191004] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1095.198259] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1095.205518] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x600200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:12 executing program 1 (fault-call:0 fault-nth:79): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1095.728831] FAULT_INJECTION: forcing a failure. [ 1095.728831] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.740084] CPU: 1 PID: 22861 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1095.747964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1095.757302] Call Trace: [ 1095.759912] dump_stack+0x1b2/0x283 [ 1095.763519] should_fail.cold+0x10a/0x154 [ 1095.767689] should_failslab+0xd6/0x130 [ 1095.771638] kmem_cache_alloc+0x40/0x3c0 [ 1095.775678] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1095.781323] __radix_tree_create+0x32b/0x4b0 [ 1095.785750] page_cache_tree_insert+0x98/0x2a0 [ 1095.790312] ? file_check_and_advance_wb_err+0x370/0x370 [ 1095.795740] ? __add_to_page_cache_locked+0x22a/0x890 [ 1095.800912] __add_to_page_cache_locked+0x23a/0x890 [ 1095.805905] ? page_cache_tree_insert+0x2a0/0x2a0 [ 1095.810725] ? lock_downgrade+0x6e0/0x6e0 [ 1095.814848] add_to_page_cache_lru+0xea/0x300 [ 1095.819321] ? add_to_page_cache_locked+0x40/0x40 [ 1095.824139] ? __page_cache_alloc+0xd7/0x3c0 [ 1095.828543] pagecache_get_page+0x2bb/0xa10 [ 1095.832901] __getblk_gfp+0x234/0x7b0 [ 1095.836709] ? __mutex_unlock_slowpath+0x75/0x780 [ 1095.841552] __bread_gfp+0x29/0x1f0 [ 1095.845162] btrfs_read_dev_one_super+0x98/0x260 [ 1095.849898] btrfs_read_dev_super+0x5a/0xa0 [ 1095.854199] ? btrfs_read_dev_one_super+0x260/0x260 [ 1095.859195] btrfs_get_bdev_and_sb+0xd7/0x2d0 [ 1095.863670] __btrfs_open_devices+0x175/0xa40 [ 1095.868143] ? find_device+0x100/0x100 [ 1095.872053] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1095.877560] btrfs_open_devices+0x98/0xb0 [ 1095.881686] btrfs_mount+0x10a2/0x2838 [ 1095.885561] ? _find_next_bit+0xdb/0x100 [ 1095.889611] ? pcpu_alloc+0x37d/0xf70 [ 1095.893424] ? btrfs_remount+0x10c0/0x10c0 [ 1095.897666] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1095.903108] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1095.908124] ? pcpu_alloc+0xe1/0xf70 [ 1095.911833] ? __lockdep_init_map+0x100/0x560 [ 1095.916305] ? __lockdep_init_map+0x100/0x560 [ 1095.920778] mount_fs+0x92/0x2a0 [ 1095.924237] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1095.928710] vfs_kern_mount+0x3c/0x60 [ 1095.932510] btrfs_mount+0x2a0/0x2838 [ 1095.936292] ? _find_next_bit+0xdb/0x100 [ 1095.940328] ? pcpu_alloc+0x37d/0xf70 [ 1095.944118] ? btrfs_remount+0x10c0/0x10c0 [ 1095.948331] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1095.953758] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1095.958751] ? pcpu_alloc+0xe1/0xf70 [ 1095.962463] ? pcpu_find_block_fit+0x380/0x380 [ 1095.967022] ? __lockdep_init_map+0x100/0x560 [ 1095.971493] ? __lockdep_init_map+0x100/0x560 [ 1095.975969] mount_fs+0x92/0x2a0 [ 1095.979325] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1095.983800] do_mount+0x3c9/0x25e0 [ 1095.987327] ? copy_mount_string+0x40/0x40 [ 1095.991539] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1095.996355] ? copy_mnt_ns+0x8a0/0x8a0 [ 1096.000218] ? copy_mount_options+0x1ec/0x2e0 [ 1096.004958] ? copy_mnt_ns+0x8a0/0x8a0 [ 1096.008824] SyS_mount+0xa8/0x120 [ 1096.012268] ? copy_mnt_ns+0x8a0/0x8a0 [ 1096.016135] do_syscall_64+0x1d5/0x640 [ 1096.020005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1096.025178] RIP: 0033:0x45f5fa [ 1096.028628] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1096.036325] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1096.043672] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1096.050976] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1096.058228] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1096.065493] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1096.111620] BTRFS error (device loop1): superblock checksum mismatch [ 1096.145301] BTRFS error (device loop1): open_ctree failed 00:27:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:14 executing program 4: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000015baf6bfb8e605f200000000003400000034000000ea8d02000000000000000000000c00000000000000000000000400000000000000000000000c00000000000800000000000e0000b5c223f14f741210e23d3ca2f7a61b6ec8c082f233e463b23a6eb749947f5e22dd5b88571773a39b8578280ded27bd2c36575ef988377da23249712fe3c85659b2e5bdf331792b320666c78de63d77f209e38040c9e5b0445430f9d9b8685991345c29070efa2fb821434bcd5e152815cd1d9644faf32e4995360da5b7"], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) capget(&(0x7f0000000140)={0x20080522, r0}, &(0x7f0000000180)={0x401, 0x9, 0x9, 0x0, 0xfffff61c, 0xff}) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xffffffa4, [@func={0x2, 0x0, 0x0, 0xc, 0xffffffff}, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x0, [{0x10, 0x1, 0xffffffff}, {0x1}, {0xa, 0x1, 0x7fff}, {0xa, 0x1, 0xffffffff}, {0xa, 0x1, 0x8}, {0x2, 0x4, 0x3}, {0x9, 0x3, 0x88}, {0x8, 0x3, 0xe}]}, @func={0xa}]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1097.104561] ptrace attach of "/root/syz-executor.4"[22882] was attempted by "/root/syz-executor.4"[22883] 00:27:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000c5ab8ae3e000000000000000400000000000000000000000c000000000000"], 0x0, 0x3e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x2) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:14 executing program 1 (fault-call:0 fault-nth:80): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) 00:27:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="7cae02e451687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c080000", @ANYRES16=0x0, @ANYBLOB="b723000000000000d700060000000800030030dd911d596d24c5769083457e9406a1324c6c11f0126d329f11b0acf3fa76c0a9a10919ed09c310df5e2e38a0368d13ac5b363e087603694f386cc848c27264b5125aebfb5ba1048becb5fdbf5079094ec112db2e4e5b6bfdbe465be8568173cff4f8", @ANYRES32=0x0, @ANYBLOB="91e1067841c5d8d1067de873345a936dbc66bf04c7575214d3df4655a347ee2277c28ffdc8789eb416fb0c0ccde34f8593f16d0f936778ad8c8f5659361ad4823b342027a30f5b001294c5f6498add612ef3c17e2fcbbc29a7d8fd611cb228fb0f8abff7ac6829fc27423445f7a95057f4f3ecf73ce657bb953b84"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000be54f9981fa43213020000", @ANYRES16=r2, @ANYBLOB="090229bd7000fcdbdf250200000014000100fe8000000000000000000000000000aa05000500020000000500050005000000"], 0x38}, 0x1, 0x0, 0x0, 0x220088c0}, 0x20000001) wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c000000070000000a0000000000000e0300000200000000040000000000000a020000000b0000000000000e0100000000000000005f5f5f305f00a6fc00fba94780b3e682e66677d0e801eedaa698932b35b9cc060ff974e2007e7ac2f84279ec"], 0x0, 0x4b, 0x0, 0xfffffffd}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="8b98ffc42aff86248282d55a19a0c1f4f57e6d539bd82adb37180118a4266645bd169b7cd9a340f2cf2be91444316d8161db68ae153657a3001cbad4c2bd30c31c292391fef3d03548a55cf1ddd9af9f0d98194f9f2547e8855a519f2e3c1f", 0x5f, 0xffffffffffffffff}], 0xc000, &(0x7f0000000340)='($\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0xfffffffc, 0x2, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000140)={0x60, 0x24, 0x4, {{0x8c, 0x0, 0x0, 0x100000000, 0x5, 0x0, 0xd632, 0x7577654d}}}, 0x60) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func={0xfffffffc}, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x10000000000001cf, 0x4) ptrace$setopts(0x4200, 0x0, 0x2000000000043, 0x100002) tkill(r0, 0x33) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000000)=""/63) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) getpriority(0x1, r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x31, 0x0, @tid=r0}, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000c00000000000000000000000400000000000000000000000c00000000000000"], 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="b72300000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="7d0325cb249a136e2ef0e506e928"], 0x1c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000280)=""/196, &(0x7f0000000140)=0xc4) [ 1097.895714] FAULT_INJECTION: forcing a failure. [ 1097.895714] name failslab, interval 1, probability 0, space 0, times 0 00:27:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000c00000000000000000000000400000000000000000000000c00000000000000004000000e00"/78], 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000140)={0x1, {&(0x7f00000004c0)=""/191, 0xbf, &(0x7f0000000580)=""/239, 0x1, 0x4}}, 0x48) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000280)={0x6, "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"}) [ 1097.952941] CPU: 0 PID: 22907 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1097.960873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1097.970237] Call Trace: [ 1097.972835] dump_stack+0x1b2/0x283 [ 1097.976484] should_fail.cold+0x10a/0x154 [ 1097.980649] should_failslab+0xd6/0x130 [ 1097.984630] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1097.989307] btrfs_mount+0xf1e/0x2838 [ 1097.993118] ? _find_next_bit+0xdb/0x100 [ 1097.997184] ? pcpu_alloc+0x37d/0xf70 [ 1098.000996] ? btrfs_remount+0x10c0/0x10c0 [ 1098.005248] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1098.010714] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1098.015740] ? pcpu_alloc+0xe1/0xf70 [ 1098.019479] ? __lockdep_init_map+0x100/0x560 [ 1098.023983] ? __lockdep_init_map+0x100/0x560 [ 1098.028491] mount_fs+0x92/0x2a0 [ 1098.031870] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1098.036377] vfs_kern_mount+0x3c/0x60 [ 1098.040185] btrfs_mount+0x2a0/0x2838 [ 1098.042093] ptrace attach of "/root/syz-executor.4"[22927] was attempted by "/root/syz-executor.4"[22928] [ 1098.043987] ? _find_next_bit+0xdb/0x100 [ 1098.044000] ? pcpu_alloc+0x37d/0xf70 [ 1098.044013] ? btrfs_remount+0x10c0/0x10c0 [ 1098.044031] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1098.044041] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1098.044050] ? pcpu_alloc+0xe1/0xf70 [ 1098.044066] ? pcpu_find_block_fit+0x380/0x380 [ 1098.044075] ? __lockdep_init_map+0x100/0x560 [ 1098.044085] ? __lockdep_init_map+0x100/0x560 [ 1098.093626] mount_fs+0x92/0x2a0 [ 1098.097007] vfs_kern_mount.part.0+0x5b/0x3c0 00:27:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x33) ioctl$KVM_NMI(r3, 0xae9a) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="24fa6c1c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={r4}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0xfffff33e}, &(0x7f0000000180)=0x8) ptrace$cont(0x7, r0, 0x8000000000000000, 0x0) [ 1098.101520] do_mount+0x3c9/0x25e0 [ 1098.105072] ? copy_mount_string+0x40/0x40 [ 1098.109315] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1098.114165] ? copy_mnt_ns+0x8a0/0x8a0 [ 1098.118060] ? copy_mount_options+0x1ec/0x2e0 [ 1098.122562] ? copy_mnt_ns+0x8a0/0x8a0 [ 1098.126458] SyS_mount+0xa8/0x120 [ 1098.129913] ? copy_mnt_ns+0x8a0/0x8a0 [ 1098.133808] do_syscall_64+0x1d5/0x640 [ 1098.137705] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1098.142894] RIP: 0033:0x45f5fa [ 1098.146080] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 00:27:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1098.153794] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1098.161071] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1098.168337] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1098.175591] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1098.182837] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:17 executing program 1 (fault-call:0 fault-nth:81): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1100.157454] FAULT_INJECTION: forcing a failure. [ 1100.157454] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.168700] CPU: 1 PID: 22956 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1100.176615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.185953] Call Trace: [ 1100.188539] dump_stack+0x1b2/0x283 [ 1100.192159] should_fail.cold+0x10a/0x154 [ 1100.196295] should_failslab+0xd6/0x130 [ 1100.200250] kmem_cache_alloc+0x40/0x3c0 [ 1100.204298] radix_tree_node_alloc.constprop.0+0x1b4/0x300 [ 1100.209900] __radix_tree_create+0x32b/0x4b0 [ 1100.214291] page_cache_tree_insert+0x98/0x2a0 [ 1100.218852] ? file_check_and_advance_wb_err+0x370/0x370 [ 1100.224297] ? __add_to_page_cache_locked+0x22a/0x890 [ 1100.229471] __add_to_page_cache_locked+0x23a/0x890 [ 1100.234547] ? page_cache_tree_insert+0x2a0/0x2a0 [ 1100.239390] ? lock_downgrade+0x6e0/0x6e0 [ 1100.243520] add_to_page_cache_lru+0xea/0x300 [ 1100.247997] ? add_to_page_cache_locked+0x40/0x40 [ 1100.252816] ? __page_cache_alloc+0xd7/0x3c0 [ 1100.257214] pagecache_get_page+0x2bb/0xa10 [ 1100.261514] __getblk_gfp+0x234/0x7b0 [ 1100.265297] ? __mutex_unlock_slowpath+0x75/0x780 [ 1100.270128] __bread_gfp+0x29/0x1f0 [ 1100.273733] btrfs_read_dev_one_super+0x98/0x260 [ 1100.278479] btrfs_read_dev_super+0x5a/0xa0 [ 1100.282776] ? btrfs_read_dev_one_super+0x260/0x260 [ 1100.287781] btrfs_get_bdev_and_sb+0xd7/0x2d0 [ 1100.292256] __btrfs_open_devices+0x175/0xa40 [ 1100.296745] ? find_device+0x100/0x100 [ 1100.300612] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.306053] btrfs_open_devices+0x98/0xb0 [ 1100.310174] btrfs_mount+0x10a2/0x2838 [ 1100.314056] ? _find_next_bit+0xdb/0x100 [ 1100.318200] ? pcpu_alloc+0x37d/0xf70 [ 1100.321976] ? btrfs_remount+0x10c0/0x10c0 [ 1100.326188] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.331627] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1100.336628] ? pcpu_alloc+0xe1/0xf70 [ 1100.340324] ? __lockdep_init_map+0x100/0x560 [ 1100.344795] ? __lockdep_init_map+0x100/0x560 [ 1100.349282] mount_fs+0x92/0x2a0 [ 1100.352628] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1100.357104] vfs_kern_mount+0x3c/0x60 [ 1100.360911] btrfs_mount+0x2a0/0x2838 [ 1100.364689] ? _find_next_bit+0xdb/0x100 [ 1100.368725] ? pcpu_alloc+0x37d/0xf70 [ 1100.372501] ? btrfs_remount+0x10c0/0x10c0 [ 1100.376728] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.382152] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1100.387165] ? pcpu_alloc+0xe1/0xf70 [ 1100.390860] ? pcpu_find_block_fit+0x380/0x380 [ 1100.395431] ? __lockdep_init_map+0x100/0x560 [ 1100.399913] ? __lockdep_init_map+0x100/0x560 [ 1100.404386] mount_fs+0x92/0x2a0 [ 1100.407728] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1100.412199] do_mount+0x3c9/0x25e0 [ 1100.415716] ? copy_mount_string+0x40/0x40 [ 1100.420015] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1100.424852] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.428726] ? copy_mount_options+0x1ec/0x2e0 [ 1100.433202] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.437180] SyS_mount+0xa8/0x120 [ 1100.440620] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.444495] do_syscall_64+0x1d5/0x640 [ 1100.448365] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1100.453534] RIP: 0033:0x45f5fa [ 1100.456712] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1100.464397] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1100.471654] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1100.478981] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1100.486384] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1100.493657] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0x0, 0x0, 0xffffffa5}) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000063ffffff00000000020000000000000000f0ff0a01000000090000000000000c050000000a00000000000001000000004f00df040000"], 0x0, 0x1a}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) r4 = getpgrp(0x0) getpriority(0x1, r4) ptrace$setregset(0x4205, r4, 0x201, &(0x7f0000000080)={&(0x7f0000000280)="05a487d9249c708ec96ae4b5954255ab2734a31401d5afe5f9664df03d558811cbfe3dd7da4a5b23390cc8d38d995ba0f79cb004cb5a8e4059fc2bce33f16f73f2dc93c5e29cd724f0dbe9443c8ec7ee07e59c211bc0db4f548b6f6697db8e5285bf0a85e5a241c1cbfe548935e07d314836a31a876cbf", 0x77}) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) [ 1100.522480] BTRFS error (device loop1): superblock checksum mismatch 00:27:17 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@volatile={0x9, 0x0, 0x0, 0x9, 0x1}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x80000000}, {0xb, 0x8}, {0x7}, {0xe, 0x5}, {0x8, 0x80}]}]}, {0x0, [0x30, 0x2e, 0x30, 0x30]}}, 0x0, 0x5e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 00:27:17 executing program 1 (fault-call:0 fault-nth:82): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1100.604331] BTRFS error (device loop1): open_ctree failed [ 1100.658924] FAULT_INJECTION: forcing a failure. [ 1100.658924] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.670866] CPU: 1 PID: 22980 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1100.678764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1100.688128] Call Trace: [ 1100.690730] dump_stack+0x1b2/0x283 [ 1100.694393] should_fail.cold+0x10a/0x154 [ 1100.698555] should_failslab+0xd6/0x130 [ 1100.702599] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1100.707258] btrfs_mount+0xf1e/0x2838 [ 1100.711047] ? _find_next_bit+0xdb/0x100 [ 1100.715115] ? pcpu_alloc+0x37d/0xf70 [ 1100.718930] ? btrfs_remount+0x10c0/0x10c0 [ 1100.723184] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.728639] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1100.733660] ? pcpu_alloc+0xe1/0xf70 [ 1100.737391] ? __lockdep_init_map+0x100/0x560 [ 1100.741903] ? __lockdep_init_map+0x100/0x560 [ 1100.746410] mount_fs+0x92/0x2a0 [ 1100.749787] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1100.754293] vfs_kern_mount+0x3c/0x60 [ 1100.758099] btrfs_mount+0x2a0/0x2838 [ 1100.761912] ? _find_next_bit+0xdb/0x100 [ 1100.765982] ? pcpu_alloc+0x37d/0xf70 [ 1100.769787] ? btrfs_remount+0x10c0/0x10c0 [ 1100.774027] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1100.779482] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1100.784501] ? pcpu_alloc+0xe1/0xf70 [ 1100.788258] ? pcpu_find_block_fit+0x380/0x380 [ 1100.793789] ? __lockdep_init_map+0x100/0x560 [ 1100.798287] ? __lockdep_init_map+0x100/0x560 [ 1100.802778] mount_fs+0x92/0x2a0 [ 1100.806244] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1100.810738] do_mount+0x3c9/0x25e0 [ 1100.814276] ? copy_mount_string+0x40/0x40 [ 1100.818498] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1100.823330] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.827227] ? copy_mount_options+0x1ec/0x2e0 [ 1100.831724] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.835630] SyS_mount+0xa8/0x120 [ 1100.839068] ? copy_mnt_ns+0x8a0/0x8a0 [ 1100.842948] do_syscall_64+0x1d5/0x640 [ 1100.846839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1100.852024] RIP: 0033:0x45f5fa 00:27:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func, @struct, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @var]}}, 0x0, 0x5a}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1100.855208] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1100.862949] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1100.870213] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1100.877467] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1100.884731] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1100.892002] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:18 executing program 1 (fault-call:0 fault-nth:83): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1100.987398] FAULT_INJECTION: forcing a failure. [ 1100.987398] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.009074] CPU: 0 PID: 22993 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1101.016988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.026334] Call Trace: [ 1101.028914] dump_stack+0x1b2/0x283 [ 1101.032531] should_fail.cold+0x10a/0x154 [ 1101.036668] should_failslab+0xd6/0x130 [ 1101.040625] kmem_cache_alloc+0x28e/0x3c0 [ 1101.044776] getname_kernel+0x4e/0x340 [ 1101.048657] kern_path+0x1b/0x40 [ 1101.052008] lookup_bdev.part.0+0x60/0x160 [ 1101.056229] ? blkdev_open+0x250/0x250 [ 1101.060105] ? btrfs_read_dev_super+0x74/0xa0 [ 1101.064597] blkdev_get_by_path+0x70/0xf0 [ 1101.068751] btrfs_get_bdev_and_sb+0x33/0x2d0 [ 1101.073238] __btrfs_open_devices+0x175/0xa40 [ 1101.077727] ? find_device+0x100/0x100 [ 1101.081615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.087078] btrfs_open_devices+0x98/0xb0 [ 1101.091231] btrfs_mount+0x10a2/0x2838 [ 1101.095116] ? _find_next_bit+0xdb/0x100 [ 1101.099166] ? pcpu_alloc+0x37d/0xf70 [ 1101.102977] ? btrfs_remount+0x10c0/0x10c0 [ 1101.107207] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.112681] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1101.117692] ? pcpu_alloc+0xe1/0xf70 [ 1101.121400] ? __lockdep_init_map+0x100/0x560 [ 1101.125883] ? __lockdep_init_map+0x100/0x560 [ 1101.130369] mount_fs+0x92/0x2a0 [ 1101.133751] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1101.138520] vfs_kern_mount+0x3c/0x60 [ 1101.142330] btrfs_mount+0x2a0/0x2838 [ 1101.146145] ? _find_next_bit+0xdb/0x100 [ 1101.150227] ? pcpu_alloc+0x37d/0xf70 [ 1101.154027] ? btrfs_remount+0x10c0/0x10c0 [ 1101.158269] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.163724] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1101.168743] ? pcpu_alloc+0xe1/0xf70 [ 1101.172451] ? pcpu_find_block_fit+0x380/0x380 [ 1101.177021] ? __lockdep_init_map+0x100/0x560 [ 1101.181512] ? __lockdep_init_map+0x100/0x560 [ 1101.186015] mount_fs+0x92/0x2a0 [ 1101.189373] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1101.193987] do_mount+0x3c9/0x25e0 [ 1101.203160] ? copy_mount_string+0x40/0x40 [ 1101.208826] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1101.216725] ? copy_mnt_ns+0x8a0/0x8a0 [ 1101.220711] ? copy_mount_options+0x1ec/0x2e0 [ 1101.225224] ? copy_mnt_ns+0x8a0/0x8a0 [ 1101.229128] SyS_mount+0xa8/0x120 [ 1101.232639] ? copy_mnt_ns+0x8a0/0x8a0 [ 1101.236556] do_syscall_64+0x1d5/0x640 [ 1101.240480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1101.245786] RIP: 0033:0x45f5fa [ 1101.249004] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1101.257409] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1101.264833] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1101.272191] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1101.279486] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 00:27:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf9278", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func, @struct, @func, @var]}}, 0x0, 0x4e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1101.286781] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 00:27:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x0, 0xffffffffffffffa2, 0x0, 0x1}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4200, r2, 0x588a, 0x6a) tkill(0x0, 0x1e) ptrace$setregs(0xd, r2, 0x1000000000000, &(0x7f0000000280)="3664984270360c0b7b8e2dda2701f0c35b2ece515140362a09d950011e8f1835250d1ad85f3eae4b99f18eb24d02e6f9da4be6c35796c3586491f3e7235f1f5b876641045ac47b000000002e3578730dbcf95169491c0e591f85b1dcaaccd27af56d8717a3ef9e4f5807fc69d46bf7554b472a552adb50c31244e0f588528af02f826a6bf81b670ef30000000000") ptrace$cont(0x7, r2, 0x0, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000200)=0x312, 0x4) tkill(r2, 0x3c) [ 1101.368326] BTRFS error (device loop1): superblock checksum mismatch 00:27:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080)="fbca5cbf51687c6ca27acfe3d0bc8f230c7797eb115bd9b2b07238f18a89733851d06ac270d2e79eaf", 0x0}}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2000400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func, @struct, @func]}, {0x0, [0x0]}}, 0x0, 0x3f}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1101.417121] BTRFS error (device loop1): open_ctree failed 00:27:18 executing program 1 (fault-call:0 fault-nth:84): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1101.538384] FAULT_INJECTION: forcing a failure. [ 1101.538384] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.550289] CPU: 0 PID: 23027 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1101.558188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1101.567534] Call Trace: [ 1101.570113] dump_stack+0x1b2/0x283 [ 1101.574375] should_fail.cold+0x10a/0x154 [ 1101.578563] should_failslab+0xd6/0x130 [ 1101.583241] kmem_cache_alloc+0x28e/0x3c0 [ 1101.588576] getname_kernel+0x4e/0x340 [ 1101.592474] kern_path+0x1b/0x40 [ 1101.595860] lookup_bdev.part.0+0x60/0x160 [ 1101.600272] ? blkdev_open+0x250/0x250 [ 1101.604251] ? btrfs_read_dev_super+0x74/0xa0 [ 1101.608743] blkdev_get_by_path+0x70/0xf0 [ 1101.613099] btrfs_get_bdev_and_sb+0x33/0x2d0 [ 1101.617769] __btrfs_open_devices+0x175/0xa40 [ 1101.622267] ? find_device+0x100/0x100 [ 1101.626215] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.631667] btrfs_open_devices+0x98/0xb0 [ 1101.636128] btrfs_mount+0x10a2/0x2838 [ 1101.640115] ? _find_next_bit+0xdb/0x100 [ 1101.644180] ? pcpu_alloc+0x37d/0xf70 [ 1101.648071] ? btrfs_remount+0x10c0/0x10c0 [ 1101.652415] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.658339] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1101.663476] ? pcpu_alloc+0xe1/0xf70 [ 1101.667200] ? __lockdep_init_map+0x100/0x560 [ 1101.671710] ? __lockdep_init_map+0x100/0x560 [ 1101.676220] mount_fs+0x92/0x2a0 [ 1101.679589] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1101.684097] vfs_kern_mount+0x3c/0x60 [ 1101.687889] btrfs_mount+0x2a0/0x2838 [ 1101.691700] ? _find_next_bit+0xdb/0x100 [ 1101.695773] ? pcpu_alloc+0x37d/0xf70 [ 1101.699598] ? btrfs_remount+0x10c0/0x10c0 [ 1101.703836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1101.709280] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1101.714291] ? pcpu_alloc+0xe1/0xf70 [ 1101.718021] ? pcpu_find_block_fit+0x380/0x380 [ 1101.722628] ? __lockdep_init_map+0x100/0x560 [ 1101.727112] ? __lockdep_init_map+0x100/0x560 [ 1101.731600] mount_fs+0x92/0x2a0 [ 1101.734980] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1101.739496] do_mount+0x3c9/0x25e0 [ 1101.743182] ? copy_mount_string+0x40/0x40 [ 1101.747428] ? copy_mount_options+0x140/0x2e0 [ 1101.751920] ? __sanitizer_cov_trace_pc+0x15/0x50 [ 1101.756753] ? copy_mount_options+0x1ec/0x2e0 [ 1101.761261] ? copy_mnt_ns+0x8a0/0x8a0 [ 1101.765163] SyS_mount+0xa8/0x120 [ 1101.768604] ? copy_mnt_ns+0x8a0/0x8a0 [ 1101.772493] do_syscall_64+0x1d5/0x640 [ 1101.776375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1101.781639] RIP: 0033:0x45f5fa [ 1101.784818] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1101.792518] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1101.799774] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1101.807217] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1101.814472] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1101.821732] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1101.846659] BTRFS error (device loop1): superblock checksum mismatch [ 1101.903694] BTRFS error (device loop1): open_ctree failed 00:27:19 executing program 1 (fault-call:0 fault-nth:85): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x5, 0x0) [ 1101.991160] FAULT_INJECTION: forcing a failure. [ 1101.991160] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.008563] CPU: 0 PID: 23037 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1102.016500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.025914] Call Trace: [ 1102.028540] dump_stack+0x1b2/0x283 [ 1102.032252] should_fail.cold+0x10a/0x154 [ 1102.036389] should_failslab+0xd6/0x130 [ 1102.040395] __kmalloc+0x2c1/0x400 [ 1102.044036] ? register_shrinker+0x1ab/0x220 [ 1102.048430] register_shrinker+0x1ab/0x220 [ 1102.052704] sget_userns+0x9c5/0xc30 [ 1102.056607] ? dlm_send_remote_unlock_request.constprop.0.cold+0x1e/0x1e [ 1102.063445] ? btrfs_parse_early_options+0x310/0x310 [ 1102.068537] ? dlm_send_remote_unlock_request.constprop.0.cold+0x1e/0x1e [ 1102.075371] ? btrfs_parse_early_options+0x310/0x310 [ 1102.080547] sget+0xd1/0x110 [ 1102.083548] btrfs_mount+0x113c/0x2838 [ 1102.087426] ? _find_next_bit+0xdb/0x100 [ 1102.091469] ? pcpu_alloc+0x37d/0xf70 [ 1102.095262] ? btrfs_remount+0x10c0/0x10c0 [ 1102.099486] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.104938] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.109933] ? pcpu_alloc+0xe1/0xf70 [ 1102.113661] ? __lockdep_init_map+0x100/0x560 [ 1102.118138] ? __lockdep_init_map+0x100/0x560 [ 1102.122615] mount_fs+0x92/0x2a0 [ 1102.125964] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.130439] vfs_kern_mount+0x3c/0x60 [ 1102.134224] btrfs_mount+0x2a0/0x2838 [ 1102.138005] ? _find_next_bit+0xdb/0x100 [ 1102.142046] ? pcpu_alloc+0x37d/0xf70 [ 1102.145827] ? btrfs_remount+0x10c0/0x10c0 [ 1102.150060] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.155512] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.160514] ? pcpu_alloc+0xe1/0xf70 [ 1102.164217] ? pcpu_find_block_fit+0x380/0x380 [ 1102.168782] ? __lockdep_init_map+0x100/0x560 [ 1102.173257] ? __lockdep_init_map+0x100/0x560 [ 1102.177747] mount_fs+0x92/0x2a0 [ 1102.181105] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.185589] do_mount+0x3c9/0x25e0 [ 1102.189121] ? copy_mount_string+0x40/0x40 [ 1102.193346] ? copy_mount_options+0x17d/0x2e0 [ 1102.197816] ? copy_mount_options+0x187/0x2e0 [ 1102.202289] ? copy_mount_options+0x1ec/0x2e0 [ 1102.206760] ? copy_mnt_ns+0x8a0/0x8a0 [ 1102.210626] SyS_mount+0xa8/0x120 [ 1102.214053] ? copy_mnt_ns+0x8a0/0x8a0 [ 1102.217920] do_syscall_64+0x1d5/0x640 [ 1102.221788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1102.226974] RIP: 0033:0x45f5fa [ 1102.230141] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1102.237841] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1102.245089] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1102.252335] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1102.259582] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1102.266830] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1102.313620] ================================================================== [ 1102.321329] BUG: KASAN: use-after-free in btrfs_mount+0x2412/0x2838 [ 1102.327724] Read of size 8 at addr ffff88805714aa18 by task syz-executor.1/23037 [ 1102.335299] [ 1102.336910] CPU: 0 PID: 23037 Comm: syz-executor.1 Not tainted 4.14.184-syzkaller #0 [ 1102.344779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.354121] Call Trace: [ 1102.356700] dump_stack+0x1b2/0x283 [ 1102.360317] ? btrfs_mount+0x2412/0x2838 [ 1102.364457] print_address_description.cold+0x54/0x1dc [ 1102.369748] ? btrfs_mount+0x2412/0x2838 [ 1102.373796] kasan_report.cold+0xa9/0x2b9 [ 1102.377931] btrfs_mount+0x2412/0x2838 [ 1102.381804] ? _find_next_bit+0xdb/0x100 [ 1102.385850] ? pcpu_alloc+0x37d/0xf70 [ 1102.389634] ? btrfs_remount+0x10c0/0x10c0 [ 1102.393856] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.399298] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.404299] ? pcpu_alloc+0xe1/0xf70 [ 1102.408000] ? __lockdep_init_map+0x100/0x560 [ 1102.412498] ? __lockdep_init_map+0x100/0x560 [ 1102.416991] mount_fs+0x92/0x2a0 [ 1102.420344] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.424855] vfs_kern_mount+0x3c/0x60 [ 1102.428728] btrfs_mount+0x2a0/0x2838 [ 1102.432558] ? _find_next_bit+0xdb/0x100 [ 1102.436617] ? pcpu_alloc+0x37d/0xf70 [ 1102.440408] ? btrfs_remount+0x10c0/0x10c0 [ 1102.444640] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.450100] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.455102] ? pcpu_alloc+0xe1/0xf70 [ 1102.458810] ? pcpu_find_block_fit+0x380/0x380 [ 1102.463385] ? __lockdep_init_map+0x100/0x560 [ 1102.467872] ? __lockdep_init_map+0x100/0x560 [ 1102.472360] mount_fs+0x92/0x2a0 [ 1102.475714] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.480223] do_mount+0x3c9/0x25e0 [ 1102.483758] ? copy_mount_string+0x40/0x40 [ 1102.487979] ? copy_mount_options+0x17d/0x2e0 [ 1102.492473] ? copy_mount_options+0x187/0x2e0 [ 1102.496953] ? copy_mount_options+0x1ec/0x2e0 [ 1102.501430] ? copy_mnt_ns+0x8a0/0x8a0 [ 1102.505303] SyS_mount+0xa8/0x120 [ 1102.508738] ? copy_mnt_ns+0x8a0/0x8a0 [ 1102.512631] do_syscall_64+0x1d5/0x640 [ 1102.516515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1102.521687] RIP: 0033:0x45f5fa [ 1102.524876] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1102.532566] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1102.539839] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1102.547122] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1102.554376] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1102.561640] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1102.568909] [ 1102.570520] Allocated by task 23037: [ 1102.574225] kasan_kmalloc.part.0+0x4f/0xd0 [ 1102.578966] __kmalloc_node+0x4c/0x70 [ 1102.582851] kvmalloc_node+0x88/0xd0 [ 1102.586723] btrfs_mount+0xea4/0x2838 [ 1102.590524] mount_fs+0x92/0x2a0 [ 1102.593887] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.598451] vfs_kern_mount+0x3c/0x60 [ 1102.602322] btrfs_mount+0x2a0/0x2838 [ 1102.606177] mount_fs+0x92/0x2a0 [ 1102.609529] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.614008] do_mount+0x3c9/0x25e0 [ 1102.617563] SyS_mount+0xa8/0x120 [ 1102.621001] do_syscall_64+0x1d5/0x640 [ 1102.624922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1102.630139] [ 1102.631751] Freed by task 23037: [ 1102.635117] kasan_slab_free+0xaf/0x190 [ 1102.639081] kfree+0xcb/0x260 [ 1102.642167] kvfree+0x45/0x50 [ 1102.645253] deactivate_locked_super+0x6c/0xd0 [ 1102.649813] sget_userns+0x9df/0xc30 [ 1102.653505] sget+0xd1/0x110 [ 1102.656522] btrfs_mount+0x113c/0x2838 [ 1102.660388] mount_fs+0x92/0x2a0 [ 1102.663740] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.668228] vfs_kern_mount+0x3c/0x60 [ 1102.672011] btrfs_mount+0x2a0/0x2838 [ 1102.675790] mount_fs+0x92/0x2a0 [ 1102.679140] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.683629] do_mount+0x3c9/0x25e0 [ 1102.687171] SyS_mount+0xa8/0x120 [ 1102.690602] do_syscall_64+0x1d5/0x640 [ 1102.694467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1102.699631] [ 1102.701243] The buggy address belongs to the object at ffff888057149180 [ 1102.701243] which belongs to the cache kmalloc-16384 of size 16384 [ 1102.714235] The buggy address is located 6296 bytes inside of [ 1102.714235] 16384-byte region [ffff888057149180, ffff88805714d180) [ 1102.726372] The buggy address belongs to the page: [ 1102.731306] page:ffffea00015c5200 count:1 mapcount:0 mapping:ffff888057149180 index:0x0 compound_mapcount: 0 [ 1102.741263] flags: 0xfffe0000008100(slab|head) [ 1102.745857] raw: 00fffe0000008100 ffff888057149180 0000000000000000 0000000100000001 [ 1102.754045] raw: ffffea00021d9020 ffff8880aa801c48 ffff8880aa802200 0000000000000000 [ 1102.761944] page dumped because: kasan: bad access detected [ 1102.767662] [ 1102.769318] Memory state around the buggy address: [ 1102.774260] ffff88805714a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1102.781683] ffff88805714a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1102.789080] >ffff88805714aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1102.796472] ^ [ 1102.800649] ffff88805714aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1102.808092] ffff88805714ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1102.815426] ================================================================== [ 1102.822759] Disabling lock debugging due to kernel taint [ 1102.844068] Kernel panic - not syncing: panic_on_warn set ... [ 1102.844068] [ 1102.851462] CPU: 0 PID: 23037 Comm: syz-executor.1 Tainted: G B 4.14.184-syzkaller #0 [ 1102.860560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1102.869914] Call Trace: [ 1102.872509] dump_stack+0x1b2/0x283 [ 1102.876142] panic+0x1f9/0x42d [ 1102.879342] ? add_taint.cold+0x16/0x16 [ 1102.883319] ? preempt_schedule_common+0x4a/0xc0 [ 1102.888244] ? btrfs_mount+0x2412/0x2838 [ 1102.892288] ? ___preempt_schedule+0x16/0x18 [ 1102.896677] ? btrfs_mount+0x2412/0x2838 [ 1102.900723] kasan_end_report+0x43/0x49 [ 1102.904678] kasan_report.cold+0x12f/0x2b9 [ 1102.908986] btrfs_mount+0x2412/0x2838 [ 1102.912855] ? _find_next_bit+0xdb/0x100 [ 1102.916897] ? pcpu_alloc+0x37d/0xf70 [ 1102.920680] ? btrfs_remount+0x10c0/0x10c0 [ 1102.924910] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.930356] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.935387] ? pcpu_alloc+0xe1/0xf70 [ 1102.939097] ? __lockdep_init_map+0x100/0x560 [ 1102.943597] ? __lockdep_init_map+0x100/0x560 [ 1102.948077] mount_fs+0x92/0x2a0 [ 1102.951423] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1102.955918] vfs_kern_mount+0x3c/0x60 [ 1102.959700] btrfs_mount+0x2a0/0x2838 [ 1102.963484] ? _find_next_bit+0xdb/0x100 [ 1102.967525] ? pcpu_alloc+0x37d/0xf70 [ 1102.971323] ? btrfs_remount+0x10c0/0x10c0 [ 1102.975556] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1102.980985] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1102.986333] ? pcpu_alloc+0xe1/0xf70 [ 1102.990038] ? pcpu_find_block_fit+0x380/0x380 [ 1102.994598] ? __lockdep_init_map+0x100/0x560 [ 1102.999094] ? __lockdep_init_map+0x100/0x560 [ 1103.003568] mount_fs+0x92/0x2a0 [ 1103.006913] vfs_kern_mount.part.0+0x5b/0x3c0 [ 1103.011390] do_mount+0x3c9/0x25e0 [ 1103.014918] ? copy_mount_string+0x40/0x40 [ 1103.019140] ? copy_mount_options+0x17d/0x2e0 [ 1103.023625] ? copy_mount_options+0x187/0x2e0 [ 1103.028111] ? copy_mount_options+0x1ec/0x2e0 [ 1103.032592] ? copy_mnt_ns+0x8a0/0x8a0 [ 1103.036457] SyS_mount+0xa8/0x120 [ 1103.039886] ? copy_mnt_ns+0x8a0/0x8a0 [ 1103.043754] do_syscall_64+0x1d5/0x640 [ 1103.047710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1103.052877] RIP: 0033:0x45f5fa [ 1103.056045] RSP: 002b:00007f753bb6ba68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1103.063732] RAX: ffffffffffffffda RBX: 000000000050a2a0 RCX: 000000000045f5fa [ 1103.070984] RDX: 00007f753bb6bae0 RSI: 00000000200001c0 RDI: 00007f753bb6bb00 [ 1103.078234] RBP: 000000000078bf00 R08: 00007f753bb6bb40 R09: 00007f753bb6bae0 [ 1103.085486] R10: 0000000000000005 R11: 0000000000000206 R12: 0000000000000003 [ 1103.092735] R13: 0000000000000c2b R14: 00000000004ce7e0 R15: 00007f753bb6c6d4 [ 1103.101383] Kernel Offset: disabled [ 1103.105001] Rebooting in 86400 seconds..